docs: add CLI handling to 013 spec

- Add FR-012: upstream list MUST handle new Health actions

- Add CLI Hint column to Actions table

- Add Phase 4: CLI Updates to plan.md

- Add section 8: CLI Updates to quickstart.md

Author: technicalpickles

specs/013-structured-server-state/plan.md

@@ -36,6 +36,10 @@ internal/
 └── upstream/
     └── manager.go         # Populate MissingSecret, OAuthConfigErr in input
 
+# CLI (Go)
+cmd/mcpproxy/
+└── upstream_cmd.go        # Add set_secret, configure action hints
+
 # Frontend (Vue)
 frontend/src/
 ├── components/
@@ -102,6 +106,16 @@ internal/
 
 3. Update TypeScript types if needed (add new action values)
 
+### Phase 4: CLI Updates
+
+1. Update `cmd/mcpproxy/upstream_cmd.go` `outputServers()`:
+   ```go
+   case "set_secret":
+       actionHint = fmt.Sprintf("Set %s", health.Detail)
+   case "configure":
+       actionHint = "Edit config"
+   ```
+
 ## Verification
 
 ```bash

specs/013-structured-server-state/quickstart.md

@@ -187,6 +187,32 @@ case 'configure':
 
 Remove "System Diagnostics" banner (lines 3-33). The "Servers Needing Attention" banner handles all issues.
 
+### 8. CLI Updates (cmd/mcpproxy/upstream_cmd.go)
+
+Add handlers for new actions in `outputServers()`:
+
+```go
+// Format action as CLI command hint
+actionHint := "-"
+switch healthAction {
+case "login":
+    actionHint = fmt.Sprintf("auth login --server=%s", name)
+case "restart":
+    actionHint = fmt.Sprintf("upstream restart %s", name)
+case "enable":
+    actionHint = fmt.Sprintf("upstream enable %s", name)
+case "approve":
+    actionHint = "Approve in Web UI"
+case "view_logs":
+    actionHint = fmt.Sprintf("upstream logs %s", name)
+// New actions
+case "set_secret":
+    actionHint = fmt.Sprintf("Set %s", healthDetail)
+case "configure":
+    actionHint = "Edit config"
+}
+```
+
 ## Verification
 
 ```bash
@@ -209,5 +235,6 @@ cd frontend && npm run build
 | `internal/health/calculator.go` | Add missing secret/OAuth config checks |
 | `internal/upstream/manager.go` | Populate new input fields |
 | `internal/management/diagnostics.go` | Aggregate from Health |
+| `cmd/mcpproxy/upstream_cmd.go` | Add CLI hints for new actions |
 | `frontend/src/components/ServerCard.vue` | Handle new actions |
 | `frontend/src/views/Dashboard.vue` | Remove duplicate banner |

specs/013-structured-server-state/spec.md

@@ -91,6 +91,10 @@ As a developer, I want to see ONE consolidated health display on the Dashboard.
 - **FR-010**: Dashboard MUST display ONE consolidated health section
 - **FR-011**: Fix/action buttons MUST navigate to relevant pages, not show CLI hints
 
+### CLI
+
+- **FR-012**: `upstream list` MUST handle new Health actions with appropriate CLI hints
+
 ## Success Criteria
 
 - **SC-001**: Users see exactly ONE health section on Dashboard
@@ -112,17 +116,17 @@ As a developer, I want to see ONE consolidated health display on the Dashboard.
 
 ### Actions (Updated)
 
-| Scenario | Level | Action | Detail | Navigation |
-|----------|-------|--------|--------|------------|
-| Healthy | `healthy` | `""` | - | - |
-| Connecting | `degraded` | `""` | - | - |
-| Token expiring | `degraded` | `login` | expiry time | OAuth flow |
-| Connection error | `unhealthy` | `restart` | error message | Restarts server |
-| OAuth needed | `unhealthy` | `login` | - | OAuth flow |
-| Missing secret | `unhealthy` | `set_secret` | secret name | `/ui/secrets` |
-| OAuth config issue | `unhealthy` | `configure` | error/param | Server config tab |
-| Disabled | `healthy` | `enable` | - | Enables server |
-| Quarantined | `healthy` | `approve` | - | Approves server |
+| Scenario | Level | Action | Detail | Web UI | CLI Hint |
+|----------|-------|--------|--------|--------|----------|
+| Healthy | `healthy` | `""` | - | - | `-` |
+| Connecting | `degraded` | `""` | - | - | `-` |
+| Token expiring | `degraded` | `login` | expiry time | OAuth flow | `auth login --server=X` |
+| Connection error | `unhealthy` | `restart` | error message | Restarts server | `upstream restart X` |
+| OAuth needed | `unhealthy` | `login` | - | OAuth flow | `auth login --server=X` |
+| Missing secret | `unhealthy` | `set_secret` | secret name | `/ui/secrets` | `Set SECRET_NAME` |
+| OAuth config issue | `unhealthy` | `configure` | error/param | Server config tab | `Edit config` |
+| Disabled | `healthy` | `enable` | - | Enables server | `upstream enable X` |
+| Quarantined | `healthy` | `approve` | - | Approves server | `Approve in Web UI` |
 
 ## Out of Scope