jekyll-theme-zer0 1.8.2 → 1.9.0

data/scripts/install/README.md

@@ -0,0 +1,162 @@
+# scripts/install/ — Modular Installer v2
+
+Spec-driven, AI-integrated Jekyll theme installer for zer0-mistakes.
+
+## Architecture
+
+```
+scripts/install/
+├── cli.sh          Subcommand dispatcher — main entry point
+├── plan.sh         Spec builder (flags + profile + env + platform)
+├── apply.sh        Executor — reads spec, runs tasks in order
+├── diff.sh         Spec-vs-disk diff renderer (preview before apply)
+├── spec.sh         JSON spec I/O (jq optional; awk fallback)
+├── log.sh          Color-coded logging (human + JSON-line modes)
+├── platform.sh     OS / Ruby / Docker / git / gh detection
+├── fs.sh           THE ONLY filesystem writer (dry-run, backup, force)
+├── template.sh     {{VAR}} template renderer (reads from templates/)
+├── prompt.sh       TTY-aware interactive prompts
+├── doctor.sh       Pre-install health checks
+├── tui.sh          Non-AI interactive wizard → spec
+├── upgrade.sh      Re-apply spec to existing install
+├── repair.sh       Fix drift: re-apply only changed tasks
+├── tasks/
+│   ├── _registry.sh    Task metadata + dependency graph
+│   ├── config.sh       _config.yml + _config_dev.yml
+│   ├── gemfile.sh      Gemfile (variant per profile/platform)
+│   ├── docker.sh       docker-compose.yml + docker/Dockerfile
+│   ├── theme.sh        Copy _layouts _includes _sass assets
+│   ├── pages.sh        Starter pages from templates/pages/
+│   ├── nav.sh          _data/navigation/main.yml
+│   ├── data.sh         _data/authors.yml + seed data
+│   ├── devcontainer.sh .devcontainer/devcontainer.json
+│   ├── agents.sh       AI agent files (AGENTS.md, copilot, claude, cursor, aider)
+│   ├── gitignore.sh    .gitignore
+│   ├── readme.sh       INSTALLATION.md + README seed
+│   └── marker.sh       .zer0-installed + spec persistence
+└── ai/
+    ├── client.sh       HTTP wrapper (OpenAI-compatible, 30s timeout)
+    ├── wizard.sh       LLM → spec (AI-driven setup)
+    ├── diagnose.sh     Jekyll build errors → fix suggestions
+    ├── suggest.sh      Goal text → profile + deploy recommendation
+    └── prompts/
+        ├── spec.schema.json     JSON Schema (AI contract)
+        ├── wizard.system.md     AI wizard system prompt
+        ├── diagnose.system.md   AI diagnose system prompt
+        └── suggest.system.md    AI suggest system prompt
+```
+
+## Core concepts
+
+### The Spec
+
+A single JSON document (`.zer0/install.spec.json`) is the universal contract
+between all front-ends and the executor:
+
+```
+CLI flags → plan.sh → spec.json → apply.sh → tasks → files on disk
+AI wizard → spec.json → apply.sh → tasks → files on disk
+TUI wizard → spec.json → apply.sh → tasks → files on disk
+```
+
+The spec schema is defined in `ai/prompts/spec.schema.json`. The AI is
+constrained to emit only valid spec JSON — never raw file content.
+
+### Write contract
+
+**ALL filesystem writes go through `fs.sh`**. No raw `>`, `cp`, or `echo >` 
+outside of `fs.sh` functions. This enforces:
+- `--dry-run`: zero mutations
+- `--backup`: auto-backup before overwrite
+- `--force`: overwrite without prompting
+
+### Template contract
+
+**ALL generated file content comes from `templates/`**. No heredocs in shell
+code. Templates use `{{VARIABLE}}` substitution via `template.sh::tmpl_apply`.
+
+### Bash 3.2 compatibility
+
+This installer runs on macOS's `/bin/bash` (3.2). Restrictions:
+- No `declare -A` (associative arrays)
+- No `=~` capture groups  
+- No `mapfile`/`readarray`
+- Source guards (`[[ -n "${_HAS_FOO:-}" ]] && return 0`) on every module
+- Modules do not `set -euo pipefail` or call `exit` (caller does)
+
+## Usage
+
+```bash
+# Local development
+./scripts/bin/install help
+./scripts/bin/install init . --profile blog --site-title "My Blog"
+./scripts/bin/install wizard . --ai
+./scripts/bin/install doctor .
+./scripts/bin/install diff .
+./scripts/bin/install plan . --profile docs
+
+# Remote (curl|bash)
+curl -fsSL https://raw.githubusercontent.com/bamr87/zer0-mistakes/main/scripts/bin/install | bash -s -- init . --profile github-pages
+```
+
+## Adding a new task
+
+1. Create `tasks/mytask.sh` with:
+   ```bash
+   [[ -n "${_HAS_TASK_MYTASK:-}" ]] && return 0
+   _HAS_TASK_MYTASK=1
+   task_mytask_run() {
+       local target="$1"
+       tmpl_apply "config/mytask.template" "${target}/output-file"
+   }
+   ```
+2. Add to `tasks/_registry.sh` (`_TASK_ALL`, `_task_desc_mytask`, `_task_deps_mytask`)
+3. Add template to `templates/config/` or `templates/pages/`
+4. List in the appropriate profile YAML under `templates/profiles/`
+
+## AI integration
+
+The AI path is a first-class citizen but never mandatory:
+
+- `ai_wizard_run` → interactive LLM spec generation
+- `ai_diagnose_run` → post-build error analysis  
+- `ai_suggest_run` → profile + deploy recommendation
+
+All three are guarded by `ZER0_NO_AI=1` kill-switch and degrade gracefully
+to defaults or rule-based logic when AI is unavailable.
+
+To enable: set `OPENAI_API_KEY` (or `OPENAI_BASE_URL` for Azure/Ollama).
+
+## Deploy plugins
+
+Deploy targets listed in the spec (`SPEC_DEPLOY`) are dispatched as
+`tasks/deploy_<target>.sh` modules that render reusable templates from
+`templates/deploy/<target>/`. Built-in plugins:
+
+| Target            | Writes                                                              |
+|-------------------|---------------------------------------------------------------------|
+| `github-pages`    | `.github/workflows/jekyll-gh-pages.yml`                             |
+| `azure-swa`       | `.github/workflows/azure-static-web-apps.yml`, `staticwebapp.config.json` |
+| `docker-prod`     | `Dockerfile.prod`, `docker-compose.prod.yml`, `nginx.conf`, `.dockerignore` |
+
+Add a new plugin by dropping `tasks/deploy_<target>.sh` with a
+`task_deploy_<target>_run` function plus a `templates/deploy/<target>/`
+template directory. The dispatcher is generic — no registry changes needed.
+
+## Testing
+
+A regression harness lives at [`test/test_installer.sh`](../../test/test_installer.sh)
+and is wired into the main runner as the `installer` suite:
+
+```bash
+# Standalone (auto-enables AI tier when OPENAI_API_KEY is set)
+./test/test_installer.sh
+./test/test_installer.sh --ai      # force AI tier on
+./test/test_installer.sh --no-ai   # skip AI tier
+
+# Via the unified runner (included in --suites all and --suites full)
+./test/test_runner.sh --suites installer
+```
+
+The harness covers: module syntax, all 6 profile inits, all 3 deploy plugins,
+all 5 agent flavours, and (when keyed) the full AI wizard → apply pipeline.

data/scripts/install/ai/client.sh

@@ -0,0 +1,164 @@
+#!/bin/bash
+# =============================================================================
+# scripts/install/ai/client.sh — HTTP client for AI providers
+# =============================================================================
+# Thin curl wrapper that:
+#   - Targets OpenAI-compatible APIs (OpenAI, Azure OpenAI, Ollama)
+#   - Enforces 30s timeout
+#   - Redacts Authorization header from logs
+#   - Returns raw JSON response body to stdout
+#
+# Provides:
+#   ai_client_chat SYSTEM_PROMPT USER_PROMPT [JSON_SCHEMA]
+#       → print raw API JSON response to stdout
+#       → return 0 on success, 1 on error
+#
+#   ai_client_extract_text RESPONSE_JSON
+#       → print the assistant's text content from a chat response
+#
+#   ai_client_available
+#       → return 0 if OPENAI_API_KEY or OPENAI_BASE_URL is set, 1 otherwise
+#
+# Environment:
+#   OPENAI_API_KEY      Required for openai.com
+#   OPENAI_BASE_URL     Override base URL (Azure OpenAI / Ollama compatible)
+#                       Default: https://api.openai.com/v1
+#   OPENAI_MODEL        Model name (default: gpt-4o-mini)
+#   ZER0_NO_AI          Set to 1 to disable all AI calls (kill-switch)
+#
+# Bash 3.2 compatible. No set -euo pipefail here.
+# =============================================================================
+[[ -n "${_HAS_AI_CLIENT:-}" ]] && return 0
+_HAS_AI_CLIENT=1
+
+_AI_BASE_URL="${OPENAI_BASE_URL:-https://api.openai.com/v1}"
+_AI_MODEL="${OPENAI_MODEL:-gpt-4o-mini}"
+_AI_TIMEOUT=30
+
+# ---------------------------------------------------------------------------
+# ai_client_available
+# ---------------------------------------------------------------------------
+ai_client_available() {
+    [[ "${ZER0_NO_AI:-0}" == "1" ]] && return 1
+    [[ -n "${OPENAI_API_KEY:-}" ]] && return 0
+    [[ -n "${OPENAI_BASE_URL:-}" ]] && return 0
+    return 1
+}
+
+# ---------------------------------------------------------------------------
+# ai_client_chat SYSTEM_PROMPT USER_PROMPT [JSON_SCHEMA]
+# ---------------------------------------------------------------------------
+ai_client_chat() {
+    local system_prompt="$1"
+    local user_prompt="$2"
+    local json_schema="${3:-}"
+
+    if ! ai_client_available; then
+        log_error "ai_client_chat: AI not available (set OPENAI_API_KEY or OPENAI_BASE_URL)"
+        return 1
+    fi
+
+    local api_key="${OPENAI_API_KEY:-}"
+    local endpoint="${_AI_BASE_URL}/chat/completions"
+
+    # Build request body — escape for JSON
+    local sys_escaped user_escaped
+    sys_escaped=$(printf '%s' "$system_prompt" | python3 -c "import json,sys; print(json.dumps(sys.stdin.read()))" 2>/dev/null \
+        || printf '%s' "$system_prompt" | sed 's/\\/\\\\/g; s/"/\\"/g; s/$/\\n/g' | tr -d '\n' | sed 's/\\n$//')
+    user_escaped=$(printf '%s' "$user_prompt" | python3 -c "import json,sys; print(json.dumps(sys.stdin.read()))" 2>/dev/null \
+        || printf '%s' "$user_prompt" | sed 's/\\/\\\\/g; s/"/\\"/g')
+
+    local body
+    if [[ -n "$json_schema" ]]; then
+        # Structured output (function calling)
+        body=$(cat <<JSON
+{
+  "model": "${_AI_MODEL}",
+  "response_format": {
+    "type": "json_schema",
+    "json_schema": ${json_schema}
+  },
+  "messages": [
+    {"role": "system", "content": ${sys_escaped}},
+    {"role": "user",   "content": ${user_escaped}}
+  ]
+}
+JSON
+)
+    else
+        body=$(cat <<JSON
+{
+  "model": "${_AI_MODEL}",
+  "messages": [
+    {"role": "system", "content": ${sys_escaped}},
+    {"role": "user",   "content": ${user_escaped}}
+  ]
+}
+JSON
+)
+    fi
+
+    log_debug "ai_client_chat: POST ${endpoint} model=${_AI_MODEL}"
+
+    local resp
+    resp=$(curl -fsSL \
+        --max-time "$_AI_TIMEOUT" \
+        -H "Content-Type: application/json" \
+        ${api_key:+-H "Authorization: Bearer ${api_key}"} \
+        -d "$body" \
+        "$endpoint" 2>&1)
+
+    local ret=$?
+    if [[ $ret -ne 0 ]]; then
+        log_error "ai_client_chat: HTTP request failed (exit $ret)"
+        return 1
+    fi
+
+    printf '%s\n' "$resp"
+    return 0
+}
+
+# ---------------------------------------------------------------------------
+# ai_client_extract_text RESPONSE_JSON
+# Extracts assistant text and strips markdown code fences if present.
+# ---------------------------------------------------------------------------
+ai_client_extract_text() {
+    local resp="$1"
+    local text
+    if command -v jq >/dev/null 2>&1; then
+        text=$(printf '%s' "$resp" | jq -r '.choices[0].message.content // ""')
+    else
+        # Minimal awk extraction
+        text=$(printf '%s' "$resp" | awk '
+            /"content"[[:space:]]*:/ {
+                line = $0
+                sub(/.*"content"[[:space:]]*:[[:space:]]*"/, "", line)
+                sub(/"[^"]*$/, "", line)
+                gsub(/\\n/, "\n", line)
+                print line
+                exit
+            }
+        ')
+    fi
+    # Strip markdown code fences (```json, ```, etc.) — remove any line starting with ```
+    printf '%s\n' "$text" | sed '/^[[:space:]]*```/d'
+}
+
+# ---------------------------------------------------------------------------
+# _ai_json_object_body SYSTEM_PROMPT USER_PROMPT
+# Build a request body that forces json_object output (no schema needed)
+# ---------------------------------------------------------------------------
+_ai_json_object_body() {
+    local sys_escaped="$1"
+    local user_escaped="$2"
+    cat <<JSON
+{
+  "model": "${_AI_MODEL}",
+  "response_format": {"type": "json_object"},
+  "messages": [
+    {"role": "system", "content": ${sys_escaped}},
+    {"role": "user",   "content": ${user_escaped}}
+  ]
+}
+JSON
+}

data/scripts/install/ai/diagnose.sh

@@ -0,0 +1,81 @@
+#!/bin/bash
+# =============================================================================
+# scripts/install/ai/diagnose.sh — AI-assisted site diagnosis
+# =============================================================================
+# Sends sanitized Jekyll build output + config to LLM for fix suggestions.
+#
+# Provides:
+#   ai_diagnose_run TARGET_DIR [--log FILE]
+#
+# Bash 3.2 compatible. No set -euo pipefail here.
+# =============================================================================
+[[ -n "${_HAS_AI_DIAGNOSE:-}" ]] && return 0
+_HAS_AI_DIAGNOSE=1
+
+_AI_DIAGNOSE_DIR="${_AI_DIAGNOSE_DIR:-$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")" 2>/dev/null && pwd)}"
+
+ai_diagnose_run() {
+    local target="${1:-$(pwd)}"
+    local log_file=""
+
+    # Parse optional --log
+    shift || true
+    while [[ $# -gt 0 ]]; do
+        case "$1" in
+            --log) shift; log_file="${1:-}" ;;
+        esac
+        shift
+    done
+
+    if [[ "$(type -t ai_client_available)" != "function" ]]; then
+        source "${_AI_DIAGNOSE_DIR}/client.sh" || return 1
+    fi
+
+    if ! ai_client_available; then
+        log_error "ai_diagnose_run: AI not available"
+        return 1
+    fi
+
+    # Collect context
+    local build_log=""
+    if [[ -n "$log_file" && -f "$log_file" ]]; then
+        build_log=$(tail -100 "$log_file")
+    else
+        # Run jekyll doctor for quick diagnostics
+        if command -v bundle >/dev/null 2>&1 && [[ -f "${target}/Gemfile" ]]; then
+            build_log=$(cd "$target" && bundle exec jekyll doctor 2>&1 | tail -50) || true
+        fi
+    fi
+
+    local config_excerpt=""
+    [[ -f "${target}/_config.yml" ]] && \
+        config_excerpt=$(head -30 "${target}/_config.yml")
+
+    local sys_prompt_file="${_AI_DIAGNOSE_DIR}/prompts/diagnose.system.md"
+    local sys_prompt
+    if [[ -f "$sys_prompt_file" ]]; then
+        sys_prompt=$(cat "$sys_prompt_file")
+    else
+        sys_prompt="You are a Jekyll expert. Analyze the build output and config provided and suggest specific fixes. Be concise. Return a JSON object with keys: summary (string), fixes (array of {issue, fix, severity})."
+    fi
+
+    local user_prompt
+    user_prompt=$(cat <<PROMPT
+Target: $target
+
+_config.yml (first 30 lines):
+${config_excerpt:-[not found]}
+
+Build output / doctor:
+${build_log:-[no output captured]}
+PROMPT
+)
+
+    log_info "Analyzing with AI..."
+    local resp
+    resp=$(ai_client_chat "$sys_prompt" "$user_prompt" '{"name":"diagnose","schema":{"type":"object","properties":{"summary":{"type":"string"},"fixes":{"type":"array","items":{"type":"object","properties":{"issue":{"type":"string"},"cause":{"type":"string"},"fix":{"type":"string"},"severity":{"type":"string"}},"required":["issue","fix","severity"]}}},"required":["summary","fixes"]}}') || { log_error "Diagnosis API call failed"; return 1; }
+
+    local result
+    result=$(ai_client_extract_text "$resp")
+    printf '\n%s\n\n' "$result"
+}

data/scripts/install/ai/prompts/diagnose.system.md

@@ -0,0 +1,42 @@
+# zer0-mistakes Site Diagnosis
+
+You are a Jekyll expert analyzing a zer0-mistakes site for problems.
+
+## Your task
+
+Given the build output, Jekyll doctor output, or _config.yml content:
+
+1. Identify the specific error or warning.
+2. Explain the root cause in one sentence.
+3. Provide a concrete fix command or file change.
+4. Rate severity: critical | high | medium | low.
+
+## Output format
+
+Return a JSON object with this structure:
+```json
+{
+  "summary": "One-sentence overall assessment",
+  "fixes": [
+    {
+      "issue": "Error description",
+      "cause": "Root cause",
+      "fix": "Exact command or change needed",
+      "severity": "critical|high|medium|low"
+    }
+  ]
+}
+```
+
+No prose before or after the JSON.
+
+## Common Jekyll issues to recognize
+
+- Missing `bundler` or wrong Ruby version
+- `github-pages` gem conflicts
+- Missing `_config.yml` fields (url, baseurl)
+- Liquid syntax errors
+- Asset path issues with baseurl
+- Missing `jekyll-feed` / `jekyll-seo-tag` plugins
+- Docker container networking issues
+- Permission errors on _site/

data/scripts/install/ai/prompts/spec.schema.json

@@ -0,0 +1,129 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://github.com/bamr87/zer0-mistakes/installer/spec/v1",
+  "title": "zer0-mistakes Install Spec",
+  "description": "Declarative specification consumed by scripts/install/apply.sh. Produced by plan.sh, tui.sh, or ai/wizard.sh. This schema is the AI contract: the wizard must emit only valid spec JSON.",
+  "type": "object",
+  "required": ["schema_version", "target_dir", "profile", "tasks", "options"],
+  "additionalProperties": false,
+  "properties": {
+    "schema_version": {
+      "type": "string",
+      "const": "1",
+      "description": "Schema version. Increment with breaking changes."
+    },
+    "target_dir": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Absolute path to the directory where the site will be installed."
+    },
+    "profile": {
+      "type": "string",
+      "enum": ["default", "minimal", "blog", "docs", "portfolio", "github-pages", "fork"],
+      "description": "Named preset that provides default values for all other fields."
+    },
+    "site": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "title":       { "type": "string", "default": "My Jekyll Site" },
+        "description": { "type": "string", "default": "A Jekyll site built with zer0-mistakes" },
+        "url":         { "type": "string", "default": "" },
+        "author":      { "type": "string", "default": "Site Author" },
+        "email":       { "type": "string", "format": "email", "default": "" },
+        "timezone":    { "type": "string", "default": "UTC" },
+        "locale":      { "type": "string", "default": "en" }
+      }
+    },
+    "github": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "user":         { "type": "string", "default": "" },
+        "repo":         { "type": "string", "default": "" },
+        "pages_branch": { "type": "string", "default": "gh-pages" },
+        "enable_pages": { "type": "boolean", "default": false }
+      }
+    },
+    "theme": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["source"],
+      "properties": {
+        "source": {
+          "type": "string",
+          "enum": ["gem", "remote", "vendored"],
+          "description": "gem = install jekyll-theme-zer0 from RubyGems; remote = remote_theme on GitHub Pages; vendored = copy theme files locally."
+        },
+        "version": { "type": "string", "default": "" }
+      }
+    },
+    "tasks": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "string",
+        "enum": [
+          "config",
+          "gemfile",
+          "docker",
+          "theme",
+          "pages",
+          "nav",
+          "data",
+          "devcontainer",
+          "agents",
+          "gitignore",
+          "readme",
+          "marker"
+        ]
+      },
+      "description": "Ordered list of tasks apply.sh will execute. 'marker' should always be last."
+    },
+    "deploy": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": ["github-pages", "azure-swa", "docker-prod", "vercel", "netlify", "cloudflare-pages"]
+      },
+      "default": [],
+      "description": "Deploy targets to pre-configure alongside the install."
+    },
+    "agents": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": ["claude", "cursor", "aider", "copilot", "generic"]
+      },
+      "default": [],
+      "description": "AI agent config files to generate (AGENTS.md, .cursor/, CLAUDE.md, .aider.conf.yml, etc.)."
+    },
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["dry_run", "force", "backup", "non_interactive", "output"],
+      "properties": {
+        "dry_run":         { "type": "boolean", "default": false, "description": "Print what would happen without writing any files." },
+        "force":           { "type": "boolean", "default": false, "description": "Overwrite existing files without prompting (still backs up)." },
+        "backup":          { "type": "boolean", "default": true,  "description": "Create timestamped backups before overwriting." },
+        "non_interactive": { "type": "boolean", "default": false, "description": "Never prompt for user input. Errors out on missing required values." },
+        "output":          { "type": "string",  "default": "human", "enum": ["human", "json"], "description": "Output mode. 'json' is machine-readable." },
+        "auto_accept":     { "type": "boolean", "default": false, "description": "Skip all y/N confirmation prompts. Implies --non-interactive for confirmations." },
+        "skip_doctor":     { "type": "boolean", "default": false, "description": "Skip the pre-install environment health check." },
+        "verbose":         { "type": "boolean", "default": false, "description": "Print debug-level log lines." }
+      }
+    },
+    "ai": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Metadata about AI involvement. Written by ai/wizard.sh; informational only.",
+      "properties": {
+        "used":              { "type": "boolean", "default": false },
+        "provider":          { "type": "string",  "default": "openai" },
+        "model":             { "type": "string",  "default": "" },
+        "tokens_estimated":  { "type": "integer", "minimum": 0, "default": 0 },
+        "spec_hash":         { "type": "string",  "default": "", "description": "sha256 of the spec JSON (without the ai.spec_hash field itself)." }
+      }
+    }
+  }
+}

data/scripts/install/ai/prompts/suggest.system.md

@@ -0,0 +1,43 @@
+# zer0-mistakes Profile & Deploy Advisor
+
+You are a Jekyll setup advisor for the zer0-mistakes theme.
+
+## Your task
+
+Given the user's goal and context, recommend:
+1. The best installation profile
+2. The best deploy target(s)
+
+## Available profiles
+
+| Profile       | Best for                                      |
+|---------------|-----------------------------------------------|
+| default       | General-purpose Jekyll site                   |
+| minimal       | Bare bones, no extras                         |
+| blog          | Blog-focused with posts/categories/tags       |
+| docs          | Technical documentation                       |
+| portfolio     | Personal portfolio / resume site              |
+| github-pages  | Direct GitHub Pages deployment                |
+| fork          | Forking the theme to customize it             |
+
+## Available deploy targets
+
+| Target           | Description                                      |
+|------------------|--------------------------------------------------|
+| github-pages     | GitHub Pages (Actions-driven)                    |
+| azure-swa        | Azure Static Web Apps                            |
+| docker-prod      | Self-hosted Docker + nginx                       |
+| vercel           | Vercel (static)                                  |
+| netlify          | Netlify                                          |
+| cloudflare-pages | Cloudflare Pages                                 |
+
+## Output format
+
+Return only this JSON object — no prose:
+```json
+{
+  "profile": "profile-name",
+  "deploy": ["target1"],
+  "rationale": "One sentence explaining the choice"
+}
+```