@caik.dev/cli 0.1.7 → 0.1.8

package/dist/index.js

@@ -2,9 +2,9 @@
 
 // src/index.ts
 import { Command } from "commander";
-import { readFileSync as readFileSync9 } from "fs";
+import { readFileSync as readFileSync10 } from "fs";
 import { fileURLToPath } from "url";
-import { dirname as dirname5, join as join9 } from "path";
+import { dirname as dirname5, join as join10 } from "path";
 import chalk3 from "chalk";
 
 // src/errors.ts
@@ -132,12 +132,6 @@ var CaikApiClient = class {
 import { readFileSync, writeFileSync, mkdirSync, chmodSync, existsSync } from "fs";
 import { join } from "path";
 import { homedir } from "os";
-var CONTRIBUTION_LEVELS = [
-  { value: "none", name: "None", description: "Nothing sent. Directory access only." },
-  { value: "minimal", name: "Minimal", description: "Install/uninstall events only. Basic recommendations." },
-  { value: "contributor", name: "Contributor", description: "Error/success signals + co-installs. Full recommendations. (default)" },
-  { value: "collective", name: "Collective", description: "Workflow patterns + stack signals. Proactive recommendations." }
-];
 var DEFAULT_CONFIG = {
   apiUrl: "https://www.caik.dev",
   defaultLimit: 10,
@@ -309,7 +303,7 @@ import { existsSync as existsSync7, unlinkSync as unlinkSync2 } from "fs";
 import { writeFileSync as writeFileSync6, mkdirSync as mkdirSync6 } from "fs";
 import { dirname as dirname3, resolve } from "path";
 import { execSync as execSync3 } from "child_process";
-import { select, confirm } from "@inquirer/prompts";
+import { createInterface } from "readline/promises";
 
 // src/platform/detect.ts
 import { existsSync as existsSync2 } from "fs";
@@ -1410,13 +1404,20 @@ Examples:
     } else {
       const detected = detectPlatforms();
       if (detected.length > 1 && !opts.yes && !globalOpts.json) {
-        detectedPlatform = await select({
-          message: "Multiple platforms detected \u2014 install for which?",
-          choices: detected.map((d) => ({
-            name: `${d.name} (${d.tier})`,
-            value: d.name
-          }))
-        });
+        console.log(info("Multiple platforms detected:"));
+        for (let i = 0; i < detected.length; i++) {
+          const d = detected[i];
+          console.log(info(`  ${i + 1}) ${d.name} (${d.tier})`));
+        }
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        const answer = await rl.question(`Select platform [1-${detected.length}]: `);
+        rl.close();
+        const idx = parseInt(answer, 10);
+        if (isNaN(idx) || idx < 1 || idx > detected.length) {
+          console.log(error("Invalid selection. Aborting."));
+          return;
+        }
+        detectedPlatform = detected[idx - 1].name;
       } else if (detected.length > 0) {
         detectedPlatform = detected[0].name;
       }
@@ -1462,11 +1463,10 @@ Components (${ordered.length}):`));
       }
       console.log();
       if (!opts.yes && !globalOpts.json) {
-        const proceed = await confirm({
-          message: `Install all ${ordered.length} components?`,
-          default: true
-        });
-        if (!proceed) {
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        const answer = await rl.question(`Install all ${ordered.length} components? (y/N) `);
+        rl.close();
+        if (answer.toLowerCase() !== "y") {
           console.log(info("Stack installation cancelled."));
           return;
         }
@@ -1593,8 +1593,10 @@ Components (${ordered.length}):`));
         console.log(info(`Post-install hook: ${installInfo.postInstallHook}`));
       }
       console.log();
-      const proceed = await confirm({ message: "Continue?", default: true });
-      if (!proceed) {
+      const rl = createInterface({ input: process.stdin, output: process.stdout });
+      const answer = await rl.question("Continue? (y/N) ");
+      rl.close();
+      if (answer.toLowerCase() !== "y") {
         console.log(info("Installation cancelled."));
         return;
       }
@@ -1708,8 +1710,7 @@ Components (${ordered.length}):`));
 }
 
 // src/commands/init.ts
-import { select as select2 } from "@inquirer/prompts";
-import { createInterface } from "readline/promises";
+import { createInterface as createInterface2 } from "readline/promises";
 import { stdin, stdout } from "process";
 
 // src/auth.ts
@@ -1731,135 +1732,12 @@ function openBrowser(url) {
     }
   });
 }
-function authPage(title, message, isSuccess) {
-  const iconColor = isSuccess ? "#059669" : "#DC2626";
-  const iconBg = isSuccess ? "rgba(5,150,105,0.1)" : "rgba(220,38,38,0.1)";
-  const icon = isSuccess ? `<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 256 256" fill="${iconColor}"><path d="M229.66,77.66l-128,128a8,8,0,0,1-11.32,0l-56-56a8,8,0,0,1,11.32-11.32L96,188.69,218.34,66.34a8,8,0,0,1,11.32,11.32Z"/></svg>` : `<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 256 256" fill="${iconColor}"><path d="M205.66,194.34a8,8,0,0,1-11.32,11.32L128,139.31,61.66,205.66a8,8,0,0,1-11.32-11.32L116.69,128,50.34,61.66A8,8,0,0,1,61.66,50.34L128,116.69l66.34-66.35a8,8,0,0,1,11.32,11.32L139.31,128Z"/></svg>`;
-  return `<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1" />
-  <title>${title} \u2014 CAIK</title>${isSuccess ? `
-  <script src="https://cdn.jsdelivr.net/npm/canvas-confetti@1.9.3/dist/confetti.browser.min.js"></script>` : ""}
-  <style>
-    *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
-    body {
-      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
-      background: #0C0A09;
-      color: #FAFAF9;
-      display: flex;
-      align-items: center;
-      justify-content: center;
-      min-height: 100vh;
-      padding: 1rem;
-    }
-    .card {
-      max-width: 420px;
-      width: 100%;
-      background: rgba(28, 25, 23, 0.8);
-      border: 1px solid rgba(168,162,158,0.15);
-      border-radius: 20px;
-      padding: 2.5rem 2rem;
-      text-align: center;
-      backdrop-filter: blur(12px);
-      box-shadow: 0 25px 50px rgba(0,0,0,0.4);
-      animation: fadeUp 0.4s ease-out;
-    }
-    @keyframes fadeUp {
-      from { opacity: 0; transform: translateY(12px); }
-      to { opacity: 1; transform: translateY(0); }
-    }
-    .icon-wrap {
-      display: inline-flex;
-      align-items: center;
-      justify-content: center;
-      width: 64px;
-      height: 64px;
-      border-radius: 50%;
-      background: ${iconBg};
-      margin-bottom: 1.25rem;
-    }
-    h1 {
-      font-size: 1.5rem;
-      font-weight: 700;
-      margin-bottom: 0.5rem;
-      letter-spacing: -0.02em;
-    }
-    .subtitle {
-      font-size: 0.938rem;
-      color: #A8A29E;
-      line-height: 1.5;
-      margin-bottom: 1.5rem;
-    }
-    .badge {
-      display: inline-flex;
-      align-items: center;
-      gap: 6px;
-      font-size: 0.75rem;
-      font-weight: 500;
-      padding: 6px 14px;
-      border-radius: 999px;
-      background: rgba(234,88,12,0.12);
-      color: #F97316;
-      letter-spacing: 0.01em;
-    }
-    .badge svg { width: 14px; height: 14px; fill: currentColor; }
-    .divider {
-      height: 1px;
-      background: rgba(168,162,158,0.12);
-      margin: 1.5rem 0;
-    }
-    .hint {
-      font-size: 0.813rem;
-      color: #78716C;
-    }
-    .hint code {
-      background: rgba(168,162,158,0.12);
-      padding: 2px 8px;
-      border-radius: 6px;
-      font-family: "Geist Mono", ui-monospace, monospace;
-      font-size: 0.75rem;
-      color: #A8A29E;
-    }
-  </style>
-</head>
-<body>
-  <div class="card">
-    <div class="icon-wrap">${icon}</div>
-    <h1>${title}</h1>
-    <p class="subtitle">${message}</p>
-    <p class="hint">You can close this tab and return to your terminal.</p>
-  </div>${isSuccess ? `
-  <script>
-    (function(){
-      var colors = ["#ff640d", "#0076db", "#ff915a", "#80def9"];
-      var end = Date.now() + 3000;
-      function frame() {
-        if (Date.now() > end) return;
-        confetti({ particleCount: 2, angle: 60, spread: 55, startVelocity: 60, origin: { x: 0, y: 0.5 }, colors: colors });
-        confetti({ particleCount: 2, angle: 120, spread: 55, startVelocity: 60, origin: { x: 1, y: 0.5 }, colors: colors });
-        requestAnimationFrame(frame);
-      }
-      frame();
-    })();
-  </script>` : ""}
-</body>
-</html>`;
-}
 async function authenticate(apiUrl, port = 0) {
   const state = randomBytes(16).toString("hex");
-  let resolved = false;
-  let listenPort = 0;
   return new Promise((resolve3, reject) => {
     const server = createServer((req, res) => {
-      const addr = server.address();
-      if (!addr || typeof addr === "string") {
-        res.writeHead(404, { "Content-Type": "text/plain" });
-        res.end("Not found");
-        return;
-      }
-      const reqUrl = new URL2(req.url ?? "/", `http://localhost:${listenPort}`);
+      const actualPort = server.address().port;
+      const reqUrl = new URL2(req.url ?? "/", `http://localhost:${actualPort}`);
       if (reqUrl.pathname !== "/callback") {
         res.writeHead(404, { "Content-Type": "text/plain" });
         res.end("Not found");
@@ -1868,57 +1746,43 @@ async function authenticate(apiUrl, port = 0) {
       const returnedState = reqUrl.searchParams.get("state");
       if (returnedState !== state) {
         res.writeHead(403, { "Content-Type": "text/html" });
-        res.end(authPage(
-          "Authentication Failed",
-          "Invalid state parameter (possible CSRF attack).",
-          false
-        ));
+        res.end(
+          "<html><body><h2>Authentication failed</h2><p>Invalid state parameter (possible CSRF). You can close this tab.</p></body></html>"
+        );
         return;
       }
       const apiKeyParam = reqUrl.searchParams.get("api_key");
       if (!apiKeyParam) {
         res.writeHead(400, { "Content-Type": "text/html" });
-        res.end(authPage(
-          "Authentication Failed",
-          "No API key was received from the server.",
-          false
-        ));
+        res.end(
+          "<html><body><h2>Authentication failed</h2><p>No API key received. You can close this tab.</p></body></html>"
+        );
         cleanup();
         reject(new Error("No API key received in callback"));
         return;
       }
       setApiKey(apiKeyParam);
       res.writeHead(200, { "Content-Type": "text/html" });
-      res.end(authPage(
-        "Authenticated!",
-        "Your CLI is now connected to your CAIK account. You're ready to search, install, and publish artifacts.",
-        true
-      ));
-      resolved = true;
+      res.end(
+        "<html><body><h2>Authenticated!</h2><p>You can close this tab and return to your terminal.</p></body></html>"
+      );
       cleanup();
       resolve3(apiKeyParam);
     });
     const timeout = setTimeout(() => {
       cleanup();
-      if (!resolved) {
-        reject(new Error("Authentication timed out after 60 seconds"));
-      }
+      reject(new Error("Authentication timed out after 60 seconds"));
     }, TIMEOUT_MS);
     function cleanup() {
       clearTimeout(timeout);
       server.close();
     }
     server.listen(port, async () => {
-      const addr = server.address();
-      if (!addr || typeof addr === "string") {
-        reject(new Error("Failed to get server address after listen"));
-        return;
-      }
-      listenPort = addr.port;
-      const callbackUrl = `http://localhost:${listenPort}/callback`;
+      const actualPort = server.address().port;
+      const callbackUrl = `http://localhost:${actualPort}/callback`;
       const cliCallbackUrl = `${apiUrl}/api/auth/cli-callback?redirect=${encodeURIComponent(callbackUrl)}&state=${encodeURIComponent(state)}`;
       const loginUrl = `${apiUrl}/cli-auth?continue=${encodeURIComponent(cliCallbackUrl)}`;
-      console.log(info(`Listening on http://localhost:${listenPort} for callback...`));
+      console.log(info(`Listening on http://localhost:${actualPort} for callback...`));
       const opened = await openBrowser(loginUrl);
       if (opened) {
         console.log(info("Browser opened. Complete sign-in to continue."));
@@ -1942,33 +1806,6 @@ async function authenticate(apiUrl, port = 0) {
 }
 
 // src/commands/init.ts
-async function promptContributionLevel() {
-  const config = readConfig();
-  if (config.contributionLevel) return;
-  console.log("");
-  console.log(heading("Contribution Level"));
-  console.log("\u2500".repeat(40));
-  console.log(dim("CAIK is powered by collective intelligence. Your agent can"));
-  console.log(dim("contribute anonymous usage signals to improve recommendations"));
-  console.log(dim("for everyone. No prompts, files, or personal data \u2014 ever."));
-  console.log("");
-  const selected = await select2({
-    message: "What level of contribution works for you?",
-    choices: CONTRIBUTION_LEVELS.map((l) => ({
-      name: `${l.name} \u2014 ${l.description}`,
-      value: l.value
-    })),
-    default: "contributor"
-  });
-  config.contributionLevel = selected;
-  writeConfig(config);
-  console.log(success(`Contribution level set to ${selected}`));
-  if (selected === "none") {
-    console.log(info("No problem \u2014 you can change this anytime with `caik config contribution`."));
-  } else {
-    console.log(info("Change anytime with `caik config contribution`."));
-  }
-}
 function registerInitCommand(program2) {
   program2.command("init").description("Configure the CAIK CLI").option("--no-auth", "Skip authentication, only configure API URL").addHelpText("after", `
 Examples:
@@ -1993,12 +1830,10 @@ Examples:
         console.log(info(`Config saved to ~/.caik/config.json`));
       } catch (err) {
         console.log(error(`Authentication failed: ${err instanceof Error ? err.message : String(err)}`));
-        return;
       }
-      await promptContributionLevel();
       return;
     }
-    const rl = createInterface({ input: stdin, output: stdout });
+    const rl = createInterface2({ input: stdin, output: stdout });
     try {
       const apiUrl = await rl.question(`API URL (${config.apiUrl}): `);
       if (apiUrl.trim()) {
@@ -2047,7 +1882,6 @@ Examples:
     } finally {
       rl.close();
     }
-    await promptContributionLevel();
   });
 }
 
@@ -2390,7 +2224,7 @@ import { existsSync as existsSync10 } from "fs";
 import { writeFileSync as writeFileSync7, mkdirSync as mkdirSync7 } from "fs";
 import { dirname as dirname4, resolve as resolve2 } from "path";
 import { execSync as execSync4 } from "child_process";
-import { confirm as confirm2 } from "@inquirer/prompts";
+import { createInterface as createInterface3 } from "readline/promises";
 function registerUpdateCommand(program2) {
   program2.command("update [slug]").description("Check for and apply artifact updates").option("--platform <platform>", "Filter by platform").option("-y, --yes", "Skip confirmation prompts").addHelpText("after", `
 Examples:
@@ -2495,8 +2329,10 @@ Examples:
       console.log(renderTable(["Artifact", "Platform", "Installed", "Latest"], rows));
       console.log(info(`${candidates.length} update(s) available.`));
       if (!skipConfirm) {
-        const proceed = await confirm2({ message: "Update all?", default: true });
-        if (!proceed) {
+        const rl = createInterface3({ input: process.stdin, output: process.stdout });
+        const answer = await rl.question("\nUpdate all? (y/N) ");
+        rl.close();
+        if (answer.toLowerCase() !== "y") {
           console.log(info("Update cancelled."));
           return;
         }
@@ -2550,8 +2386,10 @@ async function performUpdate(client, entry, skipConfirm, globalOpts) {
       console.log(info(`Install command: ${installInfo.installCommand}`));
     }
     console.log();
-    const proceed = await confirm2({ message: "Continue?", default: true });
-    if (!proceed) {
+    const rl = createInterface3({ input: process.stdin, output: process.stdout });
+    const answer = await rl.question("Continue? (y/N) ");
+    rl.close();
+    if (answer.toLowerCase() !== "y") {
       console.log(info("Update cancelled."));
       return;
     }
@@ -2605,7 +2443,7 @@ async function performUpdate(client, entry, skipConfirm, globalOpts) {
 }
 
 // src/commands/uninstall.ts
-import { confirm as confirm3 } from "@inquirer/prompts";
+import { createInterface as createInterface4 } from "readline/promises";
 function registerUninstallCommand(program2) {
   program2.command("uninstall <slug>").description("Remove an installed artifact").option("--platform <platform>", "Target platform (disambiguates if installed on multiple)").option("-y, --yes", "Skip confirmation prompts").addHelpText("after", `
 Examples:
@@ -2657,8 +2495,10 @@ Artifact: ${entry.slug} (${entry.artifactType})`));
         }
       }
       if (!skipConfirm) {
-        const proceed = await confirm3({ message: "Uninstall?", default: false });
-        if (!proceed) {
+        const rl = createInterface4({ input: process.stdin, output: process.stdout });
+        const answer = await rl.question("\nUninstall? (y/N) ");
+        rl.close();
+        if (answer.toLowerCase() !== "y") {
           console.log(info("Uninstall cancelled."));
           return;
         }
@@ -2745,12 +2585,57 @@ function registerKarmaCommand(program2) {
 }
 
 // src/commands/hook.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync8, mkdirSync as mkdirSync8, existsSync as existsSync11 } from "fs";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync8, mkdirSync as mkdirSync8, existsSync as existsSync11, appendFileSync } from "fs";
 import { join as join7 } from "path";
 import { homedir as homedir6 } from "os";
-var PENDING_EVENTS_PATH = join7(homedir6(), ".caik", "pending-events.json");
+var CAIK_DIR = join7(homedir6(), ".caik");
+var PENDING_EVENTS_PATH = join7(CAIK_DIR, "pending-events.json");
+var AUDIT_LOG_PATH = join7(CAIK_DIR, "audit.log");
 var FLUSH_THRESHOLD = 50;
 var API_TIMEOUT_MS = 2e3;
+function readStdin() {
+  return new Promise((resolve3) => {
+    if (process.stdin.isTTY) {
+      resolve3("");
+      return;
+    }
+    let data = "";
+    process.stdin.setEncoding("utf-8");
+    process.stdin.on("data", (chunk) => {
+      data += chunk;
+    });
+    process.stdin.on("end", () => resolve3(data));
+    setTimeout(() => resolve3(data), 500);
+  });
+}
+function parseStdin(raw) {
+  if (!raw.trim()) return null;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+function shouldSendTelemetry() {
+  const config = readConfig();
+  const level = config.contributionLevel ?? "contributor";
+  return level !== "none";
+}
+function shouldSendToolUse() {
+  const config = readConfig();
+  const level = config.contributionLevel ?? "contributor";
+  return level === "contributor" || level === "collective";
+}
+function auditLog(event) {
+  try {
+    if (!existsSync11(CAIK_DIR)) {
+      mkdirSync8(CAIK_DIR, { recursive: true, mode: 448 });
+    }
+    const line = JSON.stringify(event) + "\n";
+    appendFileSync(AUDIT_LOG_PATH, line, "utf-8");
+  } catch {
+  }
+}
 function readPendingEvents() {
   try {
     if (!existsSync11(PENDING_EVENTS_PATH)) return [];
@@ -2762,9 +2647,8 @@ function readPendingEvents() {
   }
 }
 function writePendingEvents(events) {
-  const dir = join7(homedir6(), ".caik");
-  if (!existsSync11(dir)) {
-    mkdirSync8(dir, { recursive: true, mode: 448 });
+  if (!existsSync11(CAIK_DIR)) {
+    mkdirSync8(CAIK_DIR, { recursive: true, mode: 448 });
   }
   writeFileSync8(PENDING_EVENTS_PATH, JSON.stringify(events, null, 2) + "\n", "utf-8");
 }
@@ -2814,12 +2698,20 @@ function registerHookCommand(program2) {
   const hook = program2.command("hook").description("Platform hook callbacks (observation only, never gates agent actions)");
   hook.command("session-start").description("Log session start event").option("--platform <name>", "Platform name", "claude-code").action(async (opts) => {
     try {
-      const client = createClient(program2);
+      if (!shouldSendTelemetry()) {
+        process.exit(0);
+        return;
+      }
+      const raw = await readStdin();
+      const input = parseStdin(raw);
       const event = {
         type: "session_start",
         platform: opts.platform ?? "claude-code",
+        sessionId: input?.session_id,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
+      auditLog(event);
+      const client = createClient(program2);
       await postSingleEventWithTimeout(client, event);
     } catch {
     }
@@ -2827,28 +2719,47 @@ function registerHookCommand(program2) {
   });
   hook.command("session-end").description("Flush pending events and log session end").option("--platform <name>", "Platform name", "claude-code").action(async (opts) => {
     try {
-      const client = createClient(program2);
+      if (!shouldSendTelemetry()) {
+        clearPendingEvents();
+        process.exit(0);
+        return;
+      }
+      const raw = await readStdin();
+      const input = parseStdin(raw);
       const pending = readPendingEvents();
       const endEvent = {
         type: "session_end",
         platform: opts.platform ?? "claude-code",
+        sessionId: input?.session_id,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
       pending.push(endEvent);
+      auditLog(endEvent);
+      const client = createClient(program2);
       await postEventsWithTimeout(client, pending);
     } catch {
     }
     process.exit(0);
   });
-  hook.command("post-tool-use").description("Buffer a tool-use event").option("--platform <name>", "Platform name", "claude-code").option("--tool <name>", "Tool name").option("--success <bool>", "Whether the tool call succeeded").action(async (opts) => {
+  hook.command("post-tool-use").description("Buffer a tool-use event").option("--platform <name>", "Platform name", "claude-code").option("--tool <name>", "Tool name (fallback if stdin unavailable)").option("--success <bool>", "Success flag (fallback if stdin unavailable)").action(async (opts) => {
     try {
+      if (!shouldSendToolUse()) {
+        process.exit(0);
+        return;
+      }
+      const raw = await readStdin();
+      const input = parseStdin(raw);
+      const toolName = input?.tool_name ?? opts.tool;
+      const success2 = input?.tool_response?.success ?? opts.success === "true" ?? false;
       const event = {
         type: "tool_use",
         platform: opts.platform ?? "claude-code",
-        tool: opts.tool,
-        success: opts.success === "true" || opts.success === true,
+        sessionId: input?.session_id,
+        tool: toolName,
+        success: Boolean(success2),
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
+      auditLog(event);
       const events = bufferEvent(event);
       if (events.length >= FLUSH_THRESHOLD) {
         const client = createClient(program2);
@@ -2860,12 +2771,17 @@ function registerHookCommand(program2) {
   });
   hook.command("cursor-session-start").description("Log Cursor session start event").action(async () => {
     try {
-      const client = createClient(program2);
+      if (!shouldSendTelemetry()) {
+        process.exit(0);
+        return;
+      }
       const event = {
         type: "session_start",
         platform: "cursor",
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
+      auditLog(event);
+      const client = createClient(program2);
       await postSingleEventWithTimeout(client, event);
     } catch {
     }
@@ -2873,6 +2789,10 @@ function registerHookCommand(program2) {
   });
   hook.command("cursor-mcp-exec").description("Buffer a Cursor MCP tool execution event").option("--server <name>", "MCP server name").option("--tool <name>", "Tool name").action(async (opts) => {
     try {
+      if (!shouldSendToolUse()) {
+        process.exit(0);
+        return;
+      }
       const event = {
         type: "mcp_exec",
         platform: "cursor",
@@ -2880,6 +2800,7 @@ function registerHookCommand(program2) {
         tool: opts.tool,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
+      auditLog(event);
       const events = bufferEvent(event);
       if (events.length >= FLUSH_THRESHOLD) {
         const client = createClient(program2);
@@ -2891,7 +2812,11 @@ function registerHookCommand(program2) {
   });
   hook.command("cursor-session-end").description("Flush pending events and log Cursor session end").action(async () => {
     try {
-      const client = createClient(program2);
+      if (!shouldSendTelemetry()) {
+        clearPendingEvents();
+        process.exit(0);
+        return;
+      }
       const pending = readPendingEvents();
       const endEvent = {
         type: "session_end",
@@ -2899,6 +2824,8 @@ function registerHookCommand(program2) {
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
       pending.push(endEvent);
+      auditLog(endEvent);
+      const client = createClient(program2);
       await postEventsWithTimeout(client, pending);
     } catch {
     }
@@ -2907,7 +2834,7 @@ function registerHookCommand(program2) {
 }
 
 // src/commands/setup.ts
-import { checkbox } from "@inquirer/prompts";
+import { createInterface as createInterface5 } from "readline/promises";
 import { existsSync as existsSync12 } from "fs";
 
 // src/platform/templates/claude-code-skill.ts
@@ -3287,17 +3214,23 @@ Examples:
     if (autoYes || detected.length === 1 || platformFlag) {
       selected = detected;
     } else {
-      selected = await checkbox({
-        message: "Which platforms would you like to configure?",
-        choices: detected.map((p) => ({
-          name: `${p.name} ${dim(`(${p.tier})`)}`,
-          value: p,
-          checked: true
-        }))
-      });
-      if (selected.length === 0) {
-        console.log(warn("No platforms selected. Exiting."));
-        return;
+      const rl = createInterface5({ input: process.stdin, output: process.stdout });
+      console.log(info("Which platforms would you like to configure?"));
+      for (let i = 0; i < detected.length; i++) {
+        console.log(`  ${i + 1}. ${detected[i].name}`);
+      }
+      console.log(`  a. All`);
+      const answer = await rl.question("\nSelect (numbers separated by commas, or 'a' for all): ");
+      rl.close();
+      if (answer.toLowerCase() === "a" || answer.trim() === "") {
+        selected = detected;
+      } else {
+        const indices = answer.split(",").map((s) => parseInt(s.trim(), 10) - 1);
+        selected = indices.filter((i) => i >= 0 && i < detected.length).map((i) => detected[i]);
+        if (selected.length === 0) {
+          console.log(warn("No valid platforms selected. Exiting."));
+          return;
+        }
       }
     }
     console.log();
@@ -3505,65 +3438,154 @@ function registerUpgradeCommand(program2) {
   });
 }
 
-// src/commands/logout.ts
-function registerLogoutCommand(program2) {
-  program2.command("logout").description("Sign out and remove stored API key").action(() => {
+// src/commands/audit.ts
+import { readFileSync as readFileSync9, existsSync as existsSync14, writeFileSync as writeFileSync10 } from "fs";
+import { join as join9 } from "path";
+import { homedir as homedir8 } from "os";
+var CAIK_DIR2 = join9(homedir8(), ".caik");
+var AUDIT_LOG_PATH2 = join9(CAIK_DIR2, "audit.log");
+var PENDING_EVENTS_PATH2 = join9(CAIK_DIR2, "pending-events.json");
+function registerAuditCommand(program2) {
+  const cmd = program2.command("audit").description("See exactly what telemetry CAIK collects \u2014 full transparency");
+  cmd.command("log").description("Show recent telemetry events (from local audit log)").option("-n, --lines <count>", "Number of recent events to show", "20").option("--all", "Show all events").action((opts) => {
+    console.log(heading("\nCAIK Telemetry Audit Log"));
+    console.log("\u2550".repeat(50));
     const config = readConfig();
-    if (!config.apiKey) {
-      console.log(info("No API key stored \u2014 already signed out."));
+    const level = config.contributionLevel ?? "contributor";
+    console.log(info(`Contribution level: ${level}`));
+    console.log(dim(`Log path: ${AUDIT_LOG_PATH2}`));
+    console.log();
+    if (!existsSync14(AUDIT_LOG_PATH2)) {
+      console.log(dim("No events logged yet. Events appear here after your next Claude Code session."));
       return;
     }
-    delete config.apiKey;
-    writeConfig(config);
-    console.log(success("Signed out. API key removed from ~/.caik/config.json"));
-  });
-}
-
-// src/commands/config.ts
-import { select as select3 } from "@inquirer/prompts";
-function registerConfigCommand(program2) {
-  const cmd = program2.command("config").description("View or update CLI configuration");
-  cmd.command("show").description("Show current configuration").action(() => {
-    const config = readConfig();
-    console.log(heading("\nCAIK Configuration"));
-    console.log("\u2500".repeat(40));
-    console.log(`  API URL:            ${config.apiUrl}`);
-    console.log(`  API Key:            ${config.apiKey ? "\u2022\u2022\u2022\u2022" + config.apiKey.slice(-6) : dim("not set")}`);
-    console.log(`  Contribution Level: ${config.contributionLevel ?? "contributor"} ${dim("(default)")}`);
-    console.log(`  Default Platform:   ${config.defaultPlatform ?? dim("auto-detect")}`);
-    console.log(`  Config Path:        ${dim("~/.caik/config.json")}`);
+    const raw = readFileSync9(AUDIT_LOG_PATH2, "utf-8").trim();
+    if (!raw) {
+      console.log(dim("Audit log is empty."));
+      return;
+    }
+    const lines = raw.split("\n");
+    const limit = opts.all ? lines.length : Math.min(parseInt(opts.lines, 10) || 20, lines.length);
+    const recent = lines.slice(-limit);
+    if (!opts.all && lines.length > limit) {
+      console.log(dim(`Showing last ${limit} of ${lines.length} events. Use --all to see everything.
+`));
+    }
+    for (const line of recent) {
+      try {
+        const event = JSON.parse(line);
+        const time = new Date(event.timestamp).toLocaleTimeString();
+        const type = event.type.padEnd(14);
+        const platform2 = (event.platform ?? "").padEnd(12);
+        const tool = event.tool ? ` tool=${event.tool}` : "";
+        const ok = event.success !== void 0 ? ` success=${event.success}` : "";
+        const sid = event.sessionId ? ` sid=${event.sessionId.slice(0, 8)}\u2026` : "";
+        console.log(`  ${dim(time)} ${type} ${dim(platform2)}${tool}${ok}${sid}`);
+      } catch {
+        console.log(`  ${dim(line)}`);
+      }
+    }
     console.log();
+    console.log(dim("This is everything CAIK sends. No prompts, files, or personal data \u2014 ever."));
+    console.log(dim("Change your level: caik config contribution"));
   });
-  cmd.command("contribution").description("Set your contribution level").argument("[level]", "Level to set: none, minimal, contributor, collective").action(async (level) => {
-    const config = readConfig();
-    const current = config.contributionLevel ?? "contributor";
-    if (level) {
-      const valid = CONTRIBUTION_LEVELS.map((l) => l.value);
-      if (!valid.includes(level)) {
-        console.log(`Invalid level "${level}". Choose: ${valid.join(", ")}`);
+  cmd.command("pending").description("Show events buffered locally (not yet sent to API)").action(() => {
+    console.log(heading("\nPending Events (buffered locally)"));
+    console.log("\u2500".repeat(50));
+    console.log(dim(`Path: ${PENDING_EVENTS_PATH2}
+`));
+    if (!existsSync14(PENDING_EVENTS_PATH2)) {
+      console.log(dim("No pending events."));
+      return;
+    }
+    try {
+      const raw = readFileSync9(PENDING_EVENTS_PATH2, "utf-8");
+      const events = JSON.parse(raw);
+      if (events.length === 0) {
+        console.log(dim("No pending events."));
         return;
       }
-      config.contributionLevel = level;
-      writeConfig(config);
-      console.log(success(`Contribution level set to ${level}`));
-      return;
+      console.log(info(`${events.length} event(s) buffered, waiting for session end to flush:
+`));
+      const counts = /* @__PURE__ */ new Map();
+      const tools = /* @__PURE__ */ new Map();
+      let successCount = 0;
+      let failCount = 0;
+      for (const e of events) {
+        counts.set(e.type, (counts.get(e.type) ?? 0) + 1);
+        if (e.tool) tools.set(e.tool, (tools.get(e.tool) ?? 0) + 1);
+        if (e.success === true) successCount++;
+        if (e.success === false) failCount++;
+      }
+      for (const [type, count] of counts) {
+        console.log(`  ${type}: ${count}`);
+      }
+      if (tools.size > 0) {
+        console.log();
+        console.log(info("Tools used:"));
+        const sorted = [...tools.entries()].sort((a, b) => b[1] - a[1]);
+        for (const [tool, count] of sorted.slice(0, 10)) {
+          console.log(`  ${tool}: ${count}`);
+        }
+        if (sorted.length > 10) {
+          console.log(dim(`  \u2026 and ${sorted.length - 10} more`));
+        }
+      }
+      if (successCount + failCount > 0) {
+        console.log();
+        console.log(`  ${success(`${successCount} succeeded`)} / ${warn(`${failCount} failed`)}`);
+      }
+    } catch {
+      console.log(warn("Could not parse pending events file."));
     }
-    const selected = await select3({
-      message: "Select your contribution level",
-      choices: CONTRIBUTION_LEVELS.map((l) => ({
-        name: `${l.name} \u2014 ${l.description}`,
-        value: l.value
-      })),
-      default: current
-    });
-    config.contributionLevel = selected;
-    writeConfig(config);
-    console.log(success(`Contribution level set to ${selected}`));
-    if (selected === "none") {
-      console.log(info("No telemetry will be sent. You can still search and install artifacts."));
-    } else if (selected === "collective") {
-      console.log(info("Thank you! You'll get proactive recommendations and provider analytics."));
+  });
+  cmd.command("clear").description("Clear the local audit log and pending events").action(() => {
+    if (existsSync14(AUDIT_LOG_PATH2)) {
+      writeFileSync10(AUDIT_LOG_PATH2, "", "utf-8");
+    }
+    if (existsSync14(PENDING_EVENTS_PATH2)) {
+      writeFileSync10(PENDING_EVENTS_PATH2, "[]", "utf-8");
+    }
+    console.log(success("Audit log and pending events cleared."));
+  });
+  cmd.action(() => {
+    const config = readConfig();
+    const level = config.contributionLevel ?? "contributor";
+    console.log(heading("\nCAIK Telemetry Transparency"));
+    console.log("\u2550".repeat(50));
+    console.log();
+    console.log(`  Contribution Level:  ${level}`);
+    let logCount = 0;
+    if (existsSync14(AUDIT_LOG_PATH2)) {
+      const raw = readFileSync9(AUDIT_LOG_PATH2, "utf-8").trim();
+      if (raw) logCount = raw.split("\n").length;
+    }
+    console.log(`  Events Logged:       ${logCount}`);
+    let pendingCount = 0;
+    if (existsSync14(PENDING_EVENTS_PATH2)) {
+      try {
+        const parsed = JSON.parse(readFileSync9(PENDING_EVENTS_PATH2, "utf-8"));
+        if (Array.isArray(parsed)) pendingCount = parsed.length;
+      } catch {
+      }
     }
+    console.log(`  Pending (unsent):    ${pendingCount}`);
+    console.log(`  Audit Log:           ${dim(AUDIT_LOG_PATH2)}`);
+    console.log();
+    console.log(heading("What each level sends:"));
+    console.log(`  ${dim("none")}          Nothing. Directory access only.`);
+    console.log(`  ${dim("minimal")}       Install/uninstall events (artifact ID + timestamp).`);
+    console.log(`  ${dim("contributor")}    + Tool-use signals (tool name, success/fail). No content.`);
+    console.log(`  ${dim("collective")}     + Workflow patterns, stack signals. Anonymized.`);
+    console.log();
+    console.log(dim("NEVER sent: prompts, file contents, conversation text, file paths, personal data."));
+    console.log();
+    console.log(info("Commands:"));
+    console.log(`  ${dim("caik audit log")}           Show recent events`);
+    console.log(`  ${dim("caik audit pending")}       Show buffered events`);
+    console.log(`  ${dim("caik audit clear")}         Clear all local telemetry data`);
+    console.log(`  ${dim("caik config contribution")} Change your contribution level`);
+    console.log();
   });
 }
 
@@ -3572,8 +3594,8 @@ var __filename = fileURLToPath(import.meta.url);
 var __dirname = dirname5(__filename);
 var version = "0.0.1";
 try {
-  const pkgPath = join9(__dirname, "..", "package.json");
-  const pkg = JSON.parse(readFileSync9(pkgPath, "utf-8"));
+  const pkgPath = join10(__dirname, "..", "package.json");
+  const pkg = JSON.parse(readFileSync10(pkgPath, "utf-8"));
   version = pkg.version;
 } catch {
 }
@@ -3581,8 +3603,6 @@ var program = new Command().name("caik").description("CAIK \u2014 Collective AI
 registerSearchCommand(program);
 registerInstallCommand(program);
 registerInitCommand(program);
-registerLogoutCommand(program);
-registerConfigCommand(program);
 registerStatusCommand(program);
 registerStatsCommand(program);
 registerPublishCommand(program);
@@ -3596,6 +3616,7 @@ registerKarmaCommand(program);
 registerHookCommand(program);
 registerSetupCommand(program);
 registerUpgradeCommand(program);
+registerAuditCommand(program);
 program.exitOverride();
 async function main() {
   const updateHint = printUpdateHint();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caik.dev/cli",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "type": "module",
   "description": "CAIK CLI — Search, install, and publish AI artifacts from your terminal",
   "keywords": [
@@ -34,7 +34,6 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@inquirer/prompts": "^8.3.2",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^14.0.3",