@gurulu/cli 0.4.2 → 0.4.4

package/dist/frameworks/detect.js

@@ -75,6 +75,10 @@ function detectFramework(projectDir) {
         return 'react-vite';
     if (deps['react-scripts'])
         return 'react-cra';
+    if (deps['fastify'])
+        return 'fastify';
+    if (deps['hono'])
+        return 'hono';
     if (deps['express'])
         return 'express';
     return 'unknown';
@@ -253,6 +257,60 @@ export function guruluMiddleware(req: Request, res: Response, next: NextFunction
 }`,
                 instruction: 'Add app.use(guruluMiddleware) in your Express app',
             };
+        case 'fastify':
+            return {
+                file: 'src/gurulu.ts',
+                code: `// Gurulu.io Server Analytics — Fastify plugin
+import type { FastifyInstance, FastifyRequest, FastifyReply } from 'fastify';
+
+const SITE_ID = '${siteId}';
+const TOKEN = '${token}';
+
+export async function guruluPlugin(fastify: FastifyInstance) {
+  fastify.addHook('onRequest', async (req: FastifyRequest, _reply: FastifyReply) => {
+    fetch('https://ingest.gurulu.io/api/events', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + TOKEN },
+      body: JSON.stringify({
+        site_id: SITE_ID,
+        event: 'pageview',
+        url: req.url,
+        referrer: (req.headers.referer as string) || '',
+        user_agent: (req.headers['user-agent'] as string) || '',
+        ip: req.ip,
+        timestamp: new Date().toISOString(),
+      }),
+    }).catch(() => {});
+  });
+}`,
+                instruction: 'Register with fastify.register(guruluPlugin) in your Fastify app',
+            };
+        case 'hono':
+            return {
+                file: 'src/gurulu.ts',
+                code: `// Gurulu.io Server Analytics — Hono middleware
+import type { MiddlewareHandler } from 'hono';
+
+const SITE_ID = '${siteId}';
+const TOKEN = '${token}';
+
+export const guruluMiddleware: MiddlewareHandler = async (c, next) => {
+  fetch('https://ingest.gurulu.io/api/events', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + TOKEN },
+    body: JSON.stringify({
+      site_id: SITE_ID,
+      event: 'pageview',
+      url: c.req.url,
+      referrer: c.req.header('referer') || '',
+      user_agent: c.req.header('user-agent') || '',
+      timestamp: new Date().toISOString(),
+    }),
+  }).catch(() => {});
+  await next();
+};`,
+                instruction: 'Add app.use(guruluMiddleware) in your Hono app',
+            };
         case 'nestjs':
             return {
                 file: 'src/gurulu.middleware.ts',
@@ -372,6 +430,8 @@ function getFrameworkDisplayName(fw) {
         'sveltekit': 'SvelteKit',
         'astro': 'Astro',
         'express': 'Express',
+        'fastify': 'Fastify',
+        'hono': 'Hono',
         'nestjs': 'NestJS',
         'html': 'HTML',
         'react-native': 'React Native',

package/dist/index.js

@@ -18,6 +18,7 @@ const status_1 = require("./commands/status");
 const doctor_1 = require("./commands/doctor");
 const add_server_1 = require("./commands/add-server");
 const install_1 = require("./commands/install");
+const upgrade_1 = require("./commands/upgrade");
 const warehouse_1 = require("./commands/warehouse");
 // Phase 19.5 W2 — Read-surface subcommands
 const audiences_1 = require("./commands/audiences");
@@ -41,9 +42,26 @@ const sourcemap_1 = require("./commands/sourcemap");
 const db_1 = require("./commands/db");
 // Sprint B Group VII B14 — live event stream
 const watch_1 = require("./commands/watch");
+// Sprint E SE-A / SE-B — analytics + observability CLI surface
+const attribution_1 = require("./commands/attribution");
+const releases_1 = require("./commands/releases");
+const skad_1 = require("./commands/skad");
+const errors_1 = require("./commands/errors");
+const replay_1 = require("./commands/replay");
+const conversion_paths_1 = require("./commands/conversion-paths");
+// CLI@0.4.4 — consent + secrets management
+const consent_1 = require("./commands/consent");
+const secrets_1 = require("./commands/secrets");
 (0, yargs_1.default)((0, helpers_1.hideBin)(process.argv))
     .scriptName('gurulu')
     .option('profile', { type: 'string', describe: 'Use a specific profile (default: personal)' })
+    // FA-1 P0-5 — GDPR consent. Also honored via env vars: GURULU_TELEMETRY=off
+    // (or 0/false/no) and DO_NOT_TRACK=1, plus persisted choice in
+    // ~/.gurulu/config.json (`telemetry: false`).
+    .option('no-telemetry', {
+    type: 'boolean',
+    describe: 'Disable anonymous install telemetry for this run',
+})
     .command('init', 'Set up Gurulu analytics in your project', (y) => y
     .option('site-id', { type: 'string', describe: 'Site ID' })
     .option('token', { type: 'string', describe: 'Site token' })
@@ -225,6 +243,10 @@ const watch_1 = require("./commands/watch");
     .option('skip-env', { type: 'boolean', describe: 'Skip .env file merge' })
     .option('yes', { type: 'boolean', alias: 'y', describe: 'Non-interactive (assume yes)' })
     .option('ingest-url', { type: 'string', describe: 'Override ingest base URL' })
+    // FA-1 P0-2 — self-hosted tracker tag override. When set, install.ts
+    // forwards this to the agentic-install script so the rendered script
+    // tag points at the customer's own asset host instead of gurulu.io/t.js.
+    .option('script-src', { type: 'string', describe: 'Override tracker tag <script src> URL (self-hosted)' })
     .option('verify', { type: 'boolean', default: false, describe: 'Live smoke test after install (requires playwright-core)' })
     .option('skip-intent', { type: 'boolean', describe: 'Skip install-time intent discovery' })
     .option('intent-dry-run', { type: 'boolean', describe: 'Show intent proposal without pre-seeding' })
@@ -261,6 +283,7 @@ const watch_1 = require("./commands/watch");
         skipEnv: args['skip-env'],
         yes: args.yes,
         ingestUrl: args['ingest-url'],
+        scriptSrc: args['script-src'],
         verify: args['skip-verify'] ? false : args.verify,
         profile: args.profile,
         skipIntent: args['skip-intent'],
@@ -270,6 +293,20 @@ const watch_1 = require("./commands/watch");
         autoProperties: args['auto-properties'],
     });
 })
+    .command(
+// FA-1 P1-4 — `gurulu upgrade` bumps installed @gurulu/* packages to the
+// latest version published on npm. Defaults to @gurulu/web; `--all` bumps
+// cli + node + web in one pass.
+'upgrade [path]', 'Upgrade installed Gurulu packages to the latest npm version', (y) => y
+    .positional('path', { type: 'string', describe: 'Target project path (default: cwd)' })
+    .option('package', { type: 'string', describe: 'Package to upgrade (default: @gurulu/web)' })
+    .option('all', { type: 'boolean', describe: 'Upgrade @gurulu/cli + @gurulu/node + @gurulu/web' })
+    .option('dry-run', { type: 'boolean', describe: 'Show what would be upgraded' }), (args) => (0, upgrade_1.upgradeCommand)({
+    path: args.path,
+    package: args.package,
+    all: args.all,
+    dryRun: args['dry-run'],
+}))
     .command('warehouse <action>', 'Warehouse exports (BigQuery)', (y) => y
     .positional('action', { type: 'string', describe: 'Action: export' })
     .option('tenant', { type: 'string', describe: 'Tenant id (forward-compat)' })
@@ -458,18 +495,49 @@ const watch_1 = require("./commands/watch");
     json: args.json,
     profile: args.profile,
 }))
-    .command('identity <action> [sub]', 'View identity state (decay stats, transfers list, cdc-sources list)', (y) => y
-    .positional('action', { type: 'string', describe: 'decay | transfers | cdc-sources' })
+    .command('identity <action> [sub]', 'Identity state + writes (decay stats | transfers list | cdc-sources list | identify | alias | merge | bulk)', (y) => y
+    .positional('action', {
+    type: 'string',
+    describe: 'decay | transfers | cdc-sources | identify | alias | merge | bulk',
+})
     .positional('sub', { type: 'string', describe: 'Subaction (stats, list)' })
     .option('direction', { type: 'string', describe: 'outbound | inbound | all' })
     .option('status', { type: 'string', describe: 'Filter by transfer status' })
     .option('limit', { type: 'number', describe: 'Max rows' })
+    // identify / alias / merge
+    .option('site', { type: 'string', describe: 'Site ID (write actions)' })
+    .option('user-id', { type: 'string', describe: 'User ID (identify)' })
+    .option('email', { type: 'string', describe: 'Email (identify)' })
+    .option('phone', { type: 'string', describe: 'Phone (identify)' })
+    .option('traits', { type: 'string', describe: 'Traits as JSON object (identify)' })
+    .option('previous-user-id', { type: 'string', describe: 'Anonymous/old user id (alias)' })
+    .option('new-user-id', { type: 'string', describe: 'New canonical user id (alias)' })
+    .option('canonical-id', { type: 'string', describe: 'Winner canonical profile id (merge)' })
+    .option('duplicate-id', { type: 'string', describe: 'Loser canonical profile id (merge)' })
+    // bulk
+    .option('file', { type: 'string', describe: 'Input file path (bulk)' })
+    .option('format', { type: 'string', describe: 'csv | json (bulk; auto-detected from extension)' })
+    .option('resume-from', { type: 'number', describe: 'Skip first N records (bulk)' })
+    .option('yes', { type: 'boolean', alias: 'y', describe: 'Skip confirmation' })
     .option('json', { type: 'boolean', describe: 'JSON output' }), (args) => (0, identity_1.identityCommand)({
     action: args.action,
     sub: args.sub,
     direction: args.direction,
     status: args.status,
     limit: args.limit,
+    site: args.site,
+    userId: args['user-id'],
+    email: args.email,
+    phone: args.phone,
+    traits: args.traits,
+    previousUserId: args['previous-user-id'],
+    newUserId: args['new-user-id'],
+    canonicalId: args['canonical-id'],
+    duplicateId: args['duplicate-id'],
+    file: args.file,
+    format: args.format,
+    resumeFrom: args['resume-from'],
+    yes: args.yes,
     json: args.json,
     profile: args.profile,
 }))
@@ -571,6 +639,161 @@ const watch_1 = require("./commands/watch");
     tail: args.tail,
     json: args.json,
     profile: args.profile,
+}))
+    // ── Sprint E SE-A/B — analytics + observability CLI surface ──────────
+    .command('attribution <action>', 'Attribution analytics (report, compare, channels)', (y) => y
+    .positional('action', { type: 'string', describe: 'report | compare | channels' })
+    .option('site', { type: 'string', describe: 'Site ID' })
+    .option('from', { type: 'string', describe: 'ISO date (inclusive)' })
+    .option('to', { type: 'string', describe: 'ISO date (inclusive)' })
+    .option('range', { type: 'string', describe: '7d | 30d | 90d shorthand' })
+    .option('model', { type: 'string', describe: 'last-touch | first-touch | linear | time-decay | position-based | data-driven' })
+    .option('baseline-model', { type: 'string', describe: 'Baseline model id (compare)' })
+    .option('variant-model', { type: 'string', describe: 'Variant model id (compare)' })
+    .option('conversion-event', { type: 'string', describe: 'Conversion event (default $purchase)' })
+    .option('format', { type: 'string', describe: 'json | table' })
+    .option('json', { type: 'boolean', describe: 'JSON output (default)' }), (args) => (0, attribution_1.attributionCommand)({
+    action: args.action,
+    site: args.site,
+    from: args.from,
+    to: args.to,
+    range: args.range,
+    model: args.model,
+    baselineModel: args['baseline-model'],
+    variantModel: args['variant-model'],
+    conversionEvent: args['conversion-event'],
+    format: args.format,
+    json: args.json,
+    profile: args.profile,
+}))
+    .command('releases <action>', 'Release health (list)', (y) => y
+    .positional('action', { type: 'string', describe: 'list' })
+    .option('site', { type: 'string', describe: 'Site ID' })
+    .option('range', { type: 'string', describe: '24h | 7d | 30d (default 7d)' })
+    .option('environment', { type: 'string', describe: 'Optional environment filter' })
+    .option('limit', { type: 'number', describe: 'Max rows (default 20)' })
+    .option('format', { type: 'string', describe: 'json | table' })
+    .option('json', { type: 'boolean', describe: 'JSON output' }), (args) => (0, releases_1.releasesCommand)({
+    action: args.action,
+    site: args.site,
+    range: args.range,
+    environment: args.environment,
+    limit: args.limit,
+    format: args.format,
+    json: args.json,
+    profile: args.profile,
+}))
+    .command('skad <action>', 'Apple SKAdNetwork postbacks (postbacks)', (y) => y
+    .positional('action', { type: 'string', describe: 'postbacks' })
+    .option('site', { type: 'string', describe: 'Site ID' })
+    .option('from', { type: 'string', describe: 'ISO ts or 7d/24h' })
+    .option('to', { type: 'string', describe: 'ISO ts (default now)' })
+    .option('goal', { type: 'string', describe: 'Filter by resolved goal' })
+    .option('limit', { type: 'number', describe: 'Max rows (1..500)' })
+    .option('format', { type: 'string', describe: 'json | table' })
+    .option('json', { type: 'boolean', describe: 'JSON output' }), (args) => (0, skad_1.skadCommand)({
+    action: args.action,
+    site: args.site,
+    from: args.from,
+    to: args.to,
+    goal: args.goal,
+    limit: args.limit,
+    format: args.format,
+    json: args.json,
+    profile: args.profile,
+}))
+    .command('errors <action>', 'Error tracking (list, detail, resolve, mute)', (y) => y
+    .positional('action', { type: 'string', describe: 'list | detail | resolve | mute | upload-sourcemap | upload-native-symbols' })
+    .option('site', { type: 'string', describe: 'Site ID' })
+    .option('fingerprint', { type: 'string', describe: 'Error group fingerprint' })
+    .option('level', { type: 'string', describe: 'error | warning | info' })
+    .option('resolved', { type: 'string', describe: 'true | false' })
+    .option('environment', { type: 'string', describe: 'Environment filter' })
+    .option('release-id', { type: 'string', describe: 'Filter to a release' })
+    .option('limit', { type: 'number', describe: 'Max rows' })
+    .option('duration', { type: 'string', describe: 'Mute duration (e.g. 24h, 7d)' })
+    .option('format', { type: 'string', describe: 'json | table' })
+    .option('yes', { type: 'boolean', alias: 'y', describe: 'Skip confirmation' })
+    .option('json', { type: 'boolean', describe: 'JSON output' }), (args) => (0, errors_1.errorsCommand)({
+    action: args.action,
+    site: args.site,
+    fingerprint: args.fingerprint,
+    level: args.level,
+    resolved: args.resolved,
+    environment: args.environment,
+    releaseId: args['release-id'],
+    limit: args.limit,
+    duration: args.duration,
+    format: args.format,
+    yes: args.yes,
+    json: args.json,
+    profile: args.profile,
+}))
+    .command('replay <action>', 'Session replay (list, get)', (y) => y
+    .positional('action', { type: 'string', describe: 'list | get' })
+    .option('site', { type: 'string', describe: 'Site ID' })
+    .option('session-id', { type: 'string', describe: 'Session id (for get)' })
+    .option('range', { type: 'string', describe: '7d | 30d (default 7d)' })
+    .option('has-error', { type: 'boolean', describe: 'Filter to sessions with errors' })
+    .option('limit', { type: 'number', describe: 'Max rows' })
+    .option('format', { type: 'string', describe: 'json | table' })
+    .option('json', { type: 'boolean', describe: 'JSON output' }), (args) => (0, replay_1.replayCommand)({
+    action: args.action,
+    site: args.site,
+    sessionId: args['session-id'],
+    range: args.range,
+    hasError: args['has-error'],
+    limit: args.limit,
+    format: args.format,
+    json: args.json,
+    profile: args.profile,
+}))
+    .command('conversion-paths <action>', 'Conversion path analytics (list)', (y) => y
+    .positional('action', { type: 'string', describe: 'list' })
+    .option('site', { type: 'string', describe: 'Site ID' })
+    .option('from', { type: 'string', describe: 'ISO date' })
+    .option('to', { type: 'string', describe: 'ISO date' })
+    .option('range', { type: 'string', describe: '7d | 30d | 90d' })
+    .option('conversion-event', { type: 'string', describe: 'Conversion event' })
+    .option('limit', { type: 'number', describe: 'Max rows' })
+    .option('format', { type: 'string', describe: 'json | table' })
+    .option('json', { type: 'boolean', describe: 'JSON output' }), (args) => (0, conversion_paths_1.conversionPathsCommand)({
+    action: args.action,
+    site: args.site,
+    from: args.from,
+    to: args.to,
+    range: args.range,
+    conversionEvent: args['conversion-event'],
+    limit: args.limit,
+    format: args.format,
+    json: args.json,
+    profile: args.profile,
+}))
+    // ── CLI@0.4.4 — consent (per-user GDPR scopes) ───────────────────────
+    .command('consent <action>', 'Manage per-user consent (set, get, revoke, check)', (y) => y
+    .positional('action', { type: 'string', describe: 'set | get | revoke | check' })
+    .option('user-id', { type: 'string', describe: 'User ID' })
+    .option('scope', { type: 'string', describe: 'Consent scope (e.g. marketing_external, analytics)' })
+    .option('state', { type: 'string', choices: ['granted', 'denied'], describe: 'Consent state (for set)' })
+    .option('destination', { type: 'string', describe: 'Destination key (for check, e.g. capi)' })
+    .option('json', { type: 'boolean', describe: 'JSON output' }), (args) => (0, consent_1.consentCommand)({
+    action: args.action,
+    userId: args['user-id'],
+    scope: args.scope,
+    state: args.state,
+    destination: args.destination,
+    json: args.json,
+    profile: args.profile,
+}))
+    // ── CLI@0.4.4 — secrets vault (list, rotate) ─────────────────────────
+    .command('secrets <action>', 'Tenant credential vault (list, rotate)', (y) => y
+    .positional('action', { type: 'string', describe: 'list | rotate' })
+    .option('key', { type: 'string', describe: 'Secret key name (for rotate)' })
+    .option('json', { type: 'boolean', describe: 'JSON output' }), (args) => (0, secrets_1.secretsCommand)({
+    action: args.action,
+    key: args.key,
+    json: args.json,
+    profile: args.profile,
 }))
     .demandCommand(1, 'Run gurulu --help for available commands')
     .strict()

package/dist/utils/redact.d.ts

@@ -0,0 +1,14 @@
+/**
+ * CLI@0.4.4 — sensitive-arg redaction helper.
+ *
+ * Used before any debug/log/telemetry path that might serialize CLI args.
+ * Mask any key whose name contains password / token / secret / api-key / authorization
+ * (case-insensitive). Returns a shallow clone with offending values replaced
+ * by `***REDACTED***` (or `undefined` when the original was falsy, so the log
+ * does not imply a value was present).
+ */
+export declare function redactSensitiveArgs<T extends Record<string, unknown>>(args: T): T;
+/**
+ * Convenience: produce a JSON string with sensitive fields redacted.
+ */
+export declare function safeStringifyArgs(args: Record<string, unknown>): string;

package/dist/utils/redact.js

@@ -0,0 +1,48 @@
+"use strict";
+/**
+ * CLI@0.4.4 — sensitive-arg redaction helper.
+ *
+ * Used before any debug/log/telemetry path that might serialize CLI args.
+ * Mask any key whose name contains password / token / secret / api-key / authorization
+ * (case-insensitive). Returns a shallow clone with offending values replaced
+ * by `***REDACTED***` (or `undefined` when the original was falsy, so the log
+ * does not imply a value was present).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactSensitiveArgs = redactSensitiveArgs;
+exports.safeStringifyArgs = safeStringifyArgs;
+const SENSITIVE_KEY_RX = /(password|passwd|pwd|token|secret|api[_-]?key|authorization|auth[_-]?token|access[_-]?key|private[_-]?key|client[_-]?secret|session[_-]?token)/i;
+function redactSensitiveArgs(args) {
+    if (!args || typeof args !== 'object')
+        return args;
+    const out = Array.isArray(args)
+        ? [...args]
+        : { ...args };
+    for (const k of Object.keys(out)) {
+        const v = out[k];
+        if (SENSITIVE_KEY_RX.test(k)) {
+            out[k] = v ? '***REDACTED***' : undefined;
+            continue;
+        }
+        // Recurse into nested objects (but not class instances / Buffers / Dates).
+        if (v &&
+            typeof v === 'object' &&
+            !Buffer.isBuffer(v) &&
+            !(v instanceof Date) &&
+            (Object.getPrototypeOf(v) === Object.prototype || Array.isArray(v))) {
+            out[k] = redactSensitiveArgs(v);
+        }
+    }
+    return out;
+}
+/**
+ * Convenience: produce a JSON string with sensitive fields redacted.
+ */
+function safeStringifyArgs(args) {
+    try {
+        return JSON.stringify(redactSensitiveArgs(args));
+    }
+    catch {
+        return '[unserializable]';
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gurulu/cli",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "description": "Gurulu.io CLI — setup analytics in seconds",
   "bin": {
     "gurulu": "bin/gurulu.js"

package/scripts/bootstrap-runtime-schema.mjs

@@ -37,29 +37,18 @@ async function retry(fn, label) {
 async function main() {
   console.log('[bootstrap] Starting runtime schema bootstrap...');
 
-  // Step 1/3: Prisma migrate deploy
+  // Step 1/2: Prisma migrate deploy — see /scripts/bootstrap-runtime-schema.mjs
+  // for the FA-11 #3 / Sprint I-ops Faz 2 rationale.
   if (process.env.POSTGRES_AUTO_MIGRATE !== 'false') {
-    console.log('\n[bootstrap] Step 1/3: Prisma migrate deploy');
+    console.log('\n[bootstrap] Step 1/2: Prisma migrate deploy');
     await retry(async () => {
-      try {
-        exec('npx prisma migrate deploy');
-      } catch (err) {
-        if (
-          process.env.PRISMA_MIGRATE_FALLBACK_DB_PUSH !== 'false' &&
-          err.message?.includes('P3005')
-        ) {
-          console.log('[bootstrap] P3005 detected, falling back to db push...');
-          exec('npx prisma db push --accept-data-loss');
-        } else {
-          throw err;
-        }
-      }
+      exec('npx prisma migrate deploy');
     }, 'migrate deploy');
   }
 
-  // Step 2/3: SQL hooks
+  // Step 2/2: SQL hooks
   if (process.env.POSTGRES_AUTO_MIGRATE !== 'false') {
-    console.log('\n[bootstrap] Step 2/3: SQL hooks');
+    console.log('\n[bootstrap] Step 2/2: SQL hooks');
     const hooksDir = join(process.cwd(), 'prisma', 'sql-hooks');
 
     if (existsSync(hooksDir)) {
@@ -77,14 +66,7 @@ async function main() {
       console.log('[bootstrap] No sql-hooks directory found, skipping.');
     }
   }
-
-  // Step 3/3: db push (catch drift)
-  if (process.env.POSTGRES_AUTO_MIGRATE !== 'false') {
-    console.log('\n[bootstrap] Step 3/3: Prisma db push (drift catch)');
-    await retry(async () => {
-      exec('npx prisma db push --accept-data-loss');
-    }, 'db push');
-  }
+  // Step 3/3 (db push drift catch) removed — drift is now a hard fail.
 
   // ClickHouse migration
   if (process.env.CLICKHOUSE_AUTO_MIGRATE !== 'false') {

package/scripts/gurulu-agentic-install.lib.cjs

@@ -380,16 +380,44 @@ function generateServerMap(scan /*, opts*/) {
   };
 }
 
+/**
+ * Sprint E1.3b — singularize plural table/model names to canonical singular.
+ * The scan layer normalises mutations as `{ op: '<model>.<operation>' }` so we
+ * derive the operation from `m.op` when `m.operation` isn't present, and
+ * collapse common irregular plurals to their singular form so e.g. raw-SQL
+ * `INSERT INTO orders` and a Drizzle `pgTable('orders', ...)` both fold into
+ * the same `order` row in db-map.
+ */
+const SINGULARIZE_IRREGULARS = {
+  users: 'user',
+  orders: 'order',
+  items: 'item',
+};
+function singularizeModelName(raw) {
+  const lower = String(raw || '').toLowerCase();
+  if (!lower) return lower;
+  if (Object.prototype.hasOwnProperty.call(SINGULARIZE_IRREGULARS, lower)) {
+    return SINGULARIZE_IRREGULARS[lower];
+  }
+  return lower;
+}
+
 /** db-map.json — table → event emitter mapping from detected mutations. */
 function generateDbMap(scan, opts) {
   const byModel = new Map();
   for (const m of scan.mutations || []) {
-    const name = String(m.model || '').trim();
-    if (!name) continue;
-    const op = cdcOp(m.operation);
+    const rawName = String(m.model || '').trim();
+    if (!rawName) continue;
+    const name = singularizeModelName(rawName);
+    // Sprint E1.3b — `scan.mutations` from gurulu-scan.lib.cjs normalises the
+    // operation as `m.op = "<model>.<operation>"` and drops `m.operation`.
+    // Derive the operation verb from whichever field is populated.
+    const operation =
+      m.operation || (typeof m.op === 'string' ? m.op.split('.').pop() : null);
+    const op = cdcOp(operation);
     if (!op) continue;
     if (!byModel.has(name)) byModel.set(name, new Set());
-    const key = `${op}::${inferEventName(name, m.operation)}`;
+    const key = `${op}::${inferEventName(name, operation)}`;
     byModel.get(name).add(key);
   }
 

package/scripts/gurulu-agentic-install.mjs

@@ -278,10 +278,13 @@ async function runPatchMode(repoRoot, args) {
     process.exit(1);
   }
   const framework = args.framework || 'auto';
-  const { patcher, detection, error } = patches.resolvePatcher(repoRoot, framework);
+  const { patcher, detection, error, unsupportedFramework } = patches.resolvePatcher(repoRoot, framework);
   if (error) {
     process.stderr.write(`Error: ${error}\n`);
-    process.exit(1);
+    // Sprint E1.6 — exit 6 specifically for mobile / not-yet-supported
+    // frameworks so the wrapping CLI can surface docs links instead of a
+    // generic install failure.
+    process.exit(unsupportedFramework ? 6 : 1);
   }
   if (!patcher) {
     process.stderr.write('No supported framework detected in ' + repoRoot + '\n');
@@ -412,6 +415,11 @@ async function runPatchMode(repoRoot, args) {
         `Auto-instrument failed (${reason}); rollback threw: ${err.stack || err.message || err}\n`,
       );
     }
+    // Sprint E1.1 — exit code 5 signals "patches rolled back" so install.ts
+    // can skip the npm-install / .env-merge / ingest-ping steps and surface
+    // the rollback to the user. The wrapping CLI converts this into a
+    // partially-installed state with `summary.rolledBack=true`.
+    process.exit(5);
   }
   if (args.autoInstrument) {
     const intentPath = args['intent-result'];