@gurulu/cli 0.4.7 → 1.0.0

package/dist/commands/install.js

@@ -1,1590 +0,0 @@
-"use strict";
-/**
- * Phase 16 A2 — `gurulu install` user-facing auto-install command.
- *
- * Runs the full bootstrap loop against a target repo:
- *   1. scan            (scripts/gurulu-scan.mjs)
- *   2. confirm         (interactive, skipped with --yes)
- *   3. agentic plan    (scripts/gurulu-agentic-install.mjs --dry-run)
- *   4. apply           (scripts/gurulu-agentic-install.mjs --apply)
- *   5. npm install     (pm detected from lockfile)
- *   6. .env merge      (.env.local for Next.js, .env otherwise)
- *   7. ingest ping     (POST <ingestUrl>/api/ingest/v1/health)
- *
- * The command is designed so the flow orchestration (`runInstallFlow`) can
- * be unit-tested with injected deps — no real spawns or fetches required.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveWorkspaceRoot = resolveWorkspaceRoot;
-exports.resolveScriptsDir = resolveScriptsDir;
-exports.detectPackageManager = detectPackageManager;
-exports.packageInstallArgs = packageInstallArgs;
-exports.parseEnvFile = parseEnvFile;
-exports.mergeEnvFile = mergeEnvFile;
-exports.createDefaultDeps = createDefaultDeps;
-exports.runInstallFlow = runInstallFlow;
-exports.isTelemetryDisabled = isTelemetryDisabled;
-exports.maybePromptTelemetryConsent = maybePromptTelemetryConsent;
-exports.repoHashOf = repoHashOf;
-exports.pickSite = pickSite;
-exports.emitInstallTelemetry = emitInstallTelemetry;
-exports.detectCiEnv = detectCiEnv;
-exports.runAuthenticatedInstallFlow = runAuthenticatedInstallFlow;
-exports.installCommand = installCommand;
-const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const path = __importStar(require("path"));
-const crypto = __importStar(require("crypto"));
-const child_process_1 = require("child_process");
-const ui_1 = require("../utils/ui");
-const config_1 = require("../config");
-const api_client_1 = require("../api-client");
-const install_intent_proposal_1 = require("../install-intent-proposal");
-// ---------------------------------------------------------------------------
-// Sprint E1.5 — Workspace resolution.
-//
-// Many fresh repos are npm/pnpm/yarn workspaces (Turborepo, Nx, Bun, etc).
-// Running `gurulu install` from the repo root is ambiguous: should we patch
-// the `apps/web/` Next.js app, the `apps/admin/` dashboard, or one of the
-// `packages/*` libraries? When package.json declares >=2 workspace globs we
-// either (a) honour `--workspace=<path>` if set, or (b) prompt the user
-// interactively. The resolved path becomes `repoRoot` for the rest of the
-// install flow.
-// ---------------------------------------------------------------------------
-function walkForPackageJson(root, depth, out) {
-    // FA-1 P1-7 — recursive walker for `**/*` and `apps/**` style globs used by
-    // Turborepo and Yarn berry monorepos. We cap depth to avoid descending into
-    // node_modules / .git / huge build trees, and we only collect directories
-    // that actually contain a package.json.
-    if (depth < 0)
-        return;
-    let entries;
-    try {
-        entries = fs.readdirSync(root, { withFileTypes: true });
-    }
-    catch {
-        return;
-    }
-    for (const e of entries) {
-        if (!e.isDirectory())
-            continue;
-        if (e.name === 'node_modules' || e.name === '.git' || e.name.startsWith('.'))
-            continue;
-        const abs = path.join(root, e.name);
-        if (fs.existsSync(path.join(abs, 'package.json')))
-            out.push(abs);
-        walkForPackageJson(abs, depth - 1, out);
-    }
-}
-function expandWorkspaceGlobs(repoRoot, globs) {
-    // FA-1 P1-7 — workspace glob support now covers:
-    //   - bare `dir`               (single workspace)
-    //   - `dir/*`                  (immediate children — npm/pnpm/yarn classic)
-    //   - `dir/**`, `dir/**/*`     (Turborepo / Yarn berry recursive)
-    //   - `!packages/excluded`     (negation filter, applied after expansion)
-    //   - `workspace:*` protocol   (Yarn berry — skipped, not a glob)
-    const positives = [];
-    const negatives = [];
-    for (const raw of globs) {
-        if (!raw || typeof raw !== 'string')
-            continue;
-        // Yarn berry sometimes lists `workspace:*` protocol entries — skip; they
-        // are dependency declarations, not workspace path globs.
-        if (raw.startsWith('workspace:'))
-            continue;
-        if (raw.startsWith('!')) {
-            negatives.push(raw.slice(1));
-        }
-        else {
-            positives.push(raw);
-        }
-    }
-    const collected = new Set();
-    for (const g of positives) {
-        // `dir/**`, `dir/**/*` — recursive walk up to 4 levels deep.
-        if (g.endsWith('/**') || g.endsWith('/**/*') || g === '**' || g === '**/*') {
-            const root = g === '**' || g === '**/*'
-                ? repoRoot
-                : path.join(repoRoot, g.replace(/\/\*\*(\/\*)?$/, ''));
-            if (!fs.existsSync(root))
-                continue;
-            const acc = [];
-            walkForPackageJson(root, 4, acc);
-            for (const a of acc)
-                collected.add(a);
-            continue;
-        }
-        if (g.endsWith('/*')) {
-            const parent = path.join(repoRoot, g.slice(0, -2));
-            if (!fs.existsSync(parent))
-                continue;
-            try {
-                for (const entry of fs.readdirSync(parent)) {
-                    const abs = path.join(parent, entry);
-                    if (fs.statSync(abs).isDirectory() &&
-                        fs.existsSync(path.join(abs, 'package.json'))) {
-                        collected.add(abs);
-                    }
-                }
-            }
-            catch {
-                /* ignore */
-            }
-            continue;
-        }
-        // Bare directory.
-        const abs = path.join(repoRoot, g);
-        if (fs.existsSync(abs) && fs.existsSync(path.join(abs, 'package.json'))) {
-            collected.add(abs);
-        }
-    }
-    // Apply negations as simple suffix-match against the relative path.
-    if (negatives.length > 0) {
-        for (const dir of Array.from(collected)) {
-            const rel = path.relative(repoRoot, dir);
-            for (const n of negatives) {
-                const negResolved = n.replace(/\/\*+$/, '');
-                if (rel === negResolved || rel.startsWith(negResolved + path.sep)) {
-                    collected.delete(dir);
-                    break;
-                }
-            }
-        }
-    }
-    return Array.from(collected);
-}
-async function resolveWorkspaceRoot(repoRoot, args, deps) {
-    const pkgPath = path.join(repoRoot, 'package.json');
-    if (!fs.existsSync(pkgPath))
-        return repoRoot;
-    let pkg;
-    try {
-        pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
-    }
-    catch {
-        return repoRoot;
-    }
-    let globs = null;
-    if (Array.isArray(pkg.workspaces))
-        globs = pkg.workspaces;
-    else if (pkg.workspaces && Array.isArray(pkg.workspaces.packages))
-        globs = pkg.workspaces.packages;
-    if (!globs || globs.length === 0)
-        return repoRoot;
-    const candidates = expandWorkspaceGlobs(repoRoot, globs);
-    if (candidates.length <= 1)
-        return repoRoot;
-    if (args.workspace) {
-        const target = path.resolve(repoRoot, args.workspace);
-        if (candidates.some((c) => path.resolve(c) === target))
-            return target;
-        log(deps, 'warn', `--workspace=${args.workspace} not found among workspace packages.`);
-    }
-    if (args.yes) {
-        log(deps, 'warn', `Multiple workspaces detected (${candidates.length}); pass --workspace=<path> next time.`);
-        return repoRoot;
-    }
-    log(deps, 'info', 'Multiple workspaces detected:');
-    candidates.forEach((c, i) => log(deps, 'info', `  [${i + 1}] ${path.relative(repoRoot, c)}`));
-    const answer = (await deps.prompt('  Select workspace [1]: ')).trim() || '1';
-    const idx = parseInt(answer, 10) - 1;
-    if (Number.isFinite(idx) && idx >= 0 && idx < candidates.length) {
-        return candidates[idx];
-    }
-    return repoRoot;
-}
-// ---------------------------------------------------------------------------
-// Script resolution
-// ---------------------------------------------------------------------------
-/**
- * Locate the repo scripts/ directory (works when installed from source tree
- * or as a bundled package; falls back to GURULU_SCRIPTS_DIR env override).
- */
-function resolveScriptsDir(startDir = __dirname) {
-    if (process.env.GURULU_SCRIPTS_DIR && fs.existsSync(process.env.GURULU_SCRIPTS_DIR)) {
-        return process.env.GURULU_SCRIPTS_DIR;
-    }
-    let dir = startDir;
-    for (let i = 0; i < 8; i++) {
-        const candidate = path.join(dir, 'scripts', 'gurulu-scan.mjs');
-        if (fs.existsSync(candidate))
-            return path.join(dir, 'scripts');
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    // Default to monorepo root guess (4 levels up from packages/cli/dist/commands)
-    return path.resolve(startDir, '..', '..', '..', '..', 'scripts');
-}
-// ---------------------------------------------------------------------------
-// Package-manager detection
-// ---------------------------------------------------------------------------
-function detectPackageManager(repoRoot) {
-    // FA-1 P1-6 — Bun support. Bun ships either `bun.lockb` (binary) or
-    // `bun.lock` (text, newer Bun releases). Detect both before falling back
-    // to pnpm/yarn/npm so monorepos using Bun don't get installed with the
-    // wrong package manager.
-    if (fs.existsSync(path.join(repoRoot, 'bun.lockb')) ||
-        fs.existsSync(path.join(repoRoot, 'bun.lock'))) {
-        return 'bun';
-    }
-    if (fs.existsSync(path.join(repoRoot, 'pnpm-lock.yaml')))
-        return 'pnpm';
-    if (fs.existsSync(path.join(repoRoot, 'yarn.lock')))
-        return 'yarn';
-    return 'npm';
-}
-function packageInstallArgs(pm) {
-    if (pm === 'pnpm')
-        return ['add', '@gurulu/web'];
-    if (pm === 'yarn')
-        return ['add', '@gurulu/web'];
-    if (pm === 'bun')
-        return ['add', '@gurulu/web'];
-    return ['install', '@gurulu/web'];
-}
-// FA-1 P1-8 — full dotenv-compatible parser. The previous one-line
-// `KEY=value` split mis-handled (a) quoted values with `=` inside,
-// (b) multi-line values inside double-quotes (escape `\n`), and (c) the
-// `export KEY=value` form some teams use. This parser walks the file
-// character-by-character, tracking whether we're inside a quoted value, so
-// the existing-keys set actually contains every declared key — preventing
-// duplicate writes that would override the user's values.
-function parseEnvFile(text) {
-    const keys = new Set();
-    let i = 0;
-    const n = text.length;
-    while (i < n) {
-        // Skip leading whitespace + newlines.
-        while (i < n && (text[i] === ' ' || text[i] === '\t' || text[i] === '\r' || text[i] === '\n')) {
-            i++;
-        }
-        if (i >= n)
-            break;
-        // Comment line.
-        if (text[i] === '#') {
-            while (i < n && text[i] !== '\n')
-                i++;
-            continue;
-        }
-        // Optional `export ` prefix.
-        if (text.startsWith('export ', i) || text.startsWith('export\t', i)) {
-            i += 7;
-            while (i < n && (text[i] === ' ' || text[i] === '\t'))
-                i++;
-        }
-        // Key.
-        const keyStart = i;
-        while (i < n && text[i] !== '=' && text[i] !== '\n' && text[i] !== '#')
-            i++;
-        const key = text.slice(keyStart, i).trim();
-        if (text[i] !== '=') {
-            // No `=` on this line — skip to next newline.
-            while (i < n && text[i] !== '\n')
-                i++;
-            continue;
-        }
-        if (key && /^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
-            keys.add(key);
-        }
-        i++; // consume '='
-        // Value — handles "..." (multi-line, escape-aware), '...', and bare.
-        if (text[i] === '"') {
-            i++;
-            while (i < n) {
-                if (text[i] === '\\' && i + 1 < n) {
-                    i += 2;
-                    continue;
-                }
-                if (text[i] === '"') {
-                    i++;
-                    break;
-                }
-                i++;
-            }
-        }
-        else if (text[i] === "'") {
-            i++;
-            while (i < n && text[i] !== "'")
-                i++;
-            if (i < n)
-                i++;
-        }
-        else if (text[i] === '`') {
-            i++;
-            while (i < n && text[i] !== '`')
-                i++;
-            if (i < n)
-                i++;
-        }
-        else {
-            while (i < n && text[i] !== '\n' && text[i] !== '#')
-                i++;
-        }
-        // Skip rest of the line (trailing comment / whitespace).
-        while (i < n && text[i] !== '\n')
-            i++;
-    }
-    return keys;
-}
-function mergeEnvFile(repoRoot, framework, vars) {
-    const isNext = framework.startsWith('nextjs') || framework === 'nextjs';
-    const filename = isNext ? '.env.local' : '.env';
-    const filePath = path.join(repoRoot, filename);
-    let existing = '';
-    if (fs.existsSync(filePath)) {
-        existing = fs.readFileSync(filePath, 'utf8');
-    }
-    // FA-1 P1-8 — proper quoted/multiline-aware parse so we don't shadow keys
-    // the user already defined inside `KEY="multi\nline"` blocks.
-    const existingKeys = parseEnvFile(existing);
-    const added = [];
-    const skipped = [];
-    const linesToAppend = [];
-    for (const [key, value] of Object.entries(vars)) {
-        if (existingKeys.has(key)) {
-            skipped.push(key);
-            continue;
-        }
-        // Quote values that contain whitespace, `=`, `#`, or quotes themselves so
-        // they round-trip through any standard dotenv parser.
-        const needsQuote = /[\s="#\\]/.test(value);
-        const serialized = needsQuote
-            ? `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`
-            : value;
-        linesToAppend.push(`${key}=${serialized}`);
-        added.push(key);
-    }
-    if (linesToAppend.length > 0) {
-        const separator = existing && !existing.endsWith('\n') ? '\n' : '';
-        const header = existing ? '' : '# Gurulu.io Analytics\n';
-        fs.appendFileSync(filePath, `${separator}${header}${linesToAppend.join('\n')}\n`);
-    }
-    return { file: filename, added, skipped };
-}
-// ---------------------------------------------------------------------------
-// Sprint E2.2 — Fetch canonical install prompt from server endpoint.
-// ---------------------------------------------------------------------------
-async function fetchInstallPrompt(opts) {
-    const fallback = `I have Gurulu analytics installed. Site ID: ${opts.siteId}\n` +
-        `Analyze my codebase and add gurulu.track() calls to\n` +
-        `important user actions: signups, purchases, form submits,\n` +
-        `button clicks, and key conversions. Use the Gurulu MCP\n` +
-        `server (@gurulu/mcp-server) for live event verification.\n` +
-        `Docs: https://gurulu.io/docs/quick-start`;
-    if (!opts.authToken || !opts.siteId)
-        return fallback;
-    try {
-        const url = new URL('/api/cli/install/prompt', opts.ingestUrl);
-        url.searchParams.set('siteId', opts.siteId);
-        if (opts.framework)
-            url.searchParams.set('framework', opts.framework);
-        const res = await globalThis.fetch(url.toString(), {
-            headers: { authorization: `Bearer ${opts.authToken}` },
-        });
-        if (!res.ok)
-            return fallback;
-        const body = await res.json();
-        if (body && typeof body.prompt === 'string' && body.prompt.length > 0) {
-            return body.prompt;
-        }
-        return fallback;
-    }
-    catch {
-        return fallback;
-    }
-}
-// ---------------------------------------------------------------------------
-// Default dependency implementations (real spawn + real fetch)
-// ---------------------------------------------------------------------------
-function createDefaultDeps(scriptsDir) {
-    const runNode = (args, opts = {}) => new Promise((resolve) => {
-        const child = (0, child_process_1.spawn)('node', args, {
-            cwd: opts.cwd,
-            stdio: ['pipe', 'pipe', 'pipe'],
-        });
-        let stdout = '';
-        let stderr = '';
-        child.stdout.on('data', (c) => (stdout += c.toString()));
-        child.stderr.on('data', (c) => (stderr += c.toString()));
-        child.on('close', (code) => resolve({ code: code ?? 0, stdout, stderr }));
-        if (opts.input) {
-            child.stdin.write(opts.input);
-            child.stdin.end();
-        }
-    });
-    const runCmd = (cmd, args, opts = {}) => new Promise((resolve) => {
-        const child = (0, child_process_1.spawn)(cmd, args, {
-            cwd: opts.cwd,
-            stdio: ['ignore', 'pipe', 'pipe'],
-            shell: process.platform === 'win32',
-        });
-        let stdout = '';
-        let stderr = '';
-        child.stdout.on('data', (c) => (stdout += c.toString()));
-        child.stderr.on('data', (c) => (stderr += c.toString()));
-        child.on('close', (code) => resolve({ code: code ?? 0, stdout, stderr }));
-        child.on('error', (err) => resolve({ code: 1, stdout, stderr: String(err) }));
-    });
-    const fetchJson = async (url, body) => {
-        try {
-            // Node 18+ has global fetch
-            const res = await globalThis.fetch(url, {
-                method: 'POST',
-                headers: { 'content-type': 'application/json' },
-                body: JSON.stringify(body),
-            });
-            return { ok: !!res.ok, status: res.status };
-        }
-        catch {
-            return { ok: false, status: 0 };
-        }
-    };
-    const verify = async (params) => {
-        const verifierScript = path.join(params.scriptsDir, 'gurulu-verify-install.mjs');
-        const args = [
-            verifierScript,
-            params.repoRoot,
-            '--framework',
-            params.framework,
-            '--site-id',
-            params.siteId,
-            '--tenant-id',
-            params.tenantId,
-            '--ingest-url',
-            params.ingestUrl,
-        ];
-        const res = await runNode(args);
-        // Parse the final VERIFY_RESULT <json> line if present.
-        const lines = (res.stdout || '').trim().split('\n');
-        let parsed = { ok: res.code === 0, reason: null };
-        for (let i = lines.length - 1; i >= 0; i--) {
-            const line = lines[i];
-            if (line.startsWith('VERIFY_RESULT ')) {
-                try {
-                    parsed = JSON.parse(line.slice('VERIFY_RESULT '.length));
-                }
-                catch {
-                    // fall through
-                }
-                break;
-            }
-        }
-        if (res.code !== 0 && parsed.ok)
-            parsed.ok = false;
-        return parsed;
-    };
-    return {
-        runNode,
-        runCmd,
-        fetchJson,
-        prompt: ui_1.prompt,
-        verify,
-        log: { info: ui_1.info, warn: ui_1.warn, error: ui_1.error, step: ui_1.step, success: ui_1.success },
-    };
-}
-// ---------------------------------------------------------------------------
-// Orchestration
-// ---------------------------------------------------------------------------
-function log(deps, level, msg) {
-    const l = deps.log;
-    if (!l)
-        return;
-    l[level](msg);
-}
-function getEnvPrefix(framework) {
-    if (framework.startsWith('nextjs'))
-        return 'NEXT_PUBLIC_';
-    if (framework === 'vite-react' || framework === 'vite')
-        return 'VITE_';
-    if (framework === 'nuxt' || framework === 'vue')
-        return 'NUXT_PUBLIC_';
-    if (framework === 'sveltekit' || framework === 'svelte')
-        return 'PUBLIC_';
-    if (framework === 'astro')
-        return 'PUBLIC_';
-    return ''; // Express, Fastify, NestJS don't need prefix
-}
-async function runInstallFlow(args, deps, scriptsDir) {
-    const initialRoot = path.resolve(args.path || process.cwd());
-    // Sprint E1.5 — workspace resolution. When the project is a multi-package
-    // workspace, narrow `repoRoot` to the chosen workspace package so scan,
-    // patches, .env merge, and npm install all target the right place.
-    const repoRoot = await resolveWorkspaceRoot(initialRoot, args, deps);
-    const summary = {
-        scan: null,
-        framework: null,
-        planDiff: '',
-        filesChanged: 0,
-        packageManager: null,
-        packageInstalled: false,
-        envKeysWritten: [],
-        ingestOk: null,
-        dryRun: !!args.dryRun,
-        verify: null,
-        rolledBack: false,
-        errors: [],
-    };
-    if (!args.siteId) {
-        const msg = 'Missing --site-id. Provide --site-id or run without --yes to enter interactively.';
-        summary.errors.push(msg);
-        log(deps, 'error', msg);
-        return summary;
-    }
-    if (!args.tenantId) {
-        const msg = 'Missing --tenant-id. Provide --tenant-id or run without --yes to enter interactively.';
-        summary.errors.push(msg);
-        log(deps, 'error', msg);
-        return summary;
-    }
-    const scanScript = path.join(scriptsDir, 'gurulu-scan.mjs');
-    const agenticScript = path.join(scriptsDir, 'gurulu-agentic-install.mjs');
-    // ---- 1. Scan ---------------------------------------------------------
-    log(deps, 'step', `Scanning ${(0, ui_1.cyan)(repoRoot)}...`);
-    const scanRes = await deps.runNode([scanScript, repoRoot, '--quiet']);
-    if (scanRes.code !== 0) {
-        const msg = `Scan failed (exit ${scanRes.code}): ${scanRes.stderr.trim()}`;
-        summary.errors.push(msg);
-        log(deps, 'error', msg);
-        return summary;
-    }
-    try {
-        summary.scan = JSON.parse(scanRes.stdout);
-    }
-    catch (err) {
-        const msg = `Scan produced invalid JSON: ${err.message}`;
-        summary.errors.push(msg);
-        log(deps, 'error', msg);
-        return summary;
-    }
-    const detectedFw = args.framework || summary.scan.framework?.name || 'auto';
-    summary.framework = detectedFw;
-    log(deps, 'info', `Framework: ${(0, ui_1.bold)(detectedFw)} · ORM: ${summary.scan.orm?.name || 'none'} · Auth: ${summary.scan.auth?.name || 'none'} · Routes: ${summary.scan.routes?.length ?? 0}`);
-    // ---- 2. Confirm ------------------------------------------------------
-    if (!args.yes) {
-        const answer = await deps.prompt('  Continue with install? (Y/n): ');
-        if (answer && answer.toLowerCase().startsWith('n')) {
-            log(deps, 'info', 'Aborted by user.');
-            return summary;
-        }
-    }
-    // ---- 3. Agentic dry-run (plan / diff) --------------------------------
-    log(deps, 'step', 'Generating patch plan (dry-run)...');
-    const planArgs = [
-        agenticScript,
-        repoRoot,
-        '--dry-run',
-        '--site-id',
-        args.siteId,
-        '--tenant-id',
-        args.tenantId,
-    ];
-    if (args.framework) {
-        planArgs.push('--framework', args.framework);
-    }
-    // Sprint A fix A2 — forward the active profile's secret key so the planner
-    // can call the LLM property-extraction endpoint while building the diff.
-    if (args.authToken) {
-        planArgs.push('--token', args.authToken);
-    }
-    // Phase 18.7 B — include auto-instrument diff in the dry-run plan so the
-    // consent prompt / preview shows both script-tag + track-call changes.
-    if (args.autoInstrument) {
-        planArgs.push('--auto-instrument');
-        if (args.autoProperties) {
-            planArgs.push('--auto-properties');
-        }
-        if (args.intentResultPath) {
-            planArgs.push('--intent-result', args.intentResultPath);
-        }
-    }
-    // FA-1 P0-2 — forward self-hosted overrides so the dry-run plan, the
-    // applied tracker tag, and the LLM endpoint base all agree. Without this
-    // self-hosted installs render `<script src="https://gurulu.io/t.js">` even
-    // when the user pointed `--ingest-url` at their own host.
-    if (args.ingestUrl) {
-        planArgs.push('--ingest-url', args.ingestUrl);
-    }
-    if (args.scriptSrc) {
-        planArgs.push('--script-src', args.scriptSrc);
-    }
-    const planRes = await deps.runNode(planArgs);
-    summary.planDiff = planRes.stdout;
-    if (planRes.code !== 0) {
-        const msg = `Planner failed (exit ${planRes.code}): ${planRes.stderr.trim()}`;
-        summary.errors.push(msg);
-        log(deps, 'error', msg);
-        return summary;
-    }
-    if (planRes.stdout.trim()) {
-        log(deps, 'info', 'Proposed changes:');
-        for (const line of planRes.stdout.split('\n').slice(0, 40)) {
-            if (line)
-                log(deps, 'info', `    ${(0, ui_1.dim)(line)}`);
-        }
-    }
-    // crude file-count: `+++ b/<path>` lines in unified diff
-    summary.filesChanged = (planRes.stdout.match(/^\+\+\+ /gm) || []).length;
-    // ---- 4. Apply (skipped on --dry-run) ---------------------------------
-    if (!args.dryRun) {
-        log(deps, 'step', 'Applying patches...');
-        const applyArgs = [
-            agenticScript,
-            repoRoot,
-            '--apply',
-            '--site-id',
-            args.siteId,
-            '--tenant-id',
-            args.tenantId,
-        ];
-        if (args.framework) {
-            applyArgs.push('--framework', args.framework);
-        }
-        // Sprint A fix A2 — forward the active profile's secret key so the
-        // agentic-install script's `tryLlmExtraction` can authenticate against
-        // the LLM property-extraction endpoint. Without it the request 401s and
-        // every injected `gurulu.track(...)` falls back to `// TODO: <prop>`
-        // placeholders, breaking the auto-instrument feature.
-        if (args.authToken) {
-            applyArgs.push('--token', args.authToken);
-        }
-        // Phase 18.7 B — forward auto-instrument flag + intent result path.
-        if (args.autoInstrument) {
-            applyArgs.push('--auto-instrument');
-            if (args.autoProperties) {
-                applyArgs.push('--auto-properties');
-            }
-            if (args.intentResultPath) {
-                applyArgs.push('--intent-result', args.intentResultPath);
-            }
-        }
-        // FA-1 P0-2 — also forward to --apply so the file actually written to
-        // disk uses the correct tracker URL.
-        if (args.ingestUrl) {
-            applyArgs.push('--ingest-url', args.ingestUrl);
-        }
-        if (args.scriptSrc) {
-            applyArgs.push('--script-src', args.scriptSrc);
-        }
-        const applyRes = await deps.runNode(applyArgs);
-        // Sprint E1.1 — exit code 5 means the agentic-install script auto-rolled
-        // back due to an auto-instrument failure. Mark the summary as rolled back
-        // and skip the npm install / .env merge / ingest ping blocks so the user
-        // isn't left with a half-installed setup.
-        if (applyRes.code === 5) {
-            summary.rolledBack = true;
-            summary.partiallyInstalled = false;
-            log(deps, 'warn', '⚠ Install rolled back (auto-instrument failed; script tag reverted).');
-            return summary;
-        }
-        if (applyRes.code !== 0) {
-            const msg = `Apply failed (exit ${applyRes.code}): ${applyRes.stderr.trim()}`;
-            summary.errors.push(msg);
-            log(deps, 'error', msg);
-            return summary;
-        }
-        // Sprint E1.7 — record components that were successfully installed for
-        // partial-install diagnostics in the summary.
-        // CLI@0.4.4 — re-run idempotency: dedupe via Set so a second `gurulu install`
-        // pass on the same project does not double-list components. Component IDs
-        // hash siteId + framework + path so two different sites in the same repo
-        // remain distinct.
-        const componentScope = `${args.site || args.siteId || 'unknown'}::${args.framework || 'auto'}::${args.path || process.cwd()}`;
-        const existingComponents = new Set(summary.installedComponents || []);
-        const addComponent = (id) => {
-            const key = `${id}@${componentScope}`;
-            if (existingComponents.has(key)) {
-                log(deps, 'info', `Skipping ${id} — already installed for this scope`);
-                return;
-            }
-            existingComponents.add(key);
-        };
-        addComponent('script-tag');
-        addComponent('patch-log');
-        if (args.autoInstrument)
-            addComponent('auto-instrument');
-        summary.installedComponents = Array.from(existingComponents);
-        // Parse the machine-readable auto-instrument result line if present.
-        if (args.autoInstrument) {
-            const lines = (applyRes.stdout || '').split('\n');
-            for (let i = lines.length - 1; i >= 0; i--) {
-                if (lines[i].startsWith('AUTO_INSTRUMENT_RESULT ')) {
-                    try {
-                        const parsed = JSON.parse(lines[i].slice('AUTO_INSTRUMENT_RESULT '.length));
-                        summary.instrumentation = {
-                            enabled: true,
-                            filesModified: parsed.filesModified || 0,
-                            eventsInstrumented: parsed.eventsInstrumented || 0,
-                            eventsSkipped: parsed.eventsSkipped || 0,
-                            notes: parsed.notes || [],
-                        };
-                    }
-                    catch {
-                        // fall through — telemetry will show enabled:true with zeros.
-                    }
-                    break;
-                }
-            }
-            if (!summary.instrumentation) {
-                summary.instrumentation = {
-                    enabled: true,
-                    filesModified: 0,
-                    eventsInstrumented: 0,
-                    eventsSkipped: 0,
-                };
-            }
-        }
-        log(deps, 'success', 'Patches applied.');
-        // Sprint E5.2 — wire a `postbuild` script for Next.js projects so the
-        // CLI's sourcemap uploader runs automatically after every `next build`.
-        // We only touch package.json when the framework is Next.js AND the user
-        // hasn't already defined a `postbuild` (idempotent).
-        if (detectedFw && detectedFw.startsWith('nextjs')) {
-            try {
-                const pkgPath = path.join(repoRoot, 'package.json');
-                if (fs.existsSync(pkgPath)) {
-                    const raw = fs.readFileSync(pkgPath, 'utf8');
-                    const pkgJson = JSON.parse(raw);
-                    pkgJson.scripts = pkgJson.scripts || {};
-                    if (!pkgJson.scripts.postbuild) {
-                        pkgJson.scripts.postbuild =
-                            'gurulu sourcemap upload --release ${npm_package_version} --dir .next/static/chunks';
-                        fs.writeFileSync(pkgPath, JSON.stringify(pkgJson, null, 2) + '\n');
-                        log(deps, 'info', 'Added `postbuild` script for sourcemap upload.');
-                    }
-                }
-            }
-            catch (err) {
-                log(deps, 'warn', `Could not add postbuild script: ${err.message}`);
-            }
-        }
-    }
-    else {
-        if (args.autoInstrument) {
-            log(deps, 'info', `Auto-instrument: ${summary.instrumentation?.filesModified || 0} route files, ${summary.instrumentation?.eventsInstrumented || 0} events`);
-        }
-        log(deps, 'info', 'Dry-run: skipping apply, npm install, env merge, and ingest test.');
-    }
-    // ---- 5. npm install --------------------------------------------------
-    const pm = detectPackageManager(repoRoot);
-    summary.packageManager = pm;
-    if (args.skipNpm || args.dryRun) {
-        log(deps, 'info', `Skipping package install (${pm} add @gurulu/web)`);
-    }
-    else {
-        log(deps, 'step', `Installing @gurulu/web with ${(0, ui_1.bold)(pm)}...`);
-        const pmRes = await deps.runCmd(pm, packageInstallArgs(pm), { cwd: repoRoot });
-        if (pmRes.code !== 0) {
-            const msg = `${pm} install failed (exit ${pmRes.code}): ${pmRes.stderr.trim()}`;
-            summary.errors.push(msg);
-            log(deps, 'warn', msg);
-        }
-        else {
-            summary.packageInstalled = true;
-            log(deps, 'success', '@gurulu/web installed.');
-        }
-    }
-    // ---- 6. .env merge ---------------------------------------------------
-    const ingestUrl = args.ingestUrl || process.env.GURULU_INGEST_URL || 'https://gurulu.io';
-    const envPrefix = getEnvPrefix(detectedFw);
-    const envVars = {
-        [`${envPrefix}GURULU_SITE_ID`]: args.siteId,
-        [`${envPrefix}GURULU_TENANT_ID`]: args.tenantId,
-        [`${envPrefix}GURULU_INGEST_URL`]: ingestUrl,
-    };
-    if (args.skipEnv || args.dryRun) {
-        log(deps, 'info', 'Skipping .env merge.');
-    }
-    else {
-        const mergeRes = mergeEnvFile(repoRoot, detectedFw, envVars);
-        summary.envKeysWritten = mergeRes.added;
-        if (mergeRes.added.length > 0) {
-            log(deps, 'success', `Wrote ${mergeRes.added.length} key(s) to ${mergeRes.file}`);
-        }
-        if (mergeRes.skipped.length > 0) {
-            log(deps, 'warn', `Skipped existing key(s): ${mergeRes.skipped.join(', ')}`);
-        }
-    }
-    // ---- 7. Ingest ping --------------------------------------------------
-    if (!args.dryRun) {
-        const pingUrl = `${ingestUrl.replace(/\/$/, '')}/api/ingest/v1/health`;
-        log(deps, 'step', `Pinging ingest (${pingUrl})...`);
-        const pingRes = await deps.fetchJson(pingUrl, {
-            siteId: args.siteId,
-            tenantId: args.tenantId,
-            source: 'gurulu-cli-install',
-        });
-        summary.ingestOk = pingRes.ok;
-        if (pingRes.ok) {
-            log(deps, 'success', `Ingest reachable (status ${pingRes.status}).`);
-        }
-        else {
-            log(deps, 'warn', `Ingest ping failed (status ${pingRes.status}). Verify GURULU_INGEST_URL.`);
-        }
-    }
-    // ---- 8. Live smoke verify (Phase 16 A3) ------------------------------
-    if (args.verify && !args.dryRun) {
-        if (!deps.verify) {
-            log(deps, 'warn', 'Verify flag set but no verifier dep configured; skipping.');
-        }
-        else {
-            log(deps, 'step', 'Running live smoke verification...');
-            try {
-                const verifyRes = await deps.verify({
-                    repoRoot,
-                    framework: detectedFw,
-                    siteId: args.siteId,
-                    tenantId: args.tenantId,
-                    ingestUrl,
-                    scriptsDir,
-                });
-                summary.verify = verifyRes;
-                if (verifyRes.ok) {
-                    log(deps, 'success', 'Install verified: $page_view captured.');
-                }
-                else {
-                    const reason = verifyRes.reason || 'unknown';
-                    const msg = `Verification failed: ${reason}. Rolling back patches...`;
-                    summary.errors.push(msg);
-                    log(deps, 'error', msg);
-                    // Auto-rollback
-                    const rollbackArgs = [agenticScript, repoRoot, '--rollback'];
-                    const rbRes = await deps.runNode(rollbackArgs);
-                    if (rbRes.code === 0) {
-                        summary.rolledBack = true;
-                        log(deps, 'warn', 'Patches rolled back.');
-                    }
-                    else {
-                        log(deps, 'error', `Rollback failed (exit ${rbRes.code}): ${rbRes.stderr.trim()}`);
-                    }
-                }
-            }
-            catch (err) {
-                const msg = `Verify threw: ${err.message}`;
-                summary.errors.push(msg);
-                log(deps, 'error', msg);
-            }
-        }
-    }
-    // ---- Final summary ---------------------------------------------------
-    log(deps, 'info', '');
-    log(deps, 'info', (0, ui_1.bold)('  Install summary'));
-    log(deps, 'step', `Framework: ${summary.framework}`);
-    log(deps, 'step', `Files changed: ${summary.filesChanged}`);
-    log(deps, 'step', `Package manager: ${summary.packageManager}`);
-    log(deps, 'step', `Package installed: ${summary.packageInstalled ? 'yes' : 'no'}`);
-    log(deps, 'step', `.env keys written: ${summary.envKeysWritten.join(', ') || 'none'}`);
-    log(deps, 'step', `Ingest test: ${summary.ingestOk === null ? 'skipped' : summary.ingestOk ? 'ok' : 'failed'}`);
-    if (summary.verify) {
-        log(deps, 'step', `Live verify: ${summary.verify.ok ? 'verified' : `failed (${summary.verify.reason || 'unknown'})`}`);
-        if (summary.rolledBack) {
-            log(deps, 'step', 'Patches: rolled back');
-        }
-    }
-    if (summary.instrumentation && summary.instrumentation.enabled) {
-        log(deps, 'step', `Auto-instrument: ${summary.instrumentation.filesModified} file(s), ` +
-            `${summary.instrumentation.eventsInstrumented} event(s), ` +
-            `${summary.instrumentation.eventsSkipped} skipped`);
-    }
-    log(deps, 'info', '');
-    // ---- Post-install guidance ---------------------------------------------
-    if (!summary.dryRun && summary.errors.length === 0) {
-        console.log('');
-        log(deps, 'info', '✓ Install complete! Next steps:');
-        log(deps, 'info', `  Run ${(0, ui_1.cyan)('gurulu doctor')} to verify setup health`);
-        log(deps, 'info', `  Run ${(0, ui_1.cyan)('gurulu events tail')} to watch live events`);
-        log(deps, 'info', `  Visit ${(0, ui_1.cyan)('https://gurulu.io/dashboard')} to view analytics`);
-        console.log('');
-        // AI assistant integration prompt
-        const siteId = args.siteId || args.site || '';
-        console.log((0, ui_1.dim)('  ─────────────────────────────────────────────────'));
-        console.log('');
-        log(deps, 'info', `${(0, ui_1.cyan)('AI Assistant Integration')} (Claude Code / Cursor / Codex)`);
-        console.log('');
-        log(deps, 'info', `  ${(0, ui_1.dim)('MCP Server (real-time analytics in your editor):')}`);
-        log(deps, 'info', `  ${(0, ui_1.cyan)('npx @gurulu/mcp-server')} with env GURULU_API_KEY`);
-        console.log('');
-        log(deps, 'info', `  ${(0, ui_1.dim)('Or paste this prompt into your AI assistant:')}`);
-        console.log('');
-        // Sprint E2.2 — fetch the canonical install prompt from the server so
-        // edits land in `src/lib/cli/install-prompt.ts` (the single source of
-        // truth) instead of being duplicated in three places. We fall back to a
-        // tiny inline body when the endpoint is unreachable or unauthenticated
-        // so legacy installs still see something useful.
-        const promptText = await fetchInstallPrompt({
-            siteId,
-            ingestUrl: args.ingestUrl || process.env.GURULU_INGEST_URL || 'https://gurulu.io',
-            authToken: args.authToken,
-            framework: summary.framework || undefined,
-        });
-        console.log((0, ui_1.dim)('  ┌─────────────────────────────────────────────'));
-        for (const line of promptText.split('\n')) {
-            console.log((0, ui_1.dim)('  │ ') + line);
-        }
-        console.log((0, ui_1.dim)('  └─────────────────────────────────────────────'));
-        console.log('');
-        // Goals & funnels management
-        log(deps, 'info', `${(0, ui_1.cyan)('Goals & Funnels')}`);
-        log(deps, 'info', `  ${(0, ui_1.cyan)('gurulu goals list')}       ${(0, ui_1.dim)('List all conversion goals')}`);
-        log(deps, 'info', `  ${(0, ui_1.cyan)('gurulu goals create')}     ${(0, ui_1.dim)('Create a new goal interactively')}`);
-        log(deps, 'info', `  ${(0, ui_1.cyan)('gurulu funnels create')}   ${(0, ui_1.dim)('Define a multi-step funnel')}`);
-        console.log('');
-        // Server-side setup
-        log(deps, 'info', `${(0, ui_1.cyan)('Server-Side Tracking')}`);
-        log(deps, 'info', `  ${(0, ui_1.dim)('Add server-side event tracking with:')} ${(0, ui_1.cyan)('gurulu add-server')}`);
-        log(deps, 'info', `  ${(0, ui_1.dim)('Or manually:')}`);
-        log(deps, 'info', `    ${(0, ui_1.cyan)('npm install @gurulu/node')}`);
-        log(deps, 'info', `    ${(0, ui_1.dim)('import { Gurulu } from \'@gurulu/node\';')}`);
-        log(deps, 'info', `    ${(0, ui_1.dim)('const gurulu = new Gurulu({ siteId, serverApiKey });')}`);
-        log(deps, 'info', `    ${(0, ui_1.dim)('gurulu.track(\'order_completed\', { userId, revenue });')}`);
-        console.log('');
-        // DataLayer Bridge for GTM
-        log(deps, 'info', `${(0, ui_1.cyan)('DataLayer Bridge')} ${(0, ui_1.dim)('(for GTM users)')}`);
-        log(deps, 'info', `  ${(0, ui_1.dim)('Auto-capture all Google Tag Manager events:')}`);
-        log(deps, 'info', `  ${(0, ui_1.cyan)('window.gurulu.loadDataLayerBridge()')}`);
-        console.log('');
-        // identify() guidance
-        log(deps, 'info', `${(0, ui_1.cyan)('User Identification')}`);
-        log(deps, 'info', `  ${(0, ui_1.dim)('Web:')}    ${(0, ui_1.cyan)('window.gurulu.identify(\'user_123\', { email, plan })')}`);
-        log(deps, 'info', `  ${(0, ui_1.dim)('Server:')} ${(0, ui_1.cyan)('gurulu.identify(\'user_123\', { email, plan })')}`);
-        log(deps, 'info', `  ${(0, ui_1.dim)('Call on login/signup to link events to known users.')}`);
-        console.log('');
-    }
-    return summary;
-}
-// ---------------------------------------------------------------------------
-// FA-1 P0-5 — Telemetry consent gate (GDPR).
-//
-// `emitInstallTelemetry` previously fired on every install with a repo hash,
-// framework, and CLI version — no consent recorded. We now:
-//   1. Honor opt-out via env (`GURULU_TELEMETRY=off|0`, `DO_NOT_TRACK=1`),
-//      CLI flag (`--no-telemetry`), and persisted CLI config
-//      (`~/.gurulu/config.json` → `telemetry: false`).
-//   2. Prompt for consent on first interactive install and persist the
-//      answer in the same config file.
-//   3. Skip `repoHashOf` computation entirely when telemetry is disabled.
-// ---------------------------------------------------------------------------
-function cliConfigPath() {
-    if (process.env.GURULU_CONFIG_HOME) {
-        return path.join(process.env.GURULU_CONFIG_HOME, 'config.json');
-    }
-    return path.join(os.homedir(), '.gurulu', 'config.json');
-}
-function readCliConfig() {
-    try {
-        const p = cliConfigPath();
-        if (!fs.existsSync(p))
-            return {};
-        const txt = fs.readFileSync(p, 'utf8');
-        const parsed = JSON.parse(txt);
-        return parsed && typeof parsed === 'object' ? parsed : {};
-    }
-    catch {
-        return {};
-    }
-}
-function writeCliConfig(patch) {
-    try {
-        const p = cliConfigPath();
-        const dir = path.dirname(p);
-        if (!fs.existsSync(dir))
-            fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-        const current = readCliConfig();
-        const next = { ...current, ...patch };
-        fs.writeFileSync(p, JSON.stringify(next, null, 2));
-        try {
-            fs.chmodSync(p, 0o600);
-        }
-        catch {
-            /* non-unix */
-        }
-    }
-    catch {
-        /* best-effort persistence */
-    }
-}
-function isTelemetryDisabled() {
-    const env = (process.env.GURULU_TELEMETRY || '').toLowerCase();
-    if (env === 'off' || env === '0' || env === 'false' || env === 'no')
-        return true;
-    if (process.env.DO_NOT_TRACK === '1')
-        return true;
-    if (process.argv.includes('--no-telemetry'))
-        return true;
-    const cfg = readCliConfig();
-    if (cfg.telemetry === false)
-        return true;
-    return false;
-}
-/**
- * First-run consent prompt. Persists the decision so we never re-ask.
- * No-op when telemetry is already disabled, when a decision is already
- * recorded, or in non-interactive (`--yes` / `--no-interactive`) mode.
- */
-async function maybePromptTelemetryConsent(ask, args = {}) {
-    if (isTelemetryDisabled())
-        return;
-    const cfg = readCliConfig();
-    if (typeof cfg.telemetry === 'boolean')
-        return; // already decided
-    if (args.yes)
-        return; // non-interactive: don't ask, default-on but unrecorded
-    const answer = await ask('  Send anonymous install telemetry (framework, CLI version, repo hash) to improve Gurulu? [Y/n]: ');
-    const decided = !answer || !/^n/i.test(answer.trim());
-    writeCliConfig({ telemetry: decided, telemetry_decided_at: new Date().toISOString() });
-}
-function repoHashOf(repoRoot, remoteUrl = null) {
-    // Consent-gated: when telemetry is off, never compute the hash.
-    if (isTelemetryDisabled())
-        return '';
-    const h = crypto.createHash('sha256');
-    h.update(path.resolve(repoRoot));
-    if (remoteUrl)
-        h.update('\n' + remoteUrl);
-    return h.digest('hex');
-}
-function pickSite(sites, target) {
-    if (!target)
-        return sites.length === 1 ? sites[0] : null;
-    return (sites.find((s) => s.id === target) ||
-        sites.find((s) => s.name === target) ||
-        sites.find((s) => s.id.startsWith(target)) ||
-        null);
-}
-/** Send a telemetry POST. Never throws — quota errors are surfaced via `ok`. */
-async function emitInstallTelemetry(deps, payload) {
-    // FA-1 P0-5 — GDPR consent gate. Skip the POST entirely when the user has
-    // opted out via env/flag/config. Returns ok:true so callers don't surface
-    // a fake failure for an intentional opt-out.
-    if (isTelemetryDisabled()) {
-        return { ok: true, quotaExceeded: false };
-    }
-    try {
-        const res = await deps.postVerify({
-            source: 'cli',
-            ...payload,
-        });
-        if (res.status === 402)
-            return { ok: false, quotaExceeded: true };
-        return { ok: !!res.ok, quotaExceeded: false };
-    }
-    catch {
-        return { ok: false, quotaExceeded: false };
-    }
-}
-// FA-1 P0-1 — Detect popular CI environments. When a CI is detected and the
-// caller didn't already pass `--yes`, we force non-interactive mode so any
-// `prompt()` calls fall through to the documented default instead of blocking
-// on a closed stdin (which causes the entire install to hang in CI).
-const CI_ENV_VARS = [
-    'CI',
-    'VERCEL',
-    'GITHUB_ACTIONS',
-    'NETLIFY',
-    'GITLAB_CI',
-    'CIRCLECI',
-    'TRAVIS',
-    'BUILDKITE',
-];
-function detectCiEnv(env = process.env) {
-    return CI_ENV_VARS.some((v) => {
-        const raw = env[v];
-        if (!raw)
-            return false;
-        const lower = String(raw).toLowerCase();
-        return lower === '1' || lower === 'true';
-    });
-}
-async function runAuthenticatedInstallFlow(args, authDeps, installDeps, scriptsDir) {
-    // FA-1 P0-1 — CI environments do not have an interactive stdin. Without
-    // this guard every `prompt()` (`Continue with install? [Y/n]`, workspace
-    // picker, telemetry consent, auto-instrument confirm, etc.) blocks on EOF
-    // and the CI job times out instead of failing fast. Default to `--yes` so
-    // every prompt accepts the documented default and the flow can complete.
-    if (!args.yes && detectCiEnv()) {
-        installDeps.log?.info('[install] CI environment detected, defaulting to --yes');
-        args = { ...args, yes: true };
-    }
-    // FA-1 P0-5 — telemetry consent prompt on first interactive install.
-    // Persisted to ~/.gurulu/config.json so we never re-ask.
-    try {
-        const ask = authDeps.prompt || ((q) => installDeps.prompt(q));
-        await maybePromptTelemetryConsent(ask, { yes: args.yes });
-    }
-    catch {
-        /* never block install on consent prompt errors */
-    }
-    // Site selection
-    let selected = pickSite(authDeps.sites, args.site);
-    if (!selected) {
-        if (authDeps.sites.length === 0) {
-            const msg = 'No sites found. Run `gurulu sites create --domain ...` first.';
-            installDeps.log?.error(msg);
-            return {
-                scan: null,
-                framework: null,
-                planDiff: '',
-                filesChanged: 0,
-                packageManager: null,
-                packageInstalled: false,
-                envKeysWritten: [],
-                ingestOk: null,
-                dryRun: !!args.dryRun,
-                verify: null,
-                rolledBack: false,
-                errors: [msg],
-            };
-        }
-        if (args.yes) {
-            // Non-interactive, multiple sites: pick the first.
-            selected = authDeps.sites[0];
-        }
-        else if (authDeps.promptSelect) {
-            const labels = authDeps.sites.map((s) => `${s.name || s.id} (${s.domain})`);
-            const idx = await authDeps.promptSelect('  Select site: ', labels);
-            selected = authDeps.sites[idx] || authDeps.sites[0];
-        }
-        else {
-            selected = authDeps.sites[0];
-        }
-    }
-    const filled = {
-        ...args,
-        siteId: selected.id,
-        tenantId: authDeps.tenantId,
-    };
-    // ---- Phase 18.6 — Intent discovery (pre-scan pass) ------------------
-    // Runs BEFORE the core flow so the user sees the proposal first. We use
-    // the scanner in --quiet mode, feed signals to the injected analyzer,
-    // and render a proposal. On --skip-intent or missing deps we fall
-    // straight through to the Phase 18.5 authenticated flow.
-    const intentRecord = {
-        skipped: !!args.skipIntent,
-        dryRun: !!args.intentDryRun,
-        analyzed: false,
-        preSeeded: false,
-    };
-    if (!args.skipIntent && authDeps.intent) {
-        const repoRoot = path.resolve(args.path || process.cwd());
-        const scanScript = path.join(scriptsDir, 'gurulu-scan.mjs');
-        installDeps.log?.step('Scanning for install-time intent signals...');
-        const scanRes = await installDeps.runNode([scanScript, repoRoot, '--quiet']);
-        if (scanRes.code !== 0) {
-            installDeps.log?.warn(`Intent scan failed (exit ${scanRes.code}); skipping intent discovery.`);
-            intentRecord.error = `scan_failed:${scanRes.code}`;
-        }
-        else {
-            let signals = null;
-            try {
-                signals = JSON.parse(scanRes.stdout);
-            }
-            catch (err) {
-                installDeps.log?.warn(`Intent scan produced invalid JSON: ${err.message}; skipping.`);
-                intentRecord.error = 'scan_invalid_json';
-            }
-            if (signals) {
-                let intent = null;
-                try {
-                    intent = await authDeps.intent.analyze(signals);
-                    intentRecord.analyzed = true;
-                    intentRecord.vertical = intent.vertical;
-                    if (intent.analyzerMode === 'heuristic') {
-                        installDeps.log?.warn('⚠ LLM unavailable — using rule-based intent discovery. Results may be less precise.');
-                    }
-                }
-                catch (err) {
-                    installDeps.log?.warn(`Intent analyzer failed: ${err.message}`);
-                    installDeps.log?.warn('⚠ Falling back to built-in generic event set.');
-                    intentRecord.error = `analyze_failed:${err.message}`;
-                    // Sprint E1.2 — distinguish "analyzer ran" from "fallback was used".
-                    // `analyzed=false` so callers can detect that the LLM/heuristic
-                    // analyzer never produced a real result; `analyze_status='fallback'`
-                    // tells them the install still proceeded with a baked-in event set
-                    // instead of failing outright.
-                    intentRecord.analyzed = false;
-                    intentRecord.analyze_status = 'fallback';
-                    // Client-side fallback: produce a minimal generic intent so
-                    // auto-instrument and pre-seed still work even when the API is down.
-                    intent = {
-                        vertical: 'generic',
-                        confidence: 'low',
-                        reasoning: 'API unavailable — using built-in generic fallback.',
-                        analyzerMode: 'heuristic',
-                        alternativeVerticals: [],
-                        events: [
-                            { name: '$page_view', category: 'engagement', source: 'inferred:pattern', properties: [], confidence: 1.0, reasoning: 'Baseline page impression.' },
-                            { name: '$session_start', category: 'engagement', source: 'inferred:pattern', properties: [], confidence: 1.0, reasoning: 'Session boundary.' },
-                            { name: '$signup', category: 'acquisition', source: 'inferred:pattern', properties: [{ name: 'method', type: 'string' }], confidence: 0.9, reasoning: 'New account signal.' },
-                            { name: '$login', category: 'engagement', source: 'inferred:pattern', properties: [{ name: 'method', type: 'string' }], confidence: 0.9, reasoning: 'Returning user signal.' },
-                            { name: '$logout', category: 'engagement', source: 'inferred:pattern', properties: [], confidence: 0.9, reasoning: 'Session end.' },
-                            { name: '$first_action', category: 'activation', source: 'inferred:pattern', properties: [], confidence: 0.8, reasoning: 'First meaningful interaction.' },
-                            { name: 'click', category: 'engagement', source: 'inferred:pattern', properties: [{ name: 'selector', type: 'string' }], confidence: 1.0, reasoning: 'User clicks.' },
-                            { name: 'scroll_depth', category: 'engagement', source: 'inferred:pattern', properties: [{ name: 'depth', type: 'number' }], confidence: 1.0, reasoning: 'Scroll engagement.' },
-                            { name: 'form_submit', category: 'engagement', source: 'inferred:pattern', properties: [{ name: 'form_id', type: 'string' }], confidence: 0.9, reasoning: 'Form completion.' },
-                            { name: 'engaged_session', category: 'engagement', source: 'inferred:pattern', properties: [], confidence: 1.0, reasoning: 'Quality session marker.' },
-                            { name: '$search', category: 'engagement', source: 'inferred:pattern', properties: [{ name: 'query', type: 'string' }], confidence: 0.7, reasoning: 'Search intent.' },
-                            { name: '$error', category: 'engagement', source: 'inferred:pattern', properties: [{ name: 'message', type: 'string' }], confidence: 0.8, reasoning: 'Client error tracking.' },
-                        ],
-                        funnels: [
-                            { name: 'Signup Flow', category: 'acquisition', steps: ['$page_view', '$signup', '$login'], reasoning: 'Page view to signup to first login.' },
-                            { name: 'Engagement', category: 'engagement', steps: ['$page_view', 'scroll_depth', 'engaged_session'], reasoning: 'Page view to scroll to engaged session.' },
-                        ],
-                    };
-                }
-                if (intent) {
-                    const io = authDeps.intent.io || {
-                        print: (l) => console.log(l),
-                        prompt: installDeps.prompt,
-                        isPiped: !process.stdout.isTTY,
-                    };
-                    const nonInteractive = !!args.yes || io.isPiped || !!args.intentDryRun;
-                    const decision = await (0, install_intent_proposal_1.runProposal)({ intent, io, nonInteractive });
-                    intentRecord.accepted = {
-                        events: decision.accepted.events.length,
-                        funnels: decision.accepted.funnels.length,
-                    };
-                    // Phase 18.7 B — stash the raw ProposedEvent list for the
-                    // auto-instrument bridge below. Not part of the persisted summary
-                    // shape — marked with an underscore so TypeScript narrowing sees
-                    // the public `accepted` counts only.
-                    intentRecord._acceptedEvents = decision.accepted.events;
-                    if (decision.quit) {
-                        installDeps.log?.info('Intent proposal dismissed by user.');
-                    }
-                    else if (args.intentDryRun) {
-                        installDeps.log?.info(`Intent dry-run: would pre-seed ${decision.accepted.events.length} events and ${decision.accepted.funnels.length} funnels.`);
-                    }
-                    else if (decision.accepted.events.length === 0 && decision.accepted.funnels.length === 0) {
-                        installDeps.log?.info('No events or funnels accepted; skipping pre-seed.');
-                    }
-                    else {
-                        const res = await authDeps.intent.preSeed({
-                            siteId: selected.id,
-                            intent,
-                            accepted: decision.accepted,
-                            rejected: decision.rejected,
-                        });
-                        if (res.quotaExceeded) {
-                            const msg = 'Install quota exceeded during pre-seed. Upgrade at https://gurulu.io/settings/billing';
-                            installDeps.log?.error(msg);
-                            intentRecord.error = 'quota_exceeded';
-                        }
-                        else if (!res.ok) {
-                            installDeps.log?.warn(`Pre-seed failed: ${res.error || 'unknown error'}`);
-                            intentRecord.error = res.error || 'pre_seed_failed';
-                        }
-                        else {
-                            intentRecord.preSeeded = true;
-                            intentRecord.proposalId = res.proposalId;
-                            intentRecord.created = res.created;
-                            installDeps.log?.success(`Pre-seeded ${res.created?.goals || 0} goals, ${res.created?.funnels || 0} funnels, ${res.created?.milestones || 0} milestones.`);
-                        }
-                    }
-                }
-            }
-        }
-    }
-    else if (args.skipIntent) {
-        installDeps.log?.info('Intent discovery skipped (--skip-intent).');
-    }
-    // ---- Phase 18.7 B — Auto-instrumentation consent + intent-result file
-    // When --auto-instrument is set AND an intent with accepted events exists,
-    // serialize the decision to a tmp file so the agentic-install script can
-    // read it during --apply. We also show a prominent consent prompt listing
-    // the route files that will be touched (skippable with --yes).
-    let autoInstrumentEnabled = !!args.autoInstrument;
-    let intentResultPath;
-    if (autoInstrumentEnabled) {
-        // Sprint E1.2 — accept either `analyzed=true` OR a fallback intent so
-        // auto-instrument still proceeds when the analyzer crashed and we fell
-        // back to the built-in generic event set.
-        const intentUsable = intentRecord.analyzed || intentRecord.analyze_status === 'fallback';
-        if (!intentUsable || !intentRecord.accepted || intentRecord.accepted.events === 0) {
-            installDeps.log?.warn('Auto-instrument requested but no accepted events from intent discovery; disabling.');
-            autoInstrumentEnabled = false;
-        }
-        else {
-            // Persist an `{ accepted: { events } }` envelope matching the
-            // agentic-install script's reader shape. We resolve the raw ProposedEvent
-            // list from the proposal IO if available — otherwise we fall back to
-            // writing an empty envelope and rely on scan-driven route detection.
-            const tmpDir = process.env.TMPDIR || '/tmp';
-            const uuid = crypto.randomBytes(8).toString('hex');
-            intentResultPath = path.join(tmpDir, `gurulu-intent-${uuid}.json`);
-            try {
-                fs.writeFileSync(intentResultPath, JSON.stringify({
-                    accepted: {
-                        events: intentRecord._acceptedEvents || [],
-                    },
-                }, null, 2), 'utf8');
-            }
-            catch (err) {
-                installDeps.log?.warn(`Failed to persist intent result: ${err.message}; disabling auto-instrument.`);
-                autoInstrumentEnabled = false;
-                intentResultPath = undefined;
-            }
-            // Consent prompt — unless --yes or --dry-run.
-            if (autoInstrumentEnabled && !args.yes && !args.dryRun) {
-                installDeps.log?.warn(`Auto-instrumentation will modify ${intentRecord.accepted.events} route file(s) to insert gurulu.track() calls.`);
-                installDeps.log?.info('  Changes are backed up to .gurulu-backup/ and can be rolled back with `gurulu install --rollback`.');
-                const answer = await installDeps.prompt('  Proceed with auto-instrumentation? [y/N]: ');
-                if (!answer || !/^y/i.test(answer.trim())) {
-                    installDeps.log?.info('Auto-instrumentation declined.');
-                    autoInstrumentEnabled = false;
-                    intentResultPath = undefined;
-                }
-            }
-        }
-    }
-    const runArgs = {
-        ...filled,
-        autoInstrument: autoInstrumentEnabled,
-        intentResultPath,
-        // Sprint A fix A2 — propagate the active profile secret key so the core
-        // flow can forward it to the agentic-install script as `--token`.
-        authToken: authDeps.profile.secret_key,
-    };
-    // Run the core flow.
-    const summary = await runInstallFlow(runArgs, installDeps, scriptsDir);
-    summary.intent = intentRecord;
-    if (autoInstrumentEnabled && !summary.instrumentation) {
-        summary.instrumentation = {
-            enabled: true,
-            filesModified: 0,
-            eventsInstrumented: 0,
-            eventsSkipped: 0,
-        };
-    }
-    // Telemetry after each terminal state.
-    const cliVersion = (() => {
-        try {
-            // eslint-disable-next-line @typescript-eslint/no-var-requires
-            return require('../../package.json').version || '0.0.0';
-        }
-        catch {
-            return '0.0.0';
-        }
-    })();
-    const rh = repoHashOf(path.resolve(args.path || process.cwd()));
-    const fw = summary.framework || 'unknown';
-    if (args.dryRun) {
-        await emitInstallTelemetry(authDeps, {
-            siteId: selected.id,
-            status: 'dry-run',
-            framework: fw,
-            cliVersion,
-            repoHash: rh,
-        });
-    }
-    else if (summary.errors.length > 0) {
-        await emitInstallTelemetry(authDeps, {
-            siteId: selected.id,
-            status: 'failed',
-            framework: fw,
-            cliVersion,
-            repoHash: rh,
-            errorMessage: summary.errors[0] || null,
-        });
-    }
-    else {
-        const telemetry = await emitInstallTelemetry(authDeps, {
-            siteId: selected.id,
-            status: summary.verify?.ok ? 'verified' : 'applied',
-            framework: fw,
-            cliVersion,
-            repoHash: rh,
-            ...(summary.instrumentation
-                ? {
-                    instrumentation: {
-                        filesModified: summary.instrumentation.filesModified,
-                        eventsInstrumented: summary.instrumentation.eventsInstrumented,
-                        eventsSkipped: summary.instrumentation.eventsSkipped,
-                    },
-                }
-                : {}),
-        });
-        if (telemetry.quotaExceeded) {
-            const msg = 'Install quota exceeded for the current plan. Upgrade at https://gurulu.io/settings/billing';
-            installDeps.log?.error(msg);
-            summary.errors.push(msg);
-        }
-        if (summary.rolledBack) {
-            await emitInstallTelemetry(authDeps, {
-                siteId: selected.id,
-                status: 'rolled-back',
-                framework: fw,
-                cliVersion,
-                repoHash: rh,
-            });
-        }
-    }
-    return summary;
-}
-async function installCommand(args) {
-    const scriptsDir = resolveScriptsDir();
-    const deps = createDefaultDeps(scriptsDir);
-    // Sprint A fix A3 — make `--verify` opt-in (default false). The verifier
-    // (`scripts/gurulu-verify-install.lib.cjs:312`) hard-`require`s
-    // `playwright-core`, which is NOT a runtime dependency of @gurulu/cli, so a
-    // default-on verify aborts every fresh install with "Verify threw". Treat
-    // verify as strictly opt-in: only `args.verify === true` runs it. We also
-    // patch the CLI option default in `src/index.ts` so the flag matches.
-    args = { ...args, verify: args.verify === true };
-    // FA-1 P0-1 — top-level CI guard so the legacy unauthenticated path also
-    // skips interactive prompts when run from CI. (The authenticated flow
-    // re-checks inside `runAuthenticatedInstallFlow` for unit-test clarity.)
-    if (!args.yes && detectCiEnv()) {
-        console.log('[install] CI environment detected, defaulting to --yes');
-        args = { ...args, yes: true };
-    }
-    // Legacy unauthenticated path: --site-id passed explicitly and no active profile.
-    const profile = await (0, config_1.getActiveProfile)({ profile: args.profile });
-    const legacyMode = !!args.siteId && !profile;
-    if (legacyMode) {
-        (0, ui_1.warn)('Legacy unauthenticated install. Run `gurulu login` for the full experience.');
-        let siteId = args.siteId || process.env.GURULU_SITE_ID;
-        let tenantId = args.tenantId || process.env.GURULU_TENANT_ID;
-        if (!args.yes) {
-            if (!siteId)
-                siteId = await deps.prompt('  Site ID: ');
-            if (!tenantId)
-                tenantId = await deps.prompt('  Tenant ID: ');
-        }
-        // Sprint A fix A2 — legacy callers can supply a token via env so that
-        // auto-instrument property extraction still works without a profile.
-        const filled = {
-            ...args,
-            siteId,
-            tenantId,
-            authToken: args.authToken || process.env.GURULU_API_KEY || process.env.GURULU_SECRET_KEY,
-        };
-        const summary = await runInstallFlow(filled, deps, scriptsDir);
-        if (summary.errors.length > 0)
-            process.exit(1);
-        return;
-    }
-    if (!profile) {
-        (0, ui_1.error)('Not logged in. Run `gurulu login` first, or provide --site-id for legacy mode.');
-        process.exit(1);
-    }
-    // Authenticated: fetch /me, pick site, run flow, emit telemetry.
-    let me;
-    try {
-        const res = await (0, api_client_1.cliApi)('/api/cli/me', { preloadedProfile: profile });
-        me = await res.json();
-    }
-    catch (err) {
-        (0, ui_1.error)(`Failed to load account: ${err.message}`);
-        process.exit(1);
-    }
-    const sites = (me.sites || []).map((s) => ({
-        id: s.id,
-        name: s.name,
-        domain: s.domain,
-        publishableKey: s.publishableKey,
-    }));
-    const authDeps = {
-        profile,
-        sites,
-        tenantId: me.tenant?.id || '',
-        postVerify: async (body) => {
-            const res = await (0, api_client_1.cliApi)('/api/cli/install/verify', {
-                method: 'POST',
-                preloadedProfile: profile,
-                body: JSON.stringify(body),
-                noExitOnError: true,
-            });
-            return { ok: res.ok, status: res.status };
-        },
-        intent: {
-            analyze: async (signals) => {
-                // FA-1 P0-3 — bound the LLM round-trip. Without this guard a hung
-                // upstream stalls the whole install (Sprint E1.2 fallback never
-                // fires until the request finally errors out). 30s mirrors the
-                // tryLlmExtraction timeout in scripts/gurulu-agentic-install.mjs.
-                try {
-                    const res = await (0, api_client_1.cliApi)('/api/cli/install/analyze-intent', {
-                        method: 'POST',
-                        preloadedProfile: profile,
-                        body: JSON.stringify({ signals }),
-                        noExitOnError: true,
-                        signal: AbortSignal.timeout(30_000),
-                    });
-                    const text = await res.text();
-                    const parsed = text ? JSON.parse(text) : {};
-                    if (!res.ok) {
-                        throw new Error((parsed && parsed.message) || `HTTP ${res.status}`);
-                    }
-                    return parsed.intent;
-                }
-                catch (err) {
-                    const e = err;
-                    if (e && (e.name === 'AbortError' || e.name === 'TimeoutError')) {
-                        console.warn('[install] LLM analyze-intent timeout — falling back to heuristic intent');
-                        throw new Error('analyze-intent timeout');
-                    }
-                    throw err;
-                }
-            },
-            preSeed: async (body) => {
-                const res = await (0, api_client_1.cliApi)('/api/cli/install/pre-seed', {
-                    method: 'POST',
-                    preloadedProfile: profile,
-                    body: JSON.stringify(body),
-                    noExitOnError: true,
-                });
-                if (res.status === 402 || res.status === 429) {
-                    return { ok: false, quotaExceeded: true };
-                }
-                const text = await res.text();
-                const parsed = text ? JSON.parse(text) : {};
-                if (!res.ok) {
-                    return { ok: false, error: (parsed && parsed.message) || `HTTP ${res.status}` };
-                }
-                return {
-                    ok: true,
-                    proposalId: parsed.proposalId,
-                    created: parsed.created,
-                    skipped: parsed.skipped,
-                };
-            },
-        },
-    };
-    const summary = await runAuthenticatedInstallFlow(args, authDeps, deps, scriptsDir);
-    if (summary.errors.length > 0)
-        process.exit(1);
-}