@gurulu/cli 1.2.1 → 1.3.0

package/dist/bin.js

@@ -24529,7 +24529,7 @@ class ApiClient {
 }
 
 // src/lib/config.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 var DEFAULT_ENDPOINT = process.env.GURULU_ENDPOINT ?? "https://api.gurulu.io";
@@ -24586,10 +24586,9 @@ function writeGlobalCredentials(creds) {
   const path = globalCredentialsPath();
   ensureDir(path);
   writeFileSync(path, `${JSON.stringify(creds, null, 2)}
-`, "utf-8");
+`, { encoding: "utf-8", mode: 384 });
   try {
-    const fs = __require("node:fs");
-    fs.chmodSync(path, 384);
+    chmodSync(path, 384);
   } catch {}
 }
 function findCredentialForWorkspace(workspaceId) {
@@ -25119,7 +25118,7 @@ function sleep(ms) {
 // src/wizard/run.ts
 import { existsSync as existsSync9, mkdirSync as mkdirSync2, writeFileSync as writeFileSync8 } from "node:fs";
 import { dirname as dirname3 } from "node:path";
-import * as p3 from "@clack/prompts";
+import * as p4 from "@clack/prompts";
 
 // src/commands/pull.ts
 import { writeFileSync as writeFileSync3 } from "node:fs";
@@ -25263,6 +25262,17 @@ var pullCmd = defineCommand({
 // src/lib/detect.ts
 import { existsSync as existsSync4, readFileSync as readFileSync4 } from "node:fs";
 import { dirname as dirname2, join as join5, parse } from "node:path";
+var LLM_DEP_MAP = {
+  openai: "openai",
+  "@anthropic-ai/sdk": "anthropic",
+  "@langchain/core": "langchain",
+  langchain: "langchain",
+  "@google/generative-ai": "google-genai",
+  ai: "vercel-ai",
+  "cohere-ai": "cohere",
+  "@mistralai/mistralai": "mistral",
+  ollama: "ollama"
+};
 function readPackageJson(dir) {
   const p = join5(dir, "package.json");
   if (!existsSync4(p))
@@ -25348,6 +25358,14 @@ function frameworkRuntime(fw) {
       return "unknown";
   }
 }
+function detectLlmFrameworks(pkg) {
+  const found = new Set;
+  for (const [dep, fw] of Object.entries(LLM_DEP_MAP)) {
+    if (hasDep(pkg, dep))
+      found.add(fw);
+  }
+  return [...found];
+}
 function detectProject(dir) {
   const pkg = readPackageJson(dir);
   const framework = detectFramework(pkg, dir);
@@ -25357,7 +25375,8 @@ function detectProject(dir) {
     framework,
     runtime: frameworkRuntime(framework),
     packageManager: detectPackageManager(dir),
-    packageJson: pkg
+    packageJson: pkg,
+    llmFrameworks: detectLlmFrameworks(pkg)
   };
 }
 
@@ -26134,8 +26153,77 @@ function gatherContext(opts) {
   return { files, capped, totalBytes };
 }
 
-// src/wizard/plan.ts
+// src/wizard/features.ts
 import * as p2 from "@clack/prompts";
+function availableFeatures(detected) {
+  const isBrowser = frameworkRuntime(detected.framework) !== "node";
+  const feats = [];
+  feats.push({
+    key: "error",
+    label: "Hata takibi",
+    detail: "Tarayıcı JS hatalarını otomatik yakala (js_error)",
+    enableHint: isBrowser ? "gurulu.init({ ..., autocapture: { js_error: true } })" : "Sunucu hatalarında: gurulu.track('js_error', { message, error_type })",
+    recommended: isBrowser
+  });
+  if (detected.llmFrameworks.length > 0) {
+    feats.push({
+      key: "llm",
+      label: `LLM analizi (${detected.llmFrameworks.join(", ")} tespit edildi)`,
+      detail: "AI çağrı maliyeti/latency/hata/model performansı",
+      enableHint: "import { wrapOpenAI } from '@gurulu/node'; const client = wrapOpenAI(openai);",
+      recommended: true
+    });
+  }
+  if (isBrowser) {
+    feats.push({
+      key: "activation",
+      label: "Activation (popup · tur · A/B test · kişiselleştirme)",
+      detail: "Dashboard'dan yayınla, SDK render etsin (Action Layer)",
+      enableHint: "import { runActivation } from '@gurulu/web/activate'; runActivation(gurulu);",
+      recommended: false
+    });
+  }
+  return feats;
+}
+async function runFeatures(client, detected, opts) {
+  const avail = availableFeatures(detected);
+  if (avail.length === 0 || !opts.authed)
+    return { selected: [], registered: false };
+  let selectedKeys;
+  if (opts.yes) {
+    selectedKeys = avail.filter((f3) => f3.recommended).map((f3) => f3.key);
+  } else {
+    const choice = await p2.multiselect({
+      message: "Hangi özellikleri kuralım? (event'ler registry'ye otomatik eklenir)",
+      options: avail.map((f3) => ({ value: f3.key, label: f3.label, hint: f3.detail })),
+      initialValues: avail.filter((f3) => f3.recommended).map((f3) => f3.key),
+      required: false
+    });
+    if (p2.isCancel(choice))
+      return { selected: [], registered: false };
+    selectedKeys = choice;
+  }
+  if (selectedKeys.length === 0)
+    return { selected: [], registered: false };
+  const selected = avail.filter((f3) => selectedKeys.includes(f3.key));
+  const s2 = p2.spinner();
+  s2.start("Özellikler registry'ye kuruluyor…");
+  try {
+    await client.post("/features/register", { features: selectedKeys });
+    s2.stop(c3.neon(`✓ ${selected.length} özellik kuruldu`));
+  } catch {
+    s2.stop("Özellik kurulumu atlandı (gateway hatası) — sonra: gurulu doctor", 1);
+    return { selected, registered: false };
+  }
+  p2.note(selected.map((f3) => `${c3.bold(f3.label)}
+  ${c3.dim(f3.enableHint)}`).join(`
+
+`), "Etkinleştirme");
+  return { selected, registered: true };
+}
+
+// src/wizard/plan.ts
+import * as p3 from "@clack/prompts";
 async function fetchPlan(client, context, input) {
   if (context.files.length === 0)
     return null;
@@ -26180,28 +26268,29 @@ function formatPlan(plan) {
 `).trimEnd();
 }
 async function renderPlan(plan) {
-  p2.note(formatPlan(plan), plan.summary);
+  p3.note(formatPlan(plan), plan.summary);
   const newCount = plan.events.filter((e2) => !e2.existing).length;
-  const ok = await p2.confirm({
+  const ok = await p3.confirm({
     message: `${plan.events.length} event (${newCount} yeni) — bu planı uygula?`
   });
-  if (p2.isCancel(ok) || !ok)
+  if (p3.isCancel(ok) || !ok)
     return null;
   return plan.events;
 }
 
 // src/wizard/wire.ts
 import { existsSync as existsSync8, readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join10 } from "node:path";
 
 // src/wizard/agent.ts
 import { execFile } from "node:child_process";
 import { existsSync as existsSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "node:fs";
-import { join as join9 } from "node:path";
 import { promisify } from "node:util";
 
 // src/wizard/guard.ts
 import { basename, isAbsolute, relative as relative2, resolve } from "node:path";
+function resolveInCwd(p4, cwd) {
+  return isAbsolute(p4) ? p4 : resolve(cwd, p4);
+}
 function isAdditiveEdit(find, replace) {
   if (find.length === 0)
     return { ok: false, reason: "empty find" };
@@ -26212,22 +26301,45 @@ function isAdditiveEdit(find, replace) {
     return { ok: false, reason: "no-op edit (replace === find)" };
   return { ok: true };
 }
-var BASH_ALLOW_BINS = new Set([
-  "bun",
-  "bunx",
-  "npm",
-  "npx",
-  "pnpm",
-  "yarn",
+var CHECKER_BINS = new Set([
   "tsc",
   "tsgo",
+  "vue-tsc",
+  "svelte-check",
   "biome",
   "eslint",
   "prettier",
-  "vue-tsc",
-  "svelte-check",
   "astro"
 ]);
+var RUNNER_BINS = new Set(["bun", "npm", "pnpm", "yarn"]);
+var DENY_SUBCMDS = new Set([
+  "install",
+  "i",
+  "add",
+  "remove",
+  "rm",
+  "uninstall",
+  "un",
+  "ci",
+  "dlx",
+  "x",
+  "exec",
+  "create",
+  "init",
+  "up",
+  "update",
+  "upgrade",
+  "link",
+  "unlink",
+  "global",
+  "dedupe",
+  "audit",
+  "publish",
+  "pack",
+  "import",
+  "config"
+]);
+var SCRIPT_NAME = /^[a-z0-9][a-z0-9:._-]*$/i;
 var BASH_DENY = /[;&|`$<>]|\.\.\/|\b(rm|curl|wget|sudo|chmod|chown|mv|dd|kill|eval|sh|bash|node|python)\b/;
 function isAllowedBash(cmd) {
   const t2 = cmd.trim();
@@ -26235,13 +26347,27 @@ function isAllowedBash(cmd) {
     return { ok: false, reason: "empty cmd" };
   if (BASH_DENY.test(t2))
     return { ok: false, reason: "yasak operatör/binary" };
-  const bin = t2.split(/\s+/)[0] ?? "";
-  if (!BASH_ALLOW_BINS.has(bin))
-    return { ok: false, reason: `allowlist dışı binary: ${bin}` };
-  return { ok: true };
+  const tokens = t2.split(/\s+/);
+  const bin = tokens[0] ?? "";
+  if (CHECKER_BINS.has(bin))
+    return { ok: true };
+  if (RUNNER_BINS.has(bin)) {
+    const sub = tokens[1] ?? "";
+    if (sub === "run") {
+      const script = tokens[2] ?? "";
+      if (!SCRIPT_NAME.test(script))
+        return { ok: false, reason: `geçersiz script adı: ${script}` };
+      return { ok: true };
+    }
+    if (bin === "yarn" && sub && !DENY_SUBCMDS.has(sub) && SCRIPT_NAME.test(sub)) {
+      return { ok: true };
+    }
+    return { ok: false, reason: `yasak alt-komut (sadece 'run' izinli): ${bin} ${sub}` };
+  }
+  return { ok: false, reason: `allowlist dışı binary: ${bin}` };
 }
-function isAllowedPath(p3, cwd) {
-  const abs = isAbsolute(p3) ? p3 : resolve(cwd, p3);
+function isAllowedPath(p4, cwd) {
+  const abs = isAbsolute(p4) ? p4 : resolve(cwd, p4);
   const rel = relative2(cwd, abs);
   if (rel === "" || rel.startsWith("..") || isAbsolute(rel)) {
     return { ok: false, reason: "cwd dışı yol" };
@@ -26258,6 +26384,31 @@ function hasPromptInjection(content) {
 // src/wizard/agent.ts
 var MAX_OBS = 4000;
 var pexec = promisify(execFile);
+function safeEnv() {
+  const keep = [
+    "PATH",
+    "HOME",
+    "USERPROFILE",
+    "TMPDIR",
+    "TEMP",
+    "TMP",
+    "LANG",
+    "LC_ALL",
+    "TERM",
+    "SHELL",
+    "NODE_ENV",
+    "PATHEXT",
+    "SystemRoot",
+    "ComSpec"
+  ];
+  const env2 = {};
+  for (const k2 of keep) {
+    const v2 = process.env[k2];
+    if (v2 !== undefined)
+      env2[k2] = v2;
+  }
+  return env2;
+}
 async function defaultRunBash(cmd, cwd) {
   const parts = cmd.trim().split(/\s+/);
   const bin = parts[0] ?? "";
@@ -26265,7 +26416,8 @@ async function defaultRunBash(cmd, cwd) {
     const { stdout: stdout2, stderr } = await pexec(bin, parts.slice(1), {
       cwd,
       timeout: 120000,
-      maxBuffer: 4 * 1024 * 1024
+      maxBuffer: 4 * 1024 * 1024,
+      env: safeEnv()
     });
     return { stdout: stdout2, stderr };
   } catch (e2) {
@@ -26280,7 +26432,7 @@ async function executeTool(action, deps) {
       const g3 = isAllowedPath(action.path, cwd);
       if (!g3.ok)
         return { ok: false, observation: `read reddedildi: ${g3.reason}` };
-      const abs = join9(cwd, action.path);
+      const abs = resolveInCwd(action.path, cwd);
       if (!existsSync7(abs))
         return { ok: false, observation: `dosya yok: ${action.path}` };
       let content = readFileSync8(abs, "utf-8");
@@ -26298,7 +26450,7 @@ async function executeTool(action, deps) {
       const ga = isAdditiveEdit(action.find, action.replace);
       if (!ga.ok)
         return { ok: false, observation: `edit reddedildi: ${ga.reason}` };
-      const abs = join9(cwd, action.path);
+      const abs = resolveInCwd(action.path, cwd);
       if (!existsSync7(abs))
         return { ok: false, observation: `dosya yok: ${action.path}` };
       const src2 = readFileSync8(abs, "utf-8");
@@ -26334,7 +26486,9 @@ function buildWireSystemPrompt() {
     "- `find` must be an EXACT, UNIQUE snippet copied from a file you have read (read before edit).",
     "- Use the exact provided event_key (snake_case). Wire gurulu.track(...) at the right place and",
     "  gurulu.identify(...) at the auth point if given.",
-    "- bash only for verification (typecheck/build/lint) — no install, no other commands.",
+    "- bash is ONLY for verification: the project's own scripts (`npm run typecheck`, `bun run build`,",
+    "  `pnpm run lint`) or a checker binary (`tsc --noEmit`, `biome check`, `eslint .`). Installing or",
+    "  fetching packages (`npm install`, `npx`, `bunx`, `pnpm dlx`, `add`, `exec`) is REJECTED by the guard.",
     "- After wiring, run the project typecheck/build to verify; if it breaks, fix additively.",
     "- When all events are wired and verify passes, emit done{summary}. Keep edits minimal."
   ].join(`
@@ -26368,17 +26522,35 @@ async function runWireAgent(client, input, snapshots) {
     try {
       res = await client.agentStep({ messages, first: i2 === 0 });
     } catch {
-      return { edits, changedFiles: [...changed], summary: "gateway hata", steps: i2, stoppedReason: "error" };
+      return {
+        edits,
+        changedFiles: [...changed],
+        summary: "gateway hata",
+        steps: i2,
+        stoppedReason: "error"
+      };
     }
     if (res.status === "stub") {
-      return { edits, changedFiles: [...changed], summary: "AI kullanılamadı", steps: i2, stoppedReason: "stub" };
+      return {
+        edits,
+        changedFiles: [...changed],
+        summary: "AI kullanılamadı",
+        steps: i2,
+        stoppedReason: "stub"
+      };
     }
     const { action, reasoning } = res.step;
     if (action.tool === "done") {
-      return { edits, changedFiles: [...changed], summary: action.summary, steps: i2, stoppedReason: "done" };
+      return {
+        edits,
+        changedFiles: [...changed],
+        summary: action.summary,
+        steps: i2,
+        stoppedReason: "done"
+      };
     }
     if (action.tool === "edit") {
-      const abs = join10(input.cwd, action.path);
+      const abs = resolveInCwd(action.path, input.cwd);
       if (!snapshots.has(action.path) && existsSync8(abs)) {
         snapshots.set(action.path, readFileSync9(abs, "utf-8"));
       }
@@ -26391,11 +26563,17 @@ async function runWireAgent(client, input, snapshots) {
     messages.push({ role: "assistant", content: JSON.stringify(res.step) });
     messages.push({ role: "user", content: `[${reasoning}] → ${out.observation}` });
   }
-  return { edits, changedFiles: [...changed], summary: "adım limiti", steps: MAX_STEPS, stoppedReason: "cap" };
+  return {
+    edits,
+    changedFiles: [...changed],
+    summary: "adım limiti",
+    steps: MAX_STEPS,
+    stoppedReason: "cap"
+  };
 }
 function restoreSnapshots(cwd, snapshots) {
   for (const [rel, content] of snapshots) {
-    writeFileSync7(join10(cwd, rel), content, "utf-8");
+    writeFileSync7(resolveInCwd(rel, cwd), content, "utf-8");
   }
 }
 function unifiedDiff(oldStr, newStr, file, context = 2) {
@@ -26427,7 +26605,7 @@ function unifiedDiff(oldStr, newStr, file, context = 2) {
 function formatWireDiff(cwd, snapshots) {
   const blocks = [];
   for (const [rel, oldContent] of snapshots) {
-    const abs = join10(cwd, rel);
+    const abs = resolveInCwd(rel, cwd);
     const cur = existsSync8(abs) ? readFileSync9(abs, "utf-8") : "";
     if (cur !== oldContent)
       blocks.push(unifiedDiff(oldContent, cur, rel));
@@ -26453,16 +26631,16 @@ var FRAMEWORKS = [
   "node-server"
 ];
 function bail() {
-  p3.cancel("İptal edildi.");
+  p4.cancel("İptal edildi.");
   process.exit(0);
 }
 async function runWizard(opts) {
   if (process.stdout.isTTY)
     process.stdout.write(banner());
-  p3.intro(c3.dim("otonom kurulum başlıyor — auth → workspace → install → wire"));
+  p4.intro(c3.dim("otonom kurulum başlıyor — auth → workspace → install → wire"));
   const TOTAL = 6;
   const phase = (n2, label) => {
-    p3.log.step(`${c3.dim(`[${n2}/${TOTAL}]`)} ${c3.bold(label)}`);
+    p4.log.step(`${c3.dim(`[${n2}/${TOTAL}]`)} ${c3.bold(label)}`);
   };
   phase(1, "Kimlik doğrulama");
   const auth = await ensureAuth({
@@ -26479,18 +26657,18 @@ async function runWizard(opts) {
   if (opts.framework && FRAMEWORKS.includes(opts.framework)) {
     framework = opts.framework;
   } else if (!opts.yes) {
-    const ok = await p3.confirm({
+    const ok = await p4.confirm({
       message: `Saptanan: ${detected.framework} (${detected.packageManager}). Doğru mu?`
     });
-    if (p3.isCancel(ok))
+    if (p4.isCancel(ok))
       bail();
     if (!ok) {
-      const choice = await p3.select({
+      const choice = await p4.select({
         message: "Framework seç",
         options: FRAMEWORKS.map((f3) => ({ value: f3, label: f3 })),
         initialValue: detected.framework
       });
-      if (p3.isCancel(choice))
+      if (p4.isCancel(choice))
         bail();
       framework = choice;
     }
@@ -26498,9 +26676,10 @@ async function runWizard(opts) {
   const project = { ...detected, framework };
   const plan = buildInstallPlan(project, { writeKey, workspaceId });
   const isNode = plan.sdk === "@gurulu/node";
+  const authed = Boolean(auth.apiKey);
   let approvedEvents = [];
   let identifyHint = null;
-  if (!opts.noAi && detected.hasPackageJson) {
+  if (!opts.noAi && authed && detected.hasPackageJson) {
     const ctx = gatherContext({ cwd: opts.cwd });
     const aiPlan = await fetchPlan(client, ctx, { framework });
     if (aiPlan) {
@@ -26509,17 +26688,21 @@ async function runWizard(opts) {
       if (approved)
         approvedEvents = approved;
     } else {
-      p3.log.info("AI planı yok — autocapture + sektör paketi (deterministik floor).");
+      p4.log.info("AI planı yok — autocapture + sektör paketi (deterministik floor).");
     }
   }
+  let featuresResult = { selected: [], registered: false };
+  if (authed) {
+    featuresResult = await runFeatures(client, project, { yes: opts.yes, authed });
+  }
   phase(4, "SDK kurulumu");
   let installed = false;
   if (opts.noInstall) {
-    p3.log.info(`SDK kurulumu atlandı — elle: ${plan.installCommand}`);
+    p4.log.info(`SDK kurulumu atlandı — elle: ${plan.installCommand}`);
   } else if (!detected.hasPackageJson) {
-    p3.log.warn("package.json yok — script tag ile kur: https://cdn.gurulu.io/t.js");
+    p4.log.warn("package.json yok — script tag ile kur: https://cdn.gurulu.io/t.js");
   } else {
-    const s2 = p3.spinner();
+    const s2 = p4.spinner();
     s2.start(`${plan.sdk} kuruluyor (${plan.installCommand})…`);
     const res = await execInstall(plan, { cwd: opts.cwd });
     if (res.ok) {
@@ -26540,10 +26723,15 @@ async function runWizard(opts) {
   const envFile = isNode ? ".env" : ".env.local";
   const vars = [];
   for (const k2 of plan.envKeys) {
-    if (k2.key.endsWith("_WORKSPACE"))
+    if (k2.key.endsWith("_WORKSPACE")) {
       vars.push({ key: k2.key, value: writeKey });
-    else if (k2.key === "GURULU_SECRET_KEY")
-      vars.push({ key: k2.key, value: auth.apiKey });
+    } else if (k2.key === "GURULU_SECRET_KEY") {
+      if (auth.apiKey.startsWith("sk_")) {
+        vars.push({ key: k2.key, value: auth.apiKey });
+      } else {
+        p4.log.warn("GURULU_SECRET_KEY atlandı (login token workspace sk_ anahtarı değil). Dashboard → Settings → API Keys'ten server key oluşturup .env'e elle ekle.");
+      }
+    }
   }
   const envRes = vars.length > 0 ? writeEnvFile({ cwd: opts.cwd, file: envFile, vars }) : null;
   writeProjectScaffold(opts.cwd, {
@@ -26561,7 +26749,7 @@ async function runWizard(opts) {
   }
   let registeredCount = 0;
   if (approvedEvents.length > 0) {
-    const s2 = p3.spinner();
+    const s2 = p4.spinner();
     s2.start("Yeni eventler registry kuyruguna oneriliyor…");
     const res = await registerNewEvents(client, approvedEvents);
     registeredCount = res.registered.length;
@@ -26570,29 +26758,29 @@ async function runWizard(opts) {
   let wiredCount = 0;
   if (approvedEvents.length > 0) {
     if (opts.noAi) {
-      p3.log.message(`Capture — şu çağrıları ekle:
+      p4.log.message(`Capture — şu çağrıları ekle:
 ${captureGuide(approvedEvents, identifyHint, isNode)}`);
     } else {
       const wireFiles = gatherContext({ cwd: opts.cwd }).files.map((f3) => f3.path);
       const snapshots = new Map;
-      const s2 = p3.spinner();
+      const s2 = p4.spinner();
       s2.start("AI capture wiring (kod düzenleniyor)…");
       const outcome = await runWireAgent(client, { cwd: opts.cwd, events: approvedEvents, identifyHint, files: wireFiles }, snapshots);
       s2.stop(`wire: ${outcome.changedFiles.length} dosya / ${outcome.steps} adım (${outcome.stoppedReason})`);
       if (outcome.changedFiles.length > 0) {
-        p3.log.message(formatWireDiff(opts.cwd, snapshots));
-        const keep = opts.yes ? true : await p3.confirm({
+        p4.log.message(formatWireDiff(opts.cwd, snapshots));
+        const keep = opts.yes ? true : await p4.confirm({
           message: `${outcome.changedFiles.length} dosyadaki wire değişikliklerini tut?`
         });
-        if (p3.isCancel(keep) || !keep) {
+        if (p4.isCancel(keep) || !keep) {
           restoreSnapshots(opts.cwd, snapshots);
-          p3.log.info("Wire geri alındı — capture snippet rehberi:");
-          p3.log.message(captureGuide(approvedEvents, identifyHint, isNode));
+          p4.log.info("Wire geri alındı — capture snippet rehberi:");
+          p4.log.message(captureGuide(approvedEvents, identifyHint, isNode));
         } else {
           wiredCount = outcome.changedFiles.length;
         }
       } else {
-        p3.log.message(`Capture (AI gömemedi → snippet-göster) — şu çağrıları ekle:
+        p4.log.message(`Capture (AI gömemedi → snippet-göster) — şu çağrıları ekle:
 ${captureGuide(approvedEvents, identifyHint, isNode)}`);
       }
     }
@@ -26611,15 +26799,18 @@ ${captureGuide(approvedEvents, identifyHint, isNode)}`);
     if (wiredCount > 0)
       lines.push(`✓ ${wiredCount} dosya AI ile capture wire edildi`);
   }
+  if (featuresResult.registered && featuresResult.selected.length > 0) {
+    lines.push(`✓ özellikler: ${featuresResult.selected.map((f3) => f3.key).join(", ")} kuruldu`);
+  }
   lines.push(`✓ .gurulu/config.json${pulled ? " + registry pull" : ""}`);
-  p3.note(lines.join(`
+  p4.note(lines.join(`
 `), c3.neon("✦ Değişiklikler"));
   if (inj.strategy !== "prepend-entry" || inj.reason === "no-entry") {
-    p3.log.info(`Wire: ${inj.wireHint ?? plan.placementHint}`);
+    p4.log.info(`Wire: ${inj.wireHint ?? plan.placementHint}`);
     if (inj.strategy === "manual")
-      p3.log.message(plan.initSnippet);
+      p4.log.message(plan.initSnippet);
   }
-  p3.outro(`${c3.neon("\uD83E\uDD89 Hazır!")}  ${c3.dim("Doğrula:")} ${c3.bold("gurulu doctor")}  ${c3.dim("·")}  ${c3.dim("Dashboard:")} ${c3.cyan("https://dashboard.gurulu.io/app?onboard=done")}`);
+  p4.outro(`${c3.neon("\uD83E\uDD89 Hazır!")}  ${c3.dim("Doğrula:")} ${c3.bold("gurulu doctor")}  ${c3.dim("·")}  ${c3.dim("Dashboard:")} ${c3.cyan("https://dashboard.gurulu.io/app?onboard=done")}`);
 }
 async function resolveWorkspace(client, authWorkspaceId, opts) {
   if (opts.writeKey) {
@@ -26642,7 +26833,7 @@ async function resolveWorkspace(client, authWorkspaceId, opts) {
     selected = CREATE;
   } else {
     const initial = list.find((w2) => w2.workspace_id === authWorkspaceId)?.workspace_id ?? list[0]?.workspace_id ?? CREATE;
-    const choice = await p3.select({
+    const choice = await p4.select({
       message: "Workspace seç",
       options: [
         ...list.map((w2) => ({ value: w2.workspace_id, label: w2.name, hint: w2.slug })),
@@ -26650,26 +26841,26 @@ async function resolveWorkspace(client, authWorkspaceId, opts) {
       ],
       initialValue: initial
     });
-    if (p3.isCancel(choice))
+    if (p4.isCancel(choice))
       bail();
     selected = choice;
   }
   if (selected === CREATE) {
-    const name = await p3.text({
+    const name = await p4.text({
       message: "Workspace adı",
       placeholder: "My App",
       validate: (v2) => v2.trim() ? undefined : "gerekli"
     });
-    if (p3.isCancel(name))
+    if (p4.isCancel(name))
       bail();
-    const domain = await p3.text({
+    const domain = await p4.text({
       message: "Domain",
       placeholder: "example.com",
       validate: (v2) => v2.trim().length >= 3 ? undefined : "geçerli domain gerekli"
     });
-    if (p3.isCancel(domain))
+    if (p4.isCancel(domain))
       bail();
-    const s2 = p3.spinner();
+    const s2 = p4.spinner();
     s2.start("Workspace oluşturuluyor…");
     const created = await client.createWorkspace({
       name: String(name).trim(),
@@ -26729,11 +26920,19 @@ var wizardArgs = {
   framework: { type: "string", description: "Framework override (auto-detect yerine)" },
   install: { type: "boolean", description: "SDK install (--no-install ile atla)", default: true },
   pull: { type: "boolean", description: "İlk registry pull (--no-pull ile atla)", default: true },
-  ai: { type: "boolean", description: "AI Plan/wire fazı (--no-ai ile atla → floor)", default: true },
+  ai: {
+    type: "boolean",
+    description: "AI Plan/wire fazı (--no-ai ile atla → floor)",
+    default: true
+  },
   yes: { type: "boolean", description: "Onayları otomatik geç" },
   ci: { type: "boolean", description: "Non-interaktif (api-key + workspace zorunlu)" }
 };
 async function runWizardFromArgs(args) {
+  if (args.ci && (!args["api-key"] || !args.workspace)) {
+    console.error("[gurulu] --ci için --api-key <sk_...> ve --workspace <uuid> zorunlu (non-interaktif kurulum).");
+    process.exit(1);
+  }
   const opts = {
     cwd: process.cwd(),
     noInstall: args.install === false,
@@ -26767,7 +26966,7 @@ var initCmd = defineCommand({
 // src/lib/editor-mcp.ts
 import { existsSync as existsSync10, mkdirSync as mkdirSync3, readFileSync as readFileSync10, writeFileSync as writeFileSync9 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { dirname as dirname4, join as join11 } from "node:path";
+import { dirname as dirname4, join as join9 } from "node:path";
 var SERVER_NAME = "gurulu";
 function buildMcpServerConfig(creds) {
   return {
@@ -26781,14 +26980,14 @@ function buildMcpServerConfig(creds) {
   };
 }
 var EDITORS = {
-  cursor: { path: () => join11(homedir2(), ".cursor", "mcp.json"), key: "mcpServers", label: "Cursor" },
-  claude: { path: () => join11(homedir2(), ".claude.json"), key: "mcpServers", label: "Claude Code" },
+  cursor: { path: () => join9(homedir2(), ".cursor", "mcp.json"), key: "mcpServers", label: "Cursor" },
+  claude: { path: () => join9(homedir2(), ".claude.json"), key: "mcpServers", label: "Claude Code" },
   windsurf: {
-    path: () => join11(homedir2(), ".codeium", "windsurf", "mcp_config.json"),
+    path: () => join9(homedir2(), ".codeium", "windsurf", "mcp_config.json"),
     key: "mcpServers",
     label: "Windsurf"
   },
-  vscode: { path: (cwd) => join11(cwd, ".vscode", "mcp.json"), key: "servers", label: "VS Code" }
+  vscode: { path: (cwd) => join9(cwd, ".vscode", "mcp.json"), key: "servers", label: "VS Code" }
 };
 function mergeMcpConfig(existing, serverConfig, key) {
   const servers = existing[key] ?? {};
@@ -26984,9 +27183,9 @@ var pushCmd = defineCommand({
 // src/commands/uninstall.ts
 import { execFile as execFile2 } from "node:child_process";
 import { existsSync as existsSync11, readFileSync as readFileSync11, rmSync, writeFileSync as writeFileSync10 } from "node:fs";
-import { join as join12 } from "node:path";
+import { join as join10 } from "node:path";
 import { promisify as promisify2 } from "node:util";
-import * as p4 from "@clack/prompts";
+import * as p5 from "@clack/prompts";
 var pexec2 = promisify2(execFile2);
 var ENV_FILES = [".env.local", ".env"];
 var GURULU_PREFIXES = ["GURULU_", "NEXT_PUBLIC_GURULU", "VITE_GURULU"];
@@ -27013,23 +27212,23 @@ var uninstallCmd = defineCommand({
     const config = readProjectConfig(cwd);
     const detected = detectProject(cwd);
     const pkg = config?.sdk_preference === "node" ? "@gurulu/node" : "@gurulu/web";
-    p4.intro("Gurulu uninstall");
-    p4.note([
+    p5.intro("Gurulu uninstall");
+    p5.note([
       `• SDK kaldır: ${pkg} (${detected.packageManager})`,
       `• env temizle: ${ENV_FILES.join(", ")} (GURULU_* anahtarları)`,
       "• .gurulu/ dizinini sil"
     ].join(`
 `), "Şunlar yapılacak");
     if (!args.yes) {
-      const ok = await p4.confirm({ message: "Devam edilsin mi?" });
-      if (p4.isCancel(ok) || !ok) {
-        p4.cancel("İptal.");
+      const ok = await p5.confirm({ message: "Devam edilsin mi?" });
+      if (p5.isCancel(ok) || !ok) {
+        p5.cancel("İptal.");
         process.exit(0);
       }
     }
     if (!args["no-deps"] && detected.hasPackageJson) {
       const { bin, args: a2 } = removeCmd(detected.packageManager, pkg);
-      const s2 = p4.spinner();
+      const s2 = p5.spinner();
       s2.start(`${pkg} kaldırılıyor…`);
       try {
         await pexec2(bin, a2, { cwd, timeout: 120000 });
@@ -27040,7 +27239,7 @@ var uninstallCmd = defineCommand({
     }
     const cleaned = [];
     for (const f3 of ENV_FILES) {
-      const abs = join12(cwd, f3);
+      const abs = join10(cwd, f3);
       if (!existsSync11(abs))
         continue;
       const { content, removed } = removeEnvKeys(readFileSync11(abs, "utf-8"), GURULU_PREFIXES);
@@ -27049,15 +27248,15 @@ var uninstallCmd = defineCommand({
         cleaned.push(`${f3} (-${removed.length})`);
       }
     }
-    const guruluDir = join12(cwd, ".gurulu");
+    const guruluDir = join10(cwd, ".gurulu");
     if (existsSync11(guruluDir))
       rmSync(guruluDir, { recursive: true, force: true });
-    p4.outro(`Kaldırıldı. env: ${cleaned.join(", ") || "değişiklik yok"} · .gurulu silindi. (Koddaki init/track çağrılarını elle çıkar.)`);
+    p5.outro(`Kaldırıldı. env: ${cleaned.join(", ") || "değişiklik yok"} · .gurulu silindi. (Koddaki init/track çağrılarını elle çıkar.)`);
   }
 });
 
 // src/index.ts
-var VERSION = "1.2.1";
+var VERSION = "1.2.2";
 var mainCmd = defineCommand({
   meta: {
     name: "gurulu",