apiforge-analyzer 1.1.0 → 1.3.0

package/dist/cjs/cli.js

@@ -1,300 +1,901 @@
 #!/usr/bin/env node
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 const prompts_1 = require("@clack/prompts");
 const fs_1 = require("fs");
 const path_1 = require("path");
-// ─── ANSI helpers ─────────────────────────────────────────────────────────────
+const child_process_1 = require("child_process");
+const axios_1 = __importDefault(require("axios"));
+const arch_detect_js_1 = require("./arch-detect.js");
+const uploader_js_1 = require("./uploader.js");
+// ─── ANSI colour helpers ──────────────────────────────────────────────────────
 const r = '\x1b[0m';
 const b = '\x1b[1m';
 const d = '\x1b[2m';
 const cy = '\x1b[36m';
 const gn = '\x1b[32m';
 const yl = '\x1b[33m';
-const mg = '\x1b[35m';
+const rd = '\x1b[31m';
 const wh = '\x1b[97m';
 const bold = (s) => `${b}${s}${r}`;
 const dim = (s) => `${d}${s}${r}`;
 const cyan = (s) => `${cy}${s}${r}`;
 const green = (s) => `${gn}${s}${r}`;
 const yellow = (s) => `${yl}${s}${r}`;
-const magenta = (s) => `${mg}${s}${r}`;
+const red = (s) => `${rd}${s}${r}`;
 const white = (s) => `${wh}${s}${r}`;
-// ─── Brand header ─────────────────────────────────────────────────────────────
+const VERSION = '1.3.0';
+// Built-in URLs — users never need to configure these
+const BACKEND_PROD = 'https://apiforgeapi.brainfogagency.com';
+const DASHBOARD_PROD = 'https://apiforge.brainfogagency.com/dashboard';
+// Local overrides — only used when testing APIForge itself
+const BACKEND_LOCAL = 'http://localhost:4000';
+const DASHBOARD_LOCAL = 'http://localhost:3000/dashboard';
+const STATUS_FILE = '.apiforge-status.json';
+const LOCK_FILE = '.apiforge-last-run.json';
+// ─── Header ───────────────────────────────────────────────────────────────────
 function printHeader() {
-    const lines = [
+    console.log([
         '',
         `  ${cyan('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━')}`,
         '',
-        `  ${bold(white('⚡  APIForge'))}   ${dim('v1.1.0')}`,
+        `  ${bold(white('⚡  APIForge'))}   ${dim(`v${VERSION}`)}`,
         `  ${dim('AI-powered API documentation, auto-generated')}`,
         '',
         `  ${dim('Your entire API, documented in under 60 seconds.')}`,
         '',
         `  ${cyan('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━')}`,
         '',
-    ];
-    console.log(lines.join('\n'));
+    ].join('\n'));
 }
-// ─── Shared state across tasks ────────────────────────────────────────────────
-let detectedEntry = '';
-let detectedAppVar = 'app';
-let detectedIsESM = false;
-let detectedFramework = 'unknown';
-let injectionPoint = '';
-let wasAlreadySetup = false;
-let linesAdded = 0;
-// ─── Main ─────────────────────────────────────────────────────────────────────
+// ─── Entry point ─────────────────────────────────────────────────────────────
 async function main() {
-    process.stdout.write('\x1Bc'); // clear screen
+    process.stdout.write('\x1Bc');
     printHeader();
-    (0, prompts_1.intro)(bold(` ${cyan('⚡')} APIForge Setup `));
-    // ── Questions (grouped so cancel is handled once) ──────────────────────────
+    (0, prompts_1.intro)(bold(` ${cyan('⚡')} APIForge Analyzer `));
+    // ── Collect setup answers ─────────────────────────────────────────────────
     const answers = await (0, prompts_1.group)({
         projectName: () => (0, prompts_1.text)({
-            message: 'Name your project',
-            placeholder: 'My Awesome API',
-            validate: (v) => (!v.trim() ? 'Project name cannot be empty' : undefined),
+            message: 'Project name',
+            placeholder: 'My API',
+            validate: v => (!v.trim() ? 'Required' : undefined),
         }),
         apiKey: () => (0, prompts_1.password)({
             message: `APIForge API key  ${dim('(get one at apiforge.brainfogagency.com/dashboard)')}`,
-            validate: (v) => {
+            validate: v => {
                 if (!v.trim())
-                    return 'API key is required';
+                    return 'Required';
                 if (!v.trim().startsWith('afg_'))
                     return 'Key must start with afg_';
             },
         }),
         baseUrl: () => (0, prompts_1.text)({
-            message: 'Your server base URL',
+            message: 'Your server base URL  (for documentation)',
             placeholder: 'https://api.myapp.com',
             initialValue: 'http://localhost:3000',
-            validate: (v) => (!v.trim() ? 'Base URL is required' : undefined),
-        }),
-        method: () => (0, prompts_1.select)({
-            message: 'Sync method',
-            options: [
-                {
-                    value: 'runtime',
-                    label: `${bold('Runtime')}  ${dim('→')}  auto-syncs on every server start`,
-                    hint: 'recommended',
-                },
-                {
-                    value: 'json',
-                    label: `${bold('Export JSON')}  ${dim('→')}  write api-export.json, import to dashboard`,
-                },
-            ],
+            validate: v => (!v.trim() ? 'Required' : undefined),
         }),
     }, {
         onCancel: () => {
-            (0, prompts_1.cancel)(dim('Setup cancelled. Come back when you\'re ready.'));
+            (0, prompts_1.cancel)(dim('Cancelled.'));
             process.exit(0);
         },
     });
     if ((0, prompts_1.isCancel)(answers))
         process.exit(0);
-    const { projectName, apiKey, baseUrl, method } = answers;
-    prompts_1.log.info(dim('─────────────────────────────────────────────────'));
-    prompts_1.log.info(`${dim('Project:')}  ${bold(projectName)}`);
-    prompts_1.log.info(`${dim('Mode:')}     ${bold(method === 'runtime' ? 'Runtime sync' : 'Export JSON')}`);
-    prompts_1.log.info(`${dim('Base URL:')} ${cyan(baseUrl)}`);
-    prompts_1.log.info(dim('─────────────────────────────────────────────────'));
-    // ── Need to ask for entry file? Do pre-scan first ─────────────────────────
-    const preDetected = detectEntryFile();
-    let entryFile;
-    if (!preDetected) {
-        prompts_1.log.warn('Could not auto-detect your server entry file.');
-        const custom = await (0, prompts_1.text)({
-            message: 'Path to your server entry file',
-            placeholder: 'src/index.ts',
-            validate: (v) => {
-                if (!v.trim())
-                    return 'Required';
-                if (!(0, fs_1.existsSync)((0, path_1.join)(process.cwd(), v.trim())))
-                    return `Not found: ${v.trim()}`;
+    const { projectName, apiKey, baseUrl } = answers;
+    // ── Select backend ────────────────────────────────────────────────────────
+    const backendChoice = await (0, prompts_1.select)({
+        message: 'Send routes to',
+        options: [
+            {
+                value: 'production',
+                label: `${bold('Production')}  ${dim('→')}  ${dim(BACKEND_PROD)}`,
+                hint: 'recommended',
             },
-        });
-        if ((0, prompts_1.isCancel)(custom)) {
-            (0, prompts_1.cancel)('Setup cancelled.');
-            process.exit(0);
+            {
+                value: 'local',
+                label: `${bold('Local')}  ${dim('→')}  ${dim(BACKEND_LOCAL)}`,
+                hint: 'for testing APIForge locally',
+            },
+        ],
+    });
+    if ((0, prompts_1.isCancel)(backendChoice)) {
+        (0, prompts_1.cancel)('Cancelled.');
+        process.exit(0);
+    }
+    const isLocal = backendChoice === 'local';
+    const backendUrl = isLocal ? BACKEND_LOCAL : BACKEND_PROD;
+    const dashboardUrl = isLocal ? DASHBOARD_LOCAL : DASHBOARD_PROD;
+    // ── Detect architecture type ─────────────────────────────────────────────
+    const archResult = (0, arch_detect_js_1.detectArchitectureType)(process.cwd());
+    const archLabel = {
+        'monolithic': cyan('Monolithic'),
+        'modular-monolithic': cyan('Modular Monolithic'),
+        'microservices': cyan('Microservices'),
+    };
+    // ── Full multi-service mode when apiforge.config.json exists ─────────────
+    if (archResult.type === 'microservices') {
+        let microConfig = loadMicroConfig();
+        // Auto-create apiforge.config.json if not present
+        if (!microConfig) {
+            microConfig = await buildAndSaveConfig(projectName);
+        }
+        if (microConfig && microConfig.services.length > 0) {
+            prompts_1.log.info(dim('─────────────────────────────────────────────────'));
+            prompts_1.log.info(`${dim('Project:')}       ${bold(projectName)}`);
+            prompts_1.log.info(`${dim('Backend:')}       ${cyan(backendUrl)}`);
+            prompts_1.log.info(`${dim('Architecture:')}  ${archLabel['microservices']}`);
+            prompts_1.log.info(`${dim('Services:')}      ${bold(String(microConfig.services.length))} ${dim('(from apiforge.config.json)')}`);
+            prompts_1.log.info(dim('─────────────────────────────────────────────────'));
+            await microservicesFlow(microConfig, { projectName, apiKey, baseUrl, backendUrl, dashboardUrl });
+            return;
         }
-        entryFile = custom.trim();
     }
-    else {
-        entryFile = preDetected;
+    // ── Single-service: ask for run command ───────────────────────────────────
+    const scripts = detectScripts();
+    const scriptOptions = scripts.map(s => ({
+        value: s.command,
+        label: `${bold(s.name)}  ${dim('→')}  ${dim(s.command)}`,
+    }));
+    if (scriptOptions.length === 0) {
+        prompts_1.log.warn('No scripts found in package.json — please ensure you have a start/dev script.');
+        (0, prompts_1.cancel)('No run script available.');
+        process.exit(1);
+    }
+    const runCommand = await (0, prompts_1.select)({
+        message: 'Which command starts your server?',
+        options: scriptOptions,
+    });
+    if ((0, prompts_1.isCancel)(runCommand)) {
+        (0, prompts_1.cancel)('Cancelled.');
+        process.exit(0);
+    }
+    if (archResult.type === 'microservices') {
+        (0, prompts_1.note)([
+            `${yellow('Microservices architecture detected.')}`,
+            '',
+            `${dim('Add an')} ${bold('apiforge.config.json')} ${dim('to document all services automatically:')}`,
+            '',
+            `  ${cyan('{ "services": [{ "name": "auth", "dir": "./services/auth" }] }')}`,
+            '',
+            `${dim('For now, analyzing the single service started by the selected command.')}`,
+        ].join('\n'), 'Multi-service tip');
+    }
+    prompts_1.log.info(dim('─────────────────────────────────────────────────'));
+    prompts_1.log.info(`${dim('Project:')}       ${bold(projectName)}`);
+    prompts_1.log.info(`${dim('Command:')}       ${bold(runCommand)}`);
+    prompts_1.log.info(`${dim('Backend:')}       ${cyan(backendUrl)}`);
+    prompts_1.log.info(`${dim('Architecture:')}  ${archLabel[archResult.type]}`);
+    prompts_1.log.info(dim('─────────────────────────────────────────────────'));
+    if (archResult.moduleNames.length > 0) {
+        prompts_1.log.info(`${dim('Modules found:')} ${archResult.moduleNames.map(m => bold(m)).join(', ')}`);
     }
-    // ── Multi-step animated tasks ──────────────────────────────────────────────
+    // ── Detect & patch entry file ─────────────────────────────────────────────
+    const entryFile = detectEntryFile(archResult.type) ?? await askEntryFile(archResult.type);
+    let injected = false;
+    let linesAdded = 0;
     await (0, prompts_1.tasks)([
         {
-            title: `Scanning project`,
-            task: async (msg) => {
-                await sleep(350);
-                detectedEntry = entryFile;
-                msg(`Reading ${detectedEntry}`);
-                await sleep(250);
-                return `${green('✓')} Entry file: ${bold(detectedEntry)}`;
-            },
-        },
-        {
-            title: 'Analysing server file',
+            title: 'Scanning project',
             task: async (msg) => {
                 await sleep(200);
-                const fullPath = (0, path_1.join)(process.cwd(), detectedEntry);
-                const src = (0, fs_1.readFileSync)(fullPath, 'utf-8');
-                detectedIsESM = detectESM(detectedEntry, src);
-                detectedAppVar = detectAppVariable(src) ?? 'app';
-                detectedFramework = detectFramework(src);
-                msg(`Detected ${detectedFramework}`);
-                await sleep(300);
-                const moduleType = detectedIsESM ? 'ESM' : 'CJS';
-                return [
-                    `${green('✓')} Framework: ${bold(detectedFramework)}`,
-                    `   Module:    ${bold(moduleType)}`,
-                    `   App var:   ${bold(detectedAppVar)}`,
-                ].join('\n');
+                msg(`Found entry file: ${entryFile}`);
+                await sleep(150);
+                return `${green('✓')} Entry: ${bold(entryFile)}`;
             },
         },
         {
             title: 'Patching server file',
             task: async (msg) => {
-                await sleep(300);
-                msg('Generating snippet…');
-                await sleep(200);
-                const result = injectCode(detectedEntry, projectName, apiKey, baseUrl, method);
-                wasAlreadySetup = result.alreadyInjected;
-                injectionPoint = result.injectionPoint ?? 'end of file';
+                msg('Injecting analyzer…');
+                await sleep(100);
+                // Clear stale status + lock files before starting
+                tryUnlink((0, path_1.join)(process.cwd(), STATUS_FILE));
+                tryUnlink((0, path_1.join)(process.cwd(), LOCK_FILE));
+                // Store API key in .env.local — never embed it in source code
+                persistApiKeyToEnv(apiKey);
+                const result = injectCode(entryFile, projectName, apiKey, baseUrl, backendUrl, archResult.type);
+                injected = !result.alreadyInjected;
                 linesAdded = result.linesAdded ?? 0;
-                msg(result.alreadyInjected ? 'Already configured' : `Writing to ${detectedEntry}`);
-                await sleep(300);
                 if (result.alreadyInjected) {
-                    return `${yellow('◌')} Already set up — no changes made`;
+                    return `${yellow('◌')} Already configured — no changes made`;
                 }
                 return [
-                    `${green('✓')} Patched: ${bold(detectedEntry)}  ${dim(`+${linesAdded} lines`)}`,
-                    `   At:      ${dim(injectionPoint)}`,
+                    `${green('✓')} Patched ${bold(entryFile)}  ${dim(`+${linesAdded} lines`)}`,
+                    `   ${green('✓')} API key saved to ${bold('.env.local')}  ${dim('(gitignored)')}`,
                 ].join('\n');
             },
         },
-        {
-            title: 'Verifying patch',
-            task: async (msg) => {
-                await sleep(200);
-                if (wasAlreadySetup) {
-                    return `${yellow('◌')} Skipped — file was already configured`;
-                }
-                const src = (0, fs_1.readFileSync)((0, path_1.join)(process.cwd(), detectedEntry), 'utf-8');
-                if (!src.includes('apiforge-analyzer')) {
-                    throw new Error('Patch verification failed — please add the snippet manually');
-                }
-                msg('Confirmed apiforge-analyzer in file');
-                await sleep(200);
-                return `${green('✓')} Verified`;
-            },
-        },
     ]);
-    // ── Summary note ───────────────────────────────────────────────────────────
-    if (wasAlreadySetup) {
+    // ── Start server + wait for analysis ──────────────────────────────────────
+    (0, prompts_1.note)([
+        bold('Starting your server…'),
+        '',
+        `  ${dim('Command:')}  ${cyan(runCommand)}`,
+        `  ${dim('Watching')} .apiforge-status.json ${dim('for completion signal')}`,
+    ].join('\n'), 'Running');
+    const s = (0, prompts_1.spinner)();
+    s.start('Starting server and analyzing routes…');
+    const serverResult = await startAndWaitForAnalysis(runCommand, 90000);
+    if (serverResult.status === 'error') {
+        s.stop(red(`✗ ${serverResult.message}`));
+        // Give a targeted hint for common failure modes
+        if (serverResult.message.includes('API key')) {
+            prompts_1.log.warn(yellow('Hint: The CLI wrote your key to .env.local — but your server may not load it.'));
+            prompts_1.log.warn(yellow('      Add this at the top of your entry file before calling analyze():'));
+            prompts_1.log.info(`      ${cyan("require('dotenv').config({ path: '.env.local' })")}`);
+            prompts_1.log.warn(yellow('      Or install dotenv:  npm install dotenv'));
+        }
+        else if (serverResult.message.includes('No routes')) {
+            prompts_1.log.warn(yellow('Hint: Make sure all routes are registered before analyze() is called.'));
+            prompts_1.log.warn(yellow('      The analyze() call should come AFTER all router.use() / app.get() etc.'));
+        }
+        else if (serverResult.message.includes('Timed out')) {
+            prompts_1.log.warn(yellow('Hint: Your server might be taking too long to start, or the analyzer'));
+            prompts_1.log.warn(yellow('      is not being called. Check your server logs for APIForge messages.'));
+        }
+        await offerCleanup(entryFile, injected);
+        (0, prompts_1.outro)(red('Analysis failed.'));
+        process.exit(1);
+    }
+    s.stop(green(`✓ ${serverResult.routeCount} routes submitted to APIForge`));
+    // ── Poll for dashboard approval ───────────────────────────────────────────
+    const { pendingImportId } = serverResult;
+    (0, prompts_1.note)([
+        bold('Open your dashboard to review:'),
+        '',
+        `  ${cyan(dashboardUrl)}`,
+        '',
+        dim(`In "Import JSON" → "Pending CLI Imports"`),
+        dim('Accept to start AI processing  ·  Deny to discard.'),
+    ].join('\n'), 'Action required');
+    const poll = (0, prompts_1.spinner)();
+    poll.start('Waiting for your decision in the dashboard…  (5 min timeout)');
+    const approval = await pollForApproval(pendingImportId, apiKey, backendUrl, 5 * 60000);
+    if (approval.status === 'approved') {
+        poll.stop(green('✓ Accepted — AI processing started!'));
         (0, prompts_1.note)([
-            bold('Already good to go!'),
+            bold('Your API is being documented.'),
             '',
-            dim(`APIForge is already configured in ${bold(detectedEntry)}.`),
-            dim('No changes were made.'),
-        ].join('\n'), 'Status');
+            `  ${dim('Track progress:')}  ${cyan(dashboardUrl)}`,
+            `  ${dim('Import ID:')}       ${dim(pendingImportId)}`,
+        ].join('\n'), 'Processing');
     }
-    else {
-        const snippetPreview = getSnippetPreview(method, detectedAppVar);
+    else if (approval.status === 'denied') {
+        poll.stop(red('✗ Import denied by dashboard.'));
         (0, prompts_1.note)([
-            `  ${dim('File')}     ${bold(detectedEntry)}  ${dim(`+${linesAdded} lines`)}`,
-            `  ${dim('Mode')}     ${bold(method === 'json' ? 'Export JSON' : 'Runtime sync')}`,
-            `  ${dim('App var')}  ${bold(detectedAppVar)}  ${dim('(auto-detected)')}`,
-            `  ${dim('Format')}   ${bold(detectedIsESM ? 'ESM (import)' : 'CJS (require)')}`,
-            '',
-            dim('Injected snippet:'),
+            `  ${bold('You denied this import from the dashboard.')}`,
             '',
-            ...snippetPreview.map(line => `  ${cyan('│')} ${dim(line)}`),
-        ].join('\n'), 'Patch summary');
+            `  ${dim('No documentation was generated.')}`,
+            `  ${dim('Run')} ${cyan('npx apiforge')} ${dim('again whenever you\'re ready.')}`,
+        ].join('\n'), 'Denied');
     }
-    // ── Next steps + outro ─────────────────────────────────────────────────────
-    if (method === 'json') {
+    else {
+        poll.stop(yellow('◌ Timed out — no decision made within 5 minutes.'));
         (0, prompts_1.note)([
-            bold('What to do next:'),
+            `  ${dim('Your import is still pending:')}`,
+            `  ${cyan(dashboardUrl)}`,
             '',
-            `  ${dim('1.')} Start your server once:`,
-            `     ${cyan(getStartCommand())}`,
+            `  ${dim('Import ID:')}  ${cyan(pendingImportId)}`,
+            `  ${dim('You can still accept or deny it from the dashboard.')}`,
+        ].join('\n'), 'Pending');
+    }
+    // ── Cleanup ───────────────────────────────────────────────────────────────
+    await offerCleanup(entryFile, injected);
+    tryUnlink((0, path_1.join)(process.cwd(), STATUS_FILE));
+    tryUnlink((0, path_1.join)(process.cwd(), LOCK_FILE));
+    const outroMsg = {
+        approved: `${green('✓')}  Done! View your AI docs at ${cyan(dashboardUrl)}`,
+        denied: `${red('✗')}  Import denied. No changes were made.`,
+        timeout: `${yellow('◌')}  Timed out. Your import is still pending at ${cyan(dashboardUrl)}`,
+    }[approval.status];
+    (0, prompts_1.outro)(outroMsg);
+}
+/**
+ * Scan the project for services and interactively write apiforge.config.json.
+ * Called when microservices arch is detected but no config file exists yet.
+ */
+async function buildAndSaveConfig(projectName) {
+    const cwd = process.cwd();
+    // Collect services from filesystem scan (same logic as findServiceEntries but raw)
+    const discovered = [];
+    for (const parentDir of ['services', 'apps', 'packages', 'microservices', 'src/services']) {
+        const parentPath = (0, path_1.join)(cwd, parentDir);
+        if (!(0, fs_1.existsSync)(parentPath))
+            continue;
+        try {
+            const subdirs = (0, fs_1.readdirSync)(parentPath, { withFileTypes: true }).filter(d => d.isDirectory());
+            for (const subdir of subdirs) {
+                const entry = findEntryInDir((0, path_1.join)(parentPath, subdir.name));
+                if (entry) {
+                    discovered.push({ name: subdir.name, dir: `./${parentDir}/${subdir.name}` });
+                }
+            }
+        }
+        catch { }
+        if (discovered.length > 0)
+            break;
+    }
+    if (discovered.length === 0)
+        return null;
+    (0, prompts_1.note)([
+        bold(`Found ${discovered.length} service${discovered.length > 1 ? 's' : ''}:`),
+        '',
+        ...discovered.map(s => `  ${dim('·')} ${bold(s.name)}  ${dim('→')}  ${dim(s.dir)}`),
+        '',
+        `${dim('apiforge.config.json will be created so you never have to set this up again.')}`,
+    ].join('\n'), 'Auto-detected services');
+    const shouldCreate = await (0, prompts_1.confirm)({
+        message: `Create apiforge.config.json with these ${discovered.length} services?`,
+        initialValue: true,
+    });
+    if ((0, prompts_1.isCancel)(shouldCreate) || !shouldCreate)
+        return null;
+    const config = {
+        projectName,
+        architectureType: 'microservices',
+        services: discovered.map(s => ({ name: s.name, dir: s.dir })),
+    };
+    (0, fs_1.writeFileSync)((0, path_1.join)(cwd, 'apiforge.config.json'), JSON.stringify(config, null, 2) + '\n', 'utf-8');
+    prompts_1.log.success(green(`✓ Created apiforge.config.json  (${discovered.length} services)`));
+    prompts_1.log.info(dim('  Commit this file so teammates can run apiforge without re-setup.'));
+    return { services: discovered };
+}
+function loadMicroConfig() {
+    for (const cfgName of ['apiforge.config.json', '.apiforge.json']) {
+        try {
+            const cfg = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(process.cwd(), cfgName), 'utf-8'));
+            if (Array.isArray(cfg.services) && cfg.services.length > 0) {
+                return { projectName: cfg.projectName, services: cfg.services };
+            }
+        }
+        catch { }
+    }
+    return null;
+}
+function serviceNodeCommand(entryRelPath) {
+    if (entryRelPath.endsWith('.ts')) {
+        const hasTsx = (0, fs_1.existsSync)((0, path_1.join)(process.cwd(), 'node_modules/.bin/tsx'));
+        const hasTsNode = (0, fs_1.existsSync)((0, path_1.join)(process.cwd(), 'node_modules/.bin/ts-node'));
+        if (hasTsx)
+            return `node_modules/.bin/tsx ${entryRelPath}`;
+        if (hasTsNode)
+            return `node_modules/.bin/ts-node ${entryRelPath}`;
+        return `npx --yes tsx ${entryRelPath}`;
+    }
+    return `node ${entryRelPath}`;
+}
+function waitForServiceStatusFile(statusFile, timeoutMs) {
+    return new Promise(resolve => {
+        const fullPath = (0, path_1.join)(process.cwd(), statusFile);
+        const poller = setInterval(() => {
+            try {
+                if (!(0, fs_1.existsSync)(fullPath))
+                    return;
+                const data = JSON.parse((0, fs_1.readFileSync)(fullPath, 'utf-8'));
+                if (data.status === 'collected' && Array.isArray(data.routes)) {
+                    clearInterval(poller);
+                    clearTimeout(timer);
+                    resolve(data.routes);
+                }
+            }
+            catch { }
+        }, 500);
+        const timer = setTimeout(() => {
+            clearInterval(poller);
+            resolve(null);
+        }, timeoutMs);
+    });
+}
+async function microservicesFlow(config, opts) {
+    const cwd = process.cwd();
+    const allRoutes = [];
+    const serviceMeta = [];
+    const injectedFiles = [];
+    // Clear any stale per-service status files
+    for (const svc of config.services) {
+        tryUnlink((0, path_1.join)(cwd, `.apiforge-status-${svc.name}.json`));
+    }
+    tryUnlink((0, path_1.join)(cwd, STATUS_FILE));
+    tryUnlink((0, path_1.join)(cwd, LOCK_FILE));
+    persistApiKeyToEnv(opts.apiKey);
+    (0, prompts_1.note)([
+        bold(`Analyzing ${config.services.length} service${config.services.length > 1 ? 's' : ''}…`),
+        '',
+        ...config.services.map(s => `  ${dim('·')} ${bold(s.name)}  ${dim('→')}  ${dim(s.dir)}`),
+        '',
+        dim('Each service is started individually and its routes are collected.'),
+    ].join('\n'), 'Multi-service analysis');
+    for (const svc of config.services) {
+        const svcSpin = (0, prompts_1.spinner)();
+        svcSpin.start(`${bold(svc.name)} — starting…`);
+        const svcDir = svc.dir.replace(/^\.\//, '');
+        // Resolve entry file
+        const relEntry = svc.entryFile ?? findEntryInDir((0, path_1.join)(cwd, svcDir));
+        if (!relEntry) {
+            svcSpin.stop(yellow(`◌ ${svc.name} — no entry file found, skipping`));
+            continue;
+        }
+        const fullEntry = (0, path_1.join)(svcDir, relEntry);
+        const statusFile = `.apiforge-status-${svc.name}.json`;
+        // Inject collection snippet (upload: false, writes to per-service status file)
+        injectCode(fullEntry, opts.projectName, opts.apiKey, opts.baseUrl, opts.backendUrl, 'microservices', {
+            serviceName: svc.name,
+            statusFile,
+        });
+        injectedFiles.push(fullEntry);
+        // Start service with plain node (or tsx for .ts files)
+        const startCmd = svc.startCommand ?? serviceNodeCommand(fullEntry);
+        const child = (0, child_process_1.spawn)(startCmd, {
+            cwd,
+            stdio: 'ignore',
+            shell: true,
+            env: { ...process.env },
+            detached: false,
+        });
+        // Wait up to 30 s for the status file to appear
+        const routes = await waitForServiceStatusFile(statusFile, 30000);
+        // Kill service process
+        try {
+            child.kill('SIGTERM');
+        }
+        catch { }
+        tryUnlink((0, path_1.join)(cwd, statusFile));
+        if (routes && routes.length > 0) {
+            const annotated = routes.map((r) => ({ ...r, service: svc.name }));
+            allRoutes.push(...annotated);
+            serviceMeta.push({ name: svc.name, baseUrl: svc.baseUrl });
+            svcSpin.stop(green(`✓ ${svc.name} — ${routes.length} routes collected`));
+        }
+        else {
+            svcSpin.stop(yellow(`◌ ${svc.name} — no routes collected (timeout or error)`));
+        }
+        // Remove injected code
+        removeInjectedCode(fullEntry);
+        injectedFiles.splice(injectedFiles.indexOf(fullEntry), 1);
+    }
+    // Safety: clean up any remaining injections (e.g. if process was interrupted)
+    for (const f of injectedFiles)
+        removeInjectedCode(f);
+    if (allRoutes.length === 0) {
+        prompts_1.log.error(red('No routes were collected from any service.'));
+        (0, prompts_1.outro)(red('Analysis failed.'));
+        process.exit(1);
+    }
+    // Upload aggregated routes
+    const uploadSpin = (0, prompts_1.spinner)();
+    uploadSpin.start(`Uploading ${allRoutes.length} routes from ${serviceMeta.length} service${serviceMeta.length > 1 ? 's' : ''}…`);
+    const uploadResult = await (0, uploader_js_1.uploadRoutes)(allRoutes, {
+        projectName: opts.projectName,
+        apiKey: opts.apiKey,
+        baseUrl: opts.baseUrl,
+        apiForgeUrl: opts.backendUrl,
+        architectureType: 'microservices',
+        services: serviceMeta,
+    });
+    if (!uploadResult) {
+        uploadSpin.stop(red('✗ Upload failed'));
+        (0, prompts_1.outro)(red('Analysis failed.'));
+        process.exit(1);
+    }
+    uploadSpin.stop(green(`✓ ${uploadResult.routeCount} routes submitted across ${serviceMeta.length} service${serviceMeta.length > 1 ? 's' : ''}`));
+    // ── Poll for dashboard approval ───────────────────────────────────────────
+    (0, prompts_1.note)([
+        bold('Open your dashboard to review:'),
+        '',
+        `  ${cyan(opts.dashboardUrl)}`,
+        '',
+        dim('In "Import JSON" → "Pending CLI Imports"'),
+        dim('Accept to start AI processing  ·  Deny to discard.'),
+    ].join('\n'), 'Action required');
+    const poll = (0, prompts_1.spinner)();
+    poll.start('Waiting for your decision in the dashboard…  (5 min timeout)');
+    const approval = await pollForApproval(uploadResult.pendingImportId, opts.apiKey, opts.backendUrl, 5 * 60000);
+    const statusMsg = {
+        approved: green('✓ Accepted — AI processing started!'),
+        denied: red('✗ Import denied by dashboard.'),
+        timeout: yellow('◌ Timed out — no decision made within 5 minutes.'),
+    }[approval.status];
+    poll.stop(statusMsg);
+    if (approval.status === 'approved') {
+        (0, prompts_1.note)([
+            bold('Your API is being documented.'),
             '',
-            `  ${dim('2.')} Upload ${bold('api-export.json')} to the dashboard:`,
-            `     ${cyan('https://apiforge.brainfogagency.com/dashboard')}`,
+            `  ${dim('Track progress:')}  ${cyan(opts.dashboardUrl)}`,
+            `  ${dim('Import ID:')}       ${dim(uploadResult.pendingImportId)}`,
+        ].join('\n'), 'Processing');
+    }
+    else if (approval.status === 'denied') {
+        (0, prompts_1.note)([
+            `  ${bold('You denied this import from the dashboard.')}`,
             '',
-            `  ${dim('3.')} Your AI-enhanced docs appear in seconds.`,
-        ].join('\n'), 'Next steps');
-        (0, prompts_1.outro)(`${green('✓')}  All set — run your server to generate the export.`);
+            `  ${dim('No documentation was generated.')}`,
+            `  ${dim('Run')} ${cyan('npx apiforge')} ${dim('again whenever you\'re ready.')}`,
+        ].join('\n'), 'Denied');
     }
     else {
         (0, prompts_1.note)([
-            bold('What to do next:'),
-            '',
-            `  ${dim('1.')} Start your server as normal:`,
-            `     ${cyan(getStartCommand())}`,
-            '',
-            `  ${dim('2.')} APIForge detects all routes automatically.`,
+            `  ${dim('Your import is still pending:')}`,
+            `  ${cyan(opts.dashboardUrl)}`,
             '',
-            `  ${dim('3.')} View your live docs:`,
-            `     ${cyan('https://apiforge.brainfogagency.com/dashboard')}`,
-        ].join('\n'), 'Next steps');
-        (0, prompts_1.outro)(`${green('✓')}  All set — start your server and docs will sync automatically.`);
+            `  ${dim('Import ID:')}  ${cyan(uploadResult.pendingImportId)}`,
+            `  ${dim('You can still accept or deny it from the dashboard.')}`,
+        ].join('\n'), 'Pending');
     }
+    tryUnlink((0, path_1.join)(cwd, STATUS_FILE));
+    tryUnlink((0, path_1.join)(cwd, LOCK_FILE));
+    const outroMsg = {
+        approved: `${green('✓')}  Done! View your AI docs at ${cyan(opts.dashboardUrl)}`,
+        denied: `${red('✗')}  Import denied. No changes were made.`,
+        timeout: `${yellow('◌')}  Timed out. Your import is still pending at ${cyan(opts.dashboardUrl)}`,
+    }[approval.status];
+    (0, prompts_1.outro)(outroMsg);
 }
-// ─── Entry file detection ─────────────────────────────────────────────────────
-function detectEntryFile() {
-    const cwd = process.cwd();
+function startAndWaitForAnalysis(command, timeoutMs) {
+    return new Promise(resolve => {
+        const statusPath = (0, path_1.join)(process.cwd(), STATUS_FILE);
+        const child = (0, child_process_1.spawn)(command, {
+            cwd: process.cwd(),
+            stdio: 'ignore',
+            shell: true,
+            env: { ...process.env },
+            detached: false,
+        });
+        let resolved = false;
+        function finish(result) {
+            if (resolved)
+                return;
+            resolved = true;
+            clearInterval(poller);
+            clearTimeout(timeout);
+            try {
+                child.kill('SIGTERM');
+            }
+            catch { }
+            resolve(result);
+        }
+        // Poll for the status file every 500 ms
+        const poller = setInterval(() => {
+            try {
+                if (!(0, fs_1.existsSync)(statusPath))
+                    return;
+                const data = JSON.parse((0, fs_1.readFileSync)(statusPath, 'utf-8'));
+                if (data.status === 'submitted') {
+                    finish({
+                        status: 'submitted',
+                        pendingImportId: data.pendingImportId ?? '',
+                        routeCount: data.routeCount ?? 0,
+                        message: `${data.routeCount ?? 0} routes submitted`,
+                    });
+                }
+                else if (data.status === 'error') {
+                    finish({
+                        status: 'error',
+                        pendingImportId: '',
+                        routeCount: 0,
+                        message: data.error ?? 'Upload failed',
+                    });
+                }
+            }
+            catch { }
+        }, 500);
+        const timeout = setTimeout(() => {
+            finish({
+                status: 'error',
+                pendingImportId: '',
+                routeCount: 0,
+                message: 'Timed out waiting for analysis (90 s). Is the server starting correctly?',
+            });
+        }, timeoutMs);
+        child.on('error', err => {
+            finish({ status: 'error', pendingImportId: '', routeCount: 0, message: err.message });
+        });
+        child.on('exit', (code, signal) => {
+            if (!resolved && signal !== 'SIGTERM' && code !== 0) {
+                finish({
+                    status: 'error',
+                    pendingImportId: '',
+                    routeCount: 0,
+                    message: `Server exited unexpectedly (code ${code})`,
+                });
+            }
+        });
+    });
+}
+// ─── Backend polling ──────────────────────────────────────────────────────────
+async function pollForApproval(pendingImportId, apiKey, backendUrl, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        try {
+            const res = await axios_1.default.get(`${backendUrl}/api/cli/${pendingImportId}/status`, {
+                headers: { 'X-API-Key': apiKey },
+                timeout: 8000,
+            });
+            const { status } = res.data?.data ?? {};
+            if (status === 'approved')
+                return { status: 'approved' };
+            if (status === 'denied')
+                return { status: 'denied' };
+        }
+        catch { }
+        await sleep(3000);
+    }
+    return { status: 'timeout' };
+}
+// ─── Cleanup helpers ──────────────────────────────────────────────────────────
+async function offerCleanup(entryFile, wasInjected) {
+    if (!wasInjected)
+        return;
+    const shouldClean = await (0, prompts_1.confirm)({
+        message: `Remove APIForge code changes from ${bold(entryFile)}?`,
+        initialValue: true,
+    });
+    if ((0, prompts_1.isCancel)(shouldClean) || !shouldClean)
+        return;
+    const removed = removeInjectedCode(entryFile);
+    if (removed) {
+        prompts_1.log.success(green(`✓ Removed code changes from ${entryFile}`));
+    }
+    else {
+        prompts_1.log.warn(yellow('Could not auto-remove — please delete the APIForge block manually.'));
+    }
+}
+function removeInjectedCode(filePath) {
+    const fullPath = (0, path_1.join)(process.cwd(), filePath);
+    try {
+        const content = (0, fs_1.readFileSync)(fullPath, 'utf-8');
+        const startIdx = content.indexOf('// APIForge');
+        if (startIdx === -1)
+            return false;
+        const afterStart = content.slice(startIdx);
+        const endMatch = /\.catch\s*\(\s*\(\s*\)\s*=>\s*\{?\s*\}?\s*\)\s*\n?/.exec(afterStart);
+        if (!endMatch)
+            return false;
+        const endIdx = startIdx + endMatch.index + endMatch[0].length;
+        const cleaned = (content.slice(0, startIdx) + content.slice(endIdx))
+            .replace(/\n{3,}/g, '\n\n')
+            .trimEnd() + '\n';
+        (0, fs_1.writeFileSync)(fullPath, cleaned, 'utf-8');
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Look for a server entry inside a single directory (checks src/ then root). */
+function findEntryInDir(absDir) {
+    const names = ['index', 'server', 'app', 'main'];
+    const exts = ['ts', 'js', 'mjs', 'cjs'];
+    for (const depth of ['src', '']) {
+        for (const name of names) {
+            for (const ext of exts) {
+                const rel = depth ? (0, path_1.join)(depth, `${name}.${ext}`) : `${name}.${ext}`;
+                if ((0, fs_1.existsSync)((0, path_1.join)(absDir, rel)))
+                    return rel;
+            }
+        }
+    }
+    return null;
+}
+/**
+ * Detect the project's root/main entry point — package.json main,
+ * common gateway directories, then flat root candidates.
+ * Returns a relative path or null.
+ */
+function detectMainEntry(cwd) {
+    // 1. package.json main / start / dev script
     try {
         const pkg = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(cwd, 'package.json'), 'utf-8'));
         if (pkg.main && (0, fs_1.existsSync)((0, path_1.join)(cwd, pkg.main)))
             return pkg.main;
-        for (const script of ['start', 'dev', 'serve']) {
-            const cmd = pkg.scripts?.[script] ?? '';
-            const m = cmd.match(/(?:node|tsx|ts-node)\s+([^\s&|;]+\.(js|ts|mjs|cjs))/);
+        for (const s of ['start', 'dev', 'serve']) {
+            const cmd = pkg.scripts?.[s] ?? '';
+            const m = cmd.match(/(?:node|tsx|ts-node|nodemon)\s+([^\s&|;]+\.(js|ts|mjs|cjs))/);
             if (m && (0, fs_1.existsSync)((0, path_1.join)(cwd, m[1])))
                 return m[1];
         }
     }
     catch { }
-    const candidates = [
-        'index.ts', 'server.ts', 'app.ts',
-        'index.js', 'server.js', 'app.js',
-        'src/index.ts', 'src/server.ts', 'src/app.ts',
-        'src/index.js', 'src/server.js', 'src/app.js',
-    ];
-    for (const c of candidates)
+    // 2. Common gateway/proxy directory (e.g. api-gateway/)
+    for (const gatewayDir of ['api-gateway', 'gateway', 'proxy', 'api-proxy']) {
+        const entry = findEntryInDir((0, path_1.join)(cwd, gatewayDir));
+        if (entry)
+            return (0, path_1.join)(gatewayDir, entry);
+    }
+    // 3. Flat root candidates
+    for (const c of [
+        'index.ts', 'server.ts', 'app.ts', 'main.ts',
+        'index.js', 'server.js', 'app.js', 'main.js',
+        'src/index.ts', 'src/server.ts', 'src/app.ts', 'src/main.ts',
+        'src/index.js', 'src/server.js', 'src/app.js', 'src/main.js',
+    ]) {
         if ((0, fs_1.existsSync)((0, path_1.join)(cwd, c)))
             return c;
+    }
     return null;
 }
-// ─── Framework detection from source ─────────────────────────────────────────
-function detectFramework(src) {
-    if (/require\s*\(\s*['"]express['"]\s*\)|from\s+['"]express['"]/.test(src))
-        return 'Express';
-    if (/require\s*\(\s*['"]fastify['"]\s*\)|from\s+['"]fastify['"]/.test(src))
-        return 'Fastify';
-    if (/require\s*\(\s*['"]koa['"]\s*\)|from\s+['"]koa['"]/.test(src))
-        return 'Koa';
-    if (/require\s*\(\s*['"]hapi['"]\s*\)|from\s+['"]@hapi\/hapi['"]/.test(src))
-        return 'Hapi';
-    if (/from\s+['"]next\/server['"]|NextResponse/.test(src))
-        return 'Next.js';
-    if (/createServer|http\.createServer/.test(src))
-        return 'Node HTTP';
-    return 'Node.js';
+/**
+ * Scan the project for per-service entry files.
+ * Prepends the root main entry (if any) so it appears first in the select list.
+ * Reads apiforge.config.json first; falls back to common service parent dirs.
+ */
+function findServiceEntries() {
+    const cwd = process.cwd();
+    const results = [];
+    // 0. Root / main entry — shown first so the user always sees it
+    const mainEntry = detectMainEntry(cwd);
+    if (mainEntry) {
+        results.push({ label: `[ Main entry ]  →  ${mainEntry}`, path: mainEntry });
+    }
+    // 1. Authoritative list from apiforge.config.json / .apiforge.json
+    for (const cfgName of ['apiforge.config.json', '.apiforge.json']) {
+        try {
+            const cfg = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(cwd, cfgName), 'utf-8'));
+            if (!Array.isArray(cfg.services) || cfg.services.length === 0)
+                continue;
+            for (const svc of cfg.services) {
+                const dir = svc.dir.replace(/^\.\//, '');
+                const entry = findEntryInDir((0, path_1.join)(cwd, dir));
+                if (!entry)
+                    continue;
+                const relPath = (0, path_1.join)(dir, entry);
+                // Skip if same path as the main entry already added
+                if (relPath !== mainEntry) {
+                    results.push({ label: `${svc.name}  →  ${relPath}`, path: relPath });
+                }
+            }
+            if (results.length > 0)
+                return results;
+        }
+        catch { }
+    }
+    // 2. Filesystem scan of common service parent dirs
+    for (const parentDir of ['services', 'apps', 'packages', 'src/services', 'microservices']) {
+        const parentPath = (0, path_1.join)(cwd, parentDir);
+        if (!(0, fs_1.existsSync)(parentPath))
+            continue;
+        try {
+            const subdirs = (0, fs_1.readdirSync)(parentPath, { withFileTypes: true }).filter(d => d.isDirectory());
+            for (const subdir of subdirs) {
+                const entry = findEntryInDir((0, path_1.join)(parentPath, subdir.name));
+                if (!entry)
+                    continue;
+                const relPath = (0, path_1.join)(parentDir, subdir.name, entry);
+                if (relPath !== mainEntry) {
+                    results.push({ label: `${subdir.name}  →  ${relPath}`, path: relPath });
+                }
+            }
+        }
+        catch { }
+        if (results.length > 1)
+            return results; // >1 because main entry is already at index 0
+    }
+    return results;
+}
+function detectEntryFile(archType) {
+    const cwd = process.cwd();
+    // For microservices: auto-pick only when exactly one service entry is found
+    if (archType === 'microservices') {
+        const entries = findServiceEntries();
+        return entries.length === 1 ? entries[0].path : null;
+    }
+    // Package.json hints
+    try {
+        const pkg = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(cwd, 'package.json'), 'utf-8'));
+        if (pkg.main && (0, fs_1.existsSync)((0, path_1.join)(cwd, pkg.main)))
+            return pkg.main;
+        for (const s of ['start', 'dev', 'serve']) {
+            const cmd = pkg.scripts?.[s] ?? '';
+            const m = cmd.match(/(?:node|tsx|ts-node|nodemon)\s+([^\s&|;]+\.(js|ts|mjs|cjs))/);
+            if (m && (0, fs_1.existsSync)((0, path_1.join)(cwd, m[1])))
+                return m[1];
+        }
+    }
+    catch { }
+    // Flat file candidates — root → src/ → compiled output → misc
+    const candidates = [
+        'index.ts', 'server.ts', 'app.ts', 'main.ts',
+        'index.js', 'server.js', 'app.js', 'main.js',
+        'src/index.ts', 'src/server.ts', 'src/app.ts', 'src/main.ts',
+        'src/index.js', 'src/server.js', 'src/app.js', 'src/main.js',
+        'dist/index.js', 'dist/server.js', 'dist/main.js',
+        'build/index.js', 'build/server.js', 'build/main.js',
+        'lib/index.js', 'lib/server.js',
+        'server/index.ts', 'server/index.js',
+        'api/index.ts', 'api/index.js',
+        'src/server/index.ts', 'src/server/index.js',
+        'lambda.ts', 'lambda.js', 'handler.ts', 'handler.js',
+    ];
+    return candidates.find(c => (0, fs_1.existsSync)((0, path_1.join)(cwd, c))) ?? null;
+}
+async function askEntryFile(archType) {
+    if (archType === 'microservices') {
+        const entries = findServiceEntries();
+        if (entries.length > 0) {
+            const choice = await (0, prompts_1.select)({
+                message: 'Which service entry file do you want to analyze?',
+                options: [
+                    ...entries.map(e => ({ value: e.path, label: e.label })),
+                    { value: '__manual', label: 'Enter path manually…' },
+                ],
+            });
+            if ((0, prompts_1.isCancel)(choice)) {
+                (0, prompts_1.cancel)('Cancelled.');
+                process.exit(0);
+            }
+            if (choice !== '__manual')
+                return choice;
+        }
+        else {
+            prompts_1.log.warn('Could not find service entry files in services/, apps/, or packages/.');
+        }
+    }
+    else {
+        prompts_1.log.warn('Could not auto-detect your server entry file.');
+    }
+    const custom = await (0, prompts_1.text)({
+        message: 'Path to your server entry file',
+        placeholder: 'src/index.ts',
+        validate: v => {
+            if (!v.trim())
+                return 'Required';
+            if (!(0, fs_1.existsSync)((0, path_1.join)(process.cwd(), v.trim())))
+                return `Not found: ${v.trim()}`;
+        },
+    });
+    if ((0, prompts_1.isCancel)(custom)) {
+        (0, prompts_1.cancel)('Cancelled.');
+        process.exit(0);
+    }
+    return custom.trim();
+}
+function detectScripts() {
+    try {
+        const pkg = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(process.cwd(), 'package.json'), 'utf-8'));
+        const scripts = pkg.scripts ?? {};
+        const preferred = ['dev', 'start', 'serve', 'run', 'develop'];
+        const result = [];
+        // Preferred scripts first
+        for (const name of preferred) {
+            if (scripts[name])
+                result.push({ name, command: `npm run ${name}` });
+        }
+        // Scripts that directly invoke a node runtime
+        for (const [name, cmd] of Object.entries(scripts)) {
+            if (preferred.includes(name))
+                continue;
+            if (/node|tsx|ts-node|nodemon|server/i.test(cmd)) {
+                result.push({ name, command: `npm run ${name}` });
+            }
+        }
+        // Workspace per-service scripts: start:*, dev:*, serve:* patterns
+        // (e.g. "dev:auth", "start:wallet" common in npm/pnpm monorepos)
+        for (const [name] of Object.entries(scripts)) {
+            if (preferred.includes(name))
+                continue;
+            if (/^(?:start|dev|serve|run):[a-z0-9_-]+$/i.test(name) && !result.some(r => r.name === name)) {
+                result.push({ name, command: `npm run ${name}` });
+            }
+        }
+        return result;
+    }
+    catch {
+        return [];
+    }
 }
-function injectCode(filePath, projectName, apiKey, baseUrl, method) {
+function injectCode(filePath, projectName, apiKey, baseUrl, backendUrl, architectureType, collectionOpts) {
     const fullPath = (0, path_1.join)(process.cwd(), filePath);
     const content = (0, fs_1.readFileSync)(fullPath, 'utf-8');
     if (content.includes('apiforge-analyzer')) {
-        return { message: 'Already configured', alreadyInjected: true };
+        return { alreadyInjected: true };
     }
     const isESM = detectESM(filePath, content);
     const appVar = detectAppVariable(content) ?? 'app';
-    const snippet = getCodeSnippet(projectName, apiKey, baseUrl, method, appVar, isESM);
+    const snippet = buildSnippet(projectName, apiKey, baseUrl, backendUrl, appVar, isESM, architectureType, collectionOpts);
     const listenRe = /\b(?:app|server|httpServer|http)\s*\.listen\s*\(/;
     const listenMatch = listenRe.exec(content);
     let newContent;
@@ -309,58 +910,69 @@ function injectCode(filePath, projectName, apiKey, baseUrl, method) {
         injectionPoint = 'end of file';
     }
     (0, fs_1.writeFileSync)(fullPath, newContent, 'utf-8');
-    const linesAdded = snippet.split('\n').length;
-    return {
-        message: `Patched ${filePath}`,
-        alreadyInjected: false,
-        appVar,
-        injectionPoint,
-        linesAdded,
-    };
+    return { alreadyInjected: false, injectionPoint, linesAdded: snippet.split('\n').length };
 }
-function detectESM(filePath, content) {
+/**
+ * Write (or overwrite) the API key in .env.local.
+ * Always overwrites so the key stays in sync with what the user entered —
+ * keeping a stale key would cause submit/poll key mismatch and 401s.
+ */
+function persistApiKeyToEnv(apiKey) {
+    const envPath = (0, path_1.join)(process.cwd(), '.env.local');
+    const marker = 'APIFORGE_API_KEY=';
     try {
-        const pkg = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(process.cwd(), 'package.json'), 'utf-8'));
-        if (pkg.type === 'module')
-            return true;
+        let content = (0, fs_1.existsSync)(envPath) ? (0, fs_1.readFileSync)(envPath, 'utf-8') : '';
+        if (content.includes(marker)) {
+            // Replace existing value — regex matches the whole line
+            content = content.replace(/^APIFORGE_API_KEY=.*/m, `${marker}${apiKey}`);
+        }
+        else {
+            content = content.trimEnd() + `\n# APIForge CLI key (safe to delete after analysis)\n${marker}${apiKey}\n`;
+        }
+        (0, fs_1.writeFileSync)(envPath, content, 'utf-8');
     }
     catch { }
-    if (filePath.endsWith('.mjs'))
-        return true;
-    if (filePath.endsWith('.cjs'))
-        return false;
-    return /^(?:import|export)\s+/m.test(content);
+    addToGitignore('.env.local');
+    addToGitignore('.apiforge-status.json');
+    addToGitignore('.apiforge-last-run.json');
 }
-function detectAppVariable(content) {
-    let m = content.match(/(?:const|let|var)\s+(\w+)\s*=\s*express\s*(?:\.default)?\s*\(/);
-    if (m)
-        return m[1];
-    m = content.match(/(?:const|let|var)\s+(\w+)\s*=\s*(?:fastify|Fastify)\s*\(/);
-    if (m)
-        return m[1];
-    m = content.match(/(?:const|let|var)\s+(\w+)\s*=\s*new\s+Koa\s*\(/);
-    if (m)
-        return m[1];
-    return null;
+function addToGitignore(pattern) {
+    const giPath = (0, path_1.join)(process.cwd(), '.gitignore');
+    try {
+        const current = (0, fs_1.existsSync)(giPath) ? (0, fs_1.readFileSync)(giPath, 'utf-8') : '';
+        if (!current.split('\n').some(l => l.trim() === pattern)) {
+            (0, fs_1.writeFileSync)(giPath, current.trimEnd() + `\n${pattern}\n`, 'utf-8');
+        }
+    }
+    catch { }
 }
-// ─── Snippet builder ──────────────────────────────────────────────────────────
-function getCodeSnippet(projectName, apiKey, baseUrl, method, appVar, isESM) {
-    const isJson = method === 'json';
-    const opts = isJson
+function buildSnippet(projectName, apiKey, baseUrl, backendUrl, appVar, isESM, architectureType, collectionOpts) {
+    // The API key is embedded directly — this snippet is TEMPORARY (auto-removed after analysis).
+    // Hardcoding guarantees the same key is used for both submit and CLI status polling,
+    // eliminating the mismatch that causes 401s when .env.local already has a different key.
+    const isProd = backendUrl === BACKEND_PROD;
+    // Collection mode (multi-service): upload: false, write to per-service status file
+    const opts = collectionOpts
         ? [
             `    apiKey: '${apiKey}',`,
             `    projectName: '${projectName}',`,
             `    baseUrl: '${baseUrl}',`,
-            `    saveJson: true,`,
-            `    jsonPath: './api-export.json',`,
+            `    service: '${collectionOpts.serviceName}',`,
+            `    statusFile: '${collectionOpts.statusFile}',`,
+            `    architectureType: 'microservices',`,
             `    upload: false,`,
+            `    runOnce: true,`,
         ].join('\n')
         : [
             `    apiKey: '${apiKey}',`,
             `    projectName: '${projectName}',`,
             `    baseUrl: '${baseUrl}',`,
-            `    apiForgeUrl: 'https://apiforge.brainfogagency.com',`,
+            ...(isProd ? [] : [`    apiForgeUrl: '${backendUrl}',`]),
+            ...(architectureType && architectureType !== 'monolithic'
+                ? [`    architectureType: '${architectureType}',`]
+                : []),
             `    upload: true,`,
+            `    runOnce: true,`,
         ].join('\n');
     if (isESM) {
         return [
@@ -384,36 +996,46 @@ function getCodeSnippet(projectName, apiKey, baseUrl, method, appVar, isESM) {
         '',
     ].join('\n');
 }
-/** First 4 lines of the injected snippet for the summary preview. */
-function getSnippetPreview(method, appVar) {
-    const isJson = method === 'json';
-    return [
-        `// APIForge — https://apiforge.brainfogagency.com`,
-        `import('apiforge-analyzer').then(({ default: APIForge }) => {`,
-        `  APIForge.analyze(${appVar}, {`,
-        `    ${isJson ? 'saveJson: true, upload: false,' : 'upload: true,'}`,
-        `  …`,
+function detectESM(filePath, content) {
+    try {
+        const pkg = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(process.cwd(), 'package.json'), 'utf-8'));
+        if (pkg.type === 'module')
+            return true;
+    }
+    catch { }
+    if (filePath.endsWith('.mjs'))
+        return true;
+    if (filePath.endsWith('.cjs'))
+        return false;
+    return /^(?:import|export)\s+/m.test(content);
+}
+function detectAppVariable(content) {
+    const patterns = [
+        /(?:const|let|var)\s+(\w+)\s*=\s*express\s*(?:\.default)?\s*\(/,
+        /(?:const|let|var)\s+(\w+)\s*=\s*(?:fastify|Fastify)\s*\(/,
+        /(?:const|let|var)\s+(\w+)\s*=\s*new\s+Koa\s*\(/,
+        /(?:const|let|var)\s+(\w+)\s*=\s*(?:Router|createApp|createServer)\s*\(/,
     ];
+    for (const re of patterns) {
+        const m = content.match(re);
+        if (m)
+            return m[1];
+    }
+    return null;
 }
-/** Best-guess start command from package.json scripts. */
-function getStartCommand() {
+// ─── Utilities ────────────────────────────────────────────────────────────────
+function tryUnlink(p) {
     try {
-        const pkg = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(process.cwd(), 'package.json'), 'utf-8'));
-        if (pkg.scripts?.start)
-            return 'npm start';
-        if (pkg.scripts?.dev)
-            return 'npm run dev';
-        if (pkg.scripts?.serve)
-            return 'npm run serve';
+        if ((0, fs_1.existsSync)(p))
+            (0, fs_1.unlinkSync)(p);
     }
     catch { }
-    return 'node ' + (detectedEntry || 'index.js');
 }
-// ─── Util ─────────────────────────────────────────────────────────────────────
 function sleep(ms) {
-    return new Promise((r) => setTimeout(r, ms));
+    return new Promise(res => setTimeout(res, ms));
 }
-main().catch((err) => {
+// ─── Boot ─────────────────────────────────────────────────────────────────────
+main().catch(err => {
     console.error(err);
     process.exit(1);
 });