robot-resources 1.15.1 → 1.15.3

package/lib/shell-config.js

@@ -1,183 +0,0 @@
-import { existsSync, readFileSync, writeFileSync, appendFileSync, statSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-
-/**
- * Idempotent writer for the NODE_OPTIONS auto-attach line in shell rc files.
- *
- * Phase 3 ships POSIX-only support: zsh, bash, fish. Windows ships a printed-
- * instructions fallback (Phase 6 problem). Every write is wrapped in a
- * marker block so `--uninstall` can find and remove cleanly without
- * regex-matching against the user's actual shell content:
- *
- *     # >>> robot-resources: NODE_OPTIONS auto-attach >>>
- *     export NODE_OPTIONS="${NODE_OPTIONS:-} --require /Users/x/.robot-resources/router/auto.cjs"
- *     # <<< robot-resources <<<
- *
- * Phase 8 fix: NODE_OPTIONS now uses an ABSOLUTE PATH to the auto.cjs the
- * wizard copied to ~/.robot-resources/router/. The previous bare-module
- * form `--require @robot-resources/router/auto` only resolved when the user
- * was cd'd inside a project that had `@robot-resources/router` in its
- * node_modules — and broke EVERY Node command from any other cwd with
- * `Cannot find module`. Result: every wizard-success Node user pre-Phase-8
- * had a NODE_OPTIONS line that crashed `node`/`npm`/etc. Symptom in
- * Supabase: `node_shim_installed: 8` but `adapter_attached: 0`.
- *
- * Behavior decisions (preserved from Phase 3):
- *   - If NODE_OPTIONS is already set with a different --require (rare; e.g.
- *     dd-trace), append ours after theirs. Both load. The user keeps their
- *     existing tooling. The shell expansion `${NODE_OPTIONS:-} ...` handles
- *     this correctly — POSIX shells concat space-separated --require flags.
- *   - Never clobber. If our marker block already exists, it's a no-op.
- *   - Write to ALL detected rc files (e.g. user has both .zshrc + .bashrc),
- *     so the user gets routing in whichever shell they actually open.
- */
-
-const MARK_BEGIN = '# >>> robot-resources: NODE_OPTIONS auto-attach >>>';
-const MARK_END = '# <<< robot-resources <<<';
-
-function buildPosixLine(autoPath) {
-  return `export NODE_OPTIONS="\${NODE_OPTIONS:-} --require ${autoPath}"`;
-}
-
-function buildFishLine(autoPath) {
-  // Fish has different syntax (no `export`, uses `set -x`).
-  return `set -x NODE_OPTIONS "$NODE_OPTIONS --require ${autoPath}"`;
-}
-
-/**
- * Discover which rc files are present for this user. Returns a list of
- * absolute paths in priority order (zsh first, bash second, fish third).
- * The wizard writes to ALL of them — users frequently edit one shell's
- * rc and forget another, and we'd rather over-cover than under-cover.
- */
-export function listShellRcFiles(home = homedir()) {
-  const candidates = [
-    { kind: 'zsh', path: join(home, '.zshrc') },
-    { kind: 'bash', path: join(home, '.bashrc') },
-    { kind: 'bash', path: join(home, '.bash_profile') }, // macOS often uses this
-    { kind: 'fish', path: join(home, '.config', 'fish', 'config.fish') },
-  ];
-  return candidates.filter((c) => existsSync(c.path));
-}
-
-/**
- * Returns true if at least one rc file already has our marker block.
- * Used by both the wizard (skip-if-already-installed) and uninstall
- * (gate the "remove" step).
- */
-export function hasShellLine(home = homedir()) {
-  for (const { path } of listShellRcFiles(home)) {
-    try {
-      const text = readFileSync(path, 'utf-8');
-      if (text.includes(MARK_BEGIN)) return true;
-    } catch { /* unreadable rc, skip */ }
-  }
-  return false;
-}
-
-/**
- * Idempotently append the marker block to every detected rc file. Returns
- * a list of files actually modified (empty if everything already had it).
- *
- * Each rc file is treated independently: the writer never aborts the
- * others on one failure. Per-file errors are returned as warnings the
- * caller can surface.
- */
-export function writeShellLine({ autoPath, home = homedir() }) {
-  if (!autoPath) {
-    throw new Error('writeShellLine requires { autoPath } — absolute path to auto.cjs');
-  }
-
-  const rcs = listShellRcFiles(home);
-  const written = [];
-  const errors = [];
-
-  if (rcs.length === 0) {
-    // POSIX shells but no rc file yet — create ~/.zshrc on macOS (default
-    // since 10.15), ~/.bashrc on Linux. Better than silently no-op'ing.
-    const fallback = process.platform === 'darwin'
-      ? { kind: 'zsh', path: join(home, '.zshrc') }
-      : { kind: 'bash', path: join(home, '.bashrc') };
-    rcs.push(fallback);
-  }
-
-  for (const rc of rcs) {
-    try {
-      let text = '';
-      try { text = readFileSync(rc.path, 'utf-8'); } catch { /* file may not exist yet */ }
-
-      if (text.includes(MARK_BEGIN)) {
-        // Already installed. Skip silently.
-        continue;
-      }
-
-      const line = rc.kind === 'fish' ? buildFishLine(autoPath) : buildPosixLine(autoPath);
-      const block =
-        (text && !text.endsWith('\n') ? '\n' : '') +
-        '\n' + MARK_BEGIN + '\n' + line + '\n' + MARK_END + '\n';
-
-      // Append, don't rewrite — preserves the user's content exactly.
-      appendFileSync(rc.path, block, { mode: 0o644 });
-      written.push(rc.path);
-    } catch (err) {
-      errors.push({ path: rc.path, message: err.message });
-    }
-  }
-
-  return { written, errors };
-}
-
-/**
- * Idempotently REMOVE the marker block from every detected rc file.
- * Mirror of writeShellLine. Returns a list of files actually modified.
- *
- * Removal is text-based (find MARK_BEGIN, find MARK_END, splice). If the
- * block was tampered with — e.g. user manually deleted MARK_END — we leave
- * the file alone and surface a warning. Never destructive on partial state.
- */
-export function removeShellLine(home = homedir()) {
-  const rcs = listShellRcFiles(home);
-  const removed = [];
-  const errors = [];
-
-  for (const rc of rcs) {
-    try {
-      const text = readFileSync(rc.path, 'utf-8');
-      const startIdx = text.indexOf(MARK_BEGIN);
-      if (startIdx === -1) continue;
-      const endIdx = text.indexOf(MARK_END, startIdx);
-      if (endIdx === -1) {
-        errors.push({ path: rc.path, message: 'marker_end_missing' });
-        continue;
-      }
-
-      // Splice from MARK_BEGIN through end of MARK_END line + trailing newline.
-      const afterEnd = text.indexOf('\n', endIdx);
-      const sliceEnd = afterEnd === -1 ? text.length : afterEnd + 1;
-
-      // Walk back over the leading newline our writer added so we don't
-      // accumulate blank lines on repeated install/uninstall cycles.
-      let sliceStart = startIdx;
-      while (sliceStart > 0 && text[sliceStart - 1] === '\n') sliceStart--;
-
-      const next = text.slice(0, sliceStart) +
-        (sliceStart > 0 ? '\n' : '') +
-        text.slice(sliceEnd);
-
-      writeFileSync(rc.path, next, { mode: getMode(rc.path) });
-      removed.push(rc.path);
-    } catch (err) {
-      errors.push({ path: rc.path, message: err.message });
-    }
-  }
-
-  return { removed, errors };
-}
-
-function getMode(path) {
-  try { return statSync(path).mode & 0o777; } catch { return 0o644; }
-}
-
-// Exported for tests + telemetry payloads.
-export { MARK_BEGIN, MARK_END, buildPosixLine, buildFishLine };

package/lib/source-edit-attach.js

@@ -1,469 +0,0 @@
-import { existsSync, readFileSync, writeFileSync, statSync, unlinkSync, readdirSync, openSync, readSync, closeSync } from 'node:fs';
-import { basename, dirname, extname, join, relative, resolve, sep } from 'node:path';
-import { NODE_AGENT_DEPS } from './detect.js';
-
-/**
- * Source-edit injection for non-OC Node agents (Phase 11).
- *
- * The Phase-3 NODE_OPTIONS approach only reaches processes that inherit
- * from a shell that loaded ~/.bashrc or ~/.zshrc. Cron / Docker / systemd /
- * Lambda / Cloud Run / serverless functions do NOT inherit shell rc files,
- * so the shim never loads in the agents that matter most. Funnel data
- * showed a 45-point cliff: 53% reach `node_shim_installed`, only 8.6% ever
- * emit `adapter_attached`.
- *
- * This module injects ONE LINE at the top of the user's entry source file:
- *
- *   // >>> robot-resources: auto-attach >>>
- *   require('@robot-resources/router/auto');
- *   // <<< robot-resources <<<
- *
- * (or `import '@robot-resources/router/auto';` for ESM/TS files.)
- *
- * The line runs whenever the agent process starts, regardless of how it
- * was launched. Cron, Docker, systemd, Lambda — all work the same.
- *
- * Marker-block convention mirrors shell-config.js exactly so an `--uninstall`
- * remove pass is text-based and never destructive on partial state.
- *
- * Backup: a `.rr-backup` is written once on first inject (never overwritten
- * on re-inject) so `--uninstall --purge` can restore the original source
- * even if the marker block was tampered with.
- */
-
-export const MARK_BEGIN = '// >>> robot-resources: auto-attach >>>';
-export const MARK_END = '// <<< robot-resources <<<';
-
-const REQUIRE_LINE = "require('@robot-resources/router/auto');";
-const IMPORT_LINE = "import '@robot-resources/router/auto';";
-
-/**
- * Decide which import syntax to inject for a given source file.
- * Implements Node's resolution rules verbatim:
- *   .cjs → cjs
- *   .mjs → esm
- *   .ts / .tsx → emit `import` (works under both ts-node CJS and tsx/ESM)
- *   .js / .jsx → walk up to nearest package.json, check "type" field.
- *                "module" → esm; anything else (or absent) → cjs.
- */
-export function detectImportSyntax(entryPath) {
-  const ext = extname(entryPath).toLowerCase();
-  if (ext === '.cjs') return 'cjs';
-  if (ext === '.mjs') return 'esm';
-  if (ext === '.ts' || ext === '.tsx') return 'esm';
-
-  // Walk up from the file's directory until we hit a package.json or
-  // exhaust the path. This is what Node itself does for `.js` files.
-  let dir = dirname(resolve(entryPath));
-  while (true) {
-    const pkgPath = join(dir, 'package.json');
-    if (existsSync(pkgPath)) {
-      try {
-        const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
-        return pkg.type === 'module' ? 'esm' : 'cjs';
-      } catch {
-        return 'cjs';
-      }
-    }
-    const parent = dirname(dir);
-    if (parent === dir) return 'cjs';
-    dir = parent;
-  }
-}
-
-// Phase 11.1 — directories pruned during the recursive walk. Skipping these
-// is the difference between a 50ms walk and a 30s one. Hardcoded — chasing
-// `.gitignore` would add a transitive dep risk for marginal coverage gain
-// (real false-positive rate from these dirs is already ~0).
-const SKIP_DIRS = new Set([
-  'node_modules', 'dist', 'build', '.next', 'out', 'coverage',
-  '.git', 'venv', '.venv', '__pycache__', '.svelte-kit', 'target',
-]);
-
-// Walker bounds. 4KB read because imports are always hoisted to the top of
-// the file — anything below isn't an import, and reading more is waste on
-// network filesystems / WSL. Depth 2 catches `src/agent.ts`,
-// `apps/api/src/index.ts`. File cap 500 stops huge monorepos from blowing
-// the wizard's budget.
-const WALK_DEPTH_MAX = 2;
-const WALK_FILE_CAP = 500;
-const READ_BYTES = 4096;
-
-const SCAN_EXTS = new Set(['.js', '.mjs', '.cjs', '.ts', '.tsx', '.jsx']);
-
-// Deliberately omits `index` — too generic to reliably signal "this is the
-// agent." A CLI tool's `cli.js` (matched via package.json `bin`) will lose
-// to a generic `index.js` if `index` is in this set, even though `bin` is
-// what the user actually runs. Names here are strong agent signals on
-// their own; `index` requires a complementary signal (`main`/`bin` match)
-// to be picked up.
-const ENTRY_NAME_PATTERN = /^(agent|bot|app|main|server|worker|handler)\./i;
-const TEST_FILENAME_PATTERN = /\.(test|spec)\./i;
-const TEST_PATH_FRAGMENT = /[\\/](?:test|tests|__tests__|spec|examples|scripts)[\\/]/i;
-
-/**
- * Locate the user's agent source file under cwd by scanning for AI-SDK
- * imports. Returns { winner, candidates, scanned, walked, ambiguous }.
- *
- * `winner` — absolute path of the highest-scoring file, or null if no file
- *            in cwd imports any SDK from `NODE_AGENT_DEPS`.
- * `candidates` — every file that scored > 0, sorted by score descending.
- *            Each entry: { path, score, syntax, reasons: string[] }.
- * `scanned` — count of files that imported any SDK (subset of `walked`).
- * `walked` — total source files inspected (capped at WALK_FILE_CAP).
- * `ambiguous` — true when winner's lead over runner-up is too narrow to
- *            silently pick (`winner.score < runner_up.score + 2 &&
- *            winner.score < runner_up.score * 1.5`). The wizard surfaces
- *            a chooser only when this is true.
- *
- * Why this replaces the package.json-gated detector: production data after
- * the Phase 11 release showed 5 of 5 fresh real users (JP/US/RU) failing
- * with `outcome: 'no_entry_detected'` because they ran the wizard from
- * a server's home dir, with no `package.json` at cwd. Real Node agents
- * commonly look like a single `agent.js` next to a `node_modules/` —
- * `package.json` is a project-shape signal, not an agent signal. The
- * actual ground truth for "this is an agent" is "this file imports an
- * AI SDK." `package.json` here downgrades to a *ranking hint*, used to
- * boost candidates whose path matches `bin` or `main`, but never to
- * gate detection.
- */
-export function findAgentSourceFile(cwd = process.cwd()) {
-  let walked = 0;
-  const sdkFiles = [];
-
-  // Recursive walker with hard caps. Each recursion increments depth;
-  // depth 0 is cwd itself, depth 1 is direct children, etc.
-  const walk = (dir, depth) => {
-    if (walked >= WALK_FILE_CAP) return;
-    if (depth > WALK_DEPTH_MAX) return;
-    let entries;
-    try {
-      entries = readdirSync(dir, { withFileTypes: true });
-    } catch {
-      // Permission or read error — skip this directory silently.
-      return;
-    }
-    for (const entry of entries) {
-      if (walked >= WALK_FILE_CAP) return;
-      if (entry.isDirectory()) {
-        if (SKIP_DIRS.has(entry.name) || entry.name.startsWith('.')) continue;
-        walk(join(dir, entry.name), depth + 1);
-      } else if (entry.isFile()) {
-        const ext = extname(entry.name).toLowerCase();
-        if (!SCAN_EXTS.has(ext)) continue;
-        walked++;
-        const abs = join(dir, entry.name);
-        const head = readHead(abs);
-        if (!head) continue;
-        const sdks = sdksFoundIn(head);
-        if (sdks.size > 0) {
-          sdkFiles.push({ path: abs, head, sdks, depth });
-        }
-      }
-    }
-  };
-
-  walk(cwd, 0);
-
-  // Score each candidate. The scoring system — finalised after a design
-  // review — is:
-  //   +5  imports any NODE_AGENT_DEPS SDK (boolean per file; multiple
-  //       imports from the same file don't pile points, so a wrapper file
-  //       with 6 re-exports doesn't outrank an actual agent file)
-  //   +1  also has a constructor call (`new Anthropic(...)`, etc.)
-  //   +4  filename matches /^(agent|bot|index|app|main|server|worker|handler)\./
-  //   +1  file lives at cwd root (depth 0)
-  //   -3  file is under /test/, /tests/, /__tests__/, /spec/, /examples/, /scripts/
-  //   -3  filename matches *.test.* or *.spec.*
-  //   +5  file matches package.json `bin` (when present — `bin` strictly dominates `main`)
-  //   +3  file matches package.json `main` (when present and ≠ `bin`)
-  const pkg = readPkg(cwd);
-  const binPath = pkg ? resolveBinPath(pkg, cwd) : null;
-  const mainPath = pkg ? resolveMainPath(pkg, cwd) : null;
-
-  const candidates = sdkFiles.map(({ path, head, sdks, depth }) => {
-    const reasons = [];
-    let score = 0;
-
-    score += 5; reasons.push(`+5 imports SDK (${[...sdks].join(',')})`);
-
-    if (hasConstructor(head)) { score += 1; reasons.push('+1 constructor call'); }
-
-    if (ENTRY_NAME_PATTERN.test(basename(path))) { score += 4; reasons.push('+4 entry-name match'); }
-
-    if (depth === 0) { score += 1; reasons.push('+1 cwd root'); }
-
-    if (TEST_PATH_FRAGMENT.test(path)) { score -= 3; reasons.push('-3 test/spec/examples path'); }
-    if (TEST_FILENAME_PATTERN.test(basename(path))) { score -= 3; reasons.push('-3 test/spec filename'); }
-
-    if (binPath && path === binPath) { score += 5; reasons.push('+5 package.json bin'); }
-    else if (mainPath && path === mainPath) { score += 3; reasons.push('+3 package.json main'); }
-
-    return {
-      path,
-      score,
-      syntax: detectImportSyntax(path),
-      reasons,
-    };
-  }).sort((a, b) => b.score - a.score);
-
-  const winner = candidates[0] ?? null;
-  const runnerUp = candidates[1] ?? null;
-
-  // "Clear winner" threshold: lead ≥ 2 absolute OR ≥ 1.5x runner-up.
-  // Either condition means we silently pick `winner`. Both close → ambiguous.
-  let ambiguous = false;
-  if (runnerUp) {
-    const leadOk = winner.score >= runnerUp.score + 2;
-    const ratioOk = winner.score >= runnerUp.score * 1.5;
-    ambiguous = !(leadOk || ratioOk);
-  }
-
-  return {
-    winner: winner?.path ?? null,
-    candidates,
-    scanned: sdkFiles.length,
-    walked,
-    ambiguous,
-  };
-}
-
-/**
- * Read the head of a file (first READ_BYTES bytes). Imports are always
- * hoisted to the top of a Node module — TypeScript and ESM both enforce
- * import hoisting, and CJS users put requires at the top by convention.
- * Reading more is waste on slow filesystems.
- */
-function readHead(filePath) {
-  let fd;
-  try {
-    fd = openSync(filePath, 'r');
-    const buf = Buffer.alloc(READ_BYTES);
-    const bytes = readSync(fd, buf, 0, READ_BYTES, 0);
-    return buf.slice(0, bytes).toString('utf-8');
-  } catch {
-    return null;
-  } finally {
-    if (fd != null) { try { closeSync(fd); } catch { /* ignore */ } }
-  }
-}
-
-/**
- * Return the set of SDK package names found in `text`. Boolean per SDK —
- * multiple `require('@anthropic-ai/sdk')` lines in the same file count
- * once. Both CJS (`require('foo')`) and ESM (`from 'foo'`) shapes are
- * checked; we don't care about quote style.
- */
-function sdksFoundIn(text) {
-  const found = new Set();
-  for (const sdk of NODE_AGENT_DEPS) {
-    const escaped = sdk.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-    const requireRe = new RegExp(`require\\(\\s*['"]${escaped}['"]\\s*\\)`);
-    const importRe = new RegExp(`from\\s+['"]${escaped}['"]`);
-    if (requireRe.test(text) || importRe.test(text)) found.add(sdk);
-  }
-  return found;
-}
-
-function hasConstructor(text) {
-  // Cheap regex; over-matches `if (new Anthropic())` etc. — that's fine,
-  // they still count as evidence that this file talks to a model.
-  return /new\s+(Anthropic|OpenAI|GoogleGenerativeAI)\s*\(/.test(text);
-}
-
-function readPkg(cwd) {
-  const p = join(cwd, 'package.json');
-  if (!existsSync(p)) return null;
-  try { return JSON.parse(readFileSync(p, 'utf-8')); } catch { return null; }
-}
-
-function resolveBinPath(pkg, cwd) {
-  let raw = null;
-  if (typeof pkg.bin === 'string') raw = pkg.bin;
-  else if (pkg.bin && typeof pkg.bin === 'object') {
-    const vals = Object.values(pkg.bin).filter((v) => typeof v === 'string');
-    if (vals.length === 1) raw = vals[0];
-  }
-  if (!raw) return null;
-  const abs = join(cwd, raw.replace(/^\.\//, ''));
-  return existsSync(abs) ? abs : null;
-}
-
-function resolveMainPath(pkg, cwd) {
-  if (typeof pkg.main !== 'string') return null;
-  const abs = join(cwd, pkg.main.replace(/^\.\//, ''));
-  return existsSync(abs) ? abs : null;
-}
-
-/**
- * Returns true if the given source file already contains our marker.
- * Used to skip-if-already-installed and to gate uninstall.
- */
-export function hasSourceMarker(filePath) {
-  try {
-    return readFileSync(filePath, 'utf-8').includes(MARK_BEGIN);
-  } catch {
-    return false;
-  }
-}
-
-/**
- * Idempotently inject the auto-attach marker block at the top of the file
- * (after shebang, if present). Writes a one-time backup at `${filePath}.rr-backup`.
- *
- * Returns { ok, alreadyInstalled, path, syntax, backupPath, error }.
- */
-export function writeSourceMarker(filePath, opts = {}) {
-  const syntax = opts.syntax ?? detectImportSyntax(filePath);
-
-  let original;
-  try { original = readFileSync(filePath, 'utf-8'); }
-  catch (err) {
-    return { ok: false, alreadyInstalled: false, path: filePath, syntax, error: `read_failed: ${err.message}` };
-  }
-
-  if (original.includes(MARK_BEGIN)) {
-    return { ok: true, alreadyInstalled: true, path: filePath, syntax, backupPath: backupPathFor(filePath) };
-  }
-
-  // Backup once. Never overwrite — preserves the user's pristine original
-  // even if they manually edit before our second pass.
-  const backupPath = backupPathFor(filePath);
-  let backupWritten = false;
-  if (!existsSync(backupPath)) {
-    try {
-      writeFileSync(backupPath, original, { mode: getMode(filePath) });
-      backupWritten = true;
-    } catch (err) {
-      return { ok: false, alreadyInstalled: false, path: filePath, syntax, error: `backup_failed: ${err.message}` };
-    }
-  }
-
-  // Insert position: after shebang line if present, otherwise at top.
-  // We do NOT try to skip past `"use strict";` — modern Node treats it as
-  // a normal directive; placing our require/import before it is harmless.
-  const line = syntax === 'esm' ? IMPORT_LINE : REQUIRE_LINE;
-  const block = `${MARK_BEGIN}\n${line}\n${MARK_END}\n`;
-
-  let next;
-  if (original.startsWith('#!')) {
-    const nl = original.indexOf('\n');
-    if (nl === -1) {
-      // single-line file, only a shebang — append our block on a new line
-      next = original + '\n' + block;
-    } else {
-      next = original.slice(0, nl + 1) + block + original.slice(nl + 1);
-    }
-  } else {
-    next = block + original;
-  }
-
-  try {
-    writeFileSync(filePath, next, { mode: getMode(filePath) });
-  } catch (err) {
-    return { ok: false, alreadyInstalled: false, path: filePath, syntax, error: `write_failed: ${err.message}`, backupPath, backupWritten };
-  }
-
-  return { ok: true, alreadyInstalled: false, path: filePath, syntax, backupPath, backupWritten };
-}
-
-/**
- * Idempotently remove the marker block from the source file. Mirror of
- * writeSourceMarker. Returns { ok, removed, restored, path, error }.
- *
- * If `restoreFromBackup` is true and a `.rr-backup` exists, restores from
- * the backup instead of splicing. Used for `--purge`. The backup is
- * deleted after a successful restore.
- */
-export function removeSourceMarker(filePath, { restoreFromBackup = false } = {}) {
-  let original;
-  try { original = readFileSync(filePath, 'utf-8'); }
-  catch (err) {
-    return { ok: false, removed: false, restored: false, path: filePath, error: `read_failed: ${err.message}` };
-  }
-
-  if (restoreFromBackup) {
-    const backupPath = backupPathFor(filePath);
-    if (existsSync(backupPath)) {
-      try {
-        const pristine = readFileSync(backupPath, 'utf-8');
-        writeFileSync(filePath, pristine, { mode: getMode(filePath) });
-        unlinkSync(backupPath);
-        return { ok: true, removed: true, restored: true, path: filePath };
-      } catch (err) {
-        return { ok: false, removed: false, restored: false, path: filePath, error: `restore_failed: ${err.message}` };
-      }
-    }
-    // No backup → fall through to marker splice.
-  }
-
-  const startIdx = original.indexOf(MARK_BEGIN);
-  if (startIdx === -1) {
-    return { ok: true, removed: false, restored: false, path: filePath };
-  }
-  const endIdx = original.indexOf(MARK_END, startIdx);
-  if (endIdx === -1) {
-    return { ok: false, removed: false, restored: false, path: filePath, error: 'marker_end_missing' };
-  }
-
-  // Splice from MARK_BEGIN through end of MARK_END line + the trailing
-  // newline our writer added. Walk backward over leading newlines so
-  // repeated install/uninstall cycles don't accumulate blanks.
-  const afterEnd = original.indexOf('\n', endIdx);
-  const sliceEnd = afterEnd === -1 ? original.length : afterEnd + 1;
-
-  let sliceStart = startIdx;
-  while (sliceStart > 0 && original[sliceStart - 1] === '\n') sliceStart--;
-
-  const next = original.slice(0, sliceStart) +
-    (sliceStart > 0 ? '\n' : '') +
-    original.slice(sliceEnd);
-
-  try {
-    writeFileSync(filePath, next, { mode: getMode(filePath) });
-  } catch (err) {
-    return { ok: false, removed: false, restored: false, path: filePath, error: `write_failed: ${err.message}` };
-  }
-
-  return { ok: true, removed: true, restored: false, path: filePath };
-}
-
-/**
- * Build the proposed diff a wizard can show before asking Y/N. Returns a
- * UI-friendly string with the marker block + a few lines of context.
- */
-export function previewInjection(filePath, opts = {}) {
-  const syntax = opts.syntax ?? detectImportSyntax(filePath);
-  const line = syntax === 'esm' ? IMPORT_LINE : REQUIRE_LINE;
-  let original = '';
-  try { original = readFileSync(filePath, 'utf-8'); } catch { /* ignore */ }
-  const firstLines = original.split('\n').slice(0, 3).join('\n');
-  return [
-    `+ ${MARK_BEGIN}`,
-    `+ ${line}`,
-    `+ ${MARK_END}`,
-    firstLines.split('\n').map((l) => `  ${l}`).join('\n'),
-  ].join('\n');
-}
-
-function backupPathFor(filePath) {
-  return `${filePath}.rr-backup`;
-}
-
-function getMode(filePath) {
-  try { return statSync(filePath).mode & 0o777; } catch { return 0o644; }
-}
-
-/**
- * Best-effort cwd-relative path for telemetry, falling back to basename
- * if the file is outside cwd. Used to avoid leaking absolute paths (which
- * can contain usernames) into Supabase.
- */
-export function pathForTelemetry(filePath, cwd = process.cwd()) {
-  const rel = relative(cwd, filePath);
-  if (rel.startsWith('..') || rel.includes(sep + '..' + sep)) {
-    // Outside cwd — basename only.
-    return filePath.split(sep).pop();
-  }
-  return rel;
-}