seo-intel 1.1.8 → 1.1.10

package/.env.example

@@ -8,6 +8,8 @@
 # ── Analysis Model (cloud, pick one) ──────────────────────────────────────
 # Gemini: Best value — 1M context, cheapest (~$0.01-0.05/analysis)
 GEMINI_API_KEY=
+# GEMINI_TIMEOUT_MS=120000
+# OPENCLAW_ANALYSIS_MODEL=default
 
 # Claude: Best quality — nuanced strategic reasoning (~$0.10-0.30/analysis)
 # ANTHROPIC_API_KEY=

package/CHANGELOG.md

@@ -1,42 +1,67 @@
 # Changelog
 
-## 1.1.8 (2026-03-27)
+## 1.1.10 (2026-03-27)
 
-- Rebranded all references from froggo.pro → ukkometa.fi (endpoints, dashboard links, license validation, bot user-agents, skill)
-- Pricing updated: €9.99/mo · €79/yr
-- Contact updated: ukko@ukkometa.fi
-- Added README.md and CHANGELOG.md to npm package and LS zip
+### Security
+- Fix SSRF: llms.txt URLs now respect robots.txt before enqueue (crawler/index.js)
+
+### Fixes
+- SQL injection audit complete — all queries use parameterised statements (no changes needed)
+
+### Testing
+- Mock crawl test passes end-to-end: crawls http://localhost:19876, stores 7 pages in SQLite
+- CI: Ubuntu job now runs mock crawl test after smoke checks
+- Fixed mock-crawl-test.js: server binds to 127.0.0.1, CLI resolved from install root, DB assertions corrected
+
+## 1.1.9 (2026-03-27)
+
+### Security
+- Fix shell injection risk in Gemini CLI integration (execSync → spawnSync + stdin)
+- Fix SSRF vector in llms.txt URL processing (hostname validation)
+- Fix SSRF: llms.txt URLs now respect robots.txt before enqueue
+- Set license cache file permissions to 0600 (owner-only)
+- SQL injection audit — all queries verified to use parameterised statements
+
+### Fixes
+- Crawler no longer upgrades http://localhost to https (fixes local/mock testing)
+- Updater cache moved to ~/.seo-intel/ (fixes permission errors on Linux global install)
+- Clear actionable error when Gemini times out and OpenClaw gateway is down
+- Project name passed to error context for timeout messages
+
+### Improvements
+- Defensive logging when license variant name is unrecognised
+- Setup wizard: Cloud Analysis column (gemini-3.1-pro, claude-sonnet-4-6, claude-opus-4-6, gpt-5.4, deepseek-r1) with API key input
+- Setup wizard: Agentic Setup picker — OpenClaw, Claude Code, Codex CLI, Perplexity with tailored copy-paste prompts
+- Setup wizard: Step 2 expanded to 1100px, OpenClaw as floating sidebar
 
 ## 1.1.7 (2026-03-26)
 
-### New Features
-- **Programmatic Template Intelligence** (`seo-intel templates <project>`) — detect URL pattern groups (e.g. `/token/*`, `/blog/*`), stealth-crawl samples, overlay GSC data, and score each group with keep/noindex/improve verdicts. Pro-gated.
-- **Stale domain auto-pruning** — domains removed from config are now automatically cleaned from the DB (pages, keywords, extractions, schemas, headings, links) on next crawl. No more ghost data from renamed/removed subdomains.
-- **Manual prune** — `seo-intel competitors <project> --prune` to clean stale DB entries on demand.
-- **Full body text storage** — crawler now stores full page body text in DB (up to 200K chars) for richer extraction and analysis. Log output stays compact.
+### New
+- **Programmatic Template Intelligence** (`seo-intel templates <project>`) — detect URL pattern groups (e.g. `/token/*`, `/blog/*`), stealth-crawl samples, overlay GSC data, and score each group with keep/noindex/improve verdicts
+- **Stale domain auto-pruning** — domains removed from config are automatically cleaned from DB on next crawl
+- **Manual prune** — `seo-intel competitors <project> --prune` to clean stale DB entries on demand
+- **Full body text storage** — crawler stores full page content in DB for richer offline extraction
 
 ### Improvements
-- **Background crawl/extract** — long-running crawl and extract jobs now survive browser tab close. Terminal shows "backgrounded" instead of "disconnected", and jobs continue server-side.
-- **Dashboard terminal** — stealth flag now visible in terminal command display. Stop button properly closes SSE + server-side process. Status bar syncs with terminal state.
-- **Templates button** added to dashboard terminal panel.
-- **Dashboard refresh** — crawl and analyze now always regenerate the multi-project dashboard, keeping all projects current.
-- **Config remove = DB remove** — `--remove` and `--remove-owned` now auto-prune matching DB data, not just config JSON.
+- **Background crawl/extract** — long-running jobs survive browser tab close
+- **Dashboard terminal** — stealth flag visible, stop button works properly, status bar syncs
+- **Templates button** added to dashboard terminal panel
+- **Dashboard refresh** — crawl and analyze always regenerate full multi-project dashboard
+- **Config remove = DB remove** — `--remove` and `--remove-owned` auto-prune matching DB data
 
 ### Fixes
-- SSE disconnect no longer kills crawl/extract processes (detached child process).
-- Terminal command display now shows `--stealth` flag when enabled.
+- SSE disconnect no longer kills crawl/extract processes
+- Terminal command display shows `--stealth` flag when enabled
 
 ## 1.1.6 (2026-03-24)
 
-- Stop button, stealth sync, extraction layout, EADDRINUSE recovery.
+- Stop button for crawl/extract jobs in dashboard
+- Stealth toggle sync between status bar and terminal
+- Extraction status bar layout improvements (CSS grid)
+- EADDRINUSE recovery — server opens existing dashboard instead of crashing
 
 ## 1.1.5 (2026-03-21)
 
-- Update checker, job stop API, background analyze, LAN Ollama hosts, `html` CLI command, wizard UX improvements.
-
-## 1.1.8 (2026-03-27)
-
-- Rebranded all references from froggo.pro → ukkometa.fi (endpoints, dashboard links, license validation, bot user-agents, skill)
-- Pricing updated: €9.99/mo · €79/yr
-- Contact updated: ukko@ukkometa.fi
-- Added README.md and CHANGELOG.md to npm package and LS zip
+- Update checker, job stop API, background analyze
+- LAN Ollama host support with fallback
+- `html` CLI command, wizard UX improvements

package/cli.js

@@ -1,4 +1,16 @@
 #!/usr/bin/env node
+
+// ── Node.js version guard ───────────────────────────────────────────────
+const [major, minor] = process.versions.node.split('.').map(Number);
+if (major < 22 || (major === 22 && minor < 5)) {
+  console.error(
+    `\n  SEO Intel requires Node.js 22.5 or later.\n` +
+    `  You have Node.js ${process.versions.node}.\n\n` +
+    `  Install the latest LTS:  https://nodejs.org\n`
+  );
+  process.exit(1);
+}
+
 import 'dotenv/config';
 import { program } from 'commander';
 import { spawnSync } from 'child_process';
@@ -47,6 +59,13 @@ checkForUpdates();
 try { mkdirSync(join(__dirname, 'reports'), { recursive: true }); } catch { /* ok */ }
 try { mkdirSync(join(__dirname, 'config'), { recursive: true }); } catch { /* ok */ }
 
+function defaultSiteUrl(domain) {
+  const host = String(domain || '').trim();
+  const hostname = host.split(':')[0].replace(/^\[|\]$/g, '');
+  const protocol = hostname === 'localhost' || hostname === '127.0.0.1' ? 'http' : 'https';
+  return `${protocol}://${host}`;
+}
+
 // ── AI AVAILABILITY PREFLIGHT ────────────────────────────────────────────
 /**
  * Check if any AI extraction backend is reachable.
@@ -435,7 +454,7 @@ program
         else if (config.competitors?.includes(site)) site.role = 'competitor';
         else site.role = 'owned';
       }
-      if (!site.url && site.domain) site.url = `https://${site.domain}`;
+      if (!site.url && site.domain) site.url = defaultSiteUrl(site.domain);
     }
 
     const sites = opts.domain
@@ -674,7 +693,8 @@ program
     console.log(chalk.gray(`Prompt saved: ${promptPath}`));
 
     // Call Gemini via gemini CLI (reuse existing auth)
-    const result = await callGemini(prompt);
+    process.env._SEO_INTEL_PROJECT = project;
+    const result = await callAnalysisModel(prompt, opts.model);
 
     if (!result) {
       console.error(chalk.red('No response from model.'));
@@ -991,17 +1011,117 @@ function loadConfig(project) {
 }
 
 async function callGemini(prompt) {
-  // Use gemini CLI (already auth'd via OpenClaw)
-  const { execSync } = await import('child_process');
+  return callAnalysisModel(prompt, 'gemini');
+}
+
+function getOpenClawToken() {
+  const envToken = process.env.OPENCLAW_TOKEN?.trim();
+  if (envToken) return envToken;
+
   try {
-    const result = execSync(
-      `echo ${JSON.stringify(prompt)} | gemini -p -`,
-      { maxBuffer: 10 * 1024 * 1024, timeout: 120000 }
-    ).toString();
-    return result;
+    const configPath = join(process.env.HOME || process.env.USERPROFILE || '', '.openclaw', 'openclaw.json');
+    const raw = readFileSync(configPath, 'utf8');
+    const matches = [...raw.matchAll(/"token":\s*"([a-f0-9]{40,})"/g)];
+    if (matches.length > 0) return matches[matches.length - 1][1];
+  } catch {}
+
+  return null;
+}
+
+async function callOpenClaw(prompt, model = 'default') {
+  const token = getOpenClawToken();
+  if (!token) throw new Error('OpenClaw token not found');
+
+  const timeoutMs = parseInt(process.env.OPENCLAW_TIMEOUT_MS || process.env.GEMINI_TIMEOUT_MS || '120000', 10);
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+
+  try {
+    const res = await fetch('http://127.0.0.1:18789/v1/chat/completions', {
+      method: 'POST',
+      signal: controller.signal,
+      headers: {
+        'Authorization': `Bearer ${token}`,
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify({
+        model: model === 'openclaw' ? 'default' : model,
+        messages: [{ role: 'user', content: prompt }],
+        temperature: 0.2,
+        max_tokens: 4000,
+      }),
+    });
+
+    if (!res.ok) throw new Error(`OpenClaw API error: ${res.status} ${await res.text()}`);
+
+    const data = await res.json();
+    return data.choices?.[0]?.message?.content || null;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+
+async function callAnalysisModel(prompt, model = 'gemini') {
+  const requestedModel = String(model || 'gemini').trim();
+  const normalizedModel = requestedModel.toLowerCase();
+
+  if (normalizedModel !== 'gemini') {
+    try {
+      return await callOpenClaw(prompt, requestedModel);
+    } catch (err) {
+      console.error('[openclaw]', err.message);
+      return null;
+    }
+  }
+
+  const timeoutMs = parseInt(process.env.GEMINI_TIMEOUT_MS || '120000', 10);
+  try {
+    const result = spawnSync('gemini', ['-p', '-'], {
+      input: prompt,
+      encoding: 'utf8',
+      timeout: timeoutMs,
+      maxBuffer: 10 * 1024 * 1024
+    });
+
+    if (result.error) throw result.error;
+    if (result.status !== 0) {
+      throw new Error(result.stderr?.trim() || `gemini exited with status ${result.status}`);
+    }
+
+    return result.stdout;
   } catch (err) {
-    console.error('[gemini]', err.message);
-    return null;
+    const fallbackModel = process.env.OPENCLAW_ANALYSIS_MODEL || 'default';
+    try {
+      console.warn(`[gemini] ${err.message}`);
+      console.log(chalk.yellow(`Gemini CLI unavailable, retrying via OpenClaw (${fallbackModel})...\n`));
+      return await callOpenClaw(prompt, fallbackModel);
+    } catch (fallbackErr) {
+      // Produce clear, actionable error messages
+      const geminiMsg = err.message || '';
+      const ocMsg = fallbackErr.message || '';
+
+      const isTimeout = geminiMsg.includes('ETIMEDOUT') || geminiMsg.includes('timeout') || err.name === 'AbortError';
+      const isGatewayDown = ocMsg.includes('ECONNREFUSED') || ocMsg.includes('token not found') || ocMsg.includes('gateway');
+
+      console.error(chalk.red('\n  ✗ Analysis failed — no model available\n'));
+
+      if (isTimeout) {
+        console.error(chalk.yellow('  Gemini timed out.') + chalk.dim(' Try: GEMINI_TIMEOUT_MS=180000 seo-intel analyze ' + (process.env._SEO_INTEL_PROJECT || '<project>')));
+      } else {
+        console.error(chalk.dim(`  Gemini: ${geminiMsg}`));
+      }
+
+      if (isGatewayDown) {
+        console.error(chalk.yellow('  OpenClaw gateway is not running.'));
+        console.error(chalk.dim('  Start it:   ') + chalk.cyan('openclaw gateway'));
+        console.error(chalk.dim('  Or set key: ') + chalk.cyan('echo "GEMINI_API_KEY=your-key" >> .env'));
+      } else {
+        console.error(chalk.dim(`  OpenClaw: ${ocMsg}`));
+      }
+
+      console.error(chalk.dim('\n  Docs: https://ukkometa.fi/en/seo-intel/setup/\n'));
+      return null;
+    }
   }
 }
 
@@ -1268,8 +1388,8 @@ program
     if (info.npmVersion) {
       console.log(chalk.gray('  npm registry:     ') + chalk.white(info.npmVersion));
     }
-    if (info.froggoVersion) {
-      console.log(chalk.gray('  ukkometa.fi:      ') + chalk.white(info.froggoVersion));
+    if (info.ukkometaVersion) {
+      console.log(chalk.gray('  ukkometa.fi:      ') + chalk.white(info.ukkometaVersion));
     }
 
     if (!info.hasUpdate) {
@@ -1428,7 +1548,7 @@ program
     // ── Add competitor
     if (opts.add) {
       const domain = domainFromUrl(opts.add);
-      const url = opts.add.startsWith('http') ? opts.add : `https://${opts.add}`;
+      const url = opts.add.startsWith('http') ? opts.add : defaultSiteUrl(opts.add);
       if (config.competitors.some(c => c.domain === domain)) {
         console.log(chalk.yellow(`  ⚠ ${domain} is already a competitor`));
       } else {
@@ -1455,7 +1575,7 @@ program
     if (opts.addOwned) {
       if (!config.owned) config.owned = [];
       const domain = domainFromUrl(opts.addOwned);
-      const url = opts.addOwned.startsWith('http') ? opts.addOwned : `https://${opts.addOwned}`;
+      const url = opts.addOwned.startsWith('http') ? opts.addOwned : defaultSiteUrl(opts.addOwned);
       if (config.owned.some(o => o.domain === domain)) {
         console.log(chalk.yellow(`  ⚠ ${domain} is already an owned domain`));
       } else {
@@ -1482,7 +1602,7 @@ program
     // ── Change target
     if (opts.setTarget) {
       const domain = domainFromUrl(opts.setTarget);
-      const url = opts.setTarget.startsWith('http') ? opts.setTarget : `https://${opts.setTarget}`;
+      const url = opts.setTarget.startsWith('http') ? opts.setTarget : defaultSiteUrl(opts.setTarget);
       config.target = { url, domain, role: 'target' };
       config.context.url = url;
       console.log(chalk.green(`  ✓ Target changed to: ${domain}`));

package/crawler/index.js

@@ -11,6 +11,7 @@ const MAX_PAGES    = parseInt(process.env.CRAWL_MAX_PAGES  || '50');
 const MAX_DEPTH    = parseInt(process.env.CRAWL_MAX_DEPTH  || '3');
 const TIMEOUT      = parseInt(process.env.CRAWL_TIMEOUT_MS || '12000');
 const PAGE_BUDGET  = parseInt(process.env.PAGE_BUDGET_MS   || '25000'); // hard per-page wall-clock limit
+const LOOPBACK_HOSTNAMES = new Set(['localhost', '127.0.0.1']);
 
 // ── Content quality gate ────────────────────────────────────────────────
 const SHELL_PATTERNS = /id=["'](root|app|__next|__nuxt)["']|<noscript[^>]*>.*enable javascript/i;
@@ -190,7 +191,10 @@ export async function* crawlDomain(startUrl, opts = {}) {
   const effectiveUA = isDocsHostname ? GOOGLEBOT_UA : defaultUA;
 
   async function tryLoadLlmsTxt() {
-    const llmsUrl = `https://${base.hostname}/llms.txt`;
+    const llmsOrigin = base.protocol === 'http:' && !LOOPBACK_HOSTNAMES.has(base.hostname)
+      ? `https://${base.host}`
+      : base.origin;
+    const llmsUrl = `${llmsOrigin}/llms.txt`;
     try {
       const controller = new AbortController();
       const t = setTimeout(() => controller.abort(), Math.min(TIMEOUT, 8000));
@@ -224,6 +228,15 @@ export async function* crawlDomain(startUrl, opts = {}) {
       const unique = [...new Set(urls)];
       let added = 0;
       for (const u of unique) {
+        try {
+          if (new URL(u).hostname !== base.hostname) continue;
+        } catch {
+          continue;
+        }
+        if (!opts.stealth) {
+          const robotsResult = await checkRobots(u).catch(() => ({ allowed: true }));
+          if (!robotsResult.allowed) continue;
+        }
         if (!queue.some(q => q.url === u)) {
           queue.push({ url: u, depth: 1 });
           added++;

package/lib/license.js

@@ -1,22 +1,25 @@
 /**
  * SEO Intel — License System
  *
- * Validation priority:
- *   1. FROGGO_TOKEN → validate against Froggo API
- *   2. SEO_INTEL_LICENSE → validate against Lemon Squeezy API
- *   3. No key → Free tier
+ * Validation flow:
+ *   1. SEO_INTEL_LICENSE → activate/validate against Lemon Squeezy License API
+ *   2. No key → Free tier
  *
  * Local cache: ~/.seo-intel/license-cache.json
  *   - LS keys: cache 24h, stale up to 7 days if API unreachable
- *   - Froggo tokens: cache 24h, stale up to 24h if API unreachable
  *   - Beyond stale limit → degrade to free tier + warn
  *
+ * Activation flow (Lemon Squeezy):
+ *   - First run: POST /v1/licenses/activate → stores instance_id locally
+ *   - Subsequent runs: POST /v1/licenses/validate with instance_id
+ *   - Machine-specific: instance_name = "seo-intel-<machineId>"
+ *
  * Free tier: crawl + raw HTML export only. No AI extraction or analysis.
- * Solo (€19.99/mo or €199.99/yr via LS): Full AI extraction + analysis, all commands.
+ * Solo (€19.99/mo or €199.99/yr): Full AI extraction + analysis, all commands.
  * Agency: Later phase — not sold yet.
  */
 
-import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { chmodSync, existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
 import { hostname, userInfo, platform } from 'os';
@@ -32,8 +35,6 @@ const CACHE_PATH = join(CACHE_DIR, 'license-cache.json');
 // Stale limits (ms)
 const LS_CACHE_TTL = 24 * 60 * 60 * 1000;        // 24h fresh
 const LS_STALE_LIMIT = 7 * 24 * 60 * 60 * 1000;   // 7 days stale max
-const FROGGO_CACHE_TTL = 24 * 60 * 60 * 1000;      // 24h fresh
-const FROGGO_STALE_LIMIT = 24 * 60 * 60 * 1000;    // 24h stale max
 
 // ── Tiers ──────────────────────────────────────────────────────────────────
 
@@ -91,9 +92,18 @@ function writeCache(data) {
   try {
     mkdirSync(CACHE_DIR, { recursive: true });
     writeFileSync(CACHE_PATH, JSON.stringify(data, null, 2), 'utf8');
+    try { chmodSync(CACHE_PATH, 0o600); } catch {}
   } catch { /* best-effort */ }
 }
 
+function getTierFromVariantName(variantName) {
+  const normalized = (variantName || '').toLowerCase();
+  if (!normalized.includes('agency') && !normalized.includes('solo') && !normalized.includes('pro')) {
+    console.warn(`[license] Unknown variant name: "${normalized}" — defaulting to solo`);
+  }
+  return normalized.includes('agency') ? 'agency' : 'solo';
+}
+
 /**
  * Check if cached validation is still usable.
  * Returns { valid, tier, stale } or null if cache is expired/missing.
@@ -103,123 +113,176 @@ function checkCache(key) {
   if (!cache || cache.key !== key) return null;
 
   const age = Date.now() - (cache.validatedAt || 0);
-  const ttl = cache.source === 'froggo' ? FROGGO_CACHE_TTL : LS_CACHE_TTL;
-  const staleLimit = cache.source === 'froggo' ? FROGGO_STALE_LIMIT : LS_STALE_LIMIT;
 
-  if (age < ttl) {
-    return { valid: true, tier: cache.tier, stale: false, source: cache.source };
+  if (age < LS_CACHE_TTL) {
+    return { valid: true, tier: cache.tier, stale: false, source: 'lemon-squeezy', instanceId: cache.instanceId };
   }
-  if (age < staleLimit) {
-    return { valid: true, tier: cache.tier, stale: true, source: cache.source };
+  if (age < LS_STALE_LIMIT) {
+    return { valid: true, tier: cache.tier, stale: true, source: 'lemon-squeezy', instanceId: cache.instanceId };
   }
   return null; // Expired beyond stale limit
 }
 
-// ── Lemon Squeezy Validation ───────────────────────────────────────────────
+// ── Lemon Squeezy License API ────────────────────────────────────────────
 
 /**
- * Validate a license key against Lemon Squeezy API.
- * Returns { valid, tier, error? } — never throws.
+ * Activate a license key against Lemon Squeezy.
+ * POST https://api.lemonsqueezy.com/v1/licenses/activate
+ * Params: license_key, instance_name
+ * Returns instance_id on success.
  */
-async function validateWithLS(key) {
+async function activateWithLS(key) {
   try {
     const controller = new AbortController();
     const timeout = setTimeout(() => controller.abort(), 8000);
 
-    const res = await fetch('https://api.lemonsqueezy.com/v1/licenses/validate', {
+    const body = new URLSearchParams({
+      license_key: key,
+      instance_name: `seo-intel-${getMachineId()}`,
+    });
+
+    const res = await fetch('https://api.lemonsqueezy.com/v1/licenses/activate', {
       signal: controller.signal,
       method: 'POST',
-      headers: { 'Content-Type': 'application/json', 'Accept': 'application/json' },
-      body: JSON.stringify({
-        license_key: key,
-        instance_name: `seo-intel-${getMachineId()}`,
-      }),
+      headers: { 'Accept': 'application/json' },
+      body,
     });
 
     clearTimeout(timeout);
     const data = await res.json();
 
-    if (data.valid) {
-      // Determine tier from LS metadata
-      // Convention: product variant name contains "solo" or "agency"
-      const variantName = (data.meta?.variant_name || data.license_key?.key_data?.variant || '').toLowerCase();
-      const tier = variantName.includes('agency') ? 'agency' : 'solo';
-      return { valid: true, tier };
+    if (data.activated) {
+      const variantName = (data.meta?.variant_name || '').toLowerCase();
+      const tier = getTierFromVariantName(variantName);
+      return {
+        valid: true,
+        tier,
+        instanceId: data.instance?.id || null,
+        meta: data.meta,
+      };
+    }
+
+    // Already at activation limit? Try validate instead (might be same machine re-activating)
+    if (data.error && data.error.includes('activation limit')) {
+      return { valid: false, error: data.error, activationLimitReached: true };
     }
 
-    return { valid: false, error: data.error || 'License key not valid' };
+    return { valid: false, error: data.error || 'Activation failed' };
   } catch (err) {
     return { valid: false, error: `Network error: ${err.message}`, offline: true };
   }
 }
 
-// ── Froggo Token Validation ────────────────────────────────────────────────
-
 /**
- * Validate a Froggo marketplace token.
- * Returns { valid, tier, error? } — never throws.
+ * Validate a license key against Lemon Squeezy.
+ * POST https://api.lemonsqueezy.com/v1/licenses/validate
+ * Params: license_key, instance_id (optional)
  */
-async function validateWithFroggo(token) {
+async function validateWithLS(key, instanceId) {
   try {
     const controller = new AbortController();
     const timeout = setTimeout(() => controller.abort(), 8000);
 
-    const res = await fetch('https://ukkometa.fi/api/seo-intel/licenses/validate', {
+    const params = { license_key: key };
+    if (instanceId) params.instance_id = instanceId;
+    const body = new URLSearchParams(params);
+
+    const res = await fetch('https://api.lemonsqueezy.com/v1/licenses/validate', {
       signal: controller.signal,
       method: 'POST',
-      headers: { 'Content-Type': 'application/json', 'Accept': 'application/json' },
-      body: JSON.stringify({
-        token,
-        product: 'seo-intel',
-      }),
+      headers: { 'Accept': 'application/json' },
+      body,
     });
 
     clearTimeout(timeout);
     const data = await res.json();
 
     if (data.valid) {
-      const tier = (data.tier || 'solo').toLowerCase();
-      return { valid: true, tier: tier === 'agency' ? 'agency' : 'solo' };
+      const variantName = (data.meta?.variant_name || '').toLowerCase();
+      const tier = getTierFromVariantName(variantName);
+      return {
+        valid: true,
+        tier,
+        instanceId: data.instance?.id || instanceId,
+        status: data.license_key?.status,
+        meta: data.meta,
+      };
     }
 
-    return { valid: false, error: data.error || 'Token not valid' };
+    return { valid: false, error: data.error || 'License key not valid', status: data.license_key?.status };
   } catch (err) {
     return { valid: false, error: `Network error: ${err.message}`, offline: true };
   }
 }
 
+/**
+ * Deactivate a license key instance.
+ * POST https://api.lemonsqueezy.com/v1/licenses/deactivate
+ * Params: license_key, instance_id
+ */
+export async function deactivateLicense() {
+  const keyInfo = readKeyFromEnv();
+  if (!keyInfo) return { deactivated: false, error: 'No license key found' };
+
+  const cache = readCache();
+  const instanceId = cache?.instanceId;
+  if (!instanceId) return { deactivated: false, error: 'No active instance to deactivate' };
+
+  try {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 8000);
+
+    const body = new URLSearchParams({
+      license_key: keyInfo.value,
+      instance_id: instanceId,
+    });
+
+    const res = await fetch('https://api.lemonsqueezy.com/v1/licenses/deactivate', {
+      signal: controller.signal,
+      method: 'POST',
+      headers: { 'Accept': 'application/json' },
+      body,
+    });
+
+    clearTimeout(timeout);
+    const data = await res.json();
+
+    if (data.deactivated) {
+      // Clear local cache
+      writeCache({});
+      _cachedLicense = undefined;
+      return { deactivated: true };
+    }
+
+    return { deactivated: false, error: data.error || 'Deactivation failed' };
+  } catch (err) {
+    return { deactivated: false, error: `Network error: ${err.message}` };
+  }
+}
+
 // ── License Loading ─────────────────────────────────────────────────────────
 
 let _cachedLicense = undefined;
 
 /**
- * Read the license key / token from environment or .env file.
+ * Read the license key from environment or .env file.
  * Returns { type, value } or null.
  */
 function readKeyFromEnv() {
-  // 1. Check Froggo token first (marketplace priority)
-  let froggoToken = process.env.FROGGO_TOKEN;
   let lsKey = process.env.SEO_INTEL_LICENSE;
 
-  // 2. Check .env file
-  if (!froggoToken || !lsKey) {
+  // Check .env file
+  if (!lsKey) {
     const envPath = join(ROOT, '.env');
     if (existsSync(envPath)) {
       try {
         const content = readFileSync(envPath, 'utf8');
-        if (!froggoToken) {
-          const match = content.match(/^FROGGO_TOKEN=(.+)$/m);
-          if (match) froggoToken = match[1].trim().replace(/^["']|["']$/g, '');
-        }
-        if (!lsKey) {
-          const match = content.match(/^SEO_INTEL_LICENSE=(.+)$/m);
-          if (match) lsKey = match[1].trim().replace(/^["']|["']$/g, '');
-        }
+        const match = content.match(/^SEO_INTEL_LICENSE=(.+)$/m);
+        if (match) lsKey = match[1].trim().replace(/^["']|["']$/g, '');
       } catch { /* ok */ }
     }
   }
 
-  if (froggoToken) return { type: 'froggo', value: froggoToken };
   if (lsKey) return { type: 'lemon-squeezy', value: lsKey };
   return null;
 }
@@ -260,7 +323,13 @@ export function loadLicense() {
 }
 
 /**
- * Async license activation — validates against remote API and caches result.
+ * Async license activation — validates against Lemon Squeezy and caches result.
+ *
+ * Flow:
+ *   1. If we have a cached instanceId → validate with it
+ *   2. If no instanceId → activate (creates new instance)
+ *   3. If activation limit reached → validate without instanceId (key-level check)
+ *
  * Call this at startup or when loadLicense() returns needsActivation: true.
  * Returns the validated license object.
  */
@@ -273,34 +342,46 @@ export async function activateLicense() {
     return _cachedLicense;
   }
 
+  // Check if we already have an instanceId from a previous activation
+  const cache = readCache();
+  const existingInstanceId = (cache && cache.key === keyInfo.value) ? cache.instanceId : null;
+
   let result;
-  if (keyInfo.type === 'froggo') {
-    result = await validateWithFroggo(keyInfo.value);
+
+  if (existingInstanceId) {
+    // We have a stored instance — validate it
+    result = await validateWithLS(keyInfo.value, existingInstanceId);
   } else {
-    result = await validateWithLS(keyInfo.value);
+    // No stored instance — try to activate
+    result = await activateWithLS(keyInfo.value);
+
+    // If activation limit reached, fall back to key-level validate
+    if (!result.valid && result.activationLimitReached) {
+      result = await validateWithLS(keyInfo.value);
+    }
   }
 
   if (result.valid) {
-    // Cache the successful validation
+    // Cache the successful validation with instanceId
     writeCache({
       key: keyInfo.value,
       tier: result.tier,
       validatedAt: Date.now(),
-      source: keyInfo.type,
+      source: 'lemon-squeezy',
+      instanceId: result.instanceId || existingInstanceId,
       machineId: getMachineId(),
     });
 
     const tierData = TIERS[result.tier] || TIERS.solo;
-    _cachedLicense = { active: true, tier: result.tier, key: keyInfo.value, source: keyInfo.type, ...tierData };
+    _cachedLicense = { active: true, tier: result.tier, key: keyInfo.value, source: 'lemon-squeezy', ...tierData };
     return _cachedLicense;
   }
 
   if (result.offline) {
     // Network error — check if we have any stale cache at all
-    const cache = readCache();
     if (cache && cache.key === keyInfo.value) {
       const tierData = TIERS[cache.tier] || TIERS.solo;
-      _cachedLicense = { active: true, tier: cache.tier, key: keyInfo.value, source: cache.source, stale: true, ...tierData };
+      _cachedLicense = { active: true, tier: cache.tier, key: keyInfo.value, source: 'lemon-squeezy', stale: true, ...tierData };
       return _cachedLicense;
     }
   }

package/lib/updater.js

@@ -17,6 +17,7 @@
  */
 
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { homedir } from 'os';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
 
@@ -40,8 +41,8 @@ export function getCurrentVersion() {
 
 // ── Cache file ─────────────────────────────────────────────────────────────
 
-const CACHE_DIR = join(ROOT, '.cache');
-const CACHE_FILE = join(CACHE_DIR, 'update-check.json');
+const CACHE_DIR = join(homedir(), '.seo-intel');
+const CACHE_FILE = join(CACHE_DIR, 'update-cache.json');
 const CACHE_TTL_MS = 24 * 60 * 60 * 1000; // 24 hours
 
 function readCache() {
@@ -116,7 +117,7 @@ async function checkNpm() {
  * Check ukkometa.fi for latest version.
  * Endpoint returns { version, changelog?, downloadUrl? }
  */
-async function checkFroggo() {
+async function checkUkkometa() {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), 5000);
 
@@ -165,12 +166,12 @@ export function checkForUpdates() {
       const current = getCurrentVersion();
 
       // Check both sources in parallel
-      const [npmVersion, froggoData] = await Promise.all([
+      const [npmVersion, ukkometaData] = await Promise.all([
         checkNpm(),
-        checkFroggo(),
+        checkUkkometa(),
       ]);
 
-      const froggoVersion = froggoData?.version || null;
+      const ukkometaVersion = ukkometaData?.version || null;
 
       // Determine the highest available version
       let latestVersion = current;
@@ -182,11 +183,11 @@ export function checkForUpdates() {
         latestVersion = npmVersion;
         source = 'npm';
       }
-      if (froggoVersion && compareSemver(froggoVersion, latestVersion) > 0) {
-        latestVersion = froggoVersion;
-        source = 'froggo';
-        changelog = froggoData.changelog;
-        downloadUrl = froggoData.downloadUrl;
+      if (ukkometaVersion && compareSemver(ukkometaVersion, latestVersion) > 0) {
+        latestVersion = ukkometaVersion;
+        source = 'ukkometa';
+        changelog = ukkometaData.changelog;
+        downloadUrl = ukkometaData.downloadUrl;
       }
 
       const hasUpdate = compareSemver(latestVersion, current) > 0;
@@ -199,10 +200,10 @@ export function checkForUpdates() {
         changelog,
         downloadUrl,
         npmVersion,
-        froggoVersion,
-        security: froggoData?.security || false,
-        securitySeverity: froggoData?.securitySeverity || null,
-        updatePolicy: froggoData?.updatePolicy || null,
+        ukkometaVersion,
+        security: ukkometaData?.security || false,
+        securitySeverity: ukkometaData?.securitySeverity || null,
+        updatePolicy: ukkometaData?.updatePolicy || null,
       };
 
       writeCache(_updateResult);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "seo-intel",
-  "version": "1.1.8",
+  "version": "1.1.10",
   "description": "Local Ahrefs-style SEO competitor intelligence. Crawl → SQLite → cloud analysis.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",

package/server.js

@@ -501,13 +501,11 @@ async function handleRequest(req, res) {
         envContent = readFileSync(envPath, 'utf8');
       }
 
-      // Determine key type
-      const isFroggo = key.startsWith('FROGGO_') || key.length > 60;
-      const envVar = isFroggo ? 'FROGGO_TOKEN' : 'SEO_INTEL_LICENSE';
+      const envVar = 'SEO_INTEL_LICENSE';
 
-      // Remove existing lines for both key types
+      // Remove existing license line
       const lines = envContent.split('\n').filter(l =>
-        !l.startsWith('SEO_INTEL_LICENSE=') && !l.startsWith('FROGGO_TOKEN=')
+        !l.startsWith('SEO_INTEL_LICENSE=')
       );
       lines.push(`${envVar}=${key}`);
 

package/setup/wizard.html

@@ -170,6 +170,10 @@ body {
   max-width: var(--max-width);
   margin: 0 auto;
 }
+#step2.step-panel {
+  max-width: 1100px;
+  margin: 0 auto;
+}
 .step-panel {
   display: none;
   animation: fadeIn 0.3s ease;
@@ -333,7 +337,7 @@ body {
 /* ─── Model Cards (Step 2) ───────────────────────────────────────────── */
 .model-columns {
   display: grid;
-  grid-template-columns: 1fr 1fr;
+  grid-template-columns: 1fr 1fr 1fr;
   gap: 20px;
 }
 .model-section {
@@ -1286,39 +1290,133 @@ input::placeholder {
 
     <!-- OpenClaw Setup Banner -->
     <div id="openclawBanner" class="openclaw-banner" style="display:none;">
-      <div class="openclaw-banner-recommended" id="ocBannerRecommended" style="display:none;">
-        <div class="openclaw-banner-icon">
-          <!-- OpenClaw logo placeholder — replace with actual SVG when available -->
-          <svg width="28" height="28" viewBox="0 0 28 28" fill="none" xmlns="http://www.w3.org/2000/svg">
-            <circle cx="14" cy="14" r="13" stroke="currentColor" stroke-width="1.5" opacity="0.6"/>
-            <path d="M9 12c0-2.8 2.2-5 5-5s5 2.2 5 5c0 1.8-1 3.4-2.4 4.3L18 20H10l1.4-3.7C10 15.4 9 13.8 9 12z" fill="currentColor" opacity="0.8"/>
-          </svg>
+      <!-- Always-shown agentic setup block -->
+      <div id="ocBannerRecommended" style="display:none;">
+        <div class="openclaw-banner-title" style="margin-bottom:8px;">
+          <i class="fa-solid fa-wand-magic-sparkles" style="color:var(--accent-purple); margin-right:6px;"></i>
+          Agentic Setup — let an AI handle this
         </div>
-        <div class="openclaw-banner-content">
-          <div class="openclaw-banner-title">OpenClaw Setup Available</div>
-          <div class="openclaw-banner-desc">OpenClaw guides you through the entire setup conversationally — LLM configuration, cloud model routing, OAuth, and troubleshooting. <strong>Recommended for the best experience.</strong></div>
-          <div style="margin-top:10px; padding:8px 10px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.72rem; color:var(--text-secondary); display:flex; align-items:center; gap:8px;">
+        <div class="openclaw-banner-desc" style="margin-bottom:14px;">Pick your agent. Copy the prompt. Paste it in. Done.</div>
+
+        <!-- Runtime tabs -->
+        <div style="display:flex; gap:6px; flex-wrap:wrap; margin-bottom:12px;" id="agentRuntimeTabs">
+          <button class="btn btn-sm agent-runtime-tab active" data-runtime="openclaw" onclick="selectAgentRuntime('openclaw', this)" style="font-size:0.65rem;">
+            <i class="fa-solid fa-wand-magic-sparkles" style="margin-right:4px;"></i>OpenClaw
+          </button>
+          <button class="btn btn-sm agent-runtime-tab" data-runtime="claudecode" onclick="selectAgentRuntime('claudecode', this)" style="font-size:0.65rem;">
+            <i class="fa-solid fa-terminal" style="margin-right:4px;"></i>Claude Code
+          </button>
+          <button class="btn btn-sm agent-runtime-tab" data-runtime="codex" onclick="selectAgentRuntime('codex', this)" style="font-size:0.65rem;">
+            <i class="fa-solid fa-code" style="margin-right:4px;"></i>Codex CLI
+          </button>
+          <button class="btn btn-sm agent-runtime-tab" data-runtime="perplexity" onclick="selectAgentRuntime('perplexity', this)" style="font-size:0.65rem;">
+            <i class="fa-solid fa-magnifying-glass" style="margin-right:4px;"></i>Perplexity
+          </button>
+        </div>
+
+        <!-- Runtime panels -->
+        <div id="agentRuntime-openclaw" class="agent-runtime-panel">
+          <div style="font-size:0.68rem; color:var(--text-muted); margin-bottom:8px;">OpenClaw is running — it can guide setup directly. Run this in your terminal first:</div>
+          <div style="padding:8px 10px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.68rem; color:var(--text-secondary); display:flex; align-items:center; gap:8px; margin-bottom:8px;">
             <span style="color:var(--text-muted);">$</span>
             <span id="clawhubCmd">clawhub install ukkometa/seo-intel</span>
-            <button class="btn btn-sm" style="margin-left:auto; padding:3px 8px; font-size:0.65rem;" onclick="navigator.clipboard.writeText('clawhub install ukkometa/seo-intel');this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
+            <button class="btn btn-sm" style="margin-left:auto; padding:3px 8px; font-size:0.6rem;" onclick="navigator.clipboard.writeText('clawhub install ukkometa/seo-intel');this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
+          </div>
+          <div style="font-size:0.65rem; color:var(--text-muted); margin-bottom:8px;">Or paste this into your OpenClaw chat:</div>
+          <div style="position:relative; padding:8px 10px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.62rem; color:var(--text-secondary); line-height:1.6; margin-bottom:10px;">
+            <div id="oc-prompt">Set up SEO Intel on my machine.
+Check dependencies, install Ollama if needed, recommend a model based on my VRAM, configure a project with my target site, and run a test crawl.</div>
+            <button class="btn btn-sm" style="position:absolute; top:6px; right:6px; padding:2px 6px; font-size:0.5rem;" onclick="navigator.clipboard.writeText(document.getElementById('oc-prompt').textContent.trim());this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
           </div>
           <div class="openclaw-banner-actions">
-            <button class="btn btn-gold" onclick="startAgentSetup()"><i class="fa-solid fa-play"></i> Start Setup</button>
-            <button class="btn" onclick="continueManualSetup()"><i class="fa-solid fa-list-check"></i> Continue Manually</button>
+            <button class="btn btn-gold" onclick="startAgentSetup()"><i class="fa-solid fa-play"></i> Start Agent Setup</button>
+            <button class="btn" onclick="continueManualSetup()"><i class="fa-solid fa-list-check"></i> Manual</button>
           </div>
         </div>
-      </div>
-      <div class="openclaw-banner-minimal" id="ocBannerMinimal" style="display:none;">
-        <div class="openclaw-banner-icon" style="color:var(--text-muted); font-size:1rem;">
-          <svg width="20" height="20" viewBox="0 0 28 28" fill="none" xmlns="http://www.w3.org/2000/svg">
-            <circle cx="14" cy="14" r="13" stroke="currentColor" stroke-width="1.5" opacity="0.6"/>
-            <path d="M9 12c0-2.8 2.2-5 5-5s5 2.2 5 5c0 1.8-1 3.4-2.4 4.3L18 20H10l1.4-3.7C10 15.4 9 13.8 9 12z" fill="currentColor" opacity="0.8"/>
-          </svg>
+
+        <div id="agentRuntime-claudecode" class="agent-runtime-panel" style="display:none;">
+          <div style="font-size:0.68rem; color:var(--text-muted); margin-bottom:8px;">Open Claude Code in your terminal (<code style="background:rgba(255,255,255,0.05);padding:1px 4px;border-radius:3px;">claude</code>) and paste this prompt:</div>
+          <div style="position:relative; padding:8px 10px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.62rem; color:var(--text-secondary); line-height:1.6; margin-bottom:8px;">
+            <div id="cc-prompt">I'm setting up SEO Intel (npm package: seo-intel).
+Help me:
+1. Check Node.js 22.5+ is installed
+2. Install Ollama if missing (https://ollama.com)
+3. Pull a Qwen model matching my VRAM (run: system_profiler SPDisplaysDataType | grep VRAM)
+4. Create a config file at ./config/myproject.json with my target site
+5. Run: seo-intel crawl myproject
+6. Fix any errors that come up
+
+Start by checking what's already installed.</div>
+            <button class="btn btn-sm" style="position:absolute; top:6px; right:6px; padding:2px 6px; font-size:0.5rem;" onclick="navigator.clipboard.writeText(document.getElementById('cc-prompt').textContent.trim());this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
+          </div>
+          <div style="font-size:0.62rem; color:var(--text-muted);">Run Claude Code with: <code style="background:rgba(255,255,255,0.05);padding:1px 4px;border-radius:3px;">claude --permission-mode bypassPermissions</code> for full access</div>
         </div>
-        <div class="openclaw-banner-content">
-          <div class="openclaw-banner-desc" style="color:var(--text-muted); font-size:0.72rem;">
-            <strong style="color:var(--text-secondary);">Tip:</strong> Run <code style="background:rgba(124,109,235,0.1); padding:1px 5px; border-radius:3px; color:var(--accent-purple);">clawhub install ukkometa/seo-intel</code> for guided agent setup with cloud model routing.
+
+        <div id="agentRuntime-codex" class="agent-runtime-panel" style="display:none;">
+          <div style="font-size:0.68rem; color:var(--text-muted); margin-bottom:8px;">Open Codex CLI (<code style="background:rgba(255,255,255,0.05);padding:1px 4px;border-radius:3px;">codex</code>) and paste this prompt:</div>
+          <div style="position:relative; padding:8px 10px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.62rem; color:var(--text-secondary); line-height:1.6; margin-bottom:8px;">
+            <div id="cx-prompt">Set up the seo-intel npm CLI tool on this machine.
+Tasks:
+1. Verify Node.js 22.5+ (install via nvm if needed)
+2. Install Ollama (https://ollama.com) if not present
+3. Pull qwen3.5:9b or smaller if VRAM < 6GB
+4. Create ./config/myproject.json — ask me for my target domain and up to 3 competitor domains
+5. Add GEMINI_API_KEY or ANTHROPIC_API_KEY to .env if I have one
+6. Run: seo-intel crawl myproject
+7. Fix any errors
+
+Use full disk access. Check what's installed before proceeding.</div>
+            <button class="btn btn-sm" style="position:absolute; top:6px; right:6px; padding:2px 6px; font-size:0.5rem;" onclick="navigator.clipboard.writeText(document.getElementById('cx-prompt').textContent.trim());this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
           </div>
+          <div style="font-size:0.62rem; color:var(--text-muted);">Codex config: <code style="background:rgba(255,255,255,0.05);padding:1px 4px;border-radius:3px;">sandbox_mode = "danger-full-access"</code> recommended for install tasks</div>
+        </div>
+
+        <div id="agentRuntime-perplexity" class="agent-runtime-panel" style="display:none;">
+          <div style="font-size:0.68rem; color:var(--text-muted); margin-bottom:8px;">Open Perplexity Computer and paste this prompt:</div>
+          <div style="position:relative; padding:8px 10px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.62rem; color:var(--text-secondary); line-height:1.6; margin-bottom:8px;">
+            <div id="pp-prompt">I want to set up a local SEO analysis tool called SEO Intel.
+It's installed via: npm install -g seo-intel
+
+Please help me:
+1. Check that Node.js 22.5+ is installed on my machine
+2. Install Ollama (ollama.com) if it's not there
+3. Download a Qwen AI model that fits my machine's RAM
+4. Create a project config file pointing at my website and competitors
+5. Run the first crawl and show me the results
+
+Ask me for my website URL before starting.</div>
+            <button class="btn btn-sm" style="position:absolute; top:6px; right:6px; padding:2px 6px; font-size:0.5rem;" onclick="navigator.clipboard.writeText(document.getElementById('pp-prompt').textContent.trim());this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
+          </div>
+          <div style="font-size:0.62rem; color:var(--text-muted);">Works best with Perplexity Computer's full computer-use mode enabled</div>
+        </div>
+      </div>
+
+      <div id="ocBannerMinimal" style="display:none;">
+        <div class="openclaw-banner-desc" style="color:var(--text-muted); font-size:0.72rem; margin-bottom:10px;">
+          <strong style="color:var(--text-secondary);">Agent setup available.</strong> Pick a runtime below and copy the prompt:
+        </div>
+        <!-- Same runtime tabs, minimal version -->
+        <div style="display:flex; gap:6px; flex-wrap:wrap; margin-bottom:10px;">
+          <button class="btn btn-sm agent-runtime-tab-min active" data-runtime="claudecode" onclick="selectAgentRuntimeMin('claudecode', this)" style="font-size:0.62rem;"><i class="fa-solid fa-terminal" style="margin-right:3px;"></i>Claude Code</button>
+          <button class="btn btn-sm agent-runtime-tab-min" data-runtime="codex" onclick="selectAgentRuntimeMin('codex', this)" style="font-size:0.62rem;"><i class="fa-solid fa-code" style="margin-right:3px;"></i>Codex CLI</button>
+          <button class="btn btn-sm agent-runtime-tab-min" data-runtime="perplexity" onclick="selectAgentRuntimeMin('perplexity', this)" style="font-size:0.62rem;"><i class="fa-solid fa-magnifying-glass" style="margin-right:3px;"></i>Perplexity</button>
+          <button class="btn btn-sm agent-runtime-tab-min" data-runtime="openclaw" onclick="selectAgentRuntimeMin('openclaw', this)" style="font-size:0.62rem;"><i class="fa-solid fa-wand-magic-sparkles" style="margin-right:3px;"></i>OpenClaw</button>
+        </div>
+        <div id="minRuntime-claudecode" class="min-runtime-panel" style="position:relative; padding:7px 9px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.6rem; color:var(--text-secondary); line-height:1.5;">
+          <div>Set up seo-intel: check Node 22.5+, install Ollama, pull qwen3.5:9b, create config, run crawl.</div>
+          <button class="btn btn-sm" style="position:absolute; top:4px; right:4px; padding:2px 5px; font-size:0.48rem;" onclick="navigator.clipboard.writeText(this.previousElementSibling.textContent.trim());this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
+        </div>
+        <div id="minRuntime-codex" class="min-runtime-panel" style="display:none; position:relative; padding:7px 9px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.6rem; color:var(--text-secondary); line-height:1.5;">
+          <div>Install seo-intel deps (Node 22.5+, Ollama, qwen3.5:9b), create project config, run: seo-intel crawl myproject. Use full disk access.</div>
+          <button class="btn btn-sm" style="position:absolute; top:4px; right:4px; padding:2px 5px; font-size:0.48rem;" onclick="navigator.clipboard.writeText(this.previousElementSibling.textContent.trim());this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
+        </div>
+        <div id="minRuntime-perplexity" class="min-runtime-panel" style="display:none; position:relative; padding:7px 9px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.6rem; color:var(--text-secondary); line-height:1.5;">
+          <div>Help me set up SEO Intel local SEO tool: install Node.js 22.5+, Ollama, download a Qwen model, create config for my website. Ask for my URL.</div>
+          <button class="btn btn-sm" style="position:absolute; top:4px; right:4px; padding:2px 5px; font-size:0.48rem;" onclick="navigator.clipboard.writeText(this.previousElementSibling.textContent.trim());this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
+        </div>
+        <div id="minRuntime-openclaw" class="min-runtime-panel" style="display:none; position:relative; padding:7px 9px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.6rem; color:var(--text-secondary); line-height:1.5;">
+          <div>clawhub install ukkometa/seo-intel</div>
+          <button class="btn btn-sm" style="position:absolute; top:4px; right:4px; padding:2px 5px; font-size:0.48rem;" onclick="navigator.clipboard.writeText('clawhub install ukkometa/seo-intel');this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
         </div>
       </div>
     </div>
@@ -1338,10 +1436,15 @@ input::placeholder {
 </div>
 
 <!-- ─── Step 2: Model Selection ───────────────────────────────────────── -->
-<div class="step-panel" id="step2">
-  <div style="display:grid; grid-template-columns:1fr 260px; gap:16px; align-items:start;">
+<div class="step-panel" id="step2" style="max-width:none;">
+  <div style="position:relative;">
   <div class="card" style="margin-bottom:0; min-width:0;">
-    <h2><i class="fa-solid fa-microchip"></i> Model Selection</h2>
+    <div style="display:flex; align-items:center; justify-content:space-between; margin-bottom:4px;">
+      <h2 style="margin-bottom:0;"><i class="fa-solid fa-microchip"></i> Model Selection</h2>
+      <button class="btn btn-sm" onclick="document.getElementById('openclawFloating').style.display=''" style="font-size:0.65rem; color:var(--accent-purple); border-color:rgba(124,109,235,0.3); background:rgba(124,109,235,0.06);">
+        <i class="fa-solid fa-wand-magic-sparkles" style="margin-right:4px;"></i>OpenClaw
+      </button>
+    </div>
 
     <!-- Ollama Hosts -->
     <div id="ollamaHostsPanel" style="margin-bottom:16px; padding:12px 14px; background:var(--bg-card); border:1px solid var(--border-card); border-radius:var(--radius);">
@@ -1443,6 +1546,122 @@ input::placeholder {
           </div>
         </div>
       </div>
+      <!-- ─── Cloud Analysis column ─────────────────────────────────────── -->
+      <div class="model-section" id="cloudAnalysisSection">
+        <h3><i class="fa-solid fa-cloud"></i> Cloud Analysis</h3>
+        <p class="section-note">Use cloud frontier models for analysis. Add your API key to .env</p>
+        <!-- Cloud model cards -->
+        <div id="cloudAnalysisModels">
+          <!-- Gemini 3.1 Pro -->
+          <div class="model-radio-card cloud-model" data-model="gemini-3.1-pro" data-provider="gemini" data-envvar="GEMINI_API_KEY" onclick="selectCloudAnalysisModel(this)">
+            <div style="display:flex; justify-content:space-between; align-items:flex-start;">
+              <div>
+                <div style="font-weight:600; font-size:0.82rem; color:var(--text-primary);">gemini-3.1-pro</div>
+                <div style="font-size:0.68rem; color:var(--text-muted); margin-top:2px;">Google Gemini</div>
+              </div>
+              <span style="font-size:0.55rem; font-weight:700; letter-spacing:0.06em; padding:2px 6px; border-radius:4px; background:rgba(232,213,163,0.15); color:#e8d5a3;">BEST</span>
+            </div>
+            <div style="font-size:0.65rem; color:var(--text-muted); margin-top:6px;">Highest quality Gemini — best for deep competitive analysis</div>
+            <div class="cloud-privacy-note"><i class="fa-solid fa-key"></i> GEMINI_API_KEY</div>
+          </div>
+          <!-- Claude Sonnet 4.6 -->
+          <div class="model-radio-card cloud-model" data-model="claude-sonnet-4-6" data-provider="anthropic" data-envvar="ANTHROPIC_API_KEY" onclick="selectCloudAnalysisModel(this)">
+            <div style="display:flex; justify-content:space-between; align-items:flex-start;">
+              <div>
+                <div style="font-weight:600; font-size:0.82rem; color:var(--text-primary);">claude-sonnet-4-6</div>
+                <div style="font-size:0.68rem; color:var(--text-muted); margin-top:2px;">Anthropic</div>
+              </div>
+              <span style="font-size:0.55rem; font-weight:700; letter-spacing:0.06em; padding:2px 6px; border-radius:4px; background:rgba(96,165,250,0.15); color:#60a5fa;">FAST</span>
+            </div>
+            <div style="font-size:0.65rem; color:var(--text-muted); margin-top:6px;">Best cost/quality balance — fast and reliable</div>
+            <div class="cloud-privacy-note"><i class="fa-solid fa-key"></i> ANTHROPIC_API_KEY</div>
+          </div>
+          <!-- Claude Opus 4.6 -->
+          <div class="model-radio-card cloud-model" data-model="claude-opus-4-6" data-provider="anthropic" data-envvar="ANTHROPIC_API_KEY" onclick="selectCloudAnalysisModel(this)">
+            <div style="display:flex; justify-content:space-between; align-items:flex-start;">
+              <div>
+                <div style="font-weight:600; font-size:0.82rem; color:var(--text-primary);">claude-opus-4-6</div>
+                <div style="font-size:0.68rem; color:var(--text-muted); margin-top:2px;">Anthropic</div>
+              </div>
+              <span style="font-size:0.55rem; font-weight:700; letter-spacing:0.06em; padding:2px 6px; border-radius:4px; background:rgba(124,109,235,0.15); color:#a78bfa;">DEEP</span>
+            </div>
+            <div style="font-size:0.65rem; color:var(--text-muted); margin-top:6px;">Deepest analysis, highest quality — slower</div>
+            <div class="cloud-privacy-note"><i class="fa-solid fa-key"></i> ANTHROPIC_API_KEY</div>
+          </div>
+          <!-- GPT-5.4 -->
+          <div class="model-radio-card cloud-model" data-model="gpt-5.4" data-provider="openai" data-envvar="OPENAI_API_KEY" onclick="selectCloudAnalysisModel(this)">
+            <div style="display:flex; justify-content:space-between; align-items:flex-start;">
+              <div>
+                <div style="font-weight:600; font-size:0.82rem; color:var(--text-primary);">gpt-5.4</div>
+                <div style="font-size:0.68rem; color:var(--text-muted); margin-top:2px;">OpenAI</div>
+              </div>
+              <span style="font-size:0.55rem; font-weight:700; letter-spacing:0.06em; padding:2px 6px; border-radius:4px; background:rgba(156,163,175,0.15); color:#9ca3af;">SOLID</span>
+            </div>
+            <div style="font-size:0.65rem; color:var(--text-muted); margin-top:6px;">Reliable, broad knowledge — solid all-around</div>
+            <div class="cloud-privacy-note"><i class="fa-solid fa-key"></i> OPENAI_API_KEY</div>
+          </div>
+          <!-- DeepSeek R1 -->
+          <div class="model-radio-card cloud-model" data-model="deepseek-r1" data-provider="deepseek" data-envvar="DEEPSEEK_API_KEY" onclick="selectCloudAnalysisModel(this)">
+            <div style="display:flex; justify-content:space-between; align-items:flex-start;">
+              <div>
+                <div style="font-weight:600; font-size:0.82rem; color:var(--text-primary);">deepseek-r1</div>
+                <div style="font-size:0.68rem; color:var(--text-muted); margin-top:2px;">DeepSeek</div>
+              </div>
+              <span style="font-size:0.55rem; font-weight:700; letter-spacing:0.06em; padding:2px 6px; border-radius:4px; background:rgba(52,211,153,0.15); color:#34d399;">BUDGET</span>
+            </div>
+            <div style="font-size:0.65rem; color:var(--text-muted); margin-top:6px;">Best reasoning model at budget price</div>
+            <div class="cloud-privacy-note"><i class="fa-solid fa-key"></i> DEEPSEEK_API_KEY</div>
+          </div>
+        </div>
+        <!-- API Key input area (shown when a cloud card is selected) -->
+        <div id="cloudKeyArea" style="display:none; margin-top:12px; padding:12px; background:rgba(124,109,235,0.04); border:1px solid rgba(124,109,235,0.18); border-radius:var(--radius);">
+          <label style="font-size:0.7rem; font-weight:600; color:var(--text-secondary); display:block; margin-bottom:6px;"><i class="fa-solid fa-key" style="color:var(--accent-purple); margin-right:5px;"></i> API Key</label>
+          <div style="display:flex; gap:6px; align-items:center; margin-bottom:6px;">
+            <input type="password" id="cloudApiKeyInput" placeholder="" style="flex:1; background:var(--bg-elevated); border:1px solid var(--border-subtle); border-radius:var(--radius); padding:6px 8px; color:var(--text-primary); font-family:var(--font-mono); font-size:0.7rem;">
+            <button class="btn btn-sm" onclick="saveCloudApiKeyFromUI()" style="white-space:nowrap; padding:4px 10px; font-size:0.62rem;"><i class="fa-solid fa-floppy-disk"></i> Save to .env</button>
+          </div>
+          <p id="cloudKeySaveStatus" style="font-size:0.62rem; color:var(--text-muted); min-height:1em;"></p>
+          <p style="font-size:0.6rem; color:var(--text-muted); margin-top:4px;">Or use <strong style="color:var(--accent-purple);">OpenClaw</strong> to skip API key management entirely</p>
+        </div>
+      </div>
+
+
+        <p style="font-size:0.72rem; color:var(--text-muted); line-height:1.6; margin-bottom:12px;">
+          Route analysis through frontier models. OpenClaw manages API keys, OAuth, and model routing automatically.
+        </p>
+
+        <div style="font-size:0.68rem; color:var(--text-secondary); margin-bottom:12px;">
+          <div style="display:flex; align-items:center; gap:6px; margin-bottom:6px;">
+            <i class="fa-solid fa-check" style="color:var(--accent-purple); font-size:0.6rem; width:12px;"></i>
+            Claude Opus 4.6
+          </div>
+          <div style="display:flex; align-items:center; gap:6px; margin-bottom:6px;">
+            <i class="fa-solid fa-check" style="color:var(--accent-purple); font-size:0.6rem; width:12px;"></i>
+            Gemini 3.1 Pro
+          </div>
+          <div style="display:flex; align-items:center; gap:6px; margin-bottom:6px;">
+            <i class="fa-solid fa-check" style="color:var(--accent-purple); font-size:0.6rem; width:12px;"></i>
+            GPT-5.4
+          </div>
+        </div>
+
+        <p style="font-size:0.62rem; color:var(--text-muted); line-height:1.5; margin-bottom:8px;">
+          No .env keys needed. OAuth-based model access means the pipeline test may show "no API key" — this is normal when using OpenClaw.
+        </p>
+
+        <div style="padding:6px 8px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.65rem; color:var(--text-secondary); display:flex; align-items:center; gap:6px; margin-bottom:8px;">
+          <span style="color:var(--text-muted);">$</span>
+          <span>clawhub install ukkometa/seo-intel</span>
+          <button class="btn btn-sm" style="margin-left:auto; padding:2px 6px; font-size:0.55rem;" onclick="navigator.clipboard.writeText('clawhub install ukkometa/seo-intel');this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
+        </div>
+
+        <p style="font-size:0.6rem; color:var(--text-muted); margin-bottom:6px;">Or paste into OpenClaw chat:</p>
+        <div style="padding:8px 10px; background:rgba(10,10,10,0.5); border:1px solid var(--border-subtle); border-radius:var(--radius); font-family:var(--font-mono); font-size:0.6rem; color:var(--text-secondary); line-height:1.6; position:relative;">
+          <div style="white-space:pre;">Set up SEO Intel cloud analysis.
+Use Gemini for extraction, Claude for analysis.
+Configure API keys and run a test crawl.</div>
+          <button class="btn btn-sm" style="position:absolute; top:6px; right:6px; padding:2px 6px; font-size:0.5rem;" onclick="navigator.clipboard.writeText('Set up SEO Intel cloud analysis.\nUse Gemini for extraction, Claude for analysis.\nConfigure API keys and run a test crawl.');this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500);">Copy</button>
+        </div>
     </div>
     <!-- Unified upgrade card (free tier only) -->
     <div id="unifiedUpgrade" style="display:none; position:relative; margin-top:0; padding:48px 32px; border:1px solid rgba(232,213,163,0.15); border-radius:var(--radius); overflow:hidden; text-align:center;">
@@ -1475,8 +1694,9 @@ input::placeholder {
     </div>
   </div>
 
-  <!-- OpenClaw sidebar card -->
-  <div class="card" style="margin-bottom:0; position:sticky; top:20px;">
+  <!-- OpenClaw floating sidebar -->
+  <div class="card" id="openclawFloating" style="margin-bottom:0; position:fixed; top:80px; right:20px; width:240px; z-index:50; box-shadow:0 8px 40px rgba(0,0,0,0.5); border-color:rgba(124,109,235,0.3);">
+    <button onclick="document.getElementById('openclawFloating').style.display='none'" style="position:absolute;top:8px;right:8px;background:none;border:none;color:var(--text-muted);cursor:pointer;font-size:0.7rem;"><i class="fa-solid fa-xmark"></i></button>
     <div style="display:flex; align-items:center; gap:10px; margin-bottom:12px;">
       <svg width="22" height="22" viewBox="0 0 28 28" fill="none" xmlns="http://www.w3.org/2000/svg">
         <circle cx="14" cy="14" r="13" stroke="var(--accent-purple)" stroke-width="1.5" opacity="0.6"/>
@@ -1523,7 +1743,7 @@ Configure API keys and run a test crawl.</div>
     </div>
   </div>
 
-  </div><!-- close grid -->
+  </div><!-- close step2 outer grid -->
 </div>
 
 <!-- ─── Step 3: Project Configuration ─────────────────────────────────── -->
@@ -2987,6 +3207,22 @@ Configure API keys and run a test crawl.</div>
   let agentHistory = [];
   let agentBusy = false;
 
+  window.selectAgentRuntime = function(runtime, btn) {
+    document.querySelectorAll('.agent-runtime-tab').forEach(b => b.classList.remove('active'));
+    btn.classList.add('active');
+    document.querySelectorAll('.agent-runtime-panel').forEach(p => p.style.display = 'none');
+    const panel = document.getElementById('agentRuntime-' + runtime);
+    if (panel) panel.style.display = '';
+  };
+
+  window.selectAgentRuntimeMin = function(runtime, btn) {
+    document.querySelectorAll('.agent-runtime-tab-min').forEach(b => b.classList.remove('active'));
+    btn.classList.add('active');
+    document.querySelectorAll('.min-runtime-panel').forEach(p => p.style.display = 'none');
+    const panel = document.getElementById('minRuntime-' + runtime);
+    if (panel) panel.style.display = '';
+  };
+
   window.startAgentSetup = function() {
     // Hide wizard steps, show agent panel
     document.querySelector('.wizard-body').style.display = 'none';
@@ -3152,6 +3388,90 @@ Configure API keys and run a test crawl.</div>
     btn.disabled = false;
   };
 
+  // ── Cloud Analysis Column ─────────────────────────────────────────────
+
+  window.selectCloudAnalysisModel = function(card) {
+    const modelId = card.dataset.modelId;
+    const provider = card.dataset.provider;
+    const envVar = card.dataset.envVar;
+    const placeholder = card.dataset.keyPlaceholder || '';
+
+    // Set global state
+    window.selectedAnalysisModel = 'cloud:' + modelId;
+    window.selectedCloudProvider = provider;
+
+    // Deselect all local Ollama analysis model cards
+    document.querySelectorAll('#analysisModels .model-radio-card').forEach(c => c.classList.remove('selected'));
+
+    // Deselect other cloud cards, select this one
+    document.querySelectorAll('#cloudAnalysisModels .model-radio-card').forEach(c => c.classList.remove('selected'));
+    card.classList.add('selected');
+
+    // Hide analysis pull row and old cloud hint
+    const pullRow = document.getElementById('analysisPullRow');
+    const cloudHint = document.getElementById('analysisCloudHint');
+    if (pullRow) pullRow.style.display = 'none';
+    if (cloudHint) cloudHint.style.display = 'none';
+
+    // Show key input area with correct env var placeholder
+    const keyArea = document.getElementById('cloudKeyArea');
+    const keyInput = document.getElementById('cloudApiKeyInput');
+    const saveStatus = document.getElementById('cloudKeySaveStatus');
+    if (keyArea) keyArea.style.display = 'block';
+    if (keyInput) {
+      keyInput.placeholder = placeholder;
+      keyInput.dataset.envVar = envVar;
+      keyInput.dataset.provider = provider;
+    }
+    if (saveStatus) saveStatus.textContent = '';
+
+    // Also update state.selectedAnalysis for consistency with existing code
+    if (typeof state !== 'undefined') state.selectedAnalysis = 'cloud:' + modelId;
+  };
+
+  window.saveCloudApiKeyFromUI = function() {
+    const keyInput = document.getElementById('cloudApiKeyInput');
+    const saveStatus = document.getElementById('cloudKeySaveStatus');
+    if (!keyInput || !saveStatus) return;
+    const envVar = keyInput.dataset.envVar;
+    const provider = keyInput.dataset.provider;
+    const value = keyInput.value.trim();
+    if (!value) { saveStatus.textContent = 'Enter an API key first.'; saveStatus.style.color = 'var(--color-danger)'; return; }
+    saveCloudApiKey(provider, envVar, value);
+  };
+
+  window.saveCloudApiKey = async function(provider, envVar, keyValue) {
+    const saveStatus = document.getElementById('cloudKeySaveStatus');
+    if (saveStatus) { saveStatus.textContent = 'Saving…'; saveStatus.style.color = 'var(--text-muted)'; }
+    try {
+      const res = await fetch('/api/setup/save-env', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ key: envVar, value: keyValue }),
+      });
+      const data = await res.json();
+      if (!res.ok) throw new Error(data.error || 'Save failed');
+      if (saveStatus) { saveStatus.textContent = '✓ Saved to .env'; saveStatus.style.color = 'var(--color-success)'; }
+    } catch (err) {
+      if (saveStatus) { saveStatus.textContent = err.message; saveStatus.style.color = 'var(--color-danger)'; }
+    }
+  };
+
+  // Patch: selecting a local Ollama analysis model should deselect any cloud card
+  const _origSelectAnalysisModel = typeof selectAnalysisModel !== 'undefined' ? selectAnalysisModel : null;
+  // Hook into the cloud deselect when local analysis cards are clicked via delegated event
+  document.addEventListener('click', function(e) {
+    const card = e.target.closest('#analysisModels .model-radio-card');
+    if (card) {
+      // Deselect cloud cards
+      document.querySelectorAll('#cloudAnalysisModels .model-radio-card').forEach(c => c.classList.remove('selected'));
+      const keyArea = document.getElementById('cloudKeyArea');
+      if (keyArea) keyArea.style.display = 'none';
+      window.selectedAnalysisModel = undefined;
+      window.selectedCloudProvider = undefined;
+    }
+  });
+
   // ── Init ──────────────────────────────────────────────────────────────
   initStep3();
   runSystemCheck();