ZENOVAYcli

Changelog

Jede Veröffentlichung der Zenovay CLI, neueste zuerst.

$curl -fsSL https://cli.zenovay.com/install.sh | sh
v1.0.36

Install without logging in, using --tracking-code

Highlights
  • zenovay init --tracking-code ZV_… installs the tracker without a login and without a single network call. Until now init always had to sign in and fetch your site list first, which made it awkward to run anywhere a browser and a stored token are not available: a CI job, a Dockerfile, a container. Pass the tracking code from your site's settings and the whole run is local file edits.
Fixes
  • init --json now reports what it actually did, per step: tracker.installed, crawler.beacon, first-party.configured and env.written, each carrying the files it touched. Scripts no longer have to parse English sentences to find out whether a step ran.
  • framework.detected reports the real detection confidence. It previously always reported 1, even when the match was a weaker fallback.
  • A run that finds the tracker already installed now emits the same set of events as a fresh install, so a progress display cannot stall on a step that was simply skipped.
  • Pair it with --cookieless when the site runs in cookieless mode, so the tag is written correctly without looking the setting up.
v1.0.35

Scaffold a consent banner with zenovay consent init

Highlights
  • Session replay and heatmaps do not record until a visitor grants consent, on a site that has "require consent" switched on. Building that gate was left entirely to you. zenovay consent init writes a starting point into your project: it detects your framework and tells you why it picked it, then writes an unstyled component that inherits your own colours, so it never arrives as a light banner on a dark site.
Fixes
  • It never edits your existing files. It prints the two wiring steps and leaves your layout to you. --dry-run shows exactly what it would write, and it asks before writing anything.
  • The generated component calls zenovay('consent', 'granted') and zenovay('consent', 'denied'), and honours Global Privacy Control.
  • It is a separate command on purpose, and never runs as part of zenovay init. A consent mechanism you did not ask for is worse than none.
v1.0.34

Crawler tracking now sees robots.txt, llms.txt and sitemaps

Highlights
  • The crawl beacon reports requests to /robots.txt, /llms.txt, /llms-full.txt and any sitemap*.xml. Previous versions matched them against a static-asset extension list and dropped them before the request was ever sent, so the files an AI crawler fetches specifically to decide how to treat your whole site were the ones that never appeared. "Who read my robots.txt, and did they then respect it" is now answerable.
Fixes
  • Re-running zenovay init upgrades an installed beacon of any earlier version in place, in a single run. Ordinary assets that share those extensions, such as /manifest.json or /feed.xml, are still ignored, so the change adds the discovery files without adding noise.
  • Cloudflare Pages projects are detected by the presence of a functions/ directory containing a middleware or an exported onRequest handler, rather than by configuration alone.

An existing install keeps working untouched until you re-run init; nothing breaks in the meantime, the discovery files simply stay unreported. A beacon block you have edited by hand is never rewritten — the CLI prints the new block and leaves your file alone.

v1.0.33

AI crawler beacon installer

Highlights
  • zenovay init can install the AI crawler beacon, so requests from AI crawlers show up alongside your ordinary traffic.
v1.0.32

Zero-dependency package and hardened webhook tunnels

Highlights
  • The published package now declares zero runtime dependencies. All 16 runtime packages are bundled into dist/, so installing the CLI pulls nothing else from the registry and the install-time attack surface is gone. THIRD-PARTY-NOTICES.md ships in the tarball with the full 102-package license closure.
Fixes
  • Webhook tunnels now verify where they are connecting before sending credentials. The tunnel address returned by the API is checked against the API host you have configured and must use wss://; a mismatched or unencrypted address is refused without handing over an access token.
  • zenovay webhooks forward --to example.com no longer assumes an unencrypted http:// connection for a remote address. Loopback targets are unchanged; anything else needs an explicit https:// URL, because inbound headers are replayed to the target verbatim.
  • The access token is read through the permission-checked token store on every invocation. A previous shortcut read auth.json directly and would load a world-readable token file instead of refusing it and tightening the permissions.
  • apiBase and cliBase now have to be https:// URLs, with http:// allowed only for localhost during development.
  • The self-update path validates the target version itself rather than relying on its callers, so a malformed version can never reach the Windows shell.
  • Dependency scanning covers the packages that are actually shipped. Because everything is bundled, the previous production-only filter matched an empty set and reported no findings; the audit and the automated dependency updates now cover the full bundled set.
v1.0.31

Reliable Windows recovery and future updates

Highlights
  • The Windows installer is now the verified recovery path from v1.0.27. Release automation places the exact public v1.0.27 binary at the normal install path, runs the signed installer over it, and requires the resulting v1.0.31 version and SHA-256 to match the candidate before any public channel can move.
Fixes
  • Standalone Bun executables now resolve their own path from process.execPath. Earlier builds used process.argv[0], which Bun reports as the literal word bun; on Windows, v1.0.27 could therefore download and verify an update but write it to the working directory instead of replacing zenovay.exe.
  • The release gate also exercises the corrected updater from the exact v1.0.31 candidate by applying a force-downgrade to the immutable, signed v1.0.30 candidate and proving the same installed path, reported version, checksum, and temporary-file cleanup.
  • Astro installs no longer create an unused .env.local. The tracker code already carries the selected site ID, so the extra file only left otherwise-clean projects dirty after the CLI’s focused commit.
  • v1.0.30 failed closed at the Windows replacement proof and was never published to npm, GitHub Releases, or the live update manifest. Its immutable signed candidate remains available only as the downgrade fixture for this recovery test.
v1.0.30

Windows update proof on trusted HTTPS

Highlights
  • The Windows release gate now tests the shipped v1.0.27 executable against a version-bound candidate manifest served from Zenovay’s public-CA workers.dev origin. A failed candidate cannot advance any live release channel.
Fixes
  • The v1.0.29 gate failed closed because its localhost test manifest was not selected; the old CLI remained on the live v1.0.27 channel and correctly made no change. The new gate first proves that v1.0.27 sees the exact candidate, then verifies the signed download, self-replacement, reported version, installed SHA-256, and cleanup of updater files.
  • Each immutable candidate is now fresh-installed at its exact version across the release matrix before the tested manifest is promoted byte-for-byte. npm and the GitHub release must already exist, release runs are globally serialized, and an older tag cannot move the live channel backwards.
  • Post-promotion checks retry Workers KV propagation and require both JSON and flat manifests to match the candidate, so an older healthy channel cannot produce a misleading green result.
  • The macOS, Linux, and Windows native installers now refuse to install when the exact versioned checksum is unavailable. An explicit ZENOVAY_ALLOW_UNVERIFIED=1 emergency override is still available, but a checksum mismatch can never be overridden.
v1.0.29

Windows update release gate unblocked

Highlights
  • This release carries the Windows updater, download-origin, stale-backup cleanup, and CLI website fixes prepared in v1.0.28. That tag failed closed before publication, so the live update manifest and npm package remained on v1.0.27.
Fixes
  • The dedicated Windows update smoke now disables setup-node’s automatic package-manager cache. The job only needs Node for its local HTTPS manifest server; attempting to initialize a pnpm cache had stopped the runner before it could exercise the real v1.0.27 updater.
v1.0.28

Windows updates verified before release

Highlights
  • Native Windows updates now use the same signed payload in release automation and in the installed CLI, fixing the Signature verification failed. Update refused. error reported by v1.0.27 users.
  • Every release must now pass a real Windows 2022 update from the exact public v1.0.27 executable before the live version manifest can advance. The gate verifies the production public key, signature, checksum, download, self-replacement, reported version, and cleanup of temporary executables.
Fixes
  • Signed native manifests now download immutable binaries from Zenovay’s workers.dev distribution origin, so Cloudflare Bot Fight Mode cannot challenge CLI, CI, or datacenter downloads after the version check succeeds.
  • Windows removes updater-owned .old-* executable backups on the next launch instead of leaving a roughly 123 MB stale binary behind. Near-match files and npm’s Node executable are never touched.
  • The CLI website keeps the current version badge visible throughout the changelog, marks the active page for assistive technology, handles the install command on narrow screens, and presents Open dashboard without the decorative arrow.
v1.0.27

Site-aware setup from every CLI entry point

Fixes
  • After zenovay domains add, the suggested installer command now includes the new site's exact --site-id. This prevents a tracker already present in the project from silently selecting a different site.
  • Users without a site are now sent to the live /domains/add flow, and the Domains keybar action opens the current /domains page instead of obsolete /websites routes.
  • The --no-first-party help line no longer displays CAC's misleading (default: true) implementation detail. First-party installation remains enabled by default; the flag remains the explicit opt-out.
v1.0.26

Accurate first-party reinstall summary

Fixes
  • When zenovay init upgrades or adds only the first-party proxy for an existing tracker, the completion screen now reports the real changed-file count and explains that the proxy was upgraded or added. It no longer shows Modified: 0 files or claims the installation was already unchanged after writing a proxy update.
v1.0.25

Safer first-party proxy isolation

Highlights
  • Cloudflare Pages proxies generated by zenovay init now forward only the headers analytics actually needs. Customer cookies, authorization tokens, Cloudflare Access credentials, private application headers, and spoofed Zenovay trust headers never leave the customer's origin.
Fixes
  • Trusted visitor IP and location metadata is re-stamped from Cloudflare's runtime context, while request method, query, body, replay compression, privacy signals, and tracking-code headers are preserved. Upstream Set-Cookie headers are also removed before the response reaches the customer's origin.
  • Re-running the CLI safely upgrades a complete CLI-managed legacy proxy. Unrelated or lookalike function files are left untouched and no longer cause the site snippet to switch to a proxy that may not work.
v1.0.24

Compact download progress in every terminal

Highlights
  • The macOS and Linux installer now uses one compact Downloading… 10% (6.1/60.9 MiB) line instead of curl’s full-width hash bar. It matches the calm percentage-and-size presentation already used by the Windows installer.
Fixes
  • Redirected and CI output is now line-oriented, with no carriage-return animation, hash wall, ANSI color, or blue transfer panel. Failed downloads close the active progress line before the installer tries its mirror or npm fallback.
  • After a verified onboarding install, a temporary destination lookup failure now falls back to the app’s site-aware resume route. The CLI still closes first, then opens the exact onboarding state automatically instead of leaving a new user at the post-install command menu.
v1.0.23

Smoother onboarding, safer installs, and reliable session recovery

Highlights
  • The macOS, Linux, and Windows installers now show clear percentage progress. After zenovay init verifies tracking, it opens the exact onboarding or domain-setup page that still needs attention; completed sites continue to their dashboard.
  • Site selection and Git-assisted installs are safer. The CLI never guesses when multiple sites could match, accepts an explicit --site-id, leaves Git staging and history untouched when work already exists, and stages only files written by Zenovay.
Fixes
  • Expired access tokens now refresh consistently for ordinary requests and live event streams. Logout and revocation also invalidate the server-side device grant, so a retired token cannot silently remain active.
  • Running zenovay init again on an existing tracker now offers live verification and resumes the unfinished browser setup instead of stopping at an already-installed message.
v1.0.22

Polish pass — safer AI installer, clearer errors, and dozens of UX fixes

Highlights
  • A big reliability + polish pass across the whole CLI: dashboards no longer blank out on a single failed refresh, an expired session now tells you to run zenovay login instead of showing a dead retry, and every long-running view survives a network blip.
  • The AI install wizard is safer: its file writes are now confined to the specific framework layout/head files it needs — it can no longer touch your package.json, lockfiles, or unrelated source. And zenovay init --undo now reverts the last wizard run's changes.
Fixes
  • Unknown sub-commands (e.g. a typo like zenovay domains bogus) now show the valid actions and exit with an error instead of silently doing nothing.
  • zenovay update works from CI and datacenter IPs (npm-registry / mirror fallback); --help now shows real examples for each command; time-range flags are unified under --range (old names still work).
  • Clearer errors everywhere: request timeouts, proxy hints, and unexpected server responses now show a friendly message instead of a raw stack or JSON blob. Ctrl+C reliably cancels, including during login.
  • zenovay tour greets logged-out users with a single "run zenovay login" instead of a wall of errors; zenovay globe no longer garbles in narrow terminals; zenovay health gained a first-party-tracking check.
  • Login is more robust against concurrent CLI sessions (no more surprise logouts when two instances refresh at once), and auth tokens are written atomically.
v1.0.21

CI installs for every major framework · first-party proxy fixes · rock-solid self-update

Highlights
  • zenovay init now installs the tracker headlessly (CI, scripts, --json) on 10 frameworks — Next.js App Router, Astro, Vite, Angular, Qwik, SolidStart, Gatsby, Nuxt, SvelteKit and plain HTML — using the same deterministic no-AI fast path the interactive wizard uses. Previously only plain HTML worked non-interactively.
  • First-party tracking fixes for two hosts: on Netlify the proxy rule is now inserted above a catch-all /* rewrite (it was unreachable on single-page-app sites), and on Next.js the rewrite is written into the default TypeScript next.config.ts shape that create-next-app generates.
Fixes
  • Failed installs no longer leave anything behind — env vars are written only after the tracker actually lands, and every headless run ends with a machine-readable done event. --json output is real newline-delimited JSON now.
  • Self-update: the freshly-updated binary no longer runs your command twice; updates in cron/CI never swallow the command you invoked; updates work on Linux systems with a tmpfs /tmp (Fedora, Arch); and a pending update tells you once to run zenovay update instead of failing silently.
  • Network resilience: every API call has a 15-second timeout instead of hanging forever; an expired or revoked session refreshes properly on retry (or tells you to zenovay login); login survives a brief network blip instead of making you start over, and shows a "Waiting for approval…" indicator.
  • SvelteKit installs now add the tracker inside your existing <svelte:head> block — a second head block is a Svelte compile error. Astro's minimal starter installs instantly without the AI wizard.
  • zenovay health is fair to new users: not being logged in is a note, not a failure; the MCP row no longer shows a false red HTTP 401; and a new First-party tracking check tells you when Safari/Brave visitors aren't being counted and how to fix it.
  • Ctrl+C reliably cancels again (including during login). ZENOVAY_API_TOKEN and the new ZENOVAY_SITE environment variables work everywhere for scripting. zenovay logout tells you if the server-side session could not be revoked.
v1.0.20

Cleaner install snippet — localhost is a dashboard toggle, not a script attribute

Fixes
  • The tracker snippet the CLI writes no longer includes data-allow-localhost="true". It never actually enabled localhost tracking on its own: your site's settings (fetched from the same server the events go to) override the attribute, and the server only accepts localhost events when the per-site Allow Localhost toggle is on. Localhost testing is now controlled solely by that dashboard toggle (domain settings → Advanced), so the installed snippet is cleaner and consistent with the dashboard and docs. Existing installs are still recognized.
v1.0.19

Self-update never crashes on a spawn error

Fixes
  • Defense-in-depth on top of 1.0.18: if launching npm for a self-update ever fails outright (an edge-case Windows shell error), the CLI now prints a clear Update manually: npm i -g @zenovay/cli@latest hint instead of surfacing a raw spawn EINVAL stack trace.
v1.0.18

Windows self-update fixed · login required for data commands · cleaner --version · un-stuck dashboard

Highlights
  • zenovay update works on Windows again. On Node 18.20+/20.12+/21+ (and Node 24), spawning npm.cmd without a shell throws EINVAL (a Node security change) — the updater now runs npm through the shell on Windows. If you're stuck on an older version that still crashes, update once with npm i -g @zenovay/cli@latest (the broken updater can't fix itself).
Fixes
  • zenovay --version now prints just the version — not the full help text after it.
  • Every data command checks you're logged in first and says run zenovay login, instead of opening a dashboard that silently fails with 401s. (login, init, help, version, update and other bootstrap commands are exempt.)
  • The dashboard's q always quits now — even while the site-picker is open (it used to get stuck). A failed site list shows an actionable error instead of an endless "Loading…", and an expired session shows a clear "run zenovay login" message.
v1.0.17

Install verification recognizes the first-party snippet

Fixes
  • After a first-party install, zenovay init could wrongly report "tracker not yet on your live site" even though it was deployed and already recording hits. The live-site check only matched the third-party tag (data-id="ZV_…") and missed the first-party form (src="/api/_z/script.js?id=ZV_…", where the code rides in the query). It now recognizes both.
v1.0.16

First-party tracking works on Edge, Safari & Brave (every host)

Highlights
  • First-party tracking now actually works on privacy-strict browsers. The proxy + snippet are mounted at /api/_z/ across all hosts (Cloudflare Pages, Netlify, Vercel, Next.js) to match the path the tracker calls at runtime — previously the snippet loaded but every event POST hit a dead route, so Edge / Safari / Brave visitors weren't counted.
Fixes
  • Re-running zenovay init on an existing install (legacy /_z/ or new /api/_z/) is correctly detected, so it never double-installs the tag.
v1.0.15

Visible AI-install progress · deterministic Astro install · no terminal flicker

Highlights
  • The AI installer now shows live progress — a spinner plus a "Working…" status — so it never looks frozen while the model is thinking between steps.
  • Astro projects whose <head> lives a few components deep now install deterministically (no AI round-trip): the installer follows imported components to find the real <head>.
Fixes
  • No more brutal flicker on the framework-detection step in the VS Code integrated terminal.
  • Rate-limit messages now state the real reason — daily vs per-minute limit, how many you've used, and when it resets — instead of a generic "wait a moment".
v1.0.14

AI installer now handles non-standard layouts correctly

Highlights
  • The AI installer no longer reports a false "install failed" when it correctly adds the tracker to a non-standard spot — e.g. a site whose <head> lives in an imported component a couple of levels below the page layout. It now confirms success by checking the tracker is actually present in your source (the right test), instead of insisting it was written to one specific expected file (which defeated the whole point of the AI installer).
Fixes
  • Frameworks and project structures the deterministic installers can't handle — where the AI agent traces your components to find the real <head> — now complete cleanly, including the automatic first-party proxy setup that runs right after.
  • The "not installed" error is now accurate: it only fires when no tracker tag with your site's code is actually present in your source (it still catches the case where the code was written into .env only, or the wrong file).
v1.0.13

Deep hardening pass — Windows fixes, no more hangs, clearer errors

Fixes
  • Windows: zenovay now reads its config + auth from the correct location (%APPDATA%\zenovay) — a team override from teams switch and telemetry settings were being silently missed on Windows.
  • The AI install can no longer hang forever: the model stream now has an idle-timeout, so a stalled connection fails fast instead of freezing the wizard.
  • Git push failures now show the FULL error (e.g. authentication/permission), not a truncated first 80 characters.
  • Defense-in-depth: the tracking code is validated before it's ever written into your HTML/JSX/config on every install path (HTML, Vite, Astro, Remix, Solid, Next, Nuxt, SvelteKit, and the AI path).
  • The generated Cloudflare Pages first-party proxy now has a request timeout + safe redirect handling, so a slow upstream can never make your pages feel slow.
  • Clearer failures everywhere: session-expired (401) and rate-limit (429) during install now say what to do; a failed first-party setup is surfaced (not shown as success); MCP-client install failures are distinguished from "no client installed"; verify network errors include a hint; agent install failures explain the next step.
  • MCP client config files are written owner-only (0600).
v1.0.12

Hardening pass: verified install flow end-to-end + a batch of robustness fixes

Highlights
  • The whole zenovay init flow is now verified end-to-end by an automated terminal harness (it drives the real interactive wizard): framework detect → first-party host picker → success screen → the W/E shortcuts launching the live dashboard.
Fixes
  • W/E on the success screen reliably launch the dashboard on every install type (npm global/local, npx, and dev runs) — the launcher now picks the right runtime instead of mis-detecting it.
  • --skip-verify truly skips verification (no more "press [s] to skip" prompt).
  • init no longer says "already installed" when only a stale config marker exists but no real tracker tag — so re-pointing to a different site works.
  • Safer file edits: the Vercel proxy writer won't clobber an unusual vercel.json; the tracking code is validated before it's written into HTML; first-party never swaps your tag to a same-origin path unless the proxy was actually wired.
  • Cleaner runs: old undo-history folders are pruned automatically, the AI installer stops re-trying a file it can't write, and it explains when a framework needs the (slower) AI path.
v1.0.11

W / E success-screen actions launch reliably (real fix)

Fixes
  • The 1.0.10 fix for the W/E shortcuts was incomplete — they still dropped to the shell. Root cause: the wizard signalled "done" the instant you pressed a key, BEFORE its terminal teardown (exiting the alt-screen buffer + restoring the keyboard) had run, and the follow-up launch then blocked the event loop so that teardown never completed — the dashboard rendered into the about-to-be-discarded screen. It now waits for the wizard to fully tear down before launching, so W (watch) and E (events) reliably take over your terminal.
v1.0.10

The W / E shortcuts on the success screen now launch the dashboard

Fixes
  • Pressing W (watch live) or E (stream events) on the install success screen dropped to the shell instead of launching, because it mounted a second dashboard inside the wizard's just-closed terminal. It now launches the dashboard as a fresh process, so it reliably takes over your terminal. If it still can't launch, it prints the exact command (zenovay overview --site-id …) instead of closing silently.
v1.0.9

zenovay update now works for global npm installs

Fixes
  • zenovay update auto-updated via npm only when it could tell it was an npm install — but a global install (npm i -g) exposes zenovay as a symlink, and we were reading the unresolved symlink path, so it misread the install as a native binary and printed "No prebuilt binary for your platform". It now resolves the symlink first and updates via npm correctly. (Once on 1.0.9+, zenovay update and the automatic background update both work; to get TO 1.0.9 from an older version, run npm i -g @zenovay/cli@latest once.)
v1.0.8

First-party tracking sets itself up — no flag to remember

Highlights
  • When your deploy host can't be auto-detected (e.g. a static site deployed through a git integration, which leaves no config on disk), zenovay init now ASKS which host you use — Cloudflare Pages, Vercel, Netlify or Next.js — right in the wizard, and wires first-party tracking in that same run. No more re-running with --host.
Fixes
  • Clearer messaging: the standard tracker is already live and working on its own (Chrome, Firefox and most browsers) with no further setup. First-party tracking is OPTIONAL — it adds Safari, Edge and Brave (which block third-party analytics) by serving Zenovay from your own domain, a step wired at your hosting provider.
v1.0.7

MCP for Claude Code, and first-party tracking that never breaks your tracker

Highlights
  • zenovay init now sets up the Zenovay MCP server in Claude Code too (it previously only configured Cursor / Claude Desktop / VS Code). Each editor gets its correct config shape, and a second run never adds a duplicate. This is what lets your own AI assistant read your analytics and wire up custom conversion events on demand.
Fixes
  • First-party tracking no longer breaks a working install when your host can't be auto-detected (e.g. a static site deployed via a git integration). It now leaves the standard tracker in place — instead of silently pointing it at a proxy path that doesn't exist yet — and explains, in plain language, the optional one-command way to also cover Safari, Edge and Brave: zenovay init --host cloudflare-pages (or vercel / netlify / nextjs).
  • Replaced the cryptic "add a proxy from /_z/* to …/fp/*" note with a clear, benefit-first explanation everywhere it appears.
v1.0.6

Instant installs for component-based heads, and zenovay update on every platform

Highlights
  • The installer now handles projects whose <head> lives in an imported component (e.g. a shared SEO/BaseHead): it traces the import and inserts the tracker DETERMINISTICALLY and instantly, instead of handing off to the slower AI agent. Same speed as a standard layout.
Fixes
  • zenovay update now works on every platform: it updates via npm when that is how you installed, instead of failing with "No release binary for platform …".
v1.0.5

Calmer install wizard + reliable AI install on non-standard layouts

Highlights
  • The wizard no longer flickers while the AI works: the model's streamed reasoning now updates the status line at a calm cadence (a few times a second) instead of on every token.
Fixes
  • The AI install no longer gives up early on a project whose <head> lives in an imported component (e.g. a shared BaseHead): it follows the import to the right file and has the exploration headroom to do so.
v1.0.4

First-party tracking: install records events in every browser, automatically

Highlights
  • zenovay init now sets up FIRST-PARTY tracking automatically: it detects your host (Cloudflare Pages, Next.js, Vercel, Netlify), writes the proxy config, and serves the tracker same-origin via /_z/script.js. After your next deploy, events record in EVERY browser, including Edge, Safari and Brave (which block third-party trackers). Opt out with --no-first-party.
Fixes
  • Re-running the installer is a safe no-op once first-party is set up (the detector recognizes the same-origin snippet, so it never double-injects the tracker).
v1.0.3

Hands-off AI install: auto-apply, self-update, faster and cheaper, smoother wizard

Highlights
  • The AI install now applies its file changes itself, with NO per-file [y/n] prompts. Pass --review if you want to approve each write.
  • zenovay now auto-updates to the latest version by default (opt out with ZENOVAY_NO_AUTO_UPDATE=1).
Fixes
  • The install agent now writes the tracker snippet immediately instead of looping, so installs are much faster and use far fewer tokens (a stuck run previously read 30+ files across 40 rounds).
  • Smoother "Learn" cards in the wizard, and a single clear progress indicator (removed the confusing second counter at the bottom).
v1.0.2

Fix: unresponsive error screen + deprecated command in the next-steps screen

Highlights
  • A more responsive install wizard whose post-install screen points at the current commands.
Fixes
  • The "Install failed" screen now responds to q / Esc right away. It previously ignored every key and only exited after a hidden 8-second timeout.
  • The post-install next-steps screen now shows and runs zenovay overview instead of the deprecated zenovay watch.
v1.0.1

Reliability: Windows installer + first-run config fixes

Highlights
  • A more robust install and first-run experience, especially on Windows.
Fixes
  • The Windows installer (irm cli.zenovay.com/install.ps1 | iex) no longer closes your terminal window. It used to run exit inside your own shell session (for example on the "already installed" path); it now returns cleanly so the window stays open.
  • zenovay init no longer fails with "Unexpected end of JSON input" when the local config file is empty or was left half-written by an interrupted run. A corrupt config now resets to defaults instead of crashing every command.
v1.0.0

Zenovay CLI 1.0 — reliable installs for 11 frameworks, redesigned terminal UI, governed MCP

Highlights
  • Installs are now deterministic for 11 frameworks — plain HTML, Next.js (App Router), Nuxt, SvelteKit, Astro, Vite, Remix, SolidStart, Qwik, Angular and Gatsby: the tracker is placed in the right file fast, offline, idempotently, and verified afterwards. The AI agent is now a fallback only for genuinely unusual / custom project layouts.
  • New framework support: Nuxt, SvelteKit, Vite, Gatsby, Angular, SolidStart and Qwik.
  • zenovay init now verifies the tracker actually landed in your source and shows a clear confirmation — no more “done” without a write.
  • Redesigned terminal UI (“The Quiet Instrument”): every command opens full-screen, grids tile cleanly at any width with no garbled borders, and breakdowns expand so you can scroll the full list.
  • Time-window tabs now match the data actually fetched (no more picking “24h” and seeing 7-day numbers), and the home screen sums across all your sites with a real week-over-week change.
  • Discoverable [s] site switcher across data commands, clickable dashboard links, and [O] to open your dashboard from the success screen.
  • Connecting the Zenovay MCP server to Cursor, Claude or VS Code now uses secure OAuth sign-in instead of a static token, and honours the per-action permissions you set under Settings → Account → Agent.
  • The Claude/Cursor agent skills now teach the real Zenovay tracker and MCP tools, and can be dropped into your project.
Fixes
  • zenovay webhooks forward now actually starts the tunnel (it was shadowed and never ran).
  • zenovay analytics <live|funnels|goals|insights> route to the right view instead of always showing the overview.
  • zenovay ai --json in a non-interactive shell now exits with a clear error instead of crashing while reporting success.
  • Live dashboards no longer freeze or overflow on small terminals; refresh is non-destructive and shows how recent the data is.
  • Hardened the install sandbox path checks and removed all known dependency advisories.
v0.1.68

Verbesserter Erfolgsbildschirm nach der Installation + anklickbare Links

Highlights
  • Der „You're live“-Bildschirm wurde neu gestaltet — mit einer übersichtlichen Zusammenfassungskarte, einer Bestätigung für das „erste empfangene Ereignis“ und einem ruhigeren, markengerechten Layout.
  • Dashboard- und Site-URLs sind jetzt anklickbare Terminal-Links und verweisen auf die lesbare Adresse /domains/{slug} — nie auf eine rohe ID.
  • Mit der neuen Taste [O] öffnest du dein Dashboard direkt vom Erfolgsbildschirm aus im Browser.
v0.1.67

Reibungsloseres Anmelden & Installieren

Highlights
  • Die Abfrage zu den Shell-Vervollständigungen unterbricht die Anmeldung im Browser während zenovay init nicht mehr — sie wird nur einmal ganz am Ende angeboten, nachdem die Einrichtung abgeschlossen ist.
  • Die Installation per curl | sh nimmt zenovay jetzt auch automatisch in deinen PATH auf und zeigt einen Einzeiler an, den du im selben Terminal ausführen kannst.
Fixes
  • Behebt das verwirrende "command not found: zenovay" direkt nach der Installation, indem das Installationsverzeichnis zu deinem Shell-Profil hinzugefügt wird.
v0.1.66

Robuste Installation & Auto-Update, aufgefrischtes Branding

Highlights
  • Installation und Auto-Update wechseln jetzt automatisch auf eine Alternative, wenn der primäre Download-Host nicht erreichbar ist – so funktionieren curl | sh, npm und Self-Update weiterhin auf Servern und in CI.
  • Die Terminal-Oberfläche wurde auf das Markenblau von Zenovay umgestellt – für ein ruhigeres, einheitlicheres Erscheinungsbild.
Fixes
  • Der Installer bricht nicht mehr ab, bevor sein npm-Fallback greifen kann, wenn noch kein vorkompiliertes Binary verfügbar ist.
v0.1.65

Bidirektionaler Site-Abgleich & Erkennung bereits installierter Tracker

Highlights
  • Intelligenterer Site-Abgleich bei der Installation – der Assistent gleicht in beide Richtungen ab, sodass auch ein längerer Projekt-Hinweis (etwa ein vollständiger Repo-Name) zur richtigen Site aufgelöst wird.
  • Wenn dein Projekt bereits den korrekten Tracking-Code enthält, springt der Assistent direkt zu einem grünen „Bereits installiert“-Panel, anstatt das Setup erneut auszuführen.
  • Das „Bereits installiert“-Panel zeigt deine Site, Domain und den Tracking-Code – mit Schnelltasten zum Beenden oder zum erneuten Ausführen des Assistenten.
  • Das headless zenovay init erkennt den installierten Code und meldet „bereits installiert“, anstatt die Arbeit zu wiederholen.
v0.1.64

Fix für Startup-Crash bei Standalone-Binaries

Highlights
  • Behebt den Absturz von Standalone-Binaries beim Start.
v0.1.63

Schlankerer npm-Download

Highlights
  • Das npm-Paket enthält die Standalone-Binaries nicht mehr, was npm install kleiner und schneller macht.
v0.1.62

Fix für die Auto-Update-Erkennung

Highlights
  • Stellt die automatische Update-Erkennung wieder her, die im Standalone-Binary-Build defekt war.
v0.1.61

Installationspfad-Prüfungen, persistenter Status-Agent & Flash-Benachrichtigungen

Highlights
  • zenovay health und zenovay doctor erkennen jetzt, wenn sich zwei zenovay-Binaries in deinem PATH befinden (der häufige Fall npm-global + Homebrew), und geben konkrete Hinweise zur Deinstallation.
  • Der Status-Agent im Hintergrund erhält Persistenz und Flash-Benachrichtigungen.
v0.1.60

Standalone-Binary-Unterstützung & Self-Test-Runner

Highlights
  • Überarbeitet den Einstiegspunkt, sodass die CLI korrekt als eigenständig kompiliertes Binary läuft – mit der zur Build-Zeit fest eingebrannten Version.
  • Der zenovay self-test-Runner erkennt jetzt korrekt, ob er als Skript oder als kompiliertes Binary ausgeführt wird.
v0.1.59

Sofortiges Stoppen des Status-Agents

Highlights
  • zenovay status-agent --stop stoppt den Hintergrund-Agent jetzt sofort, anstatt auf seinen nächsten Tick zu warten.
v0.1.58

Fix für das Überleben des Status-Agent-Daemons

Highlights
  • Der Status-Agent im Hintergrund läuft jetzt über seinen ersten Tick hinaus weiter, anstatt vorzeitig zu beenden.
v0.1.57

Anbindung des status-agent-Befehls

Highlights
  • Registriert den Befehl zenovay status-agent, sodass er korrekt ausgeführt wird.
v0.1.56

Status-Agent im Hintergrund

Highlights
  • Fügt den Status-Agent im Hintergrund hinzu – einen leichtgewichtigen Daemon, der deine Live-Besucher, Fehler und Umsätze überwacht und Desktop-Benachrichtigungen sendet (macOS, Linux und Windows Terminal unterstützt).
  • Der Installer markiert das Binary unter macOS als vertrauenswürdig, sodass es ohne Gatekeeper-Abfrage läuft.
v0.1.55

Pro-Site-Deeplinks zum Öffnen im Browser

Highlights
  • Die Pro-Site-Taste [o] zum Öffnen im Browser springt jetzt direkt zum richtigen Domain-Dashboard-Tab.
v0.1.54

Globus-Taste öffnet das Web-Dashboard

Highlights
  • Entfernt die Globus-Panels im Terminal und belegt die Globus-Taste [o] neu, sodass sie stattdessen den vollständigen interaktiven Globus in deinem Browser öffnet.
v0.1.53

Globus-Panel in Live & Übersicht

Highlights
  • Fügt den Dashboards zenovay live und zenovay overview ein gefülltes Globus-Panel hinzu, das zeigt, wo deine Besucher gerade sind.
v0.1.52

Fix für die Telemetrie-Konfiguration

Highlights
  • Behebt die anonyme Nutzungstelemetrie, sodass dein Token und API-Base korrekt übernommen werden.
v0.1.51

Tool-Calling im Chat & anonyme Telemetrie

Highlights
  • Der KI-Chat im Terminal kann jetzt Tools aufrufen, um deine echten Analysedaten während der Antwort abzurufen.
  • Fügt optionale, anonyme Nutzungstelemetrie hinzu, um die CLI zu verbessern.
Fixes
  • Behebt das unerwartete automatische Schließen des Chat-Panels.
v0.1.50

Fix für das Rendering des Globus

Highlights
  • Macht eine Chat-Panel-Änderung aus 0.1.49 rückgängig, die das Rendering des Globus beschädigt hatte.
v0.1.49

Eingabeverarbeitung im Chat-Panel

Highlights
  • Das KI-Chat-Panel erfasst Tastatureingaben jetzt sauber und leert beim Öffnen den Bildschirm.
v0.1.48

KI-Chat-Panel in den Dashboards

Highlights
  • Fügt ein eingebettetes KI-Chat-Panel in den TUI-Dashboards hinzu, sodass du Fragen zu deinen Analysedaten stellen kannst, ohne das Terminal zu verlassen.
v0.1.47

Fixes für Completion & Watch

Highlights
  • Behebt die Shell-Completion für eingegebene Werte und fügt einen --csv-Alias zu zenovay watch hinzu.
v0.1.46

Browser-Taste & Feinschliff

Highlights
  • Fügt über die TUI-Befehle hinweg eine [o]-Taste zum Öffnen im Browser hinzu, um vom Terminal zur passenden Web-Dashboard-Ansicht zu springen.
v0.1.45

Diagramm-Annotationen

Highlights
  • zenovay annotation create fügt deinen Diagrammen direkt aus dem Terminal Annotationen hinzu.
Fixes
  • Behebt das Routing des annotation-Befehls, sodass der Befehl korrekt ausgeführt wird.
v0.1.43

Wartungs-Release

Highlights
  • Routinemäßiger Versionssprung und Wartung. Dieser Eintrag deckt auch den trivialen, reinen Build-Sprung 0.1.44 ab.
v0.1.42

Fixes für Fehlermeldungen & Alerts

Highlights
  • API-Fehler zeigen jetzt eine klare, lesbare Meldung statt „[object Object]“.
  • Behebt die Validierung beim Anlegen/Aktualisieren von Alerts sowie defekte Flags in der geführten Tour.
v0.1.41

Sicherere Self-Test-Standardwerte

Highlights
  • zenovay self-test führt standardmäßig keine aktiven Sicherheits-Probes mehr aus.
v0.1.40

Echte Fehler in der Übersicht sichtbar machen

Highlights
  • zenovay overview verschluckt keine Berechtigungsfehler mehr – ein falsches --site-id meldet jetzt den echten Fehler.
v0.1.39

Rendering der Self-Test-Ausgabe

Highlights
  • Die Zusammenfassung von zenovay self-test wird jetzt als reines, sauberes stdout ausgegeben.
v0.1.38

Fix für die Self-Test-Reihenfolge

Highlights
  • Die Ergebnisse von zenovay self-test werden jetzt in Katalogreihenfolge ausgegeben.
v0.1.37

Layout für Self-Test-Fehler

Highlights
  • Fehlerdetails in zenovay self-test werden zur besseren Lesbarkeit jetzt in einer eigenen, eingerückten Zeile dargestellt.
v0.1.36

Self-Test-Zeilen & schlankere Hilfe

Highlights
  • Verbessert das Zeilen-Rendering und die Tier-Gate-Logik von zenovay self-test und verschlankt --help.
v0.1.35

Self-Test, geführte Tour, Alerts & Export

Highlights
  • Neues zenovay self-test führt jeden Lese-Endpunkt parallel gegen dein Konto aus und gibt eine farbige Pass/Fail-Zusammenfassung aus – eine Ein-Befehl-Möglichkeit zu prüfen, dass alles funktioniert.
  • Neues zenovay tour – ein interaktiver 8-Schritte-Durchlauf, mit einem Flat-Document-Modus für die nicht-interaktive Nutzung.
  • Fügt Alert-Verwaltung und Datenexport hinzu, plus einheitliche Fehlermeldungen mit klaren semantischen Codes über alle Befehle hinweg.
v0.1.34

Fixes für Hilfe & Analyse-Anzeige

Highlights
  • Behebt einen falschen Fehler, der bei --help angezeigt wurde, sowie eine Icon-Kollision in der Analyse-Ansicht.
v0.1.33

Globus-Grenzen & Dashboard-URL

Highlights
  • Fügt dem Terminal-Globus Ländergrenzen hinzu und korrigiert die verlinkte Dashboard-URL.
v0.1.32

Öffne den echten Globus in deinem Browser

Highlights
  • Fügt ein --browser-Flag und eine [w]-Taste hinzu, um den vollständigen interaktiven Globus in deinem Browser zu öffnen.
v0.1.31

Gefüllte Kontinente auf dem Globus

Highlights
  • Der Terminal-Globus rendert jetzt gefüllte Kontinente aus einer Welt-Bitmap für eine klarere Karte.
v0.1.30

Fixes für Globus-Breite & Darstellung

Highlights
  • Behebt einen Breitenverzerrungs-Bug auf dem Terminal-Globus.
v0.1.29

Fixes für Globus-Umriss & Layout

Highlights
  • Fügt dem Globus einen sichtbaren Kugelumriss hinzu und behebt Balken-Prozentsätze und die Sidebar-Breite.
v0.1.28

3D-orthografischer Globus

Highlights
  • Zeichnet den Terminal-Globus als echte 3D-orthografische Erde mit Besucher-Punktwolken und j/k-Hover-Navigation neu.
v0.1.27

Multi-Team-Unterstützung & Braille-Globus

Highlights
  • Fügt Multi-Team-Unterstützung hinzu, sodass du zwischen den Teams wechseln kannst, denen du angehörst.
  • Führt einen echten in Braille gerenderten Globus im Terminal ein.
v0.1.26

Webhooks, Audit-Log, Sharing & Quiet-Modus

Highlights
  • Fügt Webhook-Weiterleitung, Zugriff auf das Audit-Log und Befehle für Share-Links hinzu.
  • Neuer -q-Quiet-Modus und einheitliche Fehlercodes über alle Befehle hinweg.
v0.1.25

Usage-Befehl & Feinschliff

Highlights
  • Neues zenovay usage zeigt verbrauchte Events im Vergleich zu deinen Monats- und Tageslimits, plus Website-, Team- und API-Key-Zahlen im Vergleich zu deinen Plan-Limits.
Fixes
  • Unbekannte Befehle melden jetzt „Unbekannter Befehl“ und beenden mit einem Fehler, statt stillschweigend erfolgreich zu sein; ein nacktes zenovay gibt die Hilfe aus.
  • zenovay domains list gibt jetzt eine kompakte Tabelle aus, statt die Projektansicht zu übernehmen.
v0.1.24

Mutationen entsperren & Analyse mit Dashboard-Parität

Highlights
  • Entsperrt die Mutationsbefehle und bringt die Analyse-Befehle auf volle Dashboard-Parität.
v0.1.23

Volle Dashboard-Parität & Mutationsbefehle

Highlights
  • Fügt 13 neue Befehle hinzu, die das Web-Dashboard widerspiegeln, darunter API-Keys, Domains, Team-Verwaltung, Profil, Pläne, Einstellungen, Integrationen, Ziele und Notizen.
  • Agentur-Kundenverwaltung (zenovay agency) für Scale-Pläne.
  • Destruktive Befehle fordern jetzt vor dem Ausführen eine Bestätigung und weigern sich, ohne --yes unbeaufsichtigt zu laufen.
v0.1.22

Bugfixes & Feinschliff

Highlights
  • Eine Runde Bugfixes und zurückhaltender UI-Feinschliff.
v0.1.21

In-Place-Wechsel von Site & Zeitraum

Highlights
  • zenovay overview erhält einen In-Place-Site-Wechsler ([s]) und einen Zeitraum-Wechsler ([1-4]).
v0.1.20

Klarere UI & Site-Domain im Banner

Highlights
  • Frischt die UI-Palette auf und zeigt die Domain der aktiven Site im Banner-Untertitel.
v0.1.19

Stille Update-Prüfung & Login-Fixes

Highlights
  • Die Update-Prüfung läuft jetzt still, und der Login-Erfolg sowie die npm-Registry-Abfrage sind behoben.
v0.1.18

Dashboard-Spiegel-Befehle

Highlights
  • Die Befehlsoberfläche spiegelt jetzt das Web-Dashboard 1:1 und fügt 11 Befehle in Analyse (overview, live, pages, devices, geo) und Verhalten (retention, uptime, sessions, heatmaps, journeys) hinzu, mit Tier-Gating für Pro+-Funktionen.
v0.1.17

Dashboard-Primitive & blockierendes Auto-Update

Highlights
  • Neue Dashboard-Bausteine – Metric-Cards, Empty States und Datentabellen – die in jedem Befehl verwendet werden.
  • Jeder Befehl prüft jetzt vor dem Ausführen automatisch auf Updates und wendet sie an.
v0.1.16

Automatische Site-Auflösung

Highlights
  • Die CLI löst deine Site jetzt automatisch auf – --site-id ist nicht mehr erforderlich.
v0.1.15

Fixes für den Installations-Assistenten

Highlights
  • Behebt einen Schwarzbild- und Verify-Schleifen-Bug in zenovay init und fügt klarere PATH-Hinweise hinzu.
v0.1.14

Interaktives Menü nach der Installation

Highlights
  • Nach der Installation bietet zenovay init ein interaktives Menü, um direkt in zenovay watch oder das Live-Event-Tailing überzugehen.
v0.1.13

Schnellere Installation für reines HTML

Highlights
  • Fügt einen schnellen Pfad zum Installieren des Trackers auf reinen HTML-Sites hinzu.
v0.1.12

Installationszuverlässigkeit

Highlights
  • Ein fehlschlagendes Tool während der Installation legt den Install-Agent nicht mehr lahm – er erholt sich und fährt fort.
v0.1.11

Schreibgarantien bei der Installation

Highlights
  • Der Installer erfordert jetzt einen tatsächlich erfolgreichen Schreibvorgang in eine Framework-Datei, bevor er Erfolg meldet.
v0.1.10

Verify-Preflight

Highlights
  • zenovay verify führt jetzt einen Preflight gegen deine Live-URL durch und leert zwischen den Phasen den Bildschirm.
v0.1.9

Reiche Installationsdiagnose & Schreibschutz

Highlights
  • Der Installationsablauf erhält eine reichere Diagnose deines Projekts und einen Schutz gegen destruktive Dateischreibvorgänge.
v0.1.3

Verbesserungen am KI-Installations-Assistenten

Highlights
  • Der KI-Install-Agent erfordert jetzt, dass die Tracker-Dateien tatsächlich geschrieben werden, bevor er Erfolg meldet.
  • Fügt ein Idempotenz-Gate hinzu, sodass ein erneutes Ausführen von zenovay init den Agenten überspringt, wenn der Tracker bereits installiert ist.
  • Neuer Ablauf nach der Installation führt dich durch Commit/Push, Deploy, Besuch und Verifikation.
v0.1.2

Wartungs- & Installations-Fixes

Highlights
  • Wartungs-Release mit frühen Fixes für den Installations-Assistenten und das Event-Tailing (deckt auch die trivialen Sprünge 0.1.4 bis 0.1.8 ab).
  • Headless- und CI-Nutzer erhalten universelle Ausgabeformatierung – JSON, CSV, TSV und NDJSON.
  • zenovay events tail erhält Live-Filterung und -Weiterleitung.
v0.1.0

Erste Veröffentlichung

Highlights
  • Erste öffentliche Veröffentlichung der Zenovay CLI – ein KI-gestützter Installations-Assistent, der den Tracker zu deiner Site hinzufügt, plus Analyse-Dashboards im Terminal.
  • Melde dich mit sicherer Device-Flow-Authentifizierung an (zenovay login).
  • zenovay init führt dich durch das Erkennen deines Frameworks und das Installieren des Trackers.
  • Live-Dashboards im Terminal mit zenovay watch und Event-Tailing.
  • Health und Diagnostik mit zenovay health und zenovay doctor, plus automatische Selbst-Updates.
  • Auf npm veröffentlicht als @zenovay/cli (dieser Eintrag deckt sowohl 0.1.0 als auch 0.1.1 ab).

Erfordert ein kostenloses Zenovay-Konto unter app.zenovay.com.