feat(web): put the one-line install in front of everyone

[ralyodio]

The CLI is the product and the way you get it was nowhere on the site — you had to already know the URL of a script sitting in public/.

curl -fsSL https://logicsrc.com/install.sh | sh

Two placements, one definition

• Homepage hero — the loud version, directly under the lede and above the fold: bordered dark panel, command at full size, Copy alongside, with a read the script first link.
• Every page — a compact version in the rail between the brand and the nav. Present on arrival, never competing with navigation.

Both render from renderInstallCommand() in one module. The homepage builds HTML as a string while the rest of the site is JSX — exactly the shape that lets one copy of a command drift while the other stays correct — so SiteShell renders the shared definition rather than restating it.

The flags are load-bearing

curl -fsSL, not bare curl. Without -f curl prints an HTTP error body and still exits 0, so a 404 gets piped into sh; without -L the install breaks the first time the URL redirects. This is the form install.sh already documents in its own header.

Copy button

One delegated listener on document for any [data-copy] button, mounted site-wide in the layout — the two placements arrive by different rendering paths and a document listener doesn't care which. Falls back to a throwaway textarea + execCommand outside a secure context, where navigator.clipboard is undefined, so the button never silently no-ops.

Verification

• 13 new contract tests pass; 46 total pass in apps/logicsrc-web.
• Tests pin the command, both placements, and that the clipboard payload equals the visible text.
• They also read public/install.sh and assert it is #!/bin/sh and documents this exact command, so | sh can't quietly become a lie.
• tsc --noEmit clean across the app.
• Rendered both placements and SiteShell through react-dom/server to confirm real output and ordering (rail sits between brand and nav).

Pre-existing failure, not from this change: contract/ontology-api.contract.test.ts fails to resolve @logicsrc/validators (unbuilt workspace package). Verified it fails identically on a stashed, pristine origin/master. next build trips on the same chain.

🤖 Generated with Claude Code

[github-actions]

vu1nz Security Review

0 finding(s) in PR #?

No security issues found.