fix(cli): never prompt or auto-install when nobody is at the terminal - #6617

What

Second of four stacked PRs (base: #6616). Fixes the two P0 findings for agent and CI runs:

• publish and upgrade called the confirmation prompt with no terminal check. With stdin from /dev/null, publish exited 13 after drawing a half prompt; with an open pipe it hung. Unattended and without --yes, both now exit 2 before doing any work, with the explanation on stderr naming --yes (upgrade also names --check).
• The background auto-install ran by default for global installs and was not gated on agents or TTY. It no longer starts in an unattended run. The Update available ... Run: npm install -g ... notice is no longer shown while an install for that version is pending, or in an unattended run.

Why

An agent that runs hyperframes publish should get a fast, clear "pass --yes" instead of a hang or an exit 13. An agent session should not install software in the background.

Related work

Stack: #6616 (factory, isUnattended()) → this PR → help and nags → JSON envelope.

How

• New packages/cli/src/ui/prompts.ts is the only module allowed to import @clack/prompts. A lint rule (no-restricted-imports) bans static imports elsewhere, and the contract test also fails on a dynamic import("@clack/prompts") outside it. All 18 files that used clack now import the wrapper, a mechanical swap.
• The wrapper's confirm, select, text and password throw a usage error (exit 2) when isUnattended(), so no future command can prompt without a terminal even if it forgets to check. Its spinner prints only the final message, as a plain line on stderr, when unattended. confirmationRequired(command, hint) is the shared "pass --yes" error.
• init, feedback, catalog and cloud delete now decide whether to ask with isUnattended() instead of their own TTY checks.
• autoUpdate.ts: isAutoInstallDisabled() includes isUnattended(). updateCheck.ts: the notice is suppressed when unattended or when pendingUpdate is for the advertised version; CI is read with the shared isCI() (any value but false or 0).
• HYPERFRAMES_NO_UPDATE_CHECK, HYPERFRAMES_NO_AUTO_INSTALL and NO_COLOR keep working as before.

Behavior for a person at a terminal is unchanged: prompts, spinners and the auto-install work as before.

Test plan

• Unit tests added/updated: ui/prompts.test.ts; contract test cases for publish and upgrade without --yes and for the clack import rule; autoUpdate.test.ts (unattended skips the install), updateCheck.test.ts (no notice when unattended or while an install is pending). Tests that drive prompts or spinners now mock attendance explicitly, so they pass the same way inside an agent and in CI.
• CLI unit suite passes locally, also with a clean CI=true environment for the touched files
• typecheck, oxlint, oxfmt --check, fallow audit, comment ratchet pass
• Manual testing performed (below)
• Documentation updated: "Unattended runs never prompt" and version notices in docs/packages/cli.mdx, publish and upgrade flag notes
• Comments follow CONTRIBUTING.md "Comments"

Manual run of the built CLI in a project directory, CLAUDECODE=1, stdin from /dev/null:

$ hyperframes publish </dev/null
# before: exit 13; stdout had the lint summary, the consent text and a half-drawn
#         "Publish this project? Yes / No" prompt with cursor escape codes
# after:  exit 2, stdout empty, stderr (after the one-time telemetry notice a fresh HOME prints):
hyperframes publish asks for confirmation, and this run cannot answer a prompt.
Pass --yes to publish without asking.

🤖 Generated with Claude Code