feat(install): add -S install with --dry-run and --noconfirm flags

Create full install pipeline (plan task 21):
- src/tofu/recipeparse.d: light .recipe Lua parser (parseRecipeFile)
- src/tofu/commands/install.d: installCommand with delegate seams
- 8 unit tests covering: happy path, not-found, dep cycle, build
  failure, install failure, --dry-run, --noconfirm, user abort
- All 21 modules pass dub test, dub build passes
- Evidence: .omo/evidence/task-21-tofu-core.log

.omo/notepads/tofu-core/decisions.md

@@ -58,3 +58,31 @@ DMD 2.112's `core.sys.posix.signal.signal` requires the handler to be `@nogc`.
 Similarly, `_exit(130)` from `core.sys.posix.unistd` is used instead of `core.stdc.stdlib.exit` — `_exit` does NOT run atexit handlers or flush stdio buffers, making it safe in a signal-handler context.
 
 ---
+
+### Task 21: Module-level Config for `resolveDepTree` function pointer seam
+
+`resolveDepTree` uses `Recipe function(string) @safe` (function pointer, not delegate) because the production caller (`installCommand`) needs to capture `Config cfg`. D function pointers cannot carry state, so a module-level `_installCfg` variable bridges the gap.
+
+**Pattern**: Set `_installCfg = cfg` before calling `resolveDepTree`, clear via `scope(exit) _installCfg = Config.init;`. The `_recipeForDeps` function pointer reads `_installCfg` for cache-path access and recipe fetching.
+
+**Rationale**: Tofu is single-threaded (lock-file based). Module-level state is safe within a single command run. The `scope(exit)` ensures cleanup on all exit paths (return, exception, goto).
+
+### Task 21: Light recipe parser in `tofu.recipeparse` — double-quote only
+
+The `extractKeyValue` scanner (ported from `tofu.fetch`) only recognizes double-quoted string values (`"value"`). Single-quoted values (`'value'`) are silently ignored, producing empty fields.
+
+**Decision**: Document this limitation rather than adding single-quote support. ZUUR `.recipe` files use double quotes per Lua convention. The parser is explicitly documented as a LIGHT scanner, not a full Lua parser.
+
+### Task 21: Confirmation prompt via `readln()` — `@trusted` wrapper
+
+`std.stdio.stdin`, `stdout`, and `readln()` are all `@system` in DMD 2.112. The confirmation prompt wraps stdout write/flush and stdin read in `@trusted` helpers (`trustedReadLine()`), keeping the public `installCommand` `@safe`.
+
+**Rationale**: Same pattern used in all tofu modules (`tofu.log`, `tofu.build`, `tofu.install`). No new `@trusted` philosophy — just the standard I/O seam.
+
+### Task 21: Fake makepkg/zeta scripts for unit tests
+
+Rather than adding build/install delegate seams to `installCommand`, the tests reuse the fake-script pattern from `build.d` and `install.d`: create executable bash scripts in temp directories, point `cfg.zetaToolchainPath` and `cfg.zetaPath` at them.
+
+**Rationale**: Keeps `installCommand`'s API surface minimal (only index/binary seams). The fake scripts exercise the full production code path through `buildAll` and `installAll`, providing higher-fidelity integration tests.
+
+---

.omo/notepads/tofu-core/learnings.md

@@ -1195,3 +1195,84 @@ The sandbox test (test 2) creates a sentinel file, serves an index containing `o
 - Import: `import tofu.commands.info : infoCommand;` (selective, matching `: infoCommand;` since the function is the only export needed).
 - Dispatch: `case Command.info: return infoCommand(pa.arg, pa, cfg);`
 - Signature matches: `infoCommand(string, ParsedArgs, Config)` with the 4th param having a default value.
+
+---
+
+## Task 21 — `tofu.commands.install` (`-S` full install pipeline)
+
+### Architecture
+- Module `tofu.commands.install` — file `src/tofu/commands/install.d`.
+- New supporting module: `src/tofu/recipeparse.d` with `parseRecipeFile(string path)`.
+- Depends on: `tofu.config`, `tofu.cli`, `tofu.types`, `tofu.index`, `tofu.deps`, `tofu.resolve`, `tofu.binary`, `tofu.fetch`, `tofu.build`, `tofu.install`, `tofu.state`, `tofu.log`, `tofu.recipeparse`, `tofu.errors`.
+
+### Public API: `installCommand`
+- `int installCommand(string pkgName, ParsedArgs flags, Config cfg, indexFetcher = null, binaryCheck = null)` — returns exit code 0-5.
+- Testability seams: `indexFetcher` and `binaryCheck` delegates, both default to null (→ real implementations).
+- Pipeline: fetch index → resolve deps → constrain tree → generate plan → confirm → dry-run check → build → install → record state → summary.
+
+### `tofu.recipeparse` — light Lua .recipe parser
+- `Recipe parseRecipeFile(string path)` scans for known keys using `extractKeyValue` pattern (same as fetch.d).
+- Supported fields: name, version/ver, summary, url, sha256, build_system, build_script, test, deps, files.
+- Deps list: `{ "a", "b>=1.0" }` → scanned for quoted strings via `extractList()`.
+- IMPORTANT: Only double-quoted (`"`) string values are recognized — single quotes (`'`) are not supported by the light parser.
+- Unknown build_system → `BuildSystem.unknown`.
+- This is a LIGHT scanner, not a full Lua parser — documented limitation.
+
+### `resolveDepTree` function pointer seam
+- `resolveDepTree` takes `Recipe function(string) @safe` (NOT delegate).
+- Workaround: module-level `_installCfg` Config variable, set before `resolveDepTree` call, cleared via `scope(exit)`.
+- `_recipeForDeps(string name)` function pointer reads `_installCfg` to access cache paths and fetch recipes.
+- This is safe because tofu is single-threaded (lock-based).
+
+### Confirmation prompt
+- `write("Proceed? [y/N] ")` + `stdout.flush()` + `readln()` — all wrapped in `@trusted` since `stdout`/`stdin` are `@system` in DMD 2.112.
+- Accepts `y`, `Y`, `yes`, `YES` — anything else (including EOF) → "aborted by user" + return 0.
+- `--noconfirm` skips prompt entirely.
+
+### `@safe` pointer-to-local issue (DMD 2.112)
+- Cannot take `&entry` of a `ref entry` in `foreach` inside `@safe` code.
+- Fix: use index-based `for` loop and `&index[i]` (heap array, `@safe`-allowed).
+
+### `write` name conflict between `std.file.write` and `std.stdio.write`
+- When both `std.file` and `std.stdio` are imported, bare `write(path, content)` is ambiguous.
+- Fix: use fully-qualified `std.file.write(path, content)` in test helpers.
+- Same issue with `buildPath` — use selective import `import std.path : buildPath;`.
+
+### Recipe quoting gotcha — single vs double quotes
+- The `extractKeyValue` parser only recognizes double-quoted strings (`name = "value"`).
+- Single-quoted strings (`name = 'value'`) are silently ignored → parsed Recipe has empty fields.
+- This manifests as exit code 2 (not found) because the recipe's name is empty → dep resolution fails → `fetchRecipe("")` throws `FetchException(notFound=true)` → `exitCodeFor` maps to 2.
+- Fix: all test recipe content MUST use double quotes.
+
+### Unittests (8/8 pass)
+1. Full happy path: pkg in index, no deps, fake makepkg + fake zeta → exit 0, state recorded, zeta args verified.
+2. Package not in index → exit 2.
+3. Dep cycle (A→B, B→A) → exit 3.
+4. Build failure (fake makepkg exits 1) → exit 4, no state recorded.
+5. Install failure (fake zeta exits 1) → exit 5.
+6. `--dry-run` → exit 0, nothing built/installed/recorded.
+7. `--noconfirm` with "n\n" in stdin → proceeds (prompt skipped).
+8. Confirmation denied ("n\n" in stdin) → exit 0, nothing built.
+
+### Fake script patterns for tests
+- `makeFakeMakepkg(dir, exitCode)` — bash script that parses `--output` and creates `packages/<name>/package.lua`.
+- `makeFakeZeta(dir, exitCode)` — bash script that writes `$2` (package name) to args file.
+- Adapted from `build.d` and `install.d` test patterns.
+- Must use `chmod(toStringz(path), octal!755)` to make scripts executable.
+
+### Parallel agent file conflicts
+- Parallel agents (tasks 22, 23, 24) rename/overwrite files in `src/tofu/commands/`.
+- Files get renamed to `.skip` or replaced with stubs during parallel execution.
+- Mitigation: restore files and immediately run `dub test`/`dub build` in the same tool call.
+- `remove.d` / `info.d` from parallel tasks may have compile errors — stub them out temporarily.
+
+### `stdin` manipulation in tests (tests 7 and 8)
+- Save/restore pattern: store `savedStdin = stdin`, open temp file as `stdin`, restore via `scope(exit)`.
+- `File` is a reference type — assignment `stdin = File(path, "r")` shares the GC-managed object.
+- Tests 7 and 8 must be at the END of the file — `stdin` may be left in a bad state after test 8.
+- `readln()` must be wrapped in `@trusted` — it's `@system` in DMD 2.112.
+
+### `dub test` and `dub build` verified
+- `dub test` passes — 21 modules, all 8 install.d unittests pass.
+- `dub build` passes with `warningsAsErrors`.
+- Evidence logged to `.omo/evidence/task-21-tofu-core.log`.