@lifeaitools/clauth 1.30.26 → 1.31.1

package/scripts/build.mjs

@@ -0,0 +1,66 @@
+/**
+ * Regenerate bootstrap binaries from source on every supported host.
+ * npm's own Node process is authoritative; a separately found Git Bash on
+ * Windows may not expose node on PATH.
+ */
+import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const require = createRequire(import.meta.url);
+const root = dirname(dirname(fileURLToPath(import.meta.url)));
+const scripts = join(root, "scripts");
+const bin = join(scripts, "bin");
+const tmp = join(bin, "tmp");
+const obfuscated = join(scripts, "bootstrap.ob.cjs");
+
+try {
+  process.stdout.write("→ Obfuscating bootstrap.cjs...\n");
+  const obfuscator = require("javascript-obfuscator");
+  const source = readFileSync(join(scripts, "bootstrap.cjs"), "utf8");
+  const output = obfuscator.obfuscate(source, {
+    compact: true,
+    controlFlowFlattening: true,
+    controlFlowFlatteningThreshold: 0.75,
+    deadCodeInjection: true,
+    deadCodeInjectionThreshold: 0.4,
+    identifierNamesGenerator: "hexadecimal",
+    rotateStringArray: true,
+    shuffleStringArray: true,
+    splitStrings: true,
+    splitStringsChunkLength: 8,
+    stringArray: true,
+    stringArrayEncoding: ["base64"],
+    stringArrayThreshold: 0.85,
+    transformObjectKeys: true,
+    target: "node",
+  });
+  writeFileSync(obfuscated, output.getObfuscatedCode());
+  process.stdout.write("  ✓ Obfuscated\n→ Compiling binaries...\n");
+  mkdirSync(tmp, { recursive: true });
+  const compile = spawnSync(
+    process.platform === "win32" ? "npx.cmd" : "npx",
+    ["pkg", obfuscated, "--targets", "node18-win-x64,node18-linux-x64,node18-macos-x64", "--out-path", tmp],
+    // Windows `.cmd` shims require cmd.exe; inputs are constant paths/targets.
+    { cwd: root, encoding: "utf8", shell: process.platform === "win32", windowsHide: true },
+  );
+  const outputLog = `${compile.stdout ?? ""}${compile.stderr ?? ""}`.split(/\r?\n/).filter((line) => line && !line.includes("Warning")).join("\n");
+  if (outputLog) process.stdout.write(`${outputLog}\n`);
+  if (compile.error || compile.status !== 0) throw compile.error ?? new Error(`pkg exited ${compile.status ?? "unknown"}`);
+  for (const [from, to] of [["bootstrap.ob-linux", "bootstrap-linux"], ["bootstrap.ob-macos", "bootstrap-macos"], ["bootstrap.ob-win.exe", "bootstrap-win.exe"]]) {
+    const sourcePath = join(tmp, from);
+    if (!existsSync(sourcePath)) throw new Error(`pkg did not produce ${from}`);
+    renameSync(sourcePath, join(bin, to));
+  }
+  for (const filename of ["bootstrap-linux", "bootstrap-macos"]) chmodSync(join(bin, filename), 0o755);
+  rmSync(tmp, { recursive: true, force: true });
+  rmSync(obfuscated, { force: true });
+  process.stdout.write(`${readdirSync(bin).join("\n")}\n✓ Build complete\n`);
+} catch (error) {
+  rmSync(tmp, { recursive: true, force: true });
+  rmSync(obfuscated, { force: true });
+  process.stderr.write(`Build failed: ${error instanceof Error ? error.message : String(error)}\n`);
+  process.exitCode = 1;
+}

package/scripts/build.sh

@@ -1,45 +1,5 @@
-#!/usr/bin/env bash
-# scripts/build.sh — regenerate bootstrap binaries from source
-# Run: npm run build
-set -e
-cd "$(dirname "$0")/.."
-
-echo "→ Obfuscating bootstrap.cjs..."
-node -e "
-const J = require('javascript-obfuscator');
-const fs = require('fs');
-const src = fs.readFileSync('scripts/bootstrap.cjs', 'utf8');
-const out = J.obfuscate(src, {
-  compact: true,
-  controlFlowFlattening: true, controlFlowFlatteningThreshold: 0.75,
-  deadCodeInjection: true, deadCodeInjectionThreshold: 0.4,
-  identifierNamesGenerator: 'hexadecimal',
-  rotateStringArray: true, shuffleStringArray: true,
-  splitStrings: true, splitStringsChunkLength: 8,
-  stringArray: true, stringArrayEncoding: ['base64'],
-  stringArrayThreshold: 0.85,
-  transformObjectKeys: true, target: 'node'
-});
-fs.writeFileSync('scripts/bootstrap.ob.cjs', out.getObfuscatedCode());
-console.log('  ✓ Obfuscated');
-"
-
-echo "→ Compiling binaries..."
-mkdir -p scripts/bin
-npx pkg scripts/bootstrap.ob.cjs \
-  --targets node18-win-x64,node18-linux-x64,node18-macos-x64 \
-  --out-path scripts/bin/tmp/ \
-  2>&1 | grep -v "^$" | grep -v "Warning" || true
-
-# Rename to clean names
-mv -f scripts/bin/tmp/bootstrap.ob-linux   scripts/bin/bootstrap-linux   2>/dev/null || true
-mv -f scripts/bin/tmp/bootstrap.ob-macos   scripts/bin/bootstrap-macos   2>/dev/null || true
-mv -f scripts/bin/tmp/bootstrap.ob-win.exe scripts/bin/bootstrap-win.exe 2>/dev/null || true
-rm -rf scripts/bin/tmp
-chmod +x scripts/bin/bootstrap-linux scripts/bin/bootstrap-macos 2>/dev/null || true
-
-# Clean intermediate
-rm -f scripts/bootstrap.ob.cjs
-
-ls -lh scripts/bin/
-echo "✓ Build complete"
+#!/usr/bin/env bash
+# Compatibility shim for callers that still invoke this path directly.
+# npm runs the Node implementation on every platform.
+set -e
+exec "${npm_node_execpath:-node}" "$(dirname "$0")/build.mjs" "$@"

package/scripts/postinstall.js

@@ -1,189 +1,189 @@
-#!/usr/bin/env node
-// scripts/postinstall.js
-// Runs after npm install -g @lifeaitools/clauth
-// On Windows: writes watchdog.ps1 to %APPDATA%\clauth\ and registers
-// the Task Scheduler job via UAC elevation.
-
-import fs from "fs";
-import path from "path";
-import os from "os";
-import { fileURLToPath } from "url";
-import { spawnSync } from "child_process";
-
-const __dirname  = path.dirname(fileURLToPath(import.meta.url));
-const APPDATA    = process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming");
-const CLAUTH_DIR = path.join(APPDATA, "clauth");
-const DEST_PS1   = path.join(CLAUTH_DIR, "watchdog.ps1");
-const SOURCE_PS1 = path.join(__dirname, "..", "cli", "assets", "watchdog.ps1");
-const PS_EXE     = "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe";
-const TASK_NAME  = "ClautWatchdog";
-
-const CONFIG_DIR = os.platform() === "win32"
-  ? path.join(APPDATA, "clauth-nodejs", "Config")
-  : path.join(os.homedir(), ".config", "clauth-nodejs");
-
-let version = "1.0.0";
-try {
-  const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, "..", "package.json"), "utf8"));
-  version = pkg.version;
-} catch {}
-
-// ----------------------------------------------------------------
-// Watchdog helpers (Windows only)
-// ----------------------------------------------------------------
-
-function writeWatchdogScript() {
-  try {
-    fs.mkdirSync(CLAUTH_DIR, { recursive: true });
-    fs.copyFileSync(SOURCE_PS1, DEST_PS1);
-    return true;
-  } catch (err) {
-    console.log(`  ! Could not write watchdog script: ${err.message}`);
-    return false;
-  }
-}
-
-function isWatchdogRegistered() {
-  try {
-    const r = spawnSync(PS_EXE, [
-      "-NoProfile", "-Command",
-      `(Get-ScheduledTask -TaskName '${TASK_NAME}' -ErrorAction SilentlyContinue) -ne $null`,
-    ], { encoding: "utf8", stdio: ["pipe","pipe","pipe"], timeout: 5000 });
-    return (r.stdout || "").trim().toLowerCase() === "true";
-  } catch { return false; }
-}
-
-function registerWatchdog() {
-  const escaped = DEST_PS1.replace(/'/g, "''");
-  const psCmd = [
-    `$a = New-ScheduledTaskAction -Execute 'powershell.exe'`,
-    ` -Argument '-NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File \\"${escaped}\\"';`,
-    `$t = New-ScheduledTaskTrigger -AtLogOn;`,
-    `$s = New-ScheduledTaskSettingsSet -ExecutionTimeLimit 0 -RestartCount 3`,
-    ` -RestartInterval (New-TimeSpan -Minutes 1) -MultipleInstances IgnoreNew;`,
-    `Unregister-ScheduledTask -TaskName '${TASK_NAME}' -Confirm:$false -ErrorAction SilentlyContinue;`,
-    `Register-ScheduledTask -TaskName '${TASK_NAME}' -Action $a -Trigger $t`,
-    ` -Settings $s -RunLevel Highest -Description 'clauth daemon watchdog';`,
-  ].join(" ");
-
-  // Try direct first (works if already running as Administrator)
-  const direct = spawnSync(PS_EXE, [
-    "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", psCmd,
-  ], { encoding: "utf8", stdio: ["pipe","pipe","pipe"], timeout: 10000 });
-
-  if (direct.status === 0) return "ok";
-
-  // Trigger UAC elevation — opens the Windows approval dialog
-  const inner = psCmd.replace(/"/g, '\\"');
-  const elevated = spawnSync(PS_EXE, [
-    "-NoProfile", "-Command",
-    `Start-Process '${PS_EXE}' -Verb RunAs -Wait -ArgumentList '-NoProfile -ExecutionPolicy Bypass -Command "${inner}"'`,
-  ], { stdio: "inherit", encoding: "utf8", timeout: 60000 });
-
-  return elevated.status === 0 ? "ok" : "denied";
-}
-
-function startWatchdog() {
-  spawnSync(PS_EXE, [
-    "-NoProfile", "-Command",
-    `Start-ScheduledTask -TaskName '${TASK_NAME}' -ErrorAction SilentlyContinue`,
-  ], { stdio: "pipe", timeout: 5000 });
-}
-
-function installCodevelopTerminalProfiles() {
-  const cli = path.join(__dirname, "..", "cli", "index.js");
-  const result = spawnSync(process.execPath, [
-    cli,
-    "codevelop",
-    "install-terminal",
-    "--repo",
-    "C:\\Dev\\regen-root",
-  ], { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], timeout: 10000 });
-
-  if (result.status === 0) {
-    console.log("  ✓ Co-development Windows Terminal profiles installed");
-  } else {
-    const msg = (result.stderr || result.stdout || "").trim();
-    console.log(`  ! Co-development terminal profile install skipped${msg ? `: ${msg}` : ""}`);
-    console.log("    Install later with: clauth codevelop install-terminal --repo C:\\Dev\\regen-root");
-  }
-}
-
-// ----------------------------------------------------------------
-// Main
-// ----------------------------------------------------------------
-
-async function main() {
-  const configPath = path.join(CONFIG_DIR, "config.json");
-  const isUpgrade  = fs.existsSync(configPath);
-
-  if (isUpgrade) {
-    console.log(`\n  \u2713 clauth upgraded to v${version}`);
-    console.log(`  \u2713 Config preserved at ${CONFIG_DIR}`);
-    try {
-      const controller = new AbortController();
-      const to = setTimeout(() => controller.abort(), 2000);
-      const res = await fetch("http://127.0.0.1:52437/ping", { signal: controller.signal });
-      clearTimeout(to);
-      if (res.ok) console.log("  \u21BB Daemon running \u2014 restart: clauth serve restart");
-    } catch {
-      console.log("  \u25CB Daemon not running");
-    }
-  } else {
-    console.log(`\n  Welcome to clauth v${version}!`);
-    console.log("  Run 'clauth install' to set up your vault");
-  }
-
-  // Windows: register watchdog on fresh install; refresh script on upgrade
-  if (os.platform() === "win32") {
-    const registered = isWatchdogRegistered();
-    if (!registered) {
-      console.log("\n  Setting up auto-restart watchdog...");
-      console.log("  Windows will ask for administrator approval \u2014 please click Yes.\n");
-      if (writeWatchdogScript()) {
-        const result = registerWatchdog();
-        if (result === "ok") {
-          startWatchdog();
-          console.log("  \u2713 Watchdog registered and started (Task: ClautWatchdog)");
-          console.log(`  \u2713 Script: ${DEST_PS1}`);
-        } else {
-          console.log("  ! Watchdog registration skipped (approval denied).");
-          console.log("    Install later with: clauth watchdog install");
-        }
-      }
-    } else {
-      writeWatchdogScript(); // refresh script on upgrade
-      console.log("  \u2713 Watchdog script updated");
-    }
-    installCodevelopTerminalProfiles();
-  }
-
-  // Windows: install dependencies via winget if not already present
-  if (os.platform() === "win32") {
-    const deps = [
-      { cmd: "rclone", args: ["version"], wingetId: "Rclone.Rclone", label: "rclone (WebDAV bridge)" },
-      { cmd: "pwsh", args: ["--version"], wingetId: "Microsoft.PowerShell", label: "PowerShell 7 (fs_exec shell)" },
-    ];
-    for (const dep of deps) {
-      const check = spawnSync(dep.cmd, dep.args, { stdio: "pipe", timeout: 5000, windowsHide: true });
-      if (check.status === 0) {
-        console.log(`  ✓ ${dep.label} already installed`);
-      } else {
-        console.log(`  Installing ${dep.label}...`);
-        const r = spawnSync("winget", [
-          "install", "--id", dep.wingetId,
-          "--silent", "--accept-package-agreements", "--accept-source-agreements",
-        ], { stdio: "inherit", timeout: 120000 });
-        if (r.status === 0) {
-          console.log(`  ✓ ${dep.label} installed`);
-        } else {
-          console.log(`  ! ${dep.label} install skipped — install manually: winget install ${dep.wingetId}`);
-        }
-      }
-    }
-  }
-
-  console.log("  Run 'clauth doctor' to verify installation\n");
-}
-
-main().catch(() => {});
+#!/usr/bin/env node
+// scripts/postinstall.js
+// Runs after npm install -g @lifeaitools/clauth
+// On Windows: writes watchdog.ps1 to %APPDATA%\clauth\ and registers
+// the Task Scheduler job via UAC elevation.
+
+import fs from "fs";
+import path from "path";
+import os from "os";
+import { fileURLToPath } from "url";
+import { spawnSync } from "child_process";
+
+const __dirname  = path.dirname(fileURLToPath(import.meta.url));
+const APPDATA    = process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming");
+const CLAUTH_DIR = path.join(APPDATA, "clauth");
+const DEST_PS1   = path.join(CLAUTH_DIR, "watchdog.ps1");
+const SOURCE_PS1 = path.join(__dirname, "..", "cli", "assets", "watchdog.ps1");
+const PS_EXE     = "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe";
+const TASK_NAME  = "ClautWatchdog";
+
+const CONFIG_DIR = os.platform() === "win32"
+  ? path.join(APPDATA, "clauth-nodejs", "Config")
+  : path.join(os.homedir(), ".config", "clauth-nodejs");
+
+let version = "1.0.0";
+try {
+  const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, "..", "package.json"), "utf8"));
+  version = pkg.version;
+} catch {}
+
+// ----------------------------------------------------------------
+// Watchdog helpers (Windows only)
+// ----------------------------------------------------------------
+
+function writeWatchdogScript() {
+  try {
+    fs.mkdirSync(CLAUTH_DIR, { recursive: true });
+    fs.copyFileSync(SOURCE_PS1, DEST_PS1);
+    return true;
+  } catch (err) {
+    console.log(`  ! Could not write watchdog script: ${err.message}`);
+    return false;
+  }
+}
+
+function isWatchdogRegistered() {
+  try {
+    const r = spawnSync(PS_EXE, [
+      "-NoProfile", "-Command",
+      `(Get-ScheduledTask -TaskName '${TASK_NAME}' -ErrorAction SilentlyContinue) -ne $null`,
+    ], { encoding: "utf8", stdio: ["pipe","pipe","pipe"], timeout: 5000 });
+    return (r.stdout || "").trim().toLowerCase() === "true";
+  } catch { return false; }
+}
+
+function registerWatchdog() {
+  const escaped = DEST_PS1.replace(/'/g, "''");
+  const psCmd = [
+    `$a = New-ScheduledTaskAction -Execute 'powershell.exe'`,
+    ` -Argument '-NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File \\"${escaped}\\"';`,
+    `$t = New-ScheduledTaskTrigger -AtLogOn;`,
+    `$s = New-ScheduledTaskSettingsSet -ExecutionTimeLimit 0 -RestartCount 3`,
+    ` -RestartInterval (New-TimeSpan -Minutes 1) -MultipleInstances IgnoreNew;`,
+    `Unregister-ScheduledTask -TaskName '${TASK_NAME}' -Confirm:$false -ErrorAction SilentlyContinue;`,
+    `Register-ScheduledTask -TaskName '${TASK_NAME}' -Action $a -Trigger $t`,
+    ` -Settings $s -RunLevel Highest -Description 'clauth daemon watchdog';`,
+  ].join(" ");
+
+  // Try direct first (works if already running as Administrator)
+  const direct = spawnSync(PS_EXE, [
+    "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", psCmd,
+  ], { encoding: "utf8", stdio: ["pipe","pipe","pipe"], timeout: 10000 });
+
+  if (direct.status === 0) return "ok";
+
+  // Trigger UAC elevation — opens the Windows approval dialog
+  const inner = psCmd.replace(/"/g, '\\"');
+  const elevated = spawnSync(PS_EXE, [
+    "-NoProfile", "-Command",
+    `Start-Process '${PS_EXE}' -Verb RunAs -Wait -ArgumentList '-NoProfile -ExecutionPolicy Bypass -Command "${inner}"'`,
+  ], { stdio: "inherit", encoding: "utf8", timeout: 60000 });
+
+  return elevated.status === 0 ? "ok" : "denied";
+}
+
+function startWatchdog() {
+  spawnSync(PS_EXE, [
+    "-NoProfile", "-Command",
+    `Start-ScheduledTask -TaskName '${TASK_NAME}' -ErrorAction SilentlyContinue`,
+  ], { stdio: "pipe", timeout: 5000 });
+}
+
+function installCodevelopTerminalProfiles() {
+  const cli = path.join(__dirname, "..", "cli", "index.js");
+  const result = spawnSync(process.execPath, [
+    cli,
+    "codevelop",
+    "install-terminal",
+    "--repo",
+    "C:\\Dev\\regen-root",
+  ], { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], timeout: 10000 });
+
+  if (result.status === 0) {
+    console.log("  ✓ Co-development Windows Terminal profiles installed");
+  } else {
+    const msg = (result.stderr || result.stdout || "").trim();
+    console.log(`  ! Co-development terminal profile install skipped${msg ? `: ${msg}` : ""}`);
+    console.log("    Install later with: clauth codevelop install-terminal --repo C:\\Dev\\regen-root");
+  }
+}
+
+// ----------------------------------------------------------------
+// Main
+// ----------------------------------------------------------------
+
+async function main() {
+  const configPath = path.join(CONFIG_DIR, "config.json");
+  const isUpgrade  = fs.existsSync(configPath);
+
+  if (isUpgrade) {
+    console.log(`\n  \u2713 clauth upgraded to v${version}`);
+    console.log(`  \u2713 Config preserved at ${CONFIG_DIR}`);
+    try {
+      const controller = new AbortController();
+      const to = setTimeout(() => controller.abort(), 2000);
+      const res = await fetch("http://127.0.0.1:52437/ping", { signal: controller.signal });
+      clearTimeout(to);
+      if (res.ok) console.log("  \u21BB Daemon running \u2014 restart: clauth serve restart");
+    } catch {
+      console.log("  \u25CB Daemon not running");
+    }
+  } else {
+    console.log(`\n  Welcome to clauth v${version}!`);
+    console.log("  Run 'clauth install' to set up your vault");
+  }
+
+  // Windows: register watchdog on fresh install; refresh script on upgrade
+  if (os.platform() === "win32") {
+    const registered = isWatchdogRegistered();
+    if (!registered) {
+      console.log("\n  Setting up auto-restart watchdog...");
+      console.log("  Windows will ask for administrator approval \u2014 please click Yes.\n");
+      if (writeWatchdogScript()) {
+        const result = registerWatchdog();
+        if (result === "ok") {
+          startWatchdog();
+          console.log("  \u2713 Watchdog registered and started (Task: ClautWatchdog)");
+          console.log(`  \u2713 Script: ${DEST_PS1}`);
+        } else {
+          console.log("  ! Watchdog registration skipped (approval denied).");
+          console.log("    Install later with: clauth watchdog install");
+        }
+      }
+    } else {
+      writeWatchdogScript(); // refresh script on upgrade
+      console.log("  \u2713 Watchdog script updated");
+    }
+    installCodevelopTerminalProfiles();
+  }
+
+  // Windows: install dependencies via winget if not already present
+  if (os.platform() === "win32") {
+    const deps = [
+      { cmd: "rclone", args: ["version"], wingetId: "Rclone.Rclone", label: "rclone (WebDAV bridge)" },
+      { cmd: "pwsh", args: ["--version"], wingetId: "Microsoft.PowerShell", label: "PowerShell 7 (fs_exec shell)" },
+    ];
+    for (const dep of deps) {
+      const check = spawnSync(dep.cmd, dep.args, { stdio: "pipe", timeout: 5000, windowsHide: true });
+      if (check.status === 0) {
+        console.log(`  ✓ ${dep.label} already installed`);
+      } else {
+        console.log(`  Installing ${dep.label}...`);
+        const r = spawnSync("winget", [
+          "install", "--id", dep.wingetId,
+          "--silent", "--accept-package-agreements", "--accept-source-agreements",
+        ], { stdio: "inherit", timeout: 120000 });
+        if (r.status === 0) {
+          console.log(`  ✓ ${dep.label} installed`);
+        } else {
+          console.log(`  ! ${dep.label} install skipped — install manually: winget install ${dep.wingetId}`);
+        }
+      }
+    }
+  }
+
+  console.log("  Run 'clauth doctor' to verify installation\n");
+}
+
+main().catch(() => {});