@lifeaitools/clauth 1.30.26 → 2.0.0

package/install.ps1

@@ -1,105 +1,105 @@
-# clauth installer - Windows
-# Private repo - run locally:
-#   cd C:\Dev\clauth && git pull && .\install.ps1
-
-$ErrorActionPreference = "Stop"
-$REPO = "https://github.com/LIFEAI/clauth.git"
-$DIR  = "$env:USERPROFILE\.clauth"
-
-# Check git
-try { git --version | Out-Null } catch {
-    Write-Host ""
-    Write-Host "  x git is required." -ForegroundColor Red
-    Write-Host "    Install from https://git-scm.com then re-run this script."
-    Write-Host ""
-    exit 1
-}
-
-# Check Node
-try { node --version | Out-Null } catch {
-    Write-Host ""
-    Write-Host "  x Node.js v18+ is required." -ForegroundColor Red
-    Write-Host "    Install from https://nodejs.org then re-run this script."
-    Write-Host ""
-    exit 1
-}
-
-# Check cloudflared (soft warning - not required for install)
-if (-not (Get-Command cloudflared -ErrorAction SilentlyContinue)) {
-    Write-Host "  Note: cloudflared not found. Install after setup for claude.ai web integration." -ForegroundColor Yellow
-    Write-Host "        winget install Cloudflare.cloudflared" -ForegroundColor Gray
-    Write-Host ""
-}
-
-# Skip bootstrap if CLAUTH npm package is already installed globally
-$alreadyInstalled = $false
-try {
-    $ver = & npm list -g @lifeaitools/clauth --depth=0 2>$null | Select-String "@lifeaitools/clauth"
-    if ($ver) { $alreadyInstalled = $true }
-} catch { }
-
-if ($alreadyInstalled) {
-    Write-Host "  clauth already installed globally - skipping bootstrap." -ForegroundColor Green
-} else {
-    # Clone or update
-    if (Test-Path "$DIR\.git") {
-        Write-Host "  Updating clauth..."
-        Set-Location $DIR; git pull --quiet
-    } else {
-        Write-Host "  Cloning clauth..."
-        git clone --quiet $REPO $DIR
-    }
-
-    # Run compiled bootstrap binary
-    $bootstrap = "$DIR\scripts\bin\bootstrap-win.exe"
-    if (-not (Test-Path $bootstrap)) {
-        Write-Host "  x Bootstrap binary not found at $bootstrap" -ForegroundColor Red
-        exit 1
-    }
-
-    Set-Location $DIR
-    & $bootstrap
-}
-
-# Register autostart - idempotent, runs every install/update
-# Primary: Task Scheduler (preferred - supports delay and OS-managed restarts)
-# Fallback: Startup folder shortcut (fully functional - autostart.ps1 has its own crash-recovery loop)
-$autostartScript = "$env:APPDATA\clauth\autostart.ps1"
-$taskName = "CLAUTH Daemon"
-
-if (Test-Path $autostartScript) {
-    Write-Host ""
-    Write-Host "  Registering autostart..." -ForegroundColor Cyan
-
-    $registered = $false
-
-    # Try Task Scheduler first
-    try {
-        Unregister-ScheduledTask -TaskName $taskName -Confirm:$false -ErrorAction SilentlyContinue
-        $action   = New-ScheduledTaskAction -Execute "powershell.exe" `
-                      -Argument "-WindowStyle Hidden -ExecutionPolicy Bypass -File `"$autostartScript`""
-        $trigger  = New-ScheduledTaskTrigger -AtLogOn
-        $settings = New-ScheduledTaskSettingsSet -ExecutionTimeLimit 0 -RestartCount 3 -RestartInterval (New-TimeSpan -Minutes 1)
-        Register-ScheduledTask -TaskName $taskName -Action $action -Trigger $trigger `
-          -Settings $settings -RunLevel Limited -Force -ErrorAction Stop | Out-Null
-        Write-Host "  + Task Scheduler: '$taskName' registered (triggers at logon)." -ForegroundColor Green
-        $registered = $true
-    } catch { }
-
-    # Fallback: Startup folder - valid solution, autostart.ps1 handles crash recovery internally
-    if (-not $registered) {
-        $startupDir = "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup"
-        $shortcut = "$startupDir\clauth-autostart.lnk"
-        $wsh = New-Object -ComObject WScript.Shell
-        $lnk = $wsh.CreateShortcut($shortcut)
-        $lnk.TargetPath = "powershell.exe"
-        # 15s delay baked in so profile is loaded before daemon starts
-        $lnk.Arguments = "-WindowStyle Hidden -ExecutionPolicy Bypass -Command `"Start-Sleep 15; & '$autostartScript'`""
-        $lnk.WorkingDirectory = "$env:APPDATA\clauth"
-        $lnk.WindowStyle = 7
-        $lnk.Save()
-        Write-Host "  + Autostart registered via Startup folder (15s delay, crash-recovery loop active)." -ForegroundColor Green
-    }
+# clauth installer - Windows
+# Private repo - run locally:
+#   cd C:\Dev\clauth && git pull && .\install.ps1
+
+$ErrorActionPreference = "Stop"
+$REPO = "https://github.com/LIFEAI/clauth.git"
+$DIR  = "$env:USERPROFILE\.clauth"
+
+# Check git
+try { git --version | Out-Null } catch {
+    Write-Host ""
+    Write-Host "  x git is required." -ForegroundColor Red
+    Write-Host "    Install from https://git-scm.com then re-run this script."
+    Write-Host ""
+    exit 1
+}
+
+# Check Node
+try { node --version | Out-Null } catch {
+    Write-Host ""
+    Write-Host "  x Node.js v18+ is required." -ForegroundColor Red
+    Write-Host "    Install from https://nodejs.org then re-run this script."
+    Write-Host ""
+    exit 1
+}
+
+# Check cloudflared (soft warning - not required for install)
+if (-not (Get-Command cloudflared -ErrorAction SilentlyContinue)) {
+    Write-Host "  Note: cloudflared not found. Install after setup for claude.ai web integration." -ForegroundColor Yellow
+    Write-Host "        winget install Cloudflare.cloudflared" -ForegroundColor Gray
+    Write-Host ""
+}
+
+# Skip bootstrap if CLAUTH npm package is already installed globally
+$alreadyInstalled = $false
+try {
+    $ver = & npm list -g @lifeaitools/clauth --depth=0 2>$null | Select-String "@lifeaitools/clauth"
+    if ($ver) { $alreadyInstalled = $true }
+} catch { }
+
+if ($alreadyInstalled) {
+    Write-Host "  clauth already installed globally - skipping bootstrap." -ForegroundColor Green
+} else {
+    # Clone or update
+    if (Test-Path "$DIR\.git") {
+        Write-Host "  Updating clauth..."
+        Set-Location $DIR; git pull --quiet
+    } else {
+        Write-Host "  Cloning clauth..."
+        git clone --quiet $REPO $DIR
+    }
+
+    # Run compiled bootstrap binary
+    $bootstrap = "$DIR\scripts\bin\bootstrap-win.exe"
+    if (-not (Test-Path $bootstrap)) {
+        Write-Host "  x Bootstrap binary not found at $bootstrap" -ForegroundColor Red
+        exit 1
+    }
+
+    Set-Location $DIR
+    & $bootstrap
+}
+
+# Register autostart - idempotent, runs every install/update
+# Primary: Task Scheduler (preferred - supports delay and OS-managed restarts)
+# Fallback: Startup folder shortcut (fully functional - autostart.ps1 has its own crash-recovery loop)
+$autostartScript = "$env:APPDATA\clauth\autostart.ps1"
+$taskName = "CLAUTH Daemon"
+
+if (Test-Path $autostartScript) {
+    Write-Host ""
+    Write-Host "  Registering autostart..." -ForegroundColor Cyan
+
+    $registered = $false
+
+    # Try Task Scheduler first
+    try {
+        Unregister-ScheduledTask -TaskName $taskName -Confirm:$false -ErrorAction SilentlyContinue
+        $action   = New-ScheduledTaskAction -Execute "powershell.exe" `
+                      -Argument "-WindowStyle Hidden -ExecutionPolicy Bypass -File `"$autostartScript`""
+        $trigger  = New-ScheduledTaskTrigger -AtLogOn
+        $settings = New-ScheduledTaskSettingsSet -ExecutionTimeLimit 0 -RestartCount 3 -RestartInterval (New-TimeSpan -Minutes 1)
+        Register-ScheduledTask -TaskName $taskName -Action $action -Trigger $trigger `
+          -Settings $settings -RunLevel Limited -Force -ErrorAction Stop | Out-Null
+        Write-Host "  + Task Scheduler: '$taskName' registered (triggers at logon)." -ForegroundColor Green
+        $registered = $true
+    } catch { }
+
+    # Fallback: Startup folder - valid solution, autostart.ps1 handles crash recovery internally
+    if (-not $registered) {
+        $startupDir = "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup"
+        $shortcut = "$startupDir\clauth-autostart.lnk"
+        $wsh = New-Object -ComObject WScript.Shell
+        $lnk = $wsh.CreateShortcut($shortcut)
+        $lnk.TargetPath = "powershell.exe"
+        # 15s delay baked in so profile is loaded before daemon starts
+        $lnk.Arguments = "-WindowStyle Hidden -ExecutionPolicy Bypass -Command `"Start-Sleep 15; & '$autostartScript'`""
+        $lnk.WorkingDirectory = "$env:APPDATA\clauth"
+        $lnk.WindowStyle = 7
+        $lnk.Save()
+        Write-Host "  + Autostart registered via Startup folder (15s delay, crash-recovery loop active)." -ForegroundColor Green
+    }
 } else {
     Write-Host ""
     Write-Host "  ! autostart.ps1 not found - skipping autostart registration." -ForegroundColor Yellow

package/install.sh

@@ -1,49 +1,49 @@
-#!/usr/bin/env bash
-# clauth installer
-set -e
-
-REPO="https://github.com/LIFEAI/clauth.git"
-DIR="$HOME/.clauth"
-
-# Check git
-if ! command -v git &>/dev/null; then
-  echo ""; echo "  x git is required."
-  echo "    Install git from https://git-scm.com then re-run this script."; echo ""
-  exit 1
-fi
-
-# Check Node
-if ! command -v node &>/dev/null; then
-  echo ""; echo "  x Node.js v18+ is required."
-  echo "    Install from https://nodejs.org then re-run this script."; echo ""
-  exit 1
-fi
-
-# Check cloudflared (soft warning)
-if ! command -v cloudflared &>/dev/null; then
-  echo "  Note: cloudflared not found. Install after setup for claude.ai web integration."
-  if [[ "$OSTYPE" == "darwin"* ]]; then
-    echo "        brew install cloudflare/cloudflare/cloudflared"
-  else
-    echo "        https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/"
-  fi
-  echo ""
-fi
-
-# Clone or update
-if [ -d "$DIR/.git" ]; then
-  echo "  Updating clauth..."; cd "$DIR" && git pull --quiet
-else
-  echo "  Cloning clauth..."; git clone --quiet "$REPO" "$DIR"
-fi
-
-# Run compiled bootstrap
-UNAME=$(uname -s | tr '[:upper:]' '[:lower:]')
-if [[ "$UNAME" == *"darwin"* ]]; then
-  BOOTSTRAP="$DIR/scripts/bin/bootstrap-macos"
-else
-  BOOTSTRAP="$DIR/scripts/bin/bootstrap-linux"
-fi
-
-chmod +x "$BOOTSTRAP"
-cd "$DIR" && "$BOOTSTRAP"
+#!/usr/bin/env bash
+# clauth installer
+set -e
+
+REPO="https://github.com/LIFEAI/clauth.git"
+DIR="$HOME/.clauth"
+
+# Check git
+if ! command -v git &>/dev/null; then
+  echo ""; echo "  x git is required."
+  echo "    Install git from https://git-scm.com then re-run this script."; echo ""
+  exit 1
+fi
+
+# Check Node
+if ! command -v node &>/dev/null; then
+  echo ""; echo "  x Node.js v18+ is required."
+  echo "    Install from https://nodejs.org then re-run this script."; echo ""
+  exit 1
+fi
+
+# Check cloudflared (soft warning)
+if ! command -v cloudflared &>/dev/null; then
+  echo "  Note: cloudflared not found. Install after setup for claude.ai web integration."
+  if [[ "$OSTYPE" == "darwin"* ]]; then
+    echo "        brew install cloudflare/cloudflare/cloudflared"
+  else
+    echo "        https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/"
+  fi
+  echo ""
+fi
+
+# Clone or update
+if [ -d "$DIR/.git" ]; then
+  echo "  Updating clauth..."; cd "$DIR" && git pull --quiet
+else
+  echo "  Cloning clauth..."; git clone --quiet "$REPO" "$DIR"
+fi
+
+# Run compiled bootstrap
+UNAME=$(uname -s | tr '[:upper:]' '[:lower:]')
+if [[ "$UNAME" == *"darwin"* ]]; then
+  BOOTSTRAP="$DIR/scripts/bin/bootstrap-macos"
+else
+  BOOTSTRAP="$DIR/scripts/bin/bootstrap-linux"
+fi
+
+chmod +x "$BOOTSTRAP"
+cd "$DIR" && "$BOOTSTRAP"

package/package.json

@@ -1,19 +1,18 @@
 {
   "name": "@lifeaitools/clauth",
-  "version": "1.30.26",
+  "version": "2.0.0",
   "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
   "type": "module",
   "bin": {
     "clauth": "./cli/index.js"
   },
   "scripts": {
-    "build": "bash scripts/build.sh",
-    "test": "node --test cli/commands/scrub.test.js cli/api.classify.test.js test/studio-debug.test.mjs test/dashboard-key-generator.test.mjs && node test-auth-verdict.mjs",
+    "build": "node scripts/build.mjs",
+    "test": "node --test cli/commands/scrub.test.js cli/commands/login.test.js cli/api.classify.test.js test/studio-debug.test.mjs test/dashboard-key-generator.test.mjs && node test-auth-verdict.mjs",
     "test:studio-debug": "node --test test/studio-debug.test.mjs",
     "test:agent-pool": "node test/agent-pool.test.mjs",
     "test:call-agent-10": "node test/call-agent-10-skills.test.mjs",
     "test:call-agent-guard": "node test/call-agent-guard.test.mjs",
-    "test:tintin-settings": "node test/tintin-settings.test.mjs",
     "postinstall": "node scripts/postinstall.js",
     "worker:start": "node cli/index.js serve",
     "worker:stop": "curl -s http://127.0.0.1:52437/shutdown 2>nul || taskkill /F /IM cloudflared.exe 2>nul & exit 0",
@@ -29,7 +28,6 @@
     "node-fetch": "^3.3.2",
     "ora": "^8.1.0",
     "pm2": "^7.0.3",
-    "regen-root": "file:../../regen-root.wt/x-claude-sv",
     "typescript": "^5.9.3"
   },
   "engines": {
@@ -55,6 +53,7 @@
     "cli/",
     "scripts/bin/",
     "scripts/bootstrap.cjs",
+    "scripts/build.mjs",
     "scripts/build.sh",
     "scripts/postinstall.js",
     "cli/commands/ops-install.js",

package/scripts/bootstrap.cjs

@@ -1,121 +1,121 @@
-// bootstrap.cjs — CommonJS, compiled to binary by pkg
-// Installs npm deps, links clauth, chains to: clauth install
-'use strict';
-const { execSync, spawnSync } = require('child_process');
-const { join } = require('path');
-const ROOT = join(__dirname, '..');
-
-function run(cmd, opts) {
-  return spawnSync(cmd, Object.assign({ shell: true, stdio: 'inherit', cwd: ROOT }, opts || {}));
-}
-function check(cmd) {
-  try { execSync(cmd + ' --version', { stdio: 'pipe' }); return true; } catch { return false; }
-}
-
-console.log('\n  Installing clauth runtime...\n');
-
-if (!check('git')) {
-  console.error('  x git not found. Install from https://git-scm.com');
-  process.exit(1);
-}
-var nodeVer = parseInt(process.version.slice(1));
-if (nodeVer < 18) {
-  console.error('  x Node.js v18+ required (found ' + process.version + ')');
-  console.error('    Install from https://nodejs.org');
-  process.exit(1);
-}
-
-console.log('  -> Installing dependencies...');
-var inst = run('npm install --no-fund --no-audit', { stdio: ['ignore','ignore','pipe'] });
-if (inst.status !== 0) { console.error('  x npm install failed'); process.exit(1); }
-console.log('  + Dependencies ready');
-
-console.log('  -> Linking clauth command...');
-var lnk = run('npm link', { stdio: ['ignore','ignore','pipe'] });
-if (lnk.status !== 0) {
-  var slnk = run('sudo npm link', { stdio: 'inherit' });
-  if (slnk.status !== 0) console.warn('  ! Could not link globally — add ' + ROOT + '/node_modules/.bin to PATH');
-}
-console.log('  + clauth linked');
-
-// Check if cloudflared is installed
-var cfFound = false;
-try {
-  execSync('cloudflared --version', { stdio: 'ignore' });
-  cfFound = true;
-} catch {}
-
-if (!cfFound) {
-  console.log('\n  cloudflared not found — needed for claude.ai web integration (tunnel).');
-
-  var platform = process.platform;
-  var installCmd = null;
-  var installLabel = null;
-
-  if (platform === 'win32') {
-    try {
-      execSync('winget --version', { stdio: 'ignore' });
-      installCmd = 'winget install Cloudflare.cloudflared --silent --accept-package-agreements --accept-source-agreements';
-      installLabel = 'winget';
-    } catch {}
-  } else if (platform === 'darwin') {
-    try {
-      execSync('brew --version', { stdio: 'ignore' });
-      installCmd = 'brew install cloudflare/cloudflare/cloudflared';
-      installLabel = 'Homebrew';
-    } catch {}
-  }
-  // Linux: no auto-install — falls through to manual instructions
-
-  if (installCmd) {
-    process.stdout.write('  Install now via ' + installLabel + '? (y/n): ');
-    var answer = (function () {
-      try {
-        var buf = Buffer.alloc(3);
-        var fd = require('fs').openSync('/dev/tty', 'r');
-        require('fs').readSync(fd, buf, 0, 3);
-        require('fs').closeSync(fd);
-        return buf.toString().trim().toLowerCase();
-      } catch {
-        try {
-          var result = require('child_process').spawnSync(
-            'powershell',
-            ['-Command', "$k = $Host.UI.RawUI.ReadKey('NoEcho,IncludeKeyDown'); $k.Character"],
-            { encoding: 'utf8' }
-          );
-          return (result.stdout || '').trim().toLowerCase();
-        } catch { return 'n'; }
-      }
-    })();
-
-    if (answer === 'y') {
-      console.log('  Installing cloudflared via ' + installLabel + '...');
-      try {
-        execSync(installCmd, { stdio: 'inherit' });
-        console.log('  + cloudflared installed.');
-      } catch (e) {
-        console.log('  x Auto-install failed. Install manually:');
-        console.log('    https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/');
-      }
-    } else {
-      console.log('  Skipped. Install later and run: clauth tunnel setup');
-    }
-  } else {
-    console.log('  Install manually:');
-    if (platform === 'win32') {
-      console.log('    winget install Cloudflare.cloudflared');
-      console.log('    or: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/');
-    } else if (platform === 'darwin') {
-      console.log('    brew install cloudflare/cloudflare/cloudflared');
-      console.log('    or: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/');
-    } else {
-      console.log('    https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/');
-    }
-    console.log('  Then run: clauth tunnel setup');
-  }
-  console.log('');
-}
-
-console.log('\n  -> Launching clauth install...\n');
-var r = run('clauth install');
-process.exit(r.status || 0);
+// bootstrap.cjs — CommonJS, compiled to binary by pkg
+// Installs npm deps, links clauth, chains to: clauth install
+'use strict';
+const { execSync, spawnSync } = require('child_process');
+const { join } = require('path');
+const ROOT = join(__dirname, '..');
+
+function run(cmd, opts) {
+  return spawnSync(cmd, Object.assign({ shell: true, stdio: 'inherit', cwd: ROOT }, opts || {}));
+}
+function check(cmd) {
+  try { execSync(cmd + ' --version', { stdio: 'pipe' }); return true; } catch { return false; }
+}
+
+console.log('\n  Installing clauth runtime...\n');
+
+if (!check('git')) {
+  console.error('  x git not found. Install from https://git-scm.com');
+  process.exit(1);
+}
+var nodeVer = parseInt(process.version.slice(1));
+if (nodeVer < 18) {
+  console.error('  x Node.js v18+ required (found ' + process.version + ')');
+  console.error('    Install from https://nodejs.org');
+  process.exit(1);
+}
+
+console.log('  -> Installing dependencies...');
+var inst = run('npm install --no-fund --no-audit', { stdio: ['ignore','ignore','pipe'] });
+if (inst.status !== 0) { console.error('  x npm install failed'); process.exit(1); }
+console.log('  + Dependencies ready');
+
+console.log('  -> Linking clauth command...');
+var lnk = run('npm link', { stdio: ['ignore','ignore','pipe'] });
+if (lnk.status !== 0) {
+  var slnk = run('sudo npm link', { stdio: 'inherit' });
+  if (slnk.status !== 0) console.warn('  ! Could not link globally — add ' + ROOT + '/node_modules/.bin to PATH');
+}
+console.log('  + clauth linked');
+
+// Check if cloudflared is installed
+var cfFound = false;
+try {
+  execSync('cloudflared --version', { stdio: 'ignore' });
+  cfFound = true;
+} catch {}
+
+if (!cfFound) {
+  console.log('\n  cloudflared not found — needed for claude.ai web integration (tunnel).');
+
+  var platform = process.platform;
+  var installCmd = null;
+  var installLabel = null;
+
+  if (platform === 'win32') {
+    try {
+      execSync('winget --version', { stdio: 'ignore' });
+      installCmd = 'winget install Cloudflare.cloudflared --silent --accept-package-agreements --accept-source-agreements';
+      installLabel = 'winget';
+    } catch {}
+  } else if (platform === 'darwin') {
+    try {
+      execSync('brew --version', { stdio: 'ignore' });
+      installCmd = 'brew install cloudflare/cloudflare/cloudflared';
+      installLabel = 'Homebrew';
+    } catch {}
+  }
+  // Linux: no auto-install — falls through to manual instructions
+
+  if (installCmd) {
+    process.stdout.write('  Install now via ' + installLabel + '? (y/n): ');
+    var answer = (function () {
+      try {
+        var buf = Buffer.alloc(3);
+        var fd = require('fs').openSync('/dev/tty', 'r');
+        require('fs').readSync(fd, buf, 0, 3);
+        require('fs').closeSync(fd);
+        return buf.toString().trim().toLowerCase();
+      } catch {
+        try {
+          var result = require('child_process').spawnSync(
+            'powershell',
+            ['-Command', "$k = $Host.UI.RawUI.ReadKey('NoEcho,IncludeKeyDown'); $k.Character"],
+            { encoding: 'utf8' }
+          );
+          return (result.stdout || '').trim().toLowerCase();
+        } catch { return 'n'; }
+      }
+    })();
+
+    if (answer === 'y') {
+      console.log('  Installing cloudflared via ' + installLabel + '...');
+      try {
+        execSync(installCmd, { stdio: 'inherit' });
+        console.log('  + cloudflared installed.');
+      } catch (e) {
+        console.log('  x Auto-install failed. Install manually:');
+        console.log('    https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/');
+      }
+    } else {
+      console.log('  Skipped. Install later and run: clauth tunnel setup');
+    }
+  } else {
+    console.log('  Install manually:');
+    if (platform === 'win32') {
+      console.log('    winget install Cloudflare.cloudflared');
+      console.log('    or: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/');
+    } else if (platform === 'darwin') {
+      console.log('    brew install cloudflare/cloudflare/cloudflared');
+      console.log('    or: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/');
+    } else {
+      console.log('    https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/');
+    }
+    console.log('  Then run: clauth tunnel setup');
+  }
+  console.log('');
+}
+
+console.log('\n  -> Launching clauth install...\n');
+var r = run('clauth install');
+process.exit(r.status || 0);

package/scripts/build.mjs

@@ -0,0 +1,66 @@
+/**
+ * Regenerate bootstrap binaries from source on every supported host.
+ * npm's own Node process is authoritative; a separately found Git Bash on
+ * Windows may not expose node on PATH.
+ */
+import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const require = createRequire(import.meta.url);
+const root = dirname(dirname(fileURLToPath(import.meta.url)));
+const scripts = join(root, "scripts");
+const bin = join(scripts, "bin");
+const tmp = join(bin, "tmp");
+const obfuscated = join(scripts, "bootstrap.ob.cjs");
+
+try {
+  process.stdout.write("→ Obfuscating bootstrap.cjs...\n");
+  const obfuscator = require("javascript-obfuscator");
+  const source = readFileSync(join(scripts, "bootstrap.cjs"), "utf8");
+  const output = obfuscator.obfuscate(source, {
+    compact: true,
+    controlFlowFlattening: true,
+    controlFlowFlatteningThreshold: 0.75,
+    deadCodeInjection: true,
+    deadCodeInjectionThreshold: 0.4,
+    identifierNamesGenerator: "hexadecimal",
+    rotateStringArray: true,
+    shuffleStringArray: true,
+    splitStrings: true,
+    splitStringsChunkLength: 8,
+    stringArray: true,
+    stringArrayEncoding: ["base64"],
+    stringArrayThreshold: 0.85,
+    transformObjectKeys: true,
+    target: "node",
+  });
+  writeFileSync(obfuscated, output.getObfuscatedCode());
+  process.stdout.write("  ✓ Obfuscated\n→ Compiling binaries...\n");
+  mkdirSync(tmp, { recursive: true });
+  const compile = spawnSync(
+    process.platform === "win32" ? "npx.cmd" : "npx",
+    ["pkg", obfuscated, "--targets", "node18-win-x64,node18-linux-x64,node18-macos-x64", "--out-path", tmp],
+    // Windows `.cmd` shims require cmd.exe; inputs are constant paths/targets.
+    { cwd: root, encoding: "utf8", shell: process.platform === "win32", windowsHide: true },
+  );
+  const outputLog = `${compile.stdout ?? ""}${compile.stderr ?? ""}`.split(/\r?\n/).filter((line) => line && !line.includes("Warning")).join("\n");
+  if (outputLog) process.stdout.write(`${outputLog}\n`);
+  if (compile.error || compile.status !== 0) throw compile.error ?? new Error(`pkg exited ${compile.status ?? "unknown"}`);
+  for (const [from, to] of [["bootstrap.ob-linux", "bootstrap-linux"], ["bootstrap.ob-macos", "bootstrap-macos"], ["bootstrap.ob-win.exe", "bootstrap-win.exe"]]) {
+    const sourcePath = join(tmp, from);
+    if (!existsSync(sourcePath)) throw new Error(`pkg did not produce ${from}`);
+    renameSync(sourcePath, join(bin, to));
+  }
+  for (const filename of ["bootstrap-linux", "bootstrap-macos"]) chmodSync(join(bin, filename), 0o755);
+  rmSync(tmp, { recursive: true, force: true });
+  rmSync(obfuscated, { force: true });
+  process.stdout.write(`${readdirSync(bin).join("\n")}\n✓ Build complete\n`);
+} catch (error) {
+  rmSync(tmp, { recursive: true, force: true });
+  rmSync(obfuscated, { force: true });
+  process.stderr.write(`Build failed: ${error instanceof Error ? error.message : String(error)}\n`);
+  process.exitCode = 1;
+}