@nyex/nyex 0.1.2-beta

package/LICENSE

@@ -0,0 +1,30 @@
+# NYEX Commercial / Proprietary License
+
+**Status:** Private Beta / Production Beta
+
+NYEX is **not open source** at this time. Permission is granted only to approved users under the NYEX Terms of Use and any applicable Order Form.
+
+## Grant of license (summary)
+
+Subject to your Subscription (if any) and compliance with the Terms of Use, you may download, install, and use NYEX for your internal business purposes during the term of your access.
+
+## Restrictions (summary)
+
+You must not (and must not allow others to):
+
+- reverse engineer, decompile, disassemble, or attempt to discover source code or underlying structure (except to the extent permitted by law)
+- modify, translate, adapt, or create derivative works
+- distribute, sublicense, rent, lease, sell, resell, or provide NYEX as a service bureau/managed service
+- remove proprietary notices
+- use NYEX to develop or improve a competing product or service
+- bypass security, licensing, or approval controls
+
+## Governing terms
+
+Your use of NYEX is governed by the **NYEX Terms of Use** in `TERMS_OF_USE.md` (and any referenced policies / Order Forms).
+
+If there is any conflict between this summary and the Terms of Use, the Terms of Use control.
+
+---
+
+AIC Pty Ltd (ACN 082 378 256) © NYEX AI Platform. All rights reserved.

package/README.md

@@ -0,0 +1,74 @@
+# NYEX — AI Engineering Platform (Windows-first)
+
+NYEX is a Windows-first AI Engineering CLI/TUI designed for serious builders who want **role-aware model routing**, **governed workflows**, and **local-first memory**—without turning your dev environment into a SaaS dependency.
+
+This repo is currently in **private beta**.
+
+## Why NYEX exists
+
+Most “AI coding tools” optimize for a single chat loop. NYEX is different: it treats AI like a **multi-role engineering team** (primary, intent, planner, tool_exec, summarizer) and gives you **control** over identity, routing, cost, and memory.
+
+## Key capabilities
+
+- **NYEX Account gate (private beta)**  
+  Register → Pending → Admin approval → Use NYEX.
+- **Role-aware routing**  
+  Route different tasks to different providers/models.
+- **Local-first memory (lite backend)**  
+  Built-in lightweight store for structured notes; future backends can be added.
+- **Doctor / status diagnostics**  
+  Validates real reachability (HTTP + JSON sanity) for critical endpoints.
+- **Admin Control Panel**  
+  Approve/disable users, revoke sessions, view activity, review private beta requests.
+- **Security posture**  
+  Rate-limited health endpoint, minimized public metadata, no secret leaks in logs, bypass hardened (release ignores bypass).
+
+## Install (private beta)
+
+You’ll receive the installer/package via private distribution. Public install instructions are intentionally omitted.
+
+## First run (mental model)
+
+NYEX has **two different auth layers**:
+
+1. **NYEX account** (platform identity and access control)
+2. **Provider access** (ChatGPT / API keys / Claude / Gemini) for the model provider you choose
+
+NYEX will first ask you to **sign in / create a NYEX account**, then guide you to provider setup.
+
+## Configuration
+
+NYEX uses `NYEX_HOME` as the only home directory.
+
+- **Windows default**: `%USERPROFILE%\.nyex`
+- You can override via env: `NYEX_HOME=E:\Nyex\_home`
+
+Auth URL precedence (highest wins):
+
+1. `--nyex-auth-url` CLI flag
+2. `NYEX_AUTH_URL` env var
+3. `NYEX_HOME\config.toml` (`[nyex_auth].url`)
+4. Build-time default (`NYEX_DEFAULT_AUTH_URL`)
+5. Fallback: `http://localhost:8787`
+
+## Legal
+
+- **Terms of Use**: see `TERMS_OF_USE.md`
+- **License**: see `LICENSE.md`
+
+## Security disclosure
+
+If you find a security issue, please report it privately (do not open a public issue). Contact details will be provided to testers.
+
+## Repo structure (high level)
+
+- `core-rs/` — Rust CLI + TUI
+- `auth-server/` — NYEX auth backend
+
+## Contributing
+
+This is a private beta repo. Contributions are by invitation only. If you’re an approved tester and want to contribute, ask for access/branching rules.
+
+---
+
+AIC Pty Ltd (ACN 082 378 256) © NYEX AI Platform. All rights reserved.

package/TERMS_OF_USE.md

@@ -0,0 +1,294 @@
+# TERMS OF USE – NYEX AI PLATFORM
+**Effective date: 1 March 2026**
+
+These Terms of Use (“Terms”) govern access to and use of the NYEX AI Platform, including any related software, installers, updates, documentation, websites, and services we provide (collectively, the “Platform”).
+
+By clicking “Accept”, downloading, installing, accessing, or using the Platform, you agree to these Terms. If you do not agree, do not use the Platform.
+
+If you are using the Platform on behalf of a company or organisation, you represent that you have authority to bind that organisation, and “you” and “Customer” refers to that organisation.
+
+## 1. Definitions
+
+In these Terms:
+
+“NYEX”, “NYEX AI”, “we”, “us”, or “our” means AIC Pty Ltd (ACN 082 378 256), a company duly incorporated and registered in New South Wales, Australia, trading as Digilabs Company and operating the NYEX AI Platform.
+
+“Digilabs Company” is the business division and trading name under which AIC Pty Ltd develops and operates the NYEX AI Platform.
+
+“Customer”, “you”, “your” means the person or organisation using the Platform.
+
+“Authorised Users” means your employees, contractors, and consultants who you allow to use the Platform under your account and within your licence limits.
+
+“Order Form” means an order form, statement of work, online checkout, or similar purchasing document that references these Terms.
+
+“Customer Data” means data, content, files, prompts, instructions, and information provided by you or your Authorised Users through or in connection with the Platform, including configuration and workflow definitions, and any data received via Third Party Services at your direction.
+
+“Outputs” means content generated by AI technologies via the Platform, including responses, summaries, code, recommendations, or actions taken based on your instructions.
+
+“Third Party Services” means third-party services, models, APIs, tools, connectors, and providers you connect to or use with the Platform (including foundation LLM providers and other software/services).
+
+“Subscription” means a paid plan, licence, or entitlement that allows use of certain Platform features.
+
+## 2. Our Relationship and Scope
+
+2.1 What we provide. The Platform is an AI engineering environment designed to help users build workflows, automation, and memory-enabled systems. The Platform may support local processing and optional connections to Third Party Services.
+
+2.2 Local-first architecture. Depending on your configuration, the Platform may store Customer Data locally on your systems (including local vector databases). You are responsible for your local environment, storage, and security controls (see Section 7).
+
+2.3 Third Party Services. If you connect the Platform to Third Party Services (including foundation LLM providers), you are contracting directly with those providers, and your use is subject to their terms, policies, and pricing.
+
+## 3. Eligibility, Authority, and Account Security
+
+3.1 Authority to use and share data. You represent and warrant that you have all rights, permissions, and authority necessary to:
+
+(a) access and use the Platform; and (b) upload, submit, transmit, or otherwise provide Customer Data to the Platform and to any Third Party Services you connect.
+
+### 3.2 Account security. You are responsible for:
+
+maintaining the confidentiality of access credentials and licence keys;
+
+all activity under your account; and
+
+ensuring Authorised Users comply with these Terms.
+
+Notify us promptly if you suspect unauthorised access.
+
+3.3 Suspension for security or misuse. We may suspend or restrict access to the Platform (in whole or part) if we reasonably believe:
+
+there is unauthorised access, security risk, or malware;
+
+your use breaches these Terms or applicable law; or
+
+suspension is needed to protect you, other customers, or the integrity of the Platform. We will take reasonable steps to notify you and restore access once the issue is resolved.
+
+## 4. Licence Grant and Restrictions
+
+4.1 Licence. Subject to your Subscription and these Terms, we grant you a limited, non-exclusive, non-transferable, non-sublicensable licence to download, install, and use the Platform during the Term for your internal business purposes.
+
+4.2 Authorised Users. You may permit Authorised Users to use the Platform solely on your behalf and within your Subscription limits. You remain responsible for their acts and omissions.
+
+### 4.3 Restrictions. You must not (and must not allow others to):
+
+(a) reverse engineer, decompile, disassemble, or attempt to discover source code, algorithms, or underlying structure of the Platform (except to the extent permitted by law and only after giving us notice); (b) modify, translate, adapt, or create derivative works of the Platform; (c) rent, lease, sell, resell, distribute, or provide the Platform to third parties as a service bureau, managed service, or time-sharing arrangement (unless expressly agreed in writing); (d) remove or obscure proprietary notices; (e) use the Platform to develop or improve a competing product or service; (f) interfere with or disrupt the Platform, including attempting to bypass security or licensing controls; (g) use the Platform in a way that violates applicable law, infringes rights, or facilitates unlawful, harmful, or deceptive activity.
+
+4.4 Open source. The Platform may include open-source components governed by their own licences. To the extent there is a conflict, the open-source licence applies to those components.
+
+## 5. Orders, Subscriptions, and Payments
+
+5.1 Order Forms. If you purchase a Subscription, the Order Form sets out your plan, fees, term, and entitlements. Order Forms are incorporated into these Terms.
+
+### 5.2 Fees. You must pay all fees when due. Unless otherwise stated, fees are in [AUD/USD] and exclude taxes.
+
+5.3 Non-cancellable; non-refundable. Subscription fees are non-cancellable and non-refundable except where required by law or expressly stated in an Order Form.
+
+### 5.4 Late payments. Overdue amounts may accrue interest at the lesser of:
+
+(a) 1.5% per month; or (b) the maximum amount permitted by law.
+
+5.5 Taxes. You are responsible for all taxes and duties associated with your purchase (including VAT/GST/sales tax), except taxes on our net income.
+
+5.6 Price changes. We may change pricing for renewal terms by giving at least 30 days’ notice before renewal, unless your Order Form states otherwise.
+
+## 6. Customer Data, Privacy, and Local Storage
+
+### 6.1 Customer Data ownership. As between you and NYEX, you retain all rights in Customer Data.
+
+6.2 Licence to process Customer Data. You grant NYEX a limited, worldwide, non-exclusive, royalty-free licence to process Customer Data only to:
+
+(a) provide, maintain, secure, and support the Platform; (b) respond to support requests; (c) improve and develop the Platform; and (d) create Aggregated Data (see 6.3).
+
+6.3 Aggregated Data. We may create aggregated and/or de-identified data derived from Platform usage (for analytics, security, performance, and product improvement). Aggregated Data does not identify you or your users and is not Customer Data.
+
+6.4 Local-first responsibility. Where Customer Data is stored locally (including local vector databases), you are responsible for:
+
+access controls and permissions;
+
+backups and disaster recovery;
+
+endpoint security and patching;
+
+compliance with your internal policies and applicable law.
+
+6.5 Privacy. Our collection and handling of personal information is described in our Privacy Policy, which forms part of these Terms.
+
+## 7. Third Party Services (Including Foundation LLM Providers)
+
+7.1 Your relationship with Third Party Services. Third Party Services are provided under separate terms between you and the third party. You are responsible for reviewing and complying with those terms, including pricing, data use, retention, and security practices.
+
+7.2 No responsibility for third parties. We do not control Third Party Services and are not responsible for their availability, accuracy, security, data handling, or outages. You use them at your own risk.
+
+7.3 Data sent to Third Party Services. If you configure the Platform to send prompts, context, or data to a Third Party Service, you instruct the Platform to do so. You are responsible for deciding what data is shared and ensuring you have permission to share it.
+
+## 8. AI Outputs, Human Oversight, and Safety
+
+8.1 Outputs may be incorrect. Outputs may be inaccurate, incomplete, biased, non-unique, or unsuitable for your purposes. You must evaluate Outputs before relying on them.
+
+8.2 No professional advice. The Platform and Outputs are not legal, medical, financial, or other professional advice. You should obtain appropriate professional advice before acting.
+
+8.3 Safety and responsible use. You must not use the Platform to generate or distribute unlawful, harmful, deceptive, or infringing content, or to violate rights of others.
+
+8.4 Monitoring and audit. The Platform may provide traceability, memory inspection, and governance controls. You are responsible for configuring and using those controls appropriately.
+
+## 9. Support, Updates, and Availability
+
+9.1 Support. Support levels (if any) depend on your Subscription or Order Form. Free or trial use may include limited or community support.
+
+9.2 Updates. We may provide updates, patches, new features, and improvements. Some updates may be required to maintain security or compatibility.
+
+9.3 Availability. We aim to provide reliable access, but the Platform may be unavailable due to maintenance, updates, or events beyond our reasonable control. Scheduled maintenance may be notified in advance where reasonably practicable.
+
+## 10. Intellectual Property
+
+10.1 Our IP. We own all rights, title, and interest in the Platform, including software, design, trademarks, and related intellectual property, except for third-party and open-source components.
+
+### 10.2 No implied rights. Except as expressly granted, no rights are transferred to you.
+
+10.3 Your IP. You own your Customer Data and your internal workflows/content you create using the Platform, subject to third-party rights and these Terms.
+
+## 11. Confidentiality
+
+11.1 Confidential Information. Confidential Information includes non-public information disclosed by one party to the other, including business plans, pricing, technology, security information, and product roadmaps.
+
+### 11.2 Obligations. The receiving party must:
+
+use Confidential Information only to perform under these Terms;
+
+protect it with at least reasonable care; and
+
+disclose it only to personnel/advisers who need to know and are bound by confidentiality obligations.
+
+### 11.3 Exclusions. Confidential Information does not include information that is:
+
+publicly available through no breach;
+
+independently developed without use of Confidential Information; or
+
+received lawfully from a third party without restriction.
+
+11.4 Required disclosures. If disclosure is required by law, the receiving party will (where legally permitted) give notice and cooperate to limit disclosure.
+
+## 12. Warranties and Disclaimers
+
+12.1 Platform provided “as is.” Except as expressly stated in these Terms or an Order Form, the Platform is provided “as is” and we disclaim all implied warranties to the extent permitted by law.
+
+12.2 Consumer guarantees. If you are an Australian consumer and the Australian Consumer Law applies, you may have non-excludable rights. Nothing in these Terms excludes those rights.
+
+12.3 No guarantee of uninterrupted service. We do not guarantee the Platform will be error-free, uninterrupted, or completely secure.
+
+## 13. Limitation of Liability
+
+13.1 No indirect loss. To the maximum extent permitted by law, neither party is liable for indirect or consequential loss (including loss of profits, revenue, goodwill, or data).
+
+13.2 Liability cap. To the maximum extent permitted by law, each party’s total liability for all claims relating to the Platform or these Terms is limited to the fees paid (and payable) by you to NYEX in the 12 months before the event giving rise to the claim.
+
+### 13.3 Exceptions. The liability cap does not apply to:
+
+your payment obligations;
+
+your breach of confidentiality;
+
+your infringement/misuse;
+
+liability that cannot be excluded by law.
+
+## 14. Indemnities
+
+14.1 Our indemnity. We will indemnify you against third-party claims that the Platform infringes third-party intellectual property rights, provided you:
+
+notify us promptly;
+
+allow us to control the defence and settlement; and
+
+cooperate reasonably.
+
+This does not apply to claims arising from your modifications, your combination with other items, or your misuse.
+
+### 14.2 Your indemnity. You indemnify us against third-party claims arising from:
+
+your Customer Data;
+
+your breach of these Terms;
+
+your use of Third Party Services;
+
+unlawful or infringing use by you or your Authorised Users.
+
+### 14.3 Infringement response. If a claim suggests the Platform may infringe, we may:
+
+(a) obtain the right for you to continue using it; (b) modify/replace it; or (c) terminate the affected part and refund prepaid unused fees for that part (if any), unless prohibited by your breach.
+
+## 15. Term and Termination
+
+15.1 Term. These Terms start on acceptance and continue for the Subscription term in your Order Form (including any trial), renewing as stated in the Order Form or plan unless either party gives required notice.
+
+### 15.2 Termination for convenience (trials). Either party may terminate a free trial at any time by notice.
+
+15.3 Termination for breach. Either party may terminate if the other materially breaches these Terms and fails to cure within 30 days of notice (or immediately if the breach cannot be cured).
+
+### 15.4 Effect of termination. On termination:
+
+your licence ends;
+
+you must stop using the Platform;
+
+any unpaid fees become immediately due;
+
+confidentiality obligations continue.
+
+15.5 Data on termination. Because Customer Data may be stored locally, you remain responsible for managing and deleting local data. If we hold any Customer Data (e.g., account details/support records), we will handle it in accordance with our Privacy Policy and applicable law.
+
+## 16. Force Majeure (Detailed)
+
+16.1 What it means. A Force Majeure Event is an event beyond a party’s reasonable control that prevents or materially delays that party from performing its obligations, despite that party taking reasonable steps to avoid or mitigate the effect.
+
+### 16.2 Examples. Force Majeure Events may include:
+
+natural disasters (fire, flood, cyclone, earthquake);
+
+acts of war, terrorism, civil unrest, sabotage;
+
+epidemics/pandemics and related government restrictions;
+
+government actions, laws, or orders that prevent performance;
+
+widespread power, telecommunications, or internet outages not caused by the affected party;
+
+failures of third-party hosting, distribution networks, or critical suppliers outside the affected party’s control;
+
+cyberattacks or security incidents not caused by the affected party’s failure to implement reasonable security measures;
+
+labour disputes not limited to the affected party’s own staff.
+
+### 16.3 What the affected party must do. The party affected by a Force Majeure Event must:
+
+(a) notify the other party as soon as reasonably practicable, describing the event and expected impact; (b) use reasonable efforts to mitigate and resume performance; and (c) keep the other party reasonably informed of progress.
+
+16.4 Effect on obligations. While the Force Majeure Event continues, the affected party’s performance obligations are suspended to the extent they are impacted. The other party must still perform obligations that are not affected.
+
+16.5 Payments. Force majeure does not excuse payment obligations for services already provided, but it may affect delivery timelines for future services. If the Platform is unavailable due to a Force Majeure Event, we will use reasonable efforts to restore service.
+
+16.6 Extended force majeure termination right. If a Force Majeure Event continues for more than 60 consecutive days and materially prevents performance, either party may terminate the affected Order Form by written notice. Where permitted, we will refund any prepaid fees for the unused portion of the affected Subscription, excluding amounts relating to work performed or third-party costs already incurred.
+
+## 17. Compliance with Laws, Export Controls, and Sanctions
+
+You must comply with all applicable laws, including privacy, cyber security, and intellectual property laws. You must not use the Platform in breach of export control or sanctions laws applicable to you or to us.
+
+## 18. General Terms
+
+18.1 Severability. If any provision is unenforceable, it will be read down to the minimum extent necessary, and the remainder remains in effect.
+
+### 18.2 No waiver. A failure to enforce a right is not a waiver.
+
+18.3 Assignment. Neither party may assign these Terms without the other’s consent, except to a successor in a merger or sale of substantially all assets.
+
+18.4 Notices. Notices must be in writing and sent to the contact details in your Order Form or account records. Email notices are effective when sent, provided no delivery failure notice is received.
+
+### 18.5 Entire agreement. These Terms and any Order Forms are the entire agreement and replace prior discussions.
+
+### 18.6 Order of precedence. If there is a conflict: (1) Order Form, then (2) these Terms, then (3) referenced policies.
+
+## 19. Governing Law and Jurisdiction (New South Wales, Australia)
+
+These Terms are governed by the laws of New South Wales, Australia, and the Commonwealth of Australia.
+
+Each party submits to the exclusive jurisdiction of the courts of New South Wales and the Commonwealth courts of Australia located in New South Wales.

package/bin/nyex.js

@@ -0,0 +1,212 @@
+#!/usr/bin/env node
+"use strict";
+
+const path = require("path");
+const fs = require("fs");
+const crypto = require("crypto");
+const { spawn, execSync } = require("child_process");
+const pkg = require("../package.json");
+
+function candidateGlobalNodeModuleDirs() {
+  const dirs = [];
+  const prefix =
+    process.env.npm_config_prefix ||
+    process.env.NPM_CONFIG_PREFIX ||
+    process.env.PREFIX;
+  if (prefix) {
+    dirs.push(path.join(prefix, "node_modules"));
+  }
+  // Common user-level global install location on Windows.
+  if (process.platform === "win32" && process.env.APPDATA) {
+    dirs.push(path.join(process.env.APPDATA, "npm", "node_modules"));
+  }
+
+  // When users install the platform package globally as a sibling (common during
+  // local `.tgz` testing), Node resolution won't see it as a dependency of the
+  // meta package. Fall back to npm's global root.
+  try {
+    const npmRoot = execSync("npm root -g", { encoding: "utf8" })
+      .trim()
+      .replace(/\r?\n/g, "");
+    if (npmRoot) dirs.push(npmRoot);
+  } catch (_err) {
+    // ignore
+  }
+  return dirs;
+}
+
+function formatInstallHelp({ platform, arch, expectedPackage }) {
+  const lines = [];
+  lines.push("NYEX launcher could not find a prebuilt binary to run.");
+  lines.push("");
+  lines.push(`Detected platform: ${platform}-${arch}`);
+  lines.push(`Expected package: ${expectedPackage}`);
+  lines.push("");
+  lines.push("How to fix:");
+  lines.push("  1) Reinstall the meta package (this should pull the platform binary automatically):");
+  lines.push("     npm i -g @corpai/nyex@alpha");
+  lines.push("  2) If that still doesn't install the platform binary, install it explicitly:");
+  lines.push(`     npm i -g ${expectedPackage}@alpha`);
+  lines.push("");
+  lines.push("If you are testing local .tgz files:");
+  lines.push("  1) Install the platform .tgz first");
+  lines.push("  2) Then install the @corpai/nyex .tgz");
+  return lines.join("\n");
+}
+
+function scopedPackageJsonPath(nodeModulesDir, expectedPackage) {
+  const parts = expectedPackage.split("/");
+  return path.join(nodeModulesDir, ...parts, "package.json");
+}
+
+function resolveBinary() {
+  const platform = process.platform;
+  const arch = process.arch;
+
+  if (platform === "win32" && arch === "x64") {
+    const expectedPackage = "@corpai/nyex-win32-x64-msvc";
+    const candidatePkgJsonPaths = [];
+
+    // First, try normal Node resolution (works when the platform package is an optionalDependency).
+    try {
+      candidatePkgJsonPaths.push(
+        require.resolve(`${expectedPackage}/package.json`)
+      );
+    } catch (_err) {
+      // ignore
+    }
+
+    // Next, check known global install locations directly. This is necessary when users install
+    // the platform package as a sibling global package (common for local `.tgz` validation).
+    for (const nodeModulesDir of candidateGlobalNodeModuleDirs()) {
+      const pkgJson = scopedPackageJsonPath(nodeModulesDir, expectedPackage);
+      if (fs.existsSync(pkgJson)) {
+        candidatePkgJsonPaths.push(pkgJson);
+      }
+    }
+
+    for (const pkgPath of candidatePkgJsonPaths) {
+      try {
+        const pkgDir = path.dirname(pkgPath);
+        const binPath = path.join(pkgDir, "bin", "nyex.exe");
+        if (!fs.existsSync(binPath)) {
+          throw new Error(
+            `Platform package is installed but binary is missing: ${binPath}`
+          );
+        }
+        verifyBinaryIntegrity({
+          expectedPackage,
+          binPath,
+          shaPath: path.join(pkgDir, "bin", "nyex.exe.sha256"),
+        });
+        return binPath;
+      } catch (err) {
+        if (err && err.nyex_fatal) throw err;
+        // continue
+      }
+    }
+    throw new Error(formatInstallHelp({ platform, arch, expectedPackage }));
+  }
+
+  throw new Error(
+    [
+      `NYEX does not yet ship a prebuilt binary for ${platform}-${arch}.`,
+      "",
+      "Supported in this release: win32-x64 only.",
+    ].join("\n")
+  );
+}
+
+function verifyBinaryIntegrity({ expectedPackage, binPath, shaPath }) {
+  if (!fs.existsSync(shaPath)) {
+    const err = new Error(
+      [
+        "NYEX platform binary integrity file is missing.",
+        "",
+        `Expected: ${shaPath}`,
+        "",
+        "How to fix:",
+        `  npm uninstall -g ${expectedPackage}`,
+        "  npm i -g @corpai/nyex@alpha",
+        "",
+        "If you are testing local .tgz files, re-run the staging script then reinstall:",
+        "  scripts\\npm\\stage-windows-binary.ps1 ...",
+      ].join("\n")
+    );
+    // Recoverable: a sibling global platform install may still be valid.
+    err.nyex_fatal = false;
+    throw err;
+  }
+
+  const expected = fs.readFileSync(shaPath, "utf8").trim().toLowerCase();
+  const actual = crypto
+    .createHash("sha256")
+    .update(fs.readFileSync(binPath))
+    .digest("hex")
+    .toLowerCase();
+
+  if (!expected || expected.length < 16) {
+    const err = new Error(
+      [
+        "NYEX platform binary integrity file is invalid.",
+        "",
+        `Path: ${shaPath}`,
+        "",
+        "How to fix:",
+        `  npm uninstall -g ${expectedPackage}`,
+        "  npm i -g @corpai/nyex@alpha",
+      ].join("\n")
+    );
+    // Recoverable: a sibling global platform install may still be valid.
+    err.nyex_fatal = false;
+    throw err;
+  }
+
+  if (expected !== actual) {
+    const err = new Error(
+      [
+        "NYEX binary integrity check failed. Refusing to execute nyex.exe.",
+        "",
+        `Binary:    ${binPath}`,
+        `Expected:  ${expected}`,
+        `Actual:    ${actual}`,
+        "",
+        "Remediation:",
+        `  npm uninstall -g ${expectedPackage} @corpai/nyex`,
+        "  npm cache clean --force",
+        "  npm i -g @corpai/nyex@alpha",
+      ].join("\n")
+    );
+    // Fatal: we found a binary + checksum pair that disagree.
+    err.nyex_fatal = true;
+    throw err;
+  }
+}
+
+function main() {
+  const args = process.argv.slice(2);
+
+  let binPath;
+  try {
+    binPath = resolveBinary();
+  } catch (err) {
+    console.error(err.message);
+    process.exit(1);
+  }
+
+  // Make `nyex --version` reflect the npm distribution version, but still
+  // enforce binary integrity checks before reporting success.
+  if (args.includes("--version") || args.includes("-V")) {
+    process.stdout.write(`nyex ${pkg.version}\n`);
+    process.exit(0);
+  }
+
+  const child = spawn(binPath, args, { stdio: "inherit" });
+  child.on("exit", code => process.exit(code ?? 1));
+  child.on("error", err => {
+    console.error(err.message);
+    process.exit(1);
+  });
+}
+
+main();

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@nyex/nyex",
+  "version": "0.1.2-beta",
+  "description": "Nyex CLI (private beta)",
+  "license": "SEE LICENSE IN LICENSE",
+  "homepage": "https://nyex.ai",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/rinfa0108/nyex.git"
+  },
+  "bugs": {
+    "url": "https://github.com/rinfa0108/nyex/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "bin": {
+    "nyex": "bin/nyex.js"
+  },
+  "optionalDependencies": {
+    "@nyex/nyex-win32-x64-msvc": "0.1.2-beta"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "bin/nyex.js",
+    "LICENSE",
+    "TERMS_OF_USE.md",
+    "README.md",
+    "package.json"
+  ]
+}