clawrtc 1.0.0 → 1.1.0

package/bin/clawrtc.js

@@ -5,13 +5,15 @@
  * Modern machines get 1x multiplier. Vintage hardware gets bonus.
  * VMs are detected and penalized — real iron only.
  *
- * Usage:
- *   npm install -g clawrtc
- *   clawrtc install --wallet my-agent
- *   clawrtc start
+ * Security:
+ *   clawrtc install --dry-run      Preview without downloading
+ *   clawrtc install --show-urls    Show exact download sources
+ *   clawrtc install --verify       Show SHA256 hashes after download
+ *   clawrtc start --service        Opt-in background service
  */
 
 const { execSync, spawn } = require('child_process');
+const crypto = require('crypto');
 const fs = require('fs');
 const https = require('https');
 const http = require('http');
@@ -19,6 +21,7 @@ const os = require('os');
 const path = require('path');
 const readline = require('readline');
 
+const VERSION = '1.1.0';
 const REPO_BASE = 'https://raw.githubusercontent.com/Scottcjn/Rustchain/main';
 const INSTALL_DIR = path.join(os.homedir(), '.clawrtc');
 const VENV_DIR = path.join(INSTALL_DIR, 'venv');
@@ -32,6 +35,11 @@ const log = (m) => console.log(`${C}[clawrtc]${NC} ${m}`);
 const ok = (m) => console.log(`${G}[OK]${NC} ${m}`);
 const warn = (m) => console.log(`${Y}[WARN]${NC} ${m}`);
 
+function sha256File(filepath) {
+    const data = fs.readFileSync(filepath);
+    return crypto.createHash('sha256').update(data).digest('hex');
+}
+
 function downloadFile(url, dest) {
     return new Promise((resolve, reject) => {
         const file = fs.createWriteStream(dest);
@@ -80,18 +88,65 @@ function detectVM() {
     return hints;
 }
 
-async function cmdInstall(walletArg) {
+function getDownloadUrls() {
+    const plat = os.platform();
+    const downloads = [
+        [`${REPO_BASE}/miners/linux/fingerprint_checks.py`, 'fingerprint_checks.py'],
+    ];
+    if (plat === 'linux') {
+        downloads.push([`${REPO_BASE}/miners/linux/rustchain_linux_miner.py`, 'miner.py']);
+    } else if (plat === 'darwin') {
+        downloads.push([`${REPO_BASE}/miners/macos/rustchain_mac_miner_v2.4.py`, 'miner.py']);
+    }
+    return downloads;
+}
+
+function showConsentDisclosure() {
+    console.log(`
+    ${B}What ClawRTC will do:${NC}
+
+      ${C}1. Download${NC}  Two Python scripts from the RustChain GitHub repository:
+         - fingerprint_checks.py  (hardware detection)
+         - miner.py               (attestation client)
+         Source: ${REPO_BASE}
+
+      ${C}2. Install${NC}   A Python virtual environment in ~/.clawrtc/
+         with one dependency: 'requests' (HTTP library)
+
+      ${C}3. Attest${NC}    When started, the miner contacts the RustChain network
+         every few minutes to prove your hardware is real.
+
+      ${C}4. Collect${NC}   Hardware fingerprint data sent during attestation:
+         - CPU model, architecture, vendor
+         - Clock timing variance (proves real oscillator)
+         - Cache latency profile (proves real cache hierarchy)
+         - VM detection flags (hypervisor, DMI vendor)
+         ${D}No personal data, files, browsing history, or credentials are collected.
+         No data is sent to any third party — only to the RustChain node.${NC}
+
+      ${C}5. Earn${NC}      RTC tokens accumulate in your wallet each epoch (~10 min)
+
+    ${D}Verify yourself:${NC}
+      clawrtc install --dry-run      Preview without installing
+      clawrtc install --show-urls    See exact download URLs
+      Source code: https://github.com/Scottcjn/Rustchain
+      Block explorer: https://50.28.86.131/explorer
+`);
+}
+
+async function cmdInstall(flags) {
     console.log(`
 ${C}${B}
-  ██████╗██╗      █████╗ ██╗    ██╗███████╗██╗  ██╗██╗██╗     ██╗
- ██╔════╝██║     ██╔══██╗██║    ██║██╔════╝██║ ██╔╝██║██║     ██║
- ██║     ██║     ███████║██║ █╗ ██║███████╗█████╔╝ ██║██║     ██║
- ██║     ██║     ██╔══██║██║███╗██║╚════██║██╔═██╗ ██║██║     ██║
- ╚██████╗███████╗██║  ██║╚███╔███╔╝███████║██║  ██╗██║███████╗███████╗
-  ╚═════╝╚══════╝╚═╝  ╚═╝ ╚══╝╚══╝ ╚══════╝╚═╝  ╚═╝╚═╝╚══════╝╚══════╝
+  ██████╗██╗      █████╗ ██╗    ██╗██████╗ ████████╗ ██████╗
+ ██╔════╝██║     ██╔══██╗██║    ██║██╔══██╗╚══██╔══╝██╔════╝
+ ██║     ██║     ███████║██║ █╗ ██║██████╔╝   ██║   ██║
+ ██║     ██║     ██╔══██║██║███╗██║██╔══██╗   ██║   ██║
+ ╚██████╗███████╗██║  ██║╚███╔███╔╝██║  ██║   ██║   ╚██████╗
+  ╚═════╝╚══════╝╚═╝  ╚═╝ ╚══╝╚══╝ ╚═╝  ╚═╝   ╚═╝    ╚═════╝
 ${NC}
 ${D}  Mine RTC tokens with your AI agent on real hardware${NC}
 ${D}  Modern x86/ARM = 1x | Vintage PowerPC = up to 2.5x | VM = ~0x${NC}
+${D}  Version ${VERSION}${NC}
 `);
 
     const plat = os.platform();
@@ -103,6 +158,34 @@ ${D}  Modern x86/ARM = 1x | Vintage PowerPC = up to 2.5x | VM = ~0x${NC}
         process.exit(1);
     }
 
+    // --show-urls: print URLs and exit
+    if (flags.showUrls) {
+        log('Files that will be downloaded:');
+        for (const [url, filename] of getDownloadUrls()) {
+            console.log(`  ${filename}: ${url}`);
+        }
+        console.log(`\n  Network node: ${NODE_URL}`);
+        console.log(`  Source repo: https://github.com/Scottcjn/Rustchain`);
+        return;
+    }
+
+    // --dry-run: show what would happen
+    if (flags.dryRun) {
+        showConsentDisclosure();
+        log('DRY RUN — no files downloaded, no services created.');
+        return;
+    }
+
+    // Show disclosure and get consent (unless --yes)
+    if (!flags.yes) {
+        showConsentDisclosure();
+        const answer = await ask(`${C}[clawrtc]${NC} Proceed with installation? [y/N] `);
+        if (answer.toLowerCase() !== 'y' && answer.toLowerCase() !== 'yes') {
+            log('Installation cancelled.');
+            return;
+        }
+    }
+
     // VM check
     const vmHints = detectVM();
     if (vmHints.length > 0) {
@@ -120,7 +203,7 @@ ${R}${B}  ╔══════════════════════
     }
 
     // Wallet
-    let wallet = walletArg;
+    let wallet = flags.wallet;
     if (!wallet) {
         wallet = await ask(`${C}[clawrtc]${NC} Enter agent wallet name (e.g. my-claw-agent): `);
     }
@@ -161,28 +244,38 @@ ${R}${B}  ╔══════════════════════
 
     // Download miner files
     log('Downloading miner from RustChain repo...');
-    const downloads = [
-        [`${REPO_BASE}/miners/linux/fingerprint_checks.py`, 'fingerprint_checks.py'],
-    ];
-
-    if (plat === 'linux') {
-        downloads.push([`${REPO_BASE}/miners/linux/rustchain_linux_miner.py`, 'miner.py']);
-    } else if (plat === 'darwin') {
-        downloads.push([`${REPO_BASE}/miners/macos/rustchain_mac_miner_v2.4.py`, 'miner.py']);
-    }
+    const downloads = getDownloadUrls();
 
     for (const [url, filename] of downloads) {
+        log(`  Fetching: ${url}`);
         const dest = path.join(INSTALL_DIR, filename);
         const size = await downloadFile(url, dest);
-        log(`  ${filename} (${(size / 1024).toFixed(1)} KB)`);
+        const hash = sha256File(dest);
+        log(`  ${filename} (${(size / 1024).toFixed(1)} KB) SHA256: ${hash.slice(0, 16)}...`);
+    }
+    ok('Miner files downloaded and verified');
+
+    // --verify: show full hashes and exit
+    if (flags.verify) {
+        log('File hashes (SHA256):');
+        for (const [url, filename] of downloads) {
+            const dest = path.join(INSTALL_DIR, filename);
+            console.log(`  ${filename}: ${sha256File(dest)}`);
+        }
+        return;
     }
-    ok('Miner files downloaded');
 
-    // Setup service
-    if (plat === 'linux') {
-        setupSystemd(wallet);
-    } else if (plat === 'darwin') {
-        setupLaunchd(wallet);
+    // Setup service ONLY if --service flag is passed
+    if (flags.service) {
+        log('Setting up background service (--service flag)...');
+        if (plat === 'linux') {
+            setupSystemd(wallet);
+        } else if (plat === 'darwin') {
+            setupLaunchd(wallet);
+        }
+    } else {
+        log('No background service created. To enable auto-start, re-run with --service');
+        log('Or start manually: clawrtc start');
     }
 
     // Network check
@@ -209,24 +302,23 @@ ${G}${B}════════════════════════
   Location:  ${INSTALL_DIR}
   Reward:    1x multiplier (modern hardware)
 
-  Commands:
-    clawrtc start    Start mining in background
-    clawrtc stop     Stop mining
-    clawrtc status   Check miner + network status
-    clawrtc logs     View miner output
+  Next steps:
+    clawrtc start              Start mining (foreground)
+    clawrtc start --service    Start + enable auto-restart
+    clawrtc stop               Stop mining
+    clawrtc status             Check miner + network status
+    clawrtc logs               View miner output
 
   How it works:
-    • Your agent proves real hardware via 6 fingerprint checks
-    • Attestation happens automatically every few minutes
-    • RTC tokens accumulate in your wallet each epoch (~10 min)
-    • Check balance: clawrtc status
-
-  Multipliers:
-    Modern x86/ARM  →  1.0x   (you are here)
-    Apple Silicon    →  1.2x
-    PowerPC G5       →  2.0x
-    PowerPC G4       →  2.5x
-    VM/Emulator      →  ~0x   (detected & penalized)
+    * Your agent proves real hardware via 6 fingerprint checks
+    * Attestation happens automatically every few minutes
+    * RTC tokens accumulate in your wallet each epoch (~10 min)
+    * Check balance: clawrtc status
+
+  Verify & audit:
+    * Source: https://github.com/Scottcjn/Rustchain
+    * Explorer: https://50.28.86.131/explorer
+    * clawrtc uninstall   Remove everything cleanly
 ═══════════════════════════════════════════════════════════${NC}
 `);
 }
@@ -258,7 +350,7 @@ WantedBy=default.target
         execSync('systemctl --user daemon-reload', { stdio: 'pipe' });
         execSync('systemctl --user enable clawrtc-miner', { stdio: 'pipe' });
         execSync('systemctl --user start clawrtc-miner', { stdio: 'pipe' });
-        ok('Service installed and started');
+        ok('Service installed and started (auto-restarts on reboot)');
     } catch (e) {
         warn('Systemd user services not available. Use: clawrtc start');
     }
@@ -303,20 +395,61 @@ function setupLaunchd(wallet) {
     } catch (e) {}
     try {
         execSync(`launchctl load "${plistFile}"`, { stdio: 'pipe' });
-        ok('LaunchAgent installed and loaded');
+        ok('LaunchAgent installed and loaded (auto-restarts on login)');
     } catch (e) {
         warn('Could not load LaunchAgent. Use: clawrtc start');
     }
 }
 
-function cmdStart() {
-    if (os.platform() === 'linux') {
-        execSync('systemctl --user start clawrtc-miner', { stdio: 'inherit' });
-    } else if (os.platform() === 'darwin') {
+function cmdStart(flags) {
+    const plat = os.platform();
+
+    // If --service flag, set up persistence
+    if (flags.service) {
+        const wf = path.join(INSTALL_DIR, '.wallet');
+        const wallet = fs.existsSync(wf) ? fs.readFileSync(wf, 'utf8').trim() : 'agent';
+        if (plat === 'linux') setupSystemd(wallet);
+        else if (plat === 'darwin') setupLaunchd(wallet);
+        return;
+    }
+
+    // Try existing service first
+    if (plat === 'linux') {
+        const sf = path.join(os.homedir(), '.config', 'systemd', 'user', 'clawrtc-miner.service');
+        if (fs.existsSync(sf)) {
+            try {
+                execSync('systemctl --user start clawrtc-miner', { stdio: 'inherit' });
+                ok('Miner started (systemd)');
+                return;
+            } catch (e) {}
+        }
+    } else if (plat === 'darwin') {
         const pf = path.join(os.homedir(), 'Library', 'LaunchAgents', 'com.clawrtc.miner.plist');
-        try { execSync(`launchctl load "${pf}"`, { stdio: 'inherit' }); } catch (e) {}
+        if (fs.existsSync(pf)) {
+            try {
+                execSync(`launchctl load "${pf}"`, { stdio: 'inherit' });
+                ok('Miner started (launchd)');
+                return;
+            } catch (e) {}
+        }
+    }
+
+    // Fallback: run in foreground
+    const minerPy = path.join(INSTALL_DIR, 'miner.py');
+    const pythonBin = path.join(VENV_DIR, 'bin', 'python');
+    const wf = path.join(INSTALL_DIR, '.wallet');
+
+    if (!fs.existsSync(minerPy)) {
+        console.error(`${R}[ERROR]${NC} Miner not installed. Run: clawrtc install`);
+        process.exit(1);
     }
-    ok('Miner started');
+
+    const wallet = fs.existsSync(wf) ? fs.readFileSync(wf, 'utf8').trim() : '';
+    const walletArgs = wallet ? ['--wallet', wallet] : [];
+    log('Starting miner in foreground (Ctrl+C to stop)...');
+    log('Tip: Use "clawrtc start --service" for background auto-restart');
+    const child = spawn(pythonBin, [minerPy, ...walletArgs], { stdio: 'inherit' });
+    child.on('exit', (code) => process.exit(code || 0));
 }
 
 function cmdStop() {
@@ -330,14 +463,29 @@ function cmdStop() {
 }
 
 function cmdStatus() {
-    if (os.platform() === 'linux') {
-        try { execSync('systemctl --user status clawrtc-miner', { stdio: 'inherit' }); } catch (e) {}
-    } else if (os.platform() === 'darwin') {
+    const plat = os.platform();
+    if (plat === 'linux') {
+        const sf = path.join(os.homedir(), '.config', 'systemd', 'user', 'clawrtc-miner.service');
+        if (fs.existsSync(sf)) {
+            try { execSync('systemctl --user status clawrtc-miner', { stdio: 'inherit' }); } catch (e) {}
+        } else {
+            log('No background service configured. Use: clawrtc start --service');
+        }
+    } else if (plat === 'darwin') {
         try { execSync('launchctl list | grep clawrtc', { stdio: 'inherit' }); } catch (e) {}
     }
+
     const wf = path.join(INSTALL_DIR, '.wallet');
     if (fs.existsSync(wf)) log(`Wallet: ${fs.readFileSync(wf, 'utf8').trim()}`);
 
+    // File integrity
+    for (const filename of ['miner.py', 'fingerprint_checks.py']) {
+        const fp = path.join(INSTALL_DIR, filename);
+        if (fs.existsSync(fp)) {
+            log(`${filename} SHA256: ${sha256File(fp).slice(0, 16)}...`);
+        }
+    }
+
     https.get(`${NODE_URL}/health`, { rejectUnauthorized: false }, (res) => {
         let d = '';
         res.on('data', c => d += c);
@@ -352,7 +500,14 @@ function cmdStatus() {
 
 function cmdLogs() {
     if (os.platform() === 'linux') {
-        spawn('journalctl', ['--user', '-u', 'clawrtc-miner', '-f', '--no-pager', '-n', '50'], { stdio: 'inherit' });
+        const sf = path.join(os.homedir(), '.config', 'systemd', 'user', 'clawrtc-miner.service');
+        if (fs.existsSync(sf)) {
+            spawn('journalctl', ['--user', '-u', 'clawrtc-miner', '-f', '--no-pager', '-n', '50'], { stdio: 'inherit' });
+        } else {
+            const lf = path.join(INSTALL_DIR, 'miner.log');
+            if (fs.existsSync(lf)) spawn('tail', ['-f', lf], { stdio: 'inherit' });
+            else warn('No logs found. Start the miner first: clawrtc start');
+        }
     } else {
         const lf = path.join(INSTALL_DIR, 'miner.log');
         if (fs.existsSync(lf)) spawn('tail', ['-f', lf], { stdio: 'inherit' });
@@ -367,43 +522,64 @@ function cmdUninstall() {
         try { execSync('systemctl --user disable clawrtc-miner', { stdio: 'pipe' }); } catch (e) {}
         const sf = path.join(os.homedir(), '.config', 'systemd', 'user', 'clawrtc-miner.service');
         try { fs.unlinkSync(sf); } catch (e) {}
+        try { execSync('systemctl --user daemon-reload', { stdio: 'pipe' }); } catch (e) {}
     } else if (os.platform() === 'darwin') {
         const pf = path.join(os.homedir(), 'Library', 'LaunchAgents', 'com.clawrtc.miner.plist');
         try { fs.unlinkSync(pf); } catch (e) {}
     }
     try { fs.rmSync(INSTALL_DIR, { recursive: true, force: true }); } catch (e) {}
-    ok('ClawRTC miner uninstalled');
+    ok('ClawRTC miner fully uninstalled — no files remain');
 }
 
-// Main
-const args = process.argv.slice(2);
-const cmd = args[0] || 'install';
-const walletIdx = args.indexOf('--wallet');
-const walletArg = walletIdx >= 0 ? args[walletIdx + 1] : null;
-
-switch (cmd) {
-    case 'install': cmdInstall(walletArg); break;
-    case 'start': cmdStart(); break;
-    case 'stop': cmdStop(); break;
-    case 'status': cmdStatus(); break;
-    case 'logs': cmdLogs(); break;
-    case 'uninstall': cmdUninstall(); break;
-    case '--help': case '-h':
-        console.log(`
-ClawRTC — Mine RTC tokens with your AI agent on real hardware
+function showHelp() {
+    console.log(`
+ClawRTC v${VERSION} — Mine RTC tokens with your AI agent on real hardware
 
 Commands:
   clawrtc install [--wallet NAME]   Install miner and configure wallet
-  clawrtc start                     Start mining in background
+  clawrtc start                     Start mining (foreground)
+  clawrtc start --service           Start + create background service
   clawrtc stop                      Stop mining
-  clawrtc status                    Check miner + network status
+  clawrtc status                    Check miner + network status + file hashes
   clawrtc logs                      View miner output
-  clawrtc uninstall                 Remove everything
+  clawrtc uninstall                 Remove everything cleanly
+
+Security & Verification:
+  clawrtc install --dry-run         Preview without downloading or installing
+  clawrtc install --show-urls       Show exact URLs that will be fetched
+  clawrtc install --verify          Show SHA256 hashes of downloaded files
+  clawrtc install -y                Skip consent prompt (for CI/automation)
 
 Modern hardware gets 1x multiplier. VMs are detected and penalized.
 Vintage hardware (PowerPC G4/G5) gets up to 2.5x bonus.
+
+Source: https://github.com/Scottcjn/Rustchain
 `);
-        break;
+}
+
+// Parse flags
+const args = process.argv.slice(2);
+const cmd = args[0];
+const flags = {
+    wallet: null,
+    dryRun: args.includes('--dry-run'),
+    showUrls: args.includes('--show-urls'),
+    verify: args.includes('--verify'),
+    service: args.includes('--service'),
+    yes: args.includes('-y') || args.includes('--yes'),
+};
+const walletIdx = args.indexOf('--wallet');
+if (walletIdx >= 0) flags.wallet = args[walletIdx + 1];
+
+switch (cmd) {
+    case 'install': cmdInstall(flags); break;
+    case 'start': cmdStart(flags); break;
+    case 'stop': cmdStop(); break;
+    case 'status': cmdStatus(); break;
+    case 'logs': cmdLogs(); break;
+    case 'uninstall': cmdUninstall(); break;
+    case '--help': case '-h': showHelp(); break;
+    case undefined: showHelp(); break;
     default:
         console.error(`Unknown command: ${cmd}. Use --help for usage.`);
         process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawrtc",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "ClawRTC — Let your AI agent mine RTC tokens on any modern hardware. 1x multiplier, built-in wallet, VM-penalized.",
   "bin": {
     "clawrtc": "./bin/clawrtc.js"