get-claudia 1.9.3 → 1.9.4

package/bin/index.js

@@ -129,23 +129,85 @@ async function main() {
     }
   }
 
-  // Ask about enhanced memory system
+  // Interactive setup prompts
   const rl = createInterface({
     input: process.stdin,
     output: process.stdout
   });
 
-  const askMemory = () => {
+  const askYesNo = (question) => {
     return new Promise((resolve) => {
-      rl.question(`\n${colors.yellow}?${colors.reset} Set up enhanced memory system? (recommended) [y/n]: `, (answer) => {
+      rl.question(question, (answer) => {
         resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
       });
     });
   };
 
-  const setupMemory = await askMemory();
+  const setupMemory = await askYesNo(`\n${colors.yellow}?${colors.reset} Set up enhanced memory system? (recommended) [y/n]: `);
+  const setupGateway = await askYesNo(`${colors.yellow}?${colors.reset} Set up messaging gateway (Telegram/Slack)? [y/n]: `);
   rl.close();
 
+  // Helper: run gateway install script and call back when done
+  function runGatewaySetup(callback) {
+    console.log(`\n${colors.cyan}Setting up messaging gateway...${colors.reset}`);
+
+    const gatewayScriptPath = isWindows
+      ? join(__dirname, '..', 'gateway', 'scripts', 'install.ps1')
+      : join(__dirname, '..', 'gateway', 'scripts', 'install.sh');
+
+    if (!existsSync(gatewayScriptPath)) {
+      console.log(`${colors.yellow}!${colors.reset} Gateway files not found. Skipping.`);
+      callback(false);
+      return;
+    }
+
+    try {
+      const spawnCmd = isWindows ? powershellPath : 'bash';
+      const spawnArgs = isWindows
+        ? ['-ExecutionPolicy', 'Bypass', '-File', gatewayScriptPath]
+        : [gatewayScriptPath];
+      const gwResult = spawn(spawnCmd, spawnArgs, {
+        stdio: 'inherit',
+        env: {
+          ...process.env,
+          CLAUDIA_GATEWAY_UPGRADE: isUpgrade ? '1' : '0'
+        }
+      });
+
+      gwResult.on('close', (code) => {
+        if (code === 0) {
+          console.log(`${colors.green}✓${colors.reset} Gateway installed`);
+          callback(true);
+        } else {
+          console.log(`${colors.yellow}!${colors.reset} Gateway setup had issues. You can run it later with:`);
+          if (isWindows) {
+            console.log(`  ${colors.cyan}powershell.exe -ExecutionPolicy Bypass -File "${gatewayScriptPath}"${colors.reset}`);
+          } else {
+            console.log(`  ${colors.cyan}bash ${gatewayScriptPath}${colors.reset}`);
+          }
+          callback(false);
+        }
+      });
+    } catch (error) {
+      console.log(`${colors.yellow}!${colors.reset} Could not set up gateway: ${error.message}`);
+      callback(false);
+    }
+  }
+
+  // Helper: finish install after optional components
+  function finishInstall(memoryInstalled, gatewayInstalled) {
+    showNextSteps(memoryInstalled, gatewayInstalled);
+  }
+
+  // Helper: run gateway if requested, then finish
+  function maybeRunGateway(memoryInstalled) {
+    if (setupGateway) {
+      runGatewaySetup((gatewayOk) => finishInstall(memoryInstalled, gatewayOk));
+    } else {
+      finishInstall(memoryInstalled, false);
+    }
+  }
+
   if (setupMemory) {
     console.log(`\n${colors.cyan}Setting up enhanced memory system...${colors.reset}`);
 
@@ -169,8 +231,10 @@ async function main() {
         });
 
         result.on('close', (code) => {
+          let memoryOk = false;
           if (code === 0) {
             console.log(`${colors.green}✓${colors.reset} Memory system installed`);
+            memoryOk = true;
 
             // Update .mcp.json if it exists
             const mcpPath = join(targetPath, '.mcp.json');
@@ -194,7 +258,6 @@ async function main() {
               writeFileSync(mcpPath, JSON.stringify(mcpConfig, null, 2));
               console.log(`${colors.green}✓${colors.reset} Created .mcp.json with memory server`);
             }
-            showNextSteps(true); // Memory installed - emphasize restart
           } else {
             console.log(`${colors.yellow}!${colors.reset} Memory setup had issues. You can run it later with:`);
             if (isWindows) {
@@ -202,8 +265,10 @@ async function main() {
             } else {
               console.log(`  ${colors.cyan}bash ${memoryDaemonPath}${colors.reset}`);
             }
-            showNextSteps(false);
           }
+
+          // Chain gateway setup (or finish)
+          maybeRunGateway(memoryOk);
         });
 
         return; // Wait for spawn to complete
@@ -216,14 +281,14 @@ async function main() {
     }
   }
 
-  showNextSteps(false);
+  // Memory skipped or failed to spawn -- continue with gateway
+  maybeRunGateway(false);
 
-  function showNextSteps(memoryInstalled) {
-    // Show next steps - different message if memory was installed
+  function showNextSteps(memoryInstalled, gatewayInstalled) {
+    // Show next steps - different message based on what was installed
     const cdStep = isCurrentDir ? '' : `  ${colors.cyan}cd ${targetDir}${colors.reset}\n`;
 
     if (memoryInstalled) {
-      // Memory was installed
       console.log(`
 ${colors.bold}Next:${colors.reset}
 ${cdStep}  ${colors.cyan}claude${colors.reset}
@@ -233,13 +298,20 @@ ${colors.dim}If Claude was already running elsewhere, restart it to activate mem
 ${colors.dim}Troubleshooting: ${isWindows ? '%USERPROFILE%\\.claudia\\diagnose.ps1' : '~/.claudia/diagnose.sh'}${colors.reset}
 `);
     } else {
-      // No memory - standard message
       console.log(`
 ${colors.bold}Next:${colors.reset}
 ${cdStep}  ${colors.cyan}claude${colors.reset}
   ${colors.dim}Say hi!${colors.reset}
 
 ${colors.dim}She'll introduce herself and set things up for you.${colors.reset}
+`);
+    }
+
+    if (gatewayInstalled) {
+      console.log(`${colors.bold}Gateway:${colors.reset}
+  ${colors.dim}Configure API keys and allowlist, then:${colors.reset}
+  ${colors.cyan}claudia-gateway start${colors.reset}
+  ${colors.dim}See ~/.claudia/gateway.json for settings.${colors.reset}
 `);
     }
   }

package/gateway/README.md

@@ -0,0 +1,228 @@
+# Claudia Gateway
+
+The messaging gateway lets you talk to Claudia from Telegram and Slack on your phone or desktop. Messages flow from your chat app to the gateway running on your machine, where they're processed by Claude with full access to Claudia's memory system. Everything runs locally except the Anthropic API call itself.
+
+## Quick Start
+
+1. Run the installer (done automatically via `npx get-claudia`):
+   ```bash
+   bash gateway/scripts/install.sh
+   ```
+
+2. Set your API keys as environment variables:
+   ```bash
+   export ANTHROPIC_API_KEY="sk-ant-..."
+   export TELEGRAM_BOT_TOKEN="123456:ABC-DEF..."
+   ```
+
+3. Edit `~/.claudia/gateway.json` to enable your channel and set your user ID:
+   ```json
+   {
+     "channels": {
+       "telegram": {
+         "enabled": true,
+         "allowedUsers": ["YOUR_TELEGRAM_USER_ID"]
+       }
+     }
+   }
+   ```
+
+4. Start the gateway:
+   ```bash
+   claudia-gateway start
+   ```
+
+## Telegram Setup
+
+1. Open Telegram and message [@BotFather](https://t.me/BotFather)
+2. Send `/newbot` and follow the prompts to create your bot
+3. Copy the bot token BotFather gives you
+4. Get your Telegram user ID (message [@userinfobot](https://t.me/userinfobot) or check in Telegram settings)
+5. Set environment variables:
+   ```bash
+   export TELEGRAM_BOT_TOKEN="123456:ABC-DEF1234ghIkl-zyx57W2v1u123ew11"
+   ```
+6. Edit `~/.claudia/gateway.json`:
+   ```json
+   {
+     "channels": {
+       "telegram": {
+         "enabled": true,
+         "allowedUsers": ["123456789"]
+       }
+     }
+   }
+   ```
+7. Start the gateway: `claudia-gateway start`
+8. Open your bot in Telegram and send a message
+
+## Slack Setup
+
+1. Go to [api.slack.com/apps](https://api.slack.com/apps) and click **Create New App** > **From scratch**
+2. Enable **Socket Mode** under Settings (generates an app-level token starting with `xapp-`)
+3. Under **OAuth & Permissions**, add these bot token scopes:
+   - `app_mentions:read`
+   - `chat:write`
+   - `im:history`
+   - `im:read`
+   - `im:write`
+4. Under **Event Subscriptions**, enable events and subscribe to:
+   - `message.im`
+   - `app_mention`
+5. Install the app to your workspace (generates a bot token starting with `xoxb-`)
+6. Set environment variables:
+   ```bash
+   export SLACK_BOT_TOKEN="xoxb-..."
+   export SLACK_APP_TOKEN="xapp-..."
+   ```
+7. Edit `~/.claudia/gateway.json`:
+   ```json
+   {
+     "channels": {
+       "slack": {
+         "enabled": true,
+         "allowedUsers": ["U01ABCDEF"]
+       }
+     }
+   }
+   ```
+8. Start the gateway: `claudia-gateway start`
+9. DM the bot or mention it in a channel
+
+## Configuration Reference
+
+Config lives at `~/.claudia/gateway.json`. All API keys/tokens should be set as environment variables, not stored in this file.
+
+| Key | Env Override | Description |
+|-----|-------------|-------------|
+| `anthropicApiKey` | `ANTHROPIC_API_KEY` | Your Anthropic API key |
+| `model` | | Claude model to use (default: `claude-sonnet-4-20250514`) |
+| `maxTokens` | | Max response tokens (default: `2048`) |
+| `channels.telegram.enabled` | | Enable Telegram adapter |
+| `channels.telegram.token` | `TELEGRAM_BOT_TOKEN` | Bot token from BotFather |
+| `channels.telegram.allowedUsers` | | Array of allowed Telegram user IDs |
+| `channels.slack.enabled` | | Enable Slack adapter |
+| `channels.slack.botToken` | `SLACK_BOT_TOKEN` | Bot OAuth token (`xoxb-...`) |
+| `channels.slack.appToken` | `SLACK_APP_TOKEN` | App-level token (`xapp-...`) |
+| `channels.slack.signingSecret` | `SLACK_SIGNING_SECRET` | Slack signing secret |
+| `channels.slack.allowedUsers` | | Array of allowed Slack user IDs |
+| `globalAllowedUsers` | | User IDs allowed across all channels |
+| `proactive.enabled` | | Enable proactive notifications |
+| `proactive.pollIntervalMs` | | How often to check for notifications (ms) |
+| `proactive.defaultChannel` | | Channel for proactive messages |
+| `proactive.defaultUserId` | | User to receive proactive messages |
+| `memoryDaemon.healthPort` | | Memory daemon health port (default: `3848`) |
+| `gateway.port` | | Gateway service port (default: `3849`) |
+| `gateway.logLevel` | | Log level: `debug`, `info`, `warn`, `error` |
+
+## Security
+
+### Deny-by-default allowlist
+
+The gateway rejects all messages from users not in the `allowedUsers` array. No allowlist entries = nobody can talk to your Claudia. This is the primary security boundary.
+
+Per-channel `allowedUsers` and `globalAllowedUsers` are both checked. A user must appear in at least one to be authorized.
+
+### API key handling
+
+- **Environment variables only.** The `saveConfig` function actively strips secrets before writing `gateway.json` to disk. Even if you put a token in the JSON, it gets removed on next save.
+- Supported env vars: `ANTHROPIC_API_KEY`, `TELEGRAM_BOT_TOKEN`, `SLACK_BOT_TOKEN`, `SLACK_APP_TOKEN`, `SLACK_SIGNING_SECRET`
+- Never commit `.env` files or gateway.json with tokens to version control.
+
+### Data flow
+
+```
+Phone/Desktop                Your Machine                  Cloud
+┌──────────┐    encrypted    ┌──────────────────┐         ┌───────────┐
+│ Telegram  │───(TLS)──────▶│  Claudia Gateway  │──────▶│ Anthropic  │
+│ or Slack  │◀──(TLS)───────│  (localhost)       │◀──────│ API        │
+└──────────┘                 │                    │         └───────────┘
+                             │  ┌──────────────┐ │
+                             │  │ Memory Daemon │ │
+                             │  │ (localhost)   │ │
+                             │  └──────────────┘ │
+                             └──────────────────────┘
+```
+
+- **Your message** travels from your chat app through the platform's servers (Telegram/Slack) to the gateway running on your machine.
+- **The gateway** processes your message locally, reads/writes to Claudia's memory (local SQLite), and sends only the conversation to the Anthropic API.
+- **Anthropic** returns a response; the gateway relays it back through the chat platform to your device.
+- **Memory stays local.** The memory daemon runs on your machine, stores data in `~/.claudia/memory/`, and never sends data to any external service except when explicitly included in a Claude API call.
+
+### What goes where
+
+| Data | Where it goes |
+|------|--------------|
+| Your messages | Telegram/Slack servers (platform routing), Anthropic API |
+| Claude's responses | Anthropic API, Telegram/Slack servers (delivery) |
+| Memory (facts, entities, relationships) | Local SQLite only (`~/.claudia/memory/`) |
+| API keys | Environment variables on your machine only |
+| Gateway config | `~/.claudia/gateway.json` on your machine (secrets stripped) |
+| Logs | `~/.claudia/gateway.log` on your machine |
+
+## CLI Commands
+
+```bash
+claudia-gateway start [--channels telegram,slack] [--debug]
+claudia-gateway stop
+claudia-gateway status
+claudia-gateway logs [--lines N]
+claudia-gateway init
+```
+
+| Command | Description |
+|---------|-------------|
+| `start` | Start the gateway. Use `--channels` to override which channels to enable. Use `--debug` for verbose logging. |
+| `stop` | Send SIGTERM to the running gateway process. |
+| `status` | Show whether the gateway is running, which channels are configured, and memory daemon health. |
+| `logs` | Print the last N lines from the gateway log (default: 50). |
+| `init` | Generate an example `~/.claudia/gateway.json` config file. |
+
+## Proactive Notifications
+
+Claudia can send you messages unprompted when she detects something worth flagging (overdue commitments, meeting reminders, pattern alerts).
+
+To enable:
+
+1. Edit `~/.claudia/gateway.json`:
+   ```json
+   {
+     "proactive": {
+       "enabled": true,
+       "defaultChannel": "telegram",
+       "defaultUserId": "YOUR_USER_ID"
+     }
+   }
+   ```
+
+2. The gateway polls the memory daemon for pending predictions and notifications at the configured interval (default: 5 minutes).
+
+3. Requires the memory daemon to be running and healthy.
+
+## Troubleshooting
+
+**Gateway won't start**
+- Check Node.js version: `node --version` (must be 18+)
+- Verify API key is set: `echo $ANTHROPIC_API_KEY`
+- Check config: `cat ~/.claudia/gateway.json`
+- Look at logs: `claudia-gateway logs --lines 100`
+
+**Bot doesn't respond**
+- Verify the bot token is correct
+- Check that your user ID is in `allowedUsers`
+- Run with `--debug` for detailed logs: `claudia-gateway start --debug`
+
+**Memory not available**
+- Check memory daemon: `curl http://localhost:3848/health`
+- The gateway works without memory (just no persistent context)
+
+**Auto-start**
+- macOS: `launchctl load ~/Library/LaunchAgents/com.claudia.gateway.plist`
+- Linux: `systemctl --user enable --now claudia-gateway`
+- Windows: `Enable-ScheduledTask -TaskName ClaudiaGateway`
+
+**Reinstall**
+- Run the installer again with upgrade mode:
+  ```bash
+  CLAUDIA_GATEWAY_UPGRADE=1 bash ~/.claudia/gateway/scripts/install.sh
+  ```

package/gateway/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@claudia/gateway",
+  "version": "0.1.0",
+  "description": "Multi-channel messaging gateway for Claudia - Telegram, Slack, and more",
+  "type": "module",
+  "main": "src/index.js",
+  "bin": {
+    "claudia-gateway": "./src/index.js"
+  },
+  "scripts": {
+    "start": "node src/index.js start",
+    "test": "node --test tests/"
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.39.0",
+    "@modelcontextprotocol/sdk": "^1.12.1",
+    "grammy": "^1.35.0",
+    "@slack/bolt": "^4.3.0",
+    "@slack/web-api": "^7.9.1"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "private": true
+}

package/gateway/scripts/install.ps1

@@ -0,0 +1,245 @@
+# Claudia Gateway Installer (Windows)
+# Sets up the messaging gateway with all dependencies
+
+$ErrorActionPreference = "Continue"
+
+# Colors via ANSI escape sequences
+$ESC = [char]27
+$RED = "$ESC[0;31m"
+$GREEN = "$ESC[0;32m"
+$YELLOW = "$ESC[1;33m"
+$CYAN = "$ESC[0;36m"
+$MAGENTA = "$ESC[0;35m"
+$BOLD = "$ESC[1m"
+$DIM = "$ESC[2m"
+$NC = "$ESC[0m"
+
+# Paths
+$CLAUDIA_DIR = Join-Path $env:USERPROFILE ".claudia"
+$GATEWAY_DIR = Join-Path $CLAUDIA_DIR "gateway"
+$BIN_DIR = Join-Path $CLAUDIA_DIR "bin"
+
+# Upgrade mode
+$IS_UPGRADE = $env:CLAUDIA_GATEWAY_UPGRADE -eq "1"
+
+# Banner
+Clear-Host
+Write-Host ""
+Write-Host "${CYAN}████${NC}  ${CYAN}██${NC}      ${CYAN}██${NC}    ${CYAN}██${NC}  ${CYAN}██${NC}  ${CYAN}████${NC}    ${CYAN}██${NC}    ${CYAN}██${NC}"
+Write-Host "${CYAN}██${NC}    ${CYAN}██${NC}    ${CYAN}██${NC}  ${CYAN}██${NC}  ${CYAN}██${NC}  ${CYAN}██${NC}  ${CYAN}██${NC}  ${CYAN}██${NC}  ${CYAN}██${NC}  ${CYAN}██${NC}  ${CYAN}██${NC}"
+Write-Host "${CYAN}████${NC}  ${CYAN}████${NC}  ${CYAN}██${NC}  ${CYAN}██${NC}    ${CYAN}██${NC}    ${CYAN}████${NC}    ${CYAN}██${NC}  ${CYAN}██${NC}  ${CYAN}██${NC}"
+Write-Host ""
+Write-Host "${DIM}Messaging Gateway Installer (Windows)${NC}"
+Write-Host "${DIM}Talk to Claudia from Telegram and Slack${NC}"
+Write-Host ""
+Write-Host "${DIM}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}"
+Write-Host ""
+
+# ============================================================
+# Step 1: Check Node.js >= 18
+# ============================================================
+Write-Host "${BOLD}Step 1/6: Environment Check${NC}"
+Write-Host ""
+
+$NODE_BIN = $null
+try {
+    $nodeVersion = & node --version 2>&1
+    if ($nodeVersion -match "v(\d+)") {
+        $major = [int]$Matches[1]
+        if ($major -ge 18) {
+            $NODE_BIN = (Get-Command node).Source
+            Write-Host "  ${GREEN}✓${NC} Node.js $nodeVersion"
+        } else {
+            Write-Host "  ${RED}✗${NC} Node.js 18+ required (found: $nodeVersion)"
+            Write-Host "    ${DIM}Install from https://nodejs.org${NC}"
+            exit 1
+        }
+    }
+} catch {
+    Write-Host "  ${RED}✗${NC} Node.js not found"
+    Write-Host "    Please install Node.js 18 or later"
+    Write-Host "    ${DIM}https://nodejs.org${NC}"
+    exit 1
+}
+
+Write-Host ""
+Write-Host "${DIM}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}"
+Write-Host ""
+
+# ============================================================
+# Step 2: Copy gateway source
+# ============================================================
+Write-Host "${BOLD}Step 2/6: Installing Gateway${NC}"
+Write-Host ""
+
+$SCRIPT_DIR = Split-Path -Parent $MyInvocation.MyCommand.Path
+$SOURCE_DIR = Split-Path -Parent $SCRIPT_DIR
+
+New-Item -ItemType Directory -Force -Path $GATEWAY_DIR | Out-Null
+
+Write-Host "  ${CYAN}◐${NC} Copying gateway files..."
+Copy-Item -Recurse -Force (Join-Path $SOURCE_DIR "src") $GATEWAY_DIR
+Copy-Item -Force (Join-Path $SOURCE_DIR "package.json") $GATEWAY_DIR
+Write-Host "  ${GREEN}✓${NC} Gateway source installed"
+
+Write-Host ""
+Write-Host "${DIM}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}"
+Write-Host ""
+
+# ============================================================
+# Step 3: npm install --production
+# ============================================================
+Write-Host "${BOLD}Step 3/6: Installing Dependencies${NC}"
+Write-Host ""
+
+Write-Host "  ${CYAN}◐${NC} Running npm install..."
+Push-Location $GATEWAY_DIR
+try {
+    & npm install --production 2>&1 | Out-Null
+    Write-Host "  ${GREEN}✓${NC} Dependencies installed"
+} catch {
+    Write-Host "  ${RED}✗${NC} npm install failed"
+    Write-Host "    ${DIM}Try running manually: cd $GATEWAY_DIR && npm install --production${NC}"
+    Pop-Location
+    exit 1
+}
+Pop-Location
+
+Write-Host ""
+Write-Host "${DIM}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}"
+Write-Host ""
+
+# ============================================================
+# Step 4: Generate config
+# ============================================================
+Write-Host "${BOLD}Step 4/6: Configuration${NC}"
+Write-Host ""
+
+$CONFIG_FILE = Join-Path $CLAUDIA_DIR "gateway.json"
+
+if ((Test-Path $CONFIG_FILE) -and $IS_UPGRADE) {
+    Write-Host "  ${GREEN}✓${NC} Existing config preserved"
+} else {
+    & node (Join-Path $GATEWAY_DIR "src" "index.js") init 2>&1 | Out-Null
+    Write-Host "  ${GREEN}✓${NC} Config created at $CONFIG_FILE"
+}
+
+Write-Host ""
+Write-Host "${DIM}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}"
+Write-Host ""
+
+# ============================================================
+# Step 5: Create CLI wrapper
+# ============================================================
+Write-Host "${BOLD}Step 5/6: CLI Wrapper${NC}"
+Write-Host ""
+
+New-Item -ItemType Directory -Force -Path $BIN_DIR | Out-Null
+
+# Create batch wrapper
+$wrapperPath = Join-Path $BIN_DIR "claudia-gateway.cmd"
+$wrapperContent = @"
+@echo off
+node "%USERPROFILE%\.claudia\gateway\src\index.js" %*
+"@
+Set-Content -Path $wrapperPath -Value $wrapperContent
+Write-Host "  ${GREEN}✓${NC} CLI installed at $wrapperPath"
+
+# PATH hint
+$currentPath = [System.Environment]::GetEnvironmentVariable("PATH", "User")
+if ($currentPath -notlike "*$BIN_DIR*") {
+    Write-Host "  ${YELLOW}!${NC} Add to your PATH if not already present:"
+    Write-Host "    ${DIM}[Environment]::SetEnvironmentVariable('PATH', `$env:PATH + ';$BIN_DIR', 'User')${NC}"
+}
+
+# Create scheduled task (disabled by default)
+$taskName = "ClaudiaGateway"
+try {
+    $existingTask = Get-ScheduledTask -TaskName $taskName -ErrorAction SilentlyContinue
+    if ($existingTask) {
+        Unregister-ScheduledTask -TaskName $taskName -Confirm:$false -ErrorAction SilentlyContinue
+    }
+
+    $action = New-ScheduledTaskAction `
+        -Execute $NODE_BIN `
+        -Argument "$GATEWAY_DIR\src\index.js start" `
+        -WorkingDirectory $GATEWAY_DIR
+
+    $trigger = New-ScheduledTaskTrigger -AtLogOn -User $env:USERNAME
+
+    $settings = New-ScheduledTaskSettingsSet `
+        -AllowStartIfOnBatteries `
+        -DontStopIfGoingOnBatteries `
+        -RestartCount 3 `
+        -RestartInterval (New-TimeSpan -Minutes 1) `
+        -ExecutionTimeLimit (New-TimeSpan -Days 0) `
+        -StartWhenAvailable
+
+    Register-ScheduledTask `
+        -TaskName $taskName `
+        -Description "Claudia Messaging Gateway" `
+        -Action $action `
+        -Trigger $trigger `
+        -Settings $settings `
+        -RunLevel Limited `
+        -Force | Out-Null
+
+    # Disable the task (requires API keys first)
+    Disable-ScheduledTask -TaskName $taskName | Out-Null
+
+    Write-Host "  ${GREEN}✓${NC} Windows Task Scheduler entry created (disabled)"
+    Write-Host "    ${DIM}Enable after configuring API keys:${NC}"
+    Write-Host "    ${DIM}Enable-ScheduledTask -TaskName ClaudiaGateway${NC}"
+} catch {
+    Write-Host "  ${YELLOW}!${NC} Could not configure auto-start: $_"
+    Write-Host "    ${DIM}You can start the gateway manually: claudia-gateway start${NC}"
+}
+
+Write-Host ""
+Write-Host "${DIM}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}"
+Write-Host ""
+
+# ============================================================
+# Step 6: Security checklist and next steps
+# ============================================================
+Write-Host "${BOLD}Step 6/6: What's Next${NC}"
+Write-Host ""
+
+Write-Host "${GREEN}"
+Write-Host "  ╔═══════════════════════════════════════════════════════════╗"
+Write-Host "  ║                                                           ║"
+Write-Host "  ║   ✨ Gateway installed successfully! ✨                   ║"
+Write-Host "  ║                                                           ║"
+Write-Host "  ╚═══════════════════════════════════════════════════════════╝"
+Write-Host "${NC}"
+
+Write-Host "${BOLD}Security checklist (do these before starting):${NC}"
+Write-Host ""
+Write-Host "  ${YELLOW}□${NC} Set ANTHROPIC_API_KEY as an environment variable"
+Write-Host "  ${YELLOW}□${NC} Set TELEGRAM_BOT_TOKEN (or SLACK_BOT_TOKEN + SLACK_APP_TOKEN)"
+Write-Host "  ${YELLOW}□${NC} Add your user ID(s) to allowedUsers in gateway.json"
+Write-Host "  ${YELLOW}□${NC} Never commit API keys to git or store them in gateway.json"
+Write-Host ""
+Write-Host "${BOLD}Quick start:${NC}"
+Write-Host ""
+Write-Host "  ${CYAN}1.${NC} `$env:ANTHROPIC_API_KEY = 'sk-ant-...'"
+Write-Host "  ${CYAN}2.${NC} `$env:TELEGRAM_BOT_TOKEN = '123456:ABC...'"
+Write-Host "  ${CYAN}3.${NC} Edit $CONFIG_FILE (enable channel, set allowedUsers)"
+Write-Host "  ${CYAN}4.${NC} claudia-gateway start"
+Write-Host ""
+Write-Host "${BOLD}Installed:${NC}"
+Write-Host ""
+Write-Host "  ${CYAN}◆${NC} Gateway source     ${DIM}$GATEWAY_DIR${NC}"
+Write-Host "  ${CYAN}◆${NC} Config             ${DIM}$CONFIG_FILE${NC}"
+Write-Host "  ${CYAN}◆${NC} CLI                ${DIM}$wrapperPath${NC}"
+Write-Host "  ${CYAN}◆${NC} Logs               ${DIM}$CLAUDIA_DIR\gateway.log${NC}"
+Write-Host ""
+Write-Host "${BOLD}CLI commands:${NC}"
+Write-Host ""
+Write-Host "  ${DIM}claudia-gateway start${NC}     Start the gateway"
+Write-Host "  ${DIM}claudia-gateway stop${NC}      Stop the gateway"
+Write-Host "  ${DIM}claudia-gateway status${NC}    Check status"
+Write-Host "  ${DIM}claudia-gateway logs${NC}      View recent logs"
+Write-Host ""
+Write-Host "${MAGENTA}${DIM}$([char]34)Now you can reach me anywhere.$([char]34) -- Claudia${NC}"
+Write-Host ""