three-blocks-login 0.1.10 → 0.1.12

package/LICENSE

@@ -1,7 +1,10 @@
 Three.js Blocks Software License Agreement
+Version 2.0 — Effective January 2026
 
 Proprietary Software — All Rights Reserved
-Copyright (c) 2025 three-blocks
+Copyright (c) 2026 three-blocks
+
+Full License Terms: https://threejs-blocks.com/license
 
 ================================================================================
 
@@ -9,25 +12,26 @@ LICENSE NOTICE
 
 This software and all associated packages, including but not limited to:
   - @three-blocks/core
+  - @three-blocks/pro
   - @three-blocks/starter
   - create-three-blocks-starter
   - All related tools, examples, and documentation code
 
-are licensed exclusively to active, paid subscribers of the threejs-blocks 
-project. Without a valid and current subscription, you are NOT permitted to 
+are licensed exclusively to active, paid subscribers of the Three.js Blocks
+project. Without a valid and current subscription, you are NOT permitted to
 use this software.
 
 ================================================================================
 
 PERMITTED USAGE (Active Subscribers Only)
 
-Subject to maintaining an active, paid subscription, you are granted a 
-non-exclusive, non-transferable license to:
+Subject to maintaining an active, paid subscription, you are granted a
+non-exclusive, non-transferable, non-sublicensable license to:
 
-  ✓ Use the software in personal and commercial projects via the public API
-  ✓ Deploy applications incorporating the software to production environments
-  ✓ Integrate the software into your applications as a functional component
-  ✓ Access updates, bug fixes, and new features during active subscription
+  + Use the software in personal and commercial projects via the public API
+  + Deploy applications incorporating the software to production environments
+  + Integrate the software into your applications as a functional component
+  + Access updates, bug fixes, and new features during active subscription
 
 ================================================================================
 
@@ -35,58 +39,112 @@ RESTRICTIONS
 
 You may NOT:
 
-  ✗ Reverse engineer, decompile, disassemble, or attempt to derive the source
+  - Reverse engineer, decompile, disassemble, or attempt to derive the source
     code, underlying algorithms, or techniques employed in this software
-  ✗ Study, analyze, inspect, or learn from the implementation details, code
+  - Study, analyze, inspect, or learn from the implementation details, code
     structure, or internal workings of this software
-  ✗ Modify, adapt, translate, or create derivative works
-  ✗ Copy, share, distribute, publish, or resell any part of the software
-  ✗ Sublicense or transfer rights to any third party
-  ✗ Remove, alter, or obscure this license header or any copyright notices
-  ✗ Use this software after your subscription has expired or been terminated
+  - Modify, adapt, translate, or create derivative works
+  - Copy, share, distribute, publish, or resell any part of the software
+  - Sublicense or transfer rights to any third party
+  - Remove, alter, or obscure this license header or any copyright notices
+  - Use this software after your subscription has expired or been terminated
 
 ================================================================================
 
-AI AND MACHINE LEARNING PROHIBITION
-
-The use of this source code for artificial intelligence and machine learning 
-purposes is strictly prohibited. Specifically, you may NOT:
+SUBLICENSING AND REDISTRIBUTION PROHIBITION
+
+This license is strictly non-transferable and non-sublicensable. You may NOT:
+
+  - Sublicense, relicense, or transfer any rights granted herein to any third
+    party under any circumstances
+  - Create any SDK, library, framework, plugin, extension, or middleware that
+    redistributes, bundles, or incorporates this software for use by third
+    parties
+  - Bundle this software into products, applications, or services where
+    end-users do not hold their own valid subscription to Three.js Blocks
+  - Offer this software as part of any hosted service, software-as-a-service
+    (SaaS), platform-as-a-service (PaaS), or similar cloud-based offering
+    where third parties access the software's functionality
+  - Create wrapper libraries, abstraction layers, or integration packages that
+    obscure, circumvent, or eliminate the subscription requirement from
+    downstream users
+  - Include this software in any product, template, boilerplate, starter kit,
+    code generator, or scaffolding tool intended for distribution to third
+    parties
+  - Provide access to this software through any API, service endpoint, or
+    programmatic interface that enables third-party usage
+  - License, sell, rent, lease, or otherwise commercially exploit access to
+    this software to any third party
+
+THIRD-PARTY INTEGRATION REQUIREMENT:
+If you develop any software, SDK, library, framework, application, or service
+that incorporates, depends upon, or integrates with this software, each
+end-user of your software must independently hold their own valid, active
+subscription to Three.js Blocks. You may not use your subscription to provide,
+enable, or facilitate access to this software to any third party. Any attempt
+to circumvent this requirement through technical or contractual means is
+expressly prohibited and constitutes a material breach of this license.
 
-  ✗ Use this source code, in whole or in part, to train, fine-tune, or develop
-    any artificial intelligence models, machine learning systems, or large
-    language models (LLMs)
-  
-  ✗ Feed this code into AI-assisted development tools for the purpose of
-    generating derivative code or training said tools
-  
-  ✗ Use automated transformation tools or AI systems to create modified versions
-    or derivatives of this software
-  
-  ✗ Extract patterns, algorithms, or techniques from this code using automated
-    or AI-assisted analysis for incorporation into other software
-  
-  ✗ Use this code as training data for code completion, code generation, or
-    code suggestion tools
+================================================================================
 
-This prohibition extends to any form of automated learning, pattern extraction,
-or knowledge transfer that involves processing this source code through machine
-learning pipelines, regardless of whether the output is used commercially or
-privately.
+AI, MACHINE LEARNING, AND AUTOMATED ANALYSIS PROHIBITION
+
+The use of this software, source code, compiled code, documentation, outputs,
+or any data generated by this software for artificial intelligence, machine
+learning, or automated analysis purposes is strictly prohibited. You may NOT:
+
+  - Use this code, in whole or in part, to train, fine-tune, pre-train, or
+    develop any artificial intelligence models, machine learning systems,
+    neural networks, or large language models (LLMs)
+  - Use this code for reinforcement learning from human feedback (RLHF),
+    constitutional AI training, or any similar AI alignment or training
+    methodology
+  - Create embeddings, vector representations, semantic indices, or any other
+    mathematical or computational representations of this code
+  - Store this code in vector databases, retrieval systems, knowledge bases,
+    or any storage mechanism intended for AI/ML retrieval-augmented generation
+    (RAG) or similar AI-assisted retrieval
+  - Generate synthetic data, pseudocode, paraphrased code, or derivative
+    representations from this codebase for any purpose
+  - Use automated tools, scripts, or AI systems to extract patterns,
+    algorithms, architectural knowledge, or implementation techniques from
+    this software
+  - Input this code into AI coding assistants, code completion tools, or
+    any AI-powered development environment for the purpose of analysis,
+    learning, pattern extraction, or code generation
+  - Use this code as context, examples, few-shot prompts, or reference
+    material for AI code generation, code completion, or code suggestion
+  - Feed this code into any automated transformation tool, transpiler, or
+    code converter that uses AI/ML techniques
+  - Use any output, behavior, or data generated by this software to train
+    or improve any AI/ML system
+
+This prohibition applies to all AI/ML systems including but not limited to:
+large language models (LLMs), code completion tools (e.g., GitHub Copilot,
+Amazon CodeWhisperer, and similar tools), code generation systems, neural
+networks, transformer models, diffusion models, and any future AI technologies
+regardless of their architecture or methodology.
+
+This prohibition is perpetual and survives any termination or expiration of
+this license agreement.
 
 ================================================================================
 
 SUBSCRIPTION REQUIREMENT
 
 This license is valid only while you maintain an active, paid subscription to
-the threejs-blocks service. Upon expiration or termination of your subscription:
+the Three.js Blocks service. Upon expiration or termination of your
+subscription:
 
-  1. Your license to use this software immediately terminates
-  2. You must cease all use of the software
-  3. You must remove the software from all projects and systems
-  4. You must not deploy or distribute any applications containing this software
+  1. Your license to use this software immediately and automatically terminates
+  2. You must immediately cease all use of the software
+  3. You must remove the software from all projects, systems, and deployments
+  4. You must not deploy, distribute, or make available any applications
+     containing this software
+  5. You must delete all copies of this software in your possession or control
 
 Failure to comply with these requirements constitutes copyright infringement
-and breach of contract.
+and breach of contract, and may result in legal action.
 
 ================================================================================
 
@@ -95,48 +153,73 @@ PACKAGE-SPECIFIC NOTES
 @three-blocks/core:
   - Core library with proprietary algorithms and implementations
   - Protected by code obfuscation and this license
-  - UNLICENSED - Subscription required
+  - Subscription required
+
+@three-blocks/pro:
+  - Advanced physics engine with proprietary implementations
+  - Worker-based architecture with SharedArrayBuffer
+  - Protected by code obfuscation and this license
+  - Subscription required
 
 @three-blocks/starter:
   - Starter template for building Three.js applications
   - Includes licensed code and dependencies on @three-blocks/core
-  - UNLICENSED - Subscription required
+  - Subscription required
 
 create-three-blocks-starter:
   - Scaffolding tool for creating new projects
   - Publicly available for convenience but proprietary
-  - UNLICENSED - Creates projects that require subscription
-
-three-blocks-login:
-  - Authentication helper for accessing private packages
-  - MIT Licensed - May be used independently
+  - Creates projects that require subscription
 
 ================================================================================
 
 ENFORCEMENT
 
-Unauthorized use, reproduction, distribution, or violation of the AI/ML 
-prohibition is strictly prohibited and may result in:
+Unauthorized use, reproduction, distribution, reverse engineering, sublicensing,
+or violation of the AI/ML prohibition is strictly prohibited and may result in:
 
-  • Immediate termination of your license and subscription
-  • Legal action for copyright infringement
-  • Claims for damages and recovery of costs
-  • Civil liability under applicable copyright law
-  • Criminal penalties under applicable law
+  * Immediate termination of your license and subscription without refund
+  * Legal action for copyright infringement
+  * Legal action for breach of contract
+  * Claims for damages, including actual damages, lost profits, and statutory
+    damages where available
+  * Recovery of attorneys' fees and costs of enforcement
+  * Injunctive relief to prevent further unauthorized use
+  * Civil liability under applicable copyright, trade secret, and contract law
+  * Criminal penalties under applicable law, including but not limited to the
+    Computer Fraud and Abuse Act (CFAA) and equivalent international statutes
 
 We employ various technical and legal measures to detect unauthorized use,
-including but not limited to code fingerprinting, usage analytics, and
-regular compliance audits.
+including but not limited to code fingerprinting, license validation, usage
+analytics, and regular compliance audits. We reserve the right to pursue all
+available legal remedies against violators.
+
+================================================================================
+
+INDEMNIFICATION
+
+You agree to indemnify, defend, and hold harmless three-blocks, its affiliates,
+officers, directors, employees, and agents from and against any and all claims,
+damages, obligations, losses, liabilities, costs, and expenses (including
+reasonable attorneys' fees) arising from: (a) your use of the software;
+(b) your violation of any term of this license; (c) your violation of any
+third-party right, including any intellectual property or privacy right; or
+(d) any claim that your use of the software caused damage to a third party.
 
 ================================================================================
 
 ACCEPTANCE OF TERMS
 
-By using this software, you acknowledge that you have read, understood, and 
-agree to be bound by the complete terms of this license agreement.
+By downloading, installing, copying, accessing, or otherwise using this
+software, you acknowledge that you have read, understood, and agree to be
+bound by the complete terms of this license agreement.
 
 If you do not agree to these terms, you are not authorized to use, access,
-or download this software.
+download, install, or copy this software.
+
+If you are accepting these terms on behalf of an organization, you represent
+and warrant that you have the authority to bind that organization to these
+terms.
 
 ================================================================================
 
@@ -144,16 +227,56 @@ DISCLAIMER OF WARRANTY
 
 THIS SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT.
+FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NONINFRINGEMENT.
+
+THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE SOFTWARE IS WITH YOU.
+SHOULD THE SOFTWARE PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY
+SERVICING, REPAIR, OR CORRECTION.
 
 ================================================================================
 
 LIMITATION OF LIABILITY
 
-IN NO EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES, OR
-OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING
-FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
-IN THE SOFTWARE.
+IN NO EVENT SHALL THREE-BLOCKS, ITS AFFILIATES, LICENSORS, OR SUPPLIERS BE
+LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR
+EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO DAMAGES FOR LOSS OF PROFITS,
+GOODWILL, USE, DATA, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR IN
+CONNECTION WITH THIS LICENSE OR THE USE OR INABILITY TO USE THE SOFTWARE,
+EVEN IF THREE-BLOCKS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+IN NO EVENT SHALL THREE-BLOCKS'S TOTAL CUMULATIVE LIABILITY TO YOU FOR ALL
+CLAIMS ARISING OUT OF OR RELATED TO THIS LICENSE OR THE SOFTWARE EXCEED THE
+AMOUNTS PAID BY YOU TO THREE-BLOCKS FOR THE SOFTWARE DURING THE TWELVE (12)
+MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY.
+
+SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR
+CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU.
+
+================================================================================
+
+SEVERABILITY
+
+If any provision of this license is held to be unenforceable or invalid, that
+provision shall be enforced to the maximum extent possible, and the other
+provisions shall remain in full force and effect.
+
+================================================================================
+
+WAIVER
+
+The failure of three-blocks to enforce any right or provision of this license
+shall not constitute a waiver of such right or provision. No waiver of any
+term of this license shall be deemed a further or continuing waiver of such
+term or any other term.
+
+================================================================================
+
+ENTIRE AGREEMENT
+
+This license constitutes the entire agreement between you and three-blocks
+regarding the software and supersedes all prior agreements, understandings,
+and communications, whether written or oral, regarding the subject matter
+hereof.
 
 ================================================================================
 
@@ -169,14 +292,16 @@ For license violations or to report unauthorized use:
 
 ================================================================================
 
-GOVERNING LAW
+GOVERNING LAW AND JURISDICTION
 
 This license shall be governed by and construed in accordance with the laws
-of the jurisdiction in which three-blocks operates, without regard to its
-conflict of law provisions.
+of Japan, without regard to its conflict of law provisions. Any dispute arising
+out of or relating to this license or the software shall be subject to the
+exclusive jurisdiction of the courts located in Tokyo, Japan, and you hereby
+consent to the personal jurisdiction of such courts.
 
 ================================================================================
 
-Last Updated: January 2025
-Version: 1.0.0
+Last Updated: January 2026
+Version: 2.0
 

package/README.md

@@ -16,7 +16,7 @@ npx -y three-blocks-login@latest@latest
 
 The CLI supports three modes for storing authentication:
 
-### 1. Project Mode (Recommended for CI/Vercel)
+### 1. Project Mode (Default)
 
 Writes `.npmrc` to the current directory. Best for project-specific authentication.
 
@@ -24,15 +24,7 @@ Writes `.npmrc` to the current directory. Best for project-specific authenticati
 npx -y three-blocks-login@latest --mode project --scope @three-blocks --channel stable
 ```
 
-**Use this in package.json preinstall scripts:**
-
-```json
-{
-  "scripts": {
-    "preinstall": "npx -y three-blocks-login@latest"
-  }
-}
-```
+**For CI/CD:** Run this command BEFORE `pnpm install`, not as a preinstall hook. See [CI/CD Setup](#cicd-setup) for platform-specific examples.
 
 **Note:** Flags are optional - the CLI auto-detects `--mode project` in CI environments, defaults to `--scope @three-blocks`, and `--channel stable`.
 
@@ -79,64 +71,77 @@ npx -y three-blocks-login@latest --mode user
 | `THREE_BLOCKS_LOGIN_PRINT_SHELL` | Print shell exports in env mode (`1`) |
 | `CI` | Enable non-interactive mode (`1`) |
 
-## CI/CD & Vercel Setup
+## CI/CD Setup
 
-### Quick Setup (3 steps)
+> ⚠️ **pnpm users:** The preinstall hook approach is unreliable with pnpm because pnpm resolves packages BEFORE running preinstall scripts. Use the **CI Install Override** approach below instead.
 
-1. **Commit a base `.npmrc`** to your repository (safe - no secrets):
-   ```
-   @three-blocks:registry=https://three-blocks-196905988268.d.codeartifact.ap-northeast-1.amazonaws.com/npm/core/
-   ```
+### Recommended: CI Install Override (All CIs)
 
-2. **Add preinstall script** to package.json:
-   ```json
-   {
-     "scripts": {
-       "preinstall": "npx -y three-blocks-login@latest"
-     }
-   }
-   ```
+Run the login command BEFORE `pnpm install`, not as a preinstall hook:
 
-3. **Set environment variable** in Vercel/CI:
-   - **Name**: `THREE_BLOCKS_SECRET_KEY`
-   - **Value**: Your license key (starts with `tb_...`)
+#### Vercel
+
+```json
+// vercel.json
+{
+  "installCommand": "npx -y three-blocks-login@latest && pnpm install"
+}
+```
 
-### How It Works
+Set `THREE_BLOCKS_SECRET_KEY` in Vercel → Project Settings → Environment Variables.
 
-- Committed `.npmrc` tells pnpm **WHERE** to find packages
-- Preinstall script adds the **AUTH TOKEN** dynamically
-- This solves pnpm's resolution timing issue (it needs to know the registry before running preinstall)
+#### AWS Amplify
 
-### Vercel Environment Variables
+```yaml
+# amplify.yml
+version: 1
+frontend:
+  phases:
+    preBuild:
+      commands:
+        - npx -y three-blocks-login@latest
+        - pnpm install
+    build:
+      commands:
+        - pnpm build
+```
 
-1. Go to your Vercel project settings
-2. Navigate to: Settings → Environment Variables
-3. Add `THREE_BLOCKS_SECRET_KEY` environment variable
-4. Set the value to your license key (starts with `tb_...`)
-5. Make sure it's available in all environments (Production, Preview, Development)
+Set `THREE_BLOCKS_SECRET_KEY` in Amplify Console → App Settings → Environment Variables.
 
-### GitHub Actions
+#### GitHub Actions
 
 ```yaml
-- name: Authenticate to Three Blocks
+- name: Auth three-blocks
   run: npx -y three-blocks-login@latest
   env:
     THREE_BLOCKS_SECRET_KEY: ${{ secrets.THREE_BLOCKS_SECRET_KEY }}
+
+- name: Install dependencies
+  run: pnpm install
 ```
 
-**Or better yet**, just rely on the preinstall script - GitHub Actions will run it automatically during `npm install` or `pnpm install`.
+#### Netlify
 
-## Troubleshooting
+```toml
+# netlify.toml
+[build]
+  command = "npx -y three-blocks-login@latest && pnpm install && pnpm build"
+```
 
-### 401 Unauthorized on Vercel
+Set `THREE_BLOCKS_SECRET_KEY` in Netlify → Site Settings → Environment Variables.
 
-**Problem:** Getting `ERR_PNPM_FETCH_401` or npm 401 errors on Vercel.
+#### Generic CI
 
-**Root Cause:** pnpm resolves package locations BEFORE running preinstall scripts.
+Always run login before install:
+```bash
+npx -y three-blocks-login@latest && pnpm install
+```
+
+### Alternative: Preinstall Hook (npm only)
 
-**Solution (3 steps):**
+> ⚠️ This approach only works reliably with **npm**, not pnpm. For pnpm, use CI Install Override above.
 
-1. **Commit a base `.npmrc`** with just the registry URL (no auth token):
+1. **Commit a base `.npmrc`** (no auth token):
    ```
    @three-blocks:registry=https://three-blocks-196905988268.d.codeartifact.ap-northeast-1.amazonaws.com/npm/core/
    ```
@@ -150,12 +155,31 @@ npx -y three-blocks-login@latest --mode user
    }
    ```
 
-3. **Verify `THREE_BLOCKS_SECRET_KEY`** is set in Vercel environment variables
+3. **Set `THREE_BLOCKS_SECRET_KEY`** in CI environment variables.
+
+## Troubleshooting
+
+### 401 Unauthorized on Vercel/Amplify/CI
+
+**Problem:** Getting `ERR_PNPM_FETCH_401` or 401 errors in CI.
+
+**Root Cause:** pnpm resolves packages BEFORE running preinstall scripts. If you're using a preinstall hook with pnpm, it won't work reliably.
+
+**Solution:** Use CI Install Override instead of preinstall hooks.
+
+For Vercel, add to `vercel.json`:
+```json
+{
+  "installCommand": "npx -y three-blocks-login@latest && pnpm install"
+}
+```
+
+For other CIs, see the [CI/CD Setup](#cicd-setup) section above.
 
-**Why this works:**
-- Committed `.npmrc` tells pnpm WHERE to look for packages
-- Preinstall script adds the auth token dynamically
-- pnpm can now resolve packages AND authenticate when downloading
+**Also check:**
+- `THREE_BLOCKS_SECRET_KEY` is set in CI environment variables
+- `.npmrc` does NOT contain an `_authToken` line (tokens expire in 12h)
+- Remove any preinstall hook from `package.json` if using CI override
 
 ### License Key Format
 

package/bin/login.js

@@ -24,7 +24,6 @@ const bold = ( s ) => ESC( 1 ) + s + reset;
 const dim = ( s ) => ESC( 2 ) + s + reset;
 const red = ( s ) => ESC( 31 ) + s + reset;
 const green = ( s ) => ESC( 32 ) + s + reset;
-const yellow = ( s ) => ESC( 33 ) + s + reset;
 const cyan = ( s ) => ESC( 36 ) + s + reset;
 const plainBanner = `[three-blocks-login@${pkg.version}]`;
 const banner = cyan( plainBanner );
@@ -106,90 +105,6 @@ const quoteArg = ( value ) => {
 
 const formatCommand = ( cmd, args = [] ) => [ cmd, ...args ].map( quoteArg ).join( " " );
 
-const HEADER_WIDTH = 96;
-const LEFT_WIDTH = 60;
-const RIGHT_WIDTH = HEADER_WIDTH - LEFT_WIDTH - 3;
-
-const repeatChar = ( ch, len ) => ch.repeat( Math.max( 0, len ) );
-const stripAnsi = ( value ) => String( value ?? '' ).replace( /\u001b\[[0-9;]*m/g, '' );
-const ellipsize = ( value, width ) => {
-
-	const str = String( value ?? '' );
-	const plain = stripAnsi( str );
-	if ( plain.length <= width ) return str;
-	if ( width <= 1 ) return plain.slice( 0, width );
-	const truncated = plain.slice( 0, width - 1 ) + '…';
-	return plain === str ? truncated : truncated;
-
-};
-
-const visibleLength = ( value ) => stripAnsi( String( value ?? '' ) ).length;
-const padText = ( value, width, align = 'left' ) => {
-
-	const text = ellipsize( value, width );
-	const current = visibleLength( text );
-	const remaining = width - current;
-	if ( remaining <= 0 ) return text;
-	if ( align === 'center' ) {
-
-		const left = Math.floor( remaining / 2 );
-		const right = remaining - left;
-		return `${' '.repeat( left )}${text}${' '.repeat( right )}`;
-
-	}
-
-	if ( align === 'right' ) {
-
-		return `${' '.repeat( remaining )}${text}`;
-
-	}
-
-	return `${text}${' '.repeat( remaining )}`;
-
-};
-
-const makeHeaderRow = ( left, right = '', leftAlign = 'left', rightAlign = 'left' ) =>
-	`│${padText( left, LEFT_WIDTH, leftAlign )}│${padText( right, RIGHT_WIDTH, rightAlign )}│`;
-
-const HEADER_COLOR = ESC( 33 );
-const CONTENT_COLOR = ESC( 90 ); // bright black (grey)
-const reapplyColor = ( value, color ) => {
-
-	const str = String( value ?? '' );
-	return `${color}${str.split( reset ).join( `${reset}${color}` )}${reset}`;
-
-};
-
-const applyHeaderColor = ( row, { keepContentYellow = false, tintContent = true } = {} ) => {
-
-	if ( keepContentYellow ) return reapplyColor( row, HEADER_COLOR );
-	if ( ! row.startsWith( '│' ) || ! row.endsWith( '│' ) ) return reapplyColor( row, HEADER_COLOR );
-	const match = row.match( /^│(.*)│(.*)│$/ );
-	if ( ! match ) return reapplyColor( row, HEADER_COLOR );
-	const [ , leftContent, rightContent ] = match;
-	const leftSegment = tintContent ? reapplyColor( leftContent, CONTENT_COLOR ) : leftContent;
-	const rightSegment = tintContent ? reapplyColor( rightContent, CONTENT_COLOR ) : rightContent;
-	return `${HEADER_COLOR}│${reset}${leftSegment}${HEADER_COLOR}│${reset}${rightSegment}${HEADER_COLOR}│${reset}`;
-
-};
-
-const formatRegistryShort = ( value ) => {
-
-	if ( ! value ) return '';
-	try {
-
-		const u = new URL( value );
-		const pathname = ( u.pathname || '' ).replace( /\/$/, '' );
-		return `${u.host}${pathname}`;
-
-	} catch {
-
-		return String( value );
-
-	}
-
-};
-
 const maskLicense = ( s ) => {
 
 	if ( ! s ) return '••••';
@@ -269,87 +184,37 @@ const USER_DISPLAY_NAME = getUserDisplayName();
 
 const renderEnvHeader = ( {
 	scope,
-	registry,
 	expiresAt,
-	tmpFile,
 	licenseMasked,
-	licenseId,
-	channel,
 	status,
 	plan,
-	teamName,
-	teamId,
-	repository,
-	domain,
-	region,
 	userDisplayName,
 } ) => {
 
-	const title = `─── Three Blocks Login v${CLI_VERSION} `;
-	const separatorRow = makeHeaderRow( repeatChar( '─', LEFT_WIDTH ), repeatChar( '─', RIGHT_WIDTH ) );
-	const channelDisplay = String( channel || '' ).toUpperCase() || 'STABLE';
-	const registryShort = formatRegistryShort( registry );
-
 	const displayName = userDisplayName || USER_DISPLAY_NAME;
-	const welcomeLine = displayName ? `Welcome back ${displayName}!` : 'Welcome back!';
-	const scopeLine = `Scope: ${scope}`;
+	const welcomeLine = displayName ? `Welcome back, ${displayName}!` : 'Welcome back!';
 
 	const planLabel = normalizePlan( plan );
-	const teamLabel = teamName || teamId ? ` · Team: ${teamName || teamId}` : '';
-	const subscriptionLine = `Plan: ${planLabel}${teamLabel}`;
-	const channelLine = `Channel: ${channelDisplay}${region ? ` · Region: ${region}` : ''}`;
-
-	const repositoryBase = repository ? `Repository: ${repository}` : 'Repository: —';
-	const repositoryLine = registryShort ? `${repositoryBase} → ${registryShort}` : repositoryBase;
-	const registryLine = `Registry: ${registryShort || ( registry || '—' )}`;
-
-	let domainValue = domain || '';
-	if ( ! domainValue && registry ) {
-
-		try {
-
-			domainValue = new URL( registry ).host;
-
-		} catch {}
-
-	}
-
-	const domainLineText = `Domain: ${domainValue || '—'}`;
-	const regionLineText = `Region: ${region || '—'}`;
+	const planLine = `${planLabel} · ${scope}`;
 
-	const licenseLine = `License: ${licenseMasked}${licenseId ? ` · ${licenseId}` : ''}`;
 	const expiresLine = formatExpiryLabel( expiresAt );
+	const licenseLine = `${licenseMasked} · ${expiresLine}`;
 
-	const ascii = [
-		'THREE.JS',
-		' ______     __         ______     ______     __  __     ______   ',
-		'/\\  == \\   /\\ \\       /\\  __ \\   /\\  ___\\   /\\ \\/ /    /\\  ___\\  ',
-		'\\ \\  __<   \\ \\ \\____  \\ \\ \\/\\ \\  \\ \\ \\____  \\ \\  _"-.  \\ \\___  \\ ',
-		' \\ \\_____\\  \\ \\_____\\  \\ \\_____\\  \\ \\_____\\  \\ \\_\\ \\_\\  \\/\\_____\\',
-		'  \\/_____\/   \\/_____/   \\/_____/   \\/_____/   \\/_/ \/_/   \\/_____/'
-	];
 	const statusMessage = status?.message || ( status?.ok ? 'access granted' : status ? 'no active access' : 'pending' );
-	const statusText = status?.ok
-		? green( bold( `Authenticated — ${statusMessage}` ) )
+	const statusLine = status?.ok
+		? green( `✓ Authenticated — ${statusMessage}` )
 		: status
-			? red( bold( `Not authenticated — ${statusMessage}` ) )
-			: dim( bold( `Status: ${statusMessage}` ) );
-
-	const lines = [
-		applyHeaderColor( `╭${title}${repeatChar( '─', HEADER_WIDTH - 2 - title.length )}╮`, { keepContentYellow: true } ),
-		...ascii.map( ( row ) => applyHeaderColor( `│${padText( row, LEFT_WIDTH + RIGHT_WIDTH + 1, 'center' )}│`, { keepContentYellow: true } ) ),
-		applyHeaderColor( separatorRow, { keepContentYellow: true } ),
-		applyHeaderColor( makeHeaderRow( welcomeLine, scopeLine, 'center', 'center' ) ),
-		applyHeaderColor( separatorRow, { keepContentYellow: true } ),
-		applyHeaderColor( makeHeaderRow( subscriptionLine, channelLine ) ),
-		applyHeaderColor( makeHeaderRow( repositoryLine, registryLine ) ),
-		applyHeaderColor( makeHeaderRow( domainLineText, regionLineText, 'left', 'center' ) ),
-		applyHeaderColor( makeHeaderRow( licenseLine, expiresLine ) ),
-		applyHeaderColor( separatorRow, { keepContentYellow: true } ),
-		applyHeaderColor( makeHeaderRow( statusText, '', 'left', 'center' ), { tintContent: false } ),
-		applyHeaderColor( `╰${repeatChar( '─', HEADER_WIDTH - 2 )}╯`, { keepContentYellow: true } ),
-	];
-	for ( const row of lines ) console.log( row );
+			? red( `✗ Not authenticated — ${statusMessage}` )
+			: dim( `Status: ${statusMessage}` );
+
+	console.log( '' );
+	console.log( `${cyan( '▲' )} ${bold( 'three-blocks-login' )} ${dim( `v${CLI_VERSION}` )}` );
+	console.log( '' );
+	console.log( welcomeLine );
+	console.log( dim( planLine ) );
+	console.log( dim( licenseLine ) );
+	console.log( statusLine );
+	console.log( '' );
 
 };
 
@@ -376,6 +241,32 @@ if ( SKIP_LOGIN ) {
 
 }
 
+// Detect pnpm + preinstall timing issue
+const isPnpmPreinstall = () => {
+
+	const lifecycle = String( process.env.npm_lifecycle_event || '' ).toLowerCase();
+	const userAgent = String( process.env.npm_config_user_agent || '' ).toLowerCase();
+	return lifecycle === 'preinstall' && userAgent.includes( 'pnpm' );
+
+};
+
+const warnPnpmPreinstall = () => {
+
+	if ( ! isPnpmPreinstall() || QUIET ) return;
+	console.error( '' );
+	console.error( cyan( '⚠' ) + ' ' + bold( 'pnpm preinstall timing warning' ) );
+	console.error( dim( '  pnpm resolves packages BEFORE running preinstall hooks.' ) );
+	console.error( dim( '  If you see 401 errors, use CI install command override instead:' ) );
+	console.error( '' );
+	console.error( dim( '  Vercel:  ' ) + cyan( '"installCommand": "npx -y three-blocks-login@latest && pnpm install"' ) );
+	console.error( dim( '  Amplify: ' ) + cyan( 'preBuild: npx -y three-blocks-login@latest && pnpm install' ) );
+	console.error( dim( '  Generic: ' ) + cyan( 'npx -y three-blocks-login@latest && pnpm install' ) );
+	console.error( '' );
+	console.error( dim( '  Docs: https://threejs-blocks.com/auth-guide' ) );
+	console.error( '' );
+
+};
+
 // Load .env from current working directory (no deps)
 loadEnvFromDotfile( process.cwd() );
 
@@ -432,7 +323,7 @@ const openBrowser = async ( url ) => {
 const createSpinner = ( { stream = process.stderr } = {} ) => {
 
 	const enabled = !! ( stream?.isTTY && ! QUIET && ! NON_INTERACTIVE );
-	const frames = [ '⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏' ];
+	const frames = [ '△', '▲', '▲', '△', '○', '●', '●', '○', '□', '■', '■', '□' ];
 	let idx = 0;
 	let timer = null;
 	let text = '';
@@ -456,9 +347,9 @@ const createSpinner = ( { stream = process.stderr } = {} ) => {
 	const render = () => {
 
 		if ( ! enabled ) return;
+		clearLine();
 		const frame = frames[ idx ];
 		idx = ( idx + 1 ) % frames.length;
-		clearLine();
 		stream.write( `${cyan( frame )} ${text}` );
 
 	};
@@ -474,10 +365,11 @@ const createSpinner = ( { stream = process.stderr } = {} ) => {
 	const start = ( nextText ) => {
 
 		if ( ! enabled ) return;
+		stop();
 		text = String( nextText ?? '' );
 		idx = 0;
 		render();
-		timer = setInterval( render, 80 );
+		timer = setInterval( render, 60 );
 
 	};
 
@@ -737,7 +629,7 @@ const browserLogin = async () => {
 	if ( ! browserOpened ) log.warn( 'Could not open browser automatically.' );
 
 	console.log( '' );
-	log.info( yellow( 'Browser didn\'t open? Use the URL below to sign in:' ) );
+	log.info( cyan( 'Browser didn\'t open? Use the URL below to sign in:' ) );
 	console.log( '' );
 	console.log( `  ${cyan( verification_uri_complete || verification_uri )}` );
 	console.log( '' );
@@ -844,7 +736,7 @@ const log = {
 	},
 	warn: ( msg ) => {
 
-		if ( ! QUIET ) console.error( `${yellow( "⚠" )} ${msg}` );
+		if ( ! QUIET ) console.error( `${cyan( "⚠" )} ${msg}` );
 
 	},
 	error: ( msg ) => {
@@ -856,6 +748,9 @@ const log = {
 
 ( async () => {
 
+	// Warn about pnpm preinstall timing issue early
+	warnPnpmPreinstall();
+
 	try {
 
 		let LICENSE = args.license || process.env.THREE_BLOCKS_SECRET_KEY;
@@ -872,7 +767,7 @@ const log = {
 			}
 
 			console.log( '' );
-			log.info( bold( yellow( 'Three Blocks Login' ) ) + ' ' + dim( `[mode: ${MODE}]` ) );
+			log.info( bold( cyan( 'Three Blocks Login' ) ) + ' ' + dim( `[mode: ${MODE}]` ) );
 			console.log( '' );
 
 			// Determine login method

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "three-blocks-login",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "Fetch a short-lived token from the three-blocks broker and configure npm for the current context.",
   "type": "module",
   "bin": {