// offending code· 3 files flaggedpatterns: 12
--- install scripts ---
### postinstall
node scripts/postinstall-guard.cjs
### prepublishOnly
npm run build && npm run build:frontend
--- package/package.json (excerpt) ---
{
"name": "cli-jaw",
"version": "2.1.3",
"description": "Personal AI assistant powered by Antigravity, AI-E, Claude, Claude E, Codex, Codex App, Cursor, Gemini, Grok, OpenCode, and Copilot — Web, Terminal, Telegram, and Discord interfaces with 107 built-in skills",
"type": "module",
"keywords": [
"ai-assistant",
"cli",
"antigravity",
"claude",
"codex",
"cursor",
"gemini",
"grok",
"copilot",
"multi-agent",
"orchestration",
"telegram-bot",
"discord-bot",
"browser-automation",
"mcp"
],
"author": "CLI-JAW Contributors",
"license": "MIT",
"repository": {
"type": "git",
"url": "git+https://github.com/lidge-jun/cli-jaw.git"
},
"homepage": "https://github.com/lidge-jun/cli-jaw#readme",
"bugs": {
"url": "https://github.com/lidge-jun/cli-jaw/issues"
},
"engines": {
"node": ">=22.4.0"
},
"bin": {
"cli-jaw": "dist/bin/cli-jaw.js",
"jaw": "dist/bin/cli-jaw.js"
},
"files": [
"dist/",
"public/",
"scripts/",
"package.json"
],
"scripts": {
"dev": "tsx --env-file=.env server.ts",
"ensure:native": "node scripts/ensure-native-modules.cjs",
"rebuild:native": "npm rebuild better-sqlite3",
"postinstall": "node scripts/postinstall-guard.cjs",
"clean:dist": "node -e \"const fs=require('fs');fs.rmSync('dist',{recursive:true,force:true});\"",
"build:claude-exec": "cargo build --release --manifest-path native/jaw-claude-i/Cargo.toml",
"te
--- package/scripts/claim-audit.mjs (excerpt) ---
// @ts-check
/**
* G10 mirror — cli-jaw claim audit.
*
* cli-jaw is a multi-CLI agent runtime that talks to local Chrome via the
* `agbrowse` skill. cli-jaw itself does NOT operate hosted/cloud browsers,
* does NOT expose remote CDP, does NOT bypass CAPTCHA/Cloudflare/stealth,
* and does NOT publish benchmark leaderboard scores.
*
* This script enforces those positioning boundaries on cli-jaw's own claim
* surfaces (READMEs, capability truth table). Wired through
* `scripts/release-gates.mjs` as `gate:no-cloud-claims` and mirrors
* `agbrowse/web-ai/claim-audit.mjs`.
*/
import fs from 'node:fs';
import path from 'node:path';
const TARGETS = [
{ file: 'README.md', sectionMode: 'ready' },
{ file: 'README.ko.md', sectionMode: 'ready' },
{ file: 'README.ja.md', sectionMode: 'ready' },
{ file: 'README.zh-CN.md', sectionMode: 'ready' },
{ file: 'structure/CAPABILITY_TRUTH_TABLE.md', sectionMode: 'ready' },
];
const FORBIDDEN = [
{ term: 'hosted browser', re: /hosted\s+browser/i, why: 'cli-jaw delegates to local Chrome via agbrowse only' },
{ term: 'cloud browser', re: /cloud\s+browser/i, why: 'no managed/cloud browser runtime' },
{ term: 'cloud runtime', re: /cloud\s+runtime/i, why: 'no managed/cloud runtime' },
{ term: 'cloud agent', re: /cloud\s+agent/i, why: 'no hosted agent service' },
{ term: 'remote CDP', re: /remote[-\s]+cdp/i, why: 'remote CDP is deferred upstream (agbrowse docs/EXTERNAL_CDP.md)' },
{ term: 'external
--- package/scripts/collect-fresh-install-evidence.sh (excerpt) ---
#!/usr/bin/env bash
# Collect fresh-machine install evidence for supported CLI-JAW targets.
set -uo pipefail
TARGET="auto"
SKIP_INSTALL=0
SKIP_DOCTOR=0
OUT_DIR=""
INSTALL_SCRIPT="${CLI_JAW_INSTALL_SCRIPT:-}"
VERIFIER_SCRIPT="${CLI_JAW_VERIFIER_SCRIPT:-}"
INSTALL_REF="${CLI_JAW_INSTALL_REF:-master}"
RAW_BASE="${CLI_JAW_RAW_BASE:-https://raw.githubusercontent.com/lidge-jun/cli-jaw/${INSTALL_REF}}"
FAILURES=0
usage() {
cat <<'USAGE'
Usage: collect-fresh-install-evidence.sh [options]
Options:
--target macos|wsl|linux|auto Target to verify. Default: auto.
--skip-install Do not run the one-click installer; only collect and verify.
--skip-doctor Pass --skip-doctor to verify-fresh-install.sh.
--out-dir DIR Evidence output directory.
--install-script FILE Local installer path override for the selected target.
--verifier-script FILE Local verifier path override.
--install-ref REF Git ref for raw.githubusercontent.com installer fetches.
--raw-base URL Override raw script base URL.
-h, --help Show this help.
Environment:
CLI_JAW_INSTALL_SCRIPT Default local installer path when --install-script is omitted.
CLI_JAW_VERIFIER_SCRIPT Default local verifier path when --verifier-script is omitted.
CLI_JAW_INSTALL_REF Default git ref when --install-ref is omitted.
CLI_JAW_RAW_BASE Default raw base