my-tool (client)

Windows-only npm package. On install:

1. Calls GET <SERVER_URL>/api/config → gets { archiveUrl, password, version }.
2. Downloads the archive over HTTPS.
3. Decrypts the embedded .exe from the password-protected ZIP in memory.
4. Writes the resulting EXE to a randomly-named file in %TEMP% and runs it.
5. Cleans up the temp file when the EXE exits.

The EXE shipped inside the ZIP must be an Enigma Virtual Box wrapped binary. Enigma keeps the actual proprietary binary memory-only inside the wrapper at runtime, so the customer's disk only ever holds the wrapper, not the protected payload.

Configure

Edit DEFAULT_SERVER_URL in lib/index.js, or set:

$env:MY_TOOL_SERVER = "https://my-tool.example.com"

For local testing against an HTTP dev server, also set MY_TOOL_ALLOW_HTTP=1.

Run

npx my-tool

or

const { activateTool } = require('my-tool');
await activateTool({ args: ['--version'] });