Avoid npm install lifecycle for Clawdie installer

---
Build: pass | Tests: pass — 2451 passed (182 files)

.npmrc

@@ -0,0 +1 @@
+legacy-peer-deps=true

README.md

@@ -124,13 +124,13 @@ Agent response
 - `setup/service.ts` — generates `run-*.sh` wrappers at install time (not tracked in git)
 - `groups/*/AGENTS.md` — per-group memory
 
-A `justfile` provides discoverable command shortcuts. Run `just` (or `just --list`) to see all recipes. Prefer `just` for interactive work; `npm run <name>` remains for CI and scripting.
+A `justfile` provides discoverable command shortcuts. Run `just` (or `just --list`) to see all recipes. Prefer `just` for interactive work; `npm run <name>` remains for CI and scripting. The full installer is intentionally exposed as `just install` / `npm run install:clawdie` instead of the npm lifecycle name `install`.
 
 Common mappings:
 
 ```
-just install              # npm run install
-just install-from-db      # npm run install -- --from db
+just install              # npm run install:clawdie
+just install-from-db      # npm run install:clawdie -- --from db
 just setup-db             # npm run setup -- --step db
 just setup-cms            # npm run setup -- --step cms
 ```

docs/public/architecture/deployment-models.md

@@ -87,8 +87,7 @@ Everything in this repository is shared between both models:
 | Ansible playbooks | `infra/ansible/`      |
 
 The ISO build lives in a separate Clawdie-ISO repo and calls
-`just install` (or `npm run install`) after base OS install — the same entry point used
-in Model 1.
+`just install` after base OS install — the same entry point used in Model 1.
 
 ---
 

docs/public/install/install.md

@@ -3,7 +3,7 @@ title: Install Orchestrator
 description: Single-command install flow for Clawdie.
 ---
 
-**Command:** `just install` (or `npm run install`)
+**Command:** `just install` (or `npm run install:clawdie`)
 
 ## Quick start
 

docs/public/sl/install/install.md

@@ -3,7 +3,7 @@ title: Namestitev
 description: Tok namestitve z enim ukazom za Clawdie.
 ---
 
-**Ukaz:** `just install` (ali `npm run install`)
+**Ukaz:** `just install` (ali `npm run install:clawdie`)
 
 ## Hitri začetek
 

package.json

@@ -29,7 +29,7 @@
     "sync-readme-version": "node scripts/update-readme-version.mjs",
     "check-readme-version": "node scripts/update-readme-version.mjs --check",
     "publish-tenant-site": "tsx setup/publish-tenant-site.ts",
-    "install": "tsx setup/install.ts",
+    "install:clawdie": "tsx setup/install.ts",
     "verify-agent-jails": "sudo npx tsx setup/verify-agent-jails.ts",
     "install-hooks": "git config core.hooksPath hooks",
     "prepare": "git config core.hooksPath hooks 2>/dev/null || true",

setup/agent-jails.ts

@@ -5,7 +5,7 @@
  * Each gets pi + aider installed, scoped secrets, and nullfs mounts for
  * its domain. PF rules restrict cross-jail network access.
  *
- * Run: just setup-agent-jails  (or npm run install -- --from agent-jails)
+ * Run: just setup-agent-jails  (or just install -- --from agent-jails)
  */
 import { SERVICE_NAME } from '../src/platform-identity.js';
 import fs from 'fs';

setup/install.ts

@@ -6,10 +6,10 @@
  * LLM key — reports provider status at the end and continues.
  *
  * Usage:
- *   npm run install
- *   npm run install -- --from pf          # resume from a step
- *   npm run install -- --no-snapshots     # skip ZFS checkpoints
- *   npm run install -- --dry-run          # print plan, run nothing
+ *   just install
+ *   just install -- --from pf          # resume from a step
+ *   just install -- --no-snapshots     # skip ZFS checkpoints
+ *   just install -- --dry-run          # print plan, run nothing
  */
 
 import { execFileSync, spawnSync } from 'child_process';
@@ -558,7 +558,7 @@ function printSummary(results: StepResult[]): void {
     );
     console.log(`\n  Resume from last failed step:`);
     console.log(
-      `    ${COLS.skipped}npm run install -- --from ${failed[0].name}${COLS.reset}`,
+      `    ${COLS.skipped}just install -- --from ${failed[0].name}${COLS.reset}`,
     );
   }
   console.log('─'.repeat(52));