bug(cli): squad.ps1 blocked by PowerShell execution policy on Windows #758

Bug Report

Command: squad nap (affects all squad CLI commands on Windows)

Error:

File C:\Users\diberry\AppData\Roaming\npm\squad.ps1 cannot be loaded.
The file C:\Users\diberry\AppData\Roaming\npm\squad.ps1 is not digitally signed.
You cannot run this script on the current system.
    + CategoryInfo          : SecurityError: (:) [], PSSecurityException
    + FullyQualifiedErrorId : UnauthorizedAccess

Environment:

• OS: Windows 11
• Shell: PowerShell (default execution policy: Restricted or AllSigned)
• Node: v22.14.0
• Install: npm install -g @bradygaster/squad-cli

Root Cause

When npm installs a global package on Windows, it creates a .ps1 shim script alongside the .cmd shim in %APPDATA%\npm\. PowerShell prefers .ps1 over .cmd, so it tries to run squad.ps1 — which is unsigned and blocked by default execution policy.

This affects any user who hasn't explicitly relaxed their PowerShell execution policy (Set-ExecutionPolicy RemoteSigned).

Workarounds (for users right now)

1. Use cmd.exe instead of PowerShell — the .cmd shim works fine
2. Relax execution policy: Set-ExecutionPolicy -Scope CurrentUser RemoteSigned
3. Delete the .ps1 shim: Remove-Item \C:\Users\diberry\AppData\Roaming\npm\squad.ps1 — PowerShell falls back to .cmd
4. Use npx: npx @bradygaster/squad-cli nap bypasses the shim entirely

Possible Fixes

1. Post-install script that removes the .ps1 shim on Windows (npm creates it automatically, can't prevent it)
2. Document the workaround in README/installation guide
3. Sign the .ps1 script with a code signing certificate (overkill for a CLI tool)
4. Recommend npx usage in docs as the primary invocation method on Windows

Impact

• Severity: Blocks ALL squad CLI usage on default Windows PowerShell
• Scope: Any Windows user with default execution policy
• First-run experience: Completely broken — user sees a security error on their first command

Reproduction

1. Fresh Windows machine with default PowerShell execution policy
2. npm install -g @bradygaster/squad-cli
3. Open PowerShell
4. Run squad nap (or any squad command)
5. Observe: PSSecurityException: UnauthorizedAccess