requirements.txt now references the upstream GitHub repo pinned to commit c30dc37 (the last upstream commit before our fix), so the source is portable and not machine-specific. install.sh applies cariad-hybrid-auth-fix.patch to the installed site-packages after pip runs, using `patch -N` so it is idempotent on repeat installs. The patch file is checked in to the repo so install.sh can always find it. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>