diff --git a/install.sh b/install.sh
index a2d9a03..b71d6d8 100755
--- a/install.sh
+++ b/install.sh
@@ -3,12 +3,15 @@ set -euo pipefail
 cd "$(dirname "$0")"
 
 # Auto-install auth-rt if not found
+_AUTH_RT_SRC="$HOME/.local/share/auth-runtime"
 if ! command -v auth-rt &>/dev/null && [ ! -x "$HOME/.local/bin/auth-rt" ]; then
   echo "auth-rt not found, installing..."
-  _tmp="$(mktemp -d)"
-  git clone --depth 1 http://192.168.0.108:3030/agent-skills/auth-runtime.git "$_tmp/auth-runtime"
-  bash "$_tmp/auth-runtime/install.sh"
-  rm -rf "$_tmp"
+  if [ -d "$_AUTH_RT_SRC/.git" ]; then
+    git -C "$_AUTH_RT_SRC" pull --ff-only
+  else
+    git clone --depth 1 http://192.168.0.108:3030/agent-skills/auth-runtime.git "$_AUTH_RT_SRC"
+  fi
+  bash "$_AUTH_RT_SRC/install.sh"
 fi
 
 echo "Building 1688-product-master..."