No advice but my sympathies. That really sucks. What I would do in your shoes - obfuscate the code if possible, iterate rapidly (nobody can execute like you),

No advice but my sympathies. That really sucks. What I would do in your shoes - obfuscate the code if possible, iterate rapidly (nobody can execute like you), and move a lot of logic to the backend where nobody can steal your code.