@coworker-jp/aidr 0.1.11 → 0.1.75

package/README.md

@@ -1,17 +1,63 @@
 # aidr
 
-CLI installer for [ai-scanner](https://github.com/coworker-jp/ai-scanner) hooks across 19+ AI coding agents.
+Hook installer CLI for [ai-scanner](https://github.com/coworker-jp/ai-scanner):
+wires the scanner into AI coding agents (Claude Code, Cursor, Windsurf, …) via
+their hook mechanisms and fetches the scanner binary.
 
 ## Quick start
 
+ai-scanner is protection you put **in the repository**: its hooks target
+cloud coding-agent environments (cloud Claude Code, CI, devcontainers) that
+the repository travels into. Your own PC is protected by coworker-sentinel
+(see below), not by these hooks.
+
 ```bash
-npx @coworker-jp/aidr install --agent claude --key ak_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+# Recommended: run inside the repository, then commit the generated config
+# (.claude/ etc.). The scanner binary self-bootstraps in cloud sessions.
+npx @coworker-jp/aidr install --agent claude --scope project --key ak_xxx...
+git add .claude && git commit -m "add ai-scanner hooks"
+
+# multiple agents, or auto-detect everything under $HOME:
+npx @coworker-jp/aidr install --agent claude,cursor --scope project --key ak_xxx...
+npx @coworker-jp/aidr install --all --key ak_xxx...
 ```
 
+Running `install` interactively on a machine with no cloud/CI/remote
+indicators (= your own PC) stops with a pointer to the coworker-sentinel
+installer; pass `--local` to proceed deliberately (see `--local` below).
+
+## coworker-sentinel (host EDR + DLP) is installed separately
+
+aidr does **not** install the coworker-sentinel daemon. Use the OS-native
+installer for your platform — all are available from the user portal's
+Download page:
+
+- **Windows**: run `coworker-sentinel-setup.exe` and paste your access key
+  when prompted. Uninstall via Add/Remove Programs.
+- **macOS**: open `CoworkerSentinel.dmg`, drag the app to Applications,
+  launch it, and enter your access key (one admin-password prompt).
+- **Linux**:
+  ```bash
+  sudo apt install ./coworker-sentinel.deb
+  sudo coworker-sentinel activate --key ak_xxx...
+  ```
+
+Endpoint-info snapshots are collected by the sentinel daemon itself every
+6 hours (Pro / Trial plans). On macOS the menu-bar app has a toggle for this;
+on Linux/Windows edit `/etc/aidr/sentinel-settings.json`
+(`%ProgramData%\coworker\sentinel-settings.json`).
+
+The old npx install paths are retired: `--scheduled` (cron/launchd
+endpoint-info) and `--with-sentinel` (daemon install) both exit with a
+migration message. `aidr install` / `aidr uninstall` still clean up leftovers
+that older aidr versions wrote (cron/launchd entries; the legacy npx-installed
+sentinel daemon on Linux). Deb-installed sentinels are never touched — their
+cleanup belongs to the package manager.
+
 ## Commands
 
 ```bash
-aidr install --agent <list|--all> --key <ak_...>
+aidr install --agent <list|standalone|--all> --key <ak_...>
              [--dry-run] [--force] [--binary-only]
              [--no-verify] [--skip-binary]
 aidr uninstall [--agent <list>]
@@ -21,25 +67,31 @@ aidr list-agents
 
 Options:
 
-- `--agent <list>`: comma-separated names (`claude,cursor`).
-- `--all`: install for every agent detected in `$HOME`.
+- `--agent <list>`: comma-separated agent names (`claude,cursor`), or `standalone` for a hook-less binary-only install into `~/.aidr/bin`, or `--all`.
 - `--key <ak_...>`: access key (format `ak_` + 43 urlsafe chars).
 - `--dry-run`: print planned writes, do not touch disk.
 - `--force`: overwrite existing files.
-- `--binary-only`: fetch only the scanner binary.
+- `--binary-only` / `--skip-binary`: only / never fetch the scanner binary.
 - `--no-verify`: skip the server-side access-key check.
-- `--skip-binary`: skip the scanner binary download.
+- `--local`: proceed on a personal PC. By default `aidr install` stops when it
+  detects an interactive terminal with no cloud/CI/remote indicators (that
+  machine should run coworker-sentinel instead) and prints the sentinel
+  installer link. Non-interactive environments (CI, cloud sandboxes,
+  agent-executed shells) are never gated. `AIDR_ALLOW_LOCAL_INSTALL=1` is the
+  env-var equivalent for scripted local installs.
+
+## Platforms
+
+| component | Linux | macOS | Windows |
+|---|---|---|---|
+| ai-scanner agent hooks (this package) | ✅ | ✅ | — |
+| coworker-sentinel (EDR + DLP) | `.deb` installer | DMG | `setup.exe` |
 
-## Supported agents
+## Supported agents (hooks)
 
 | name | status |
 |---|---|
-| claude | full |
-| cursor | full |
-| windsurf | full |
-| kiro | full |
-| gemini | full |
-| codex | full |
+| claude, cursor, windsurf, kiro, gemini, codex | full |
 | cline, roo, copilot, qwen, trae, amazonq, jetbrains, opencode, aider, amp, crush, antigravity, continue | stub (Phase 2) |
 
 ## Developing

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coworker-jp/aidr",
-  "version": "0.1.11",
+  "version": "0.1.75",
   "description": "AIDR setup CLI - installs ai-scanner hooks for 19+ AI coding agents",
   "type": "module",
   "bin": {

package/src/agents/standalone.mjs

@@ -12,9 +12,9 @@ export const meta = {
 };
 
 // Standalone mode has no hook scripts and no settings.json. The CLI's
-// shared binary-fetch step drops ai-scanner + opengrep into
-// ~/.aidr/bin/, and the scheduled installer wires up
-// systemd/launchd/cron to invoke the binary periodically.
+// shared binary-fetch step drops ai-scanner + opengrep into ~/.aidr/bin/.
+// (The coworker-sentinel daemon — installed via the OS-native installers —
+// self-downloads its own ai-scanner copy; aidr is not involved.)
 export async function install() {
   return { installed: [], backupPath: null, backupPaths: [] };
 }

package/src/binary-fetcher.mjs

@@ -13,11 +13,13 @@ export function detectPlatform() {
   const arch = process.arch;
   if (os === "linux" && arch === "x64") return "linux-x86_64";
   if (os === "linux" && arch === "arm64") return "linux-aarch64";
-  if (os === "darwin" && arch === "arm64") return "darwin-aarch64";
+  // Both macOS arches resolve to the SAME key on purpose. The object under
+  // `darwin-aarch64` is a universal (fat) Mach-O carrying an arm64 AND an
+  // x86_64 slice, so one download serves Apple Silicon and Intel alike. The key
+  // name is a wire contract with the verify Lambda's SCANNER_PLATFORMS — only
+  // its contents became universal, never its name.
+  if (os === "darwin" && (arch === "arm64" || arch === "x64")) return "darwin-aarch64";
   if (os === "win32" && arch === "x64") return "windows-x86_64";
-  if (os === "darwin" && arch === "x64") {
-    throw new Error("Intel Mac (darwin-x86_64) is not supported. Apple Silicon only.");
-  }
   throw new Error(`Unsupported platform: ${os}/${arch}`);
 }
 
@@ -156,57 +158,3 @@ export async function fetchOpengrep(destPath) {
 
   return { path: destPath, platform, sha256, verified: true };
 }
-
-/**
- * Download coworker-sentinel for the current platform into `destPath`.
- * Uses the presigned S3 URL from the verify response when available,
- * otherwise falls back to the licensed download endpoint.
- * Returns { path, platform, sha256, verified }.
- */
-export async function fetchSentinel(
-  destPath,
-  { accessKey, presignedUrl, dllPresignedUrl, env = "prod" } = {},
-) {
-  const platform = detectPlatform();
-
-  let binUrl;
-  let binAuthKey = accessKey;
-  if (presignedUrl) {
-    // Use presigned URL from verify response (no auth header needed)
-    binUrl = presignedUrl;
-    binAuthKey = undefined;
-  } else {
-    const base = downloadBase(env);
-    binUrl = `${base}/sentinel/${platform}`;
-  }
-
-  await fsp.mkdir(path.dirname(destPath), { recursive: true });
-  const buf = await fetchBuffer(binUrl, binAuthKey);
-  const sha256 = crypto.createHash("sha256").update(buf).digest("hex");
-
-  const tmp = `${destPath}.tmp-${process.pid}`;
-  await fsp.writeFile(tmp, buf);
-  await fsp.chmod(tmp, 0o755); // no-op on Windows; harmless
-  await fsp.rename(tmp, destPath);
-  await clearQuarantine(destPath);
-
-  // Windows also needs the sibling WinDivert.dll — a PE import the loader
-  // resolves before the exe's own code runs, so it can't be embedded (unlike
-  // WinDivert64.sys, which is embedded and self-extracts at first run).
-  if (platform === "windows-x86_64") {
-    const dllPath = path.join(path.dirname(destPath), "WinDivert.dll");
-    let dllUrl = dllPresignedUrl;
-    let dllAuthKey;
-    if (dllUrl) {
-      dllAuthKey = undefined;
-    } else {
-      const base = downloadBase(env);
-      dllUrl = `${base}/sentinel/${platform}/WinDivert.dll`;
-      dllAuthKey = accessKey;
-    }
-    const dllBuf = await fetchBuffer(dllUrl, dllAuthKey);
-    await fsp.writeFile(dllPath, dllBuf);
-  }
-
-  return { path: destPath, platform, sha256, verified: false };
-}