@coworker-jp/aidr 0.1.11 → 0.1.75

package/src/invoker-resolve.mjs

@@ -1,63 +0,0 @@
-// Best-effort invoker username resolution at install time.
-//
-// `aidr install --scheduled` / `--with-sentinel` writes the unix username
-// into `/etc/aidr/aidr.env` as `AI_SCANNER_INVOKER_USER`. The Rust daemon
-// reads it back to resolve git email / Apple ID / $HOME of the actual
-// installer (root daemons have no useful identity of their own).
-//
-// In the auto-sudo path the CLI re-execs itself via `sudo -E`, which sets
-// SUDO_USER. But several real-world contexts arrive here as bare root
-// without SUDO_USER:
-//   - `ssh root@host` then `npx ... install --scheduled` (no sudo prefix)
-//   - container / CI where the user is already root
-//   - sudo policy that strips SUDO_USER
-//
-// We walk a fallback chain so the resulting daemon snapshot reports the
-// real user instead of `actor_id=unknown`. Each step is best-effort and
-// never throws — we return `null` when no signal is available, which is
-// the honest outcome for genuinely identity-less contexts (CI runners).
-
-import { execSync } from "node:child_process";
-
-function tryExec(cmd) {
-  try {
-    return execSync(cmd, { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
-  } catch {
-    return "";
-  }
-}
-
-function isUsable(name) {
-  return name && name !== "root";
-}
-
-export function resolveInvokerUser() {
-  if (process.env.SUDO_USER) return process.env.SUDO_USER;
-
-  // `who am i` reads utmp, so it returns the actual login user even after
-  // `sudo -i` / `su -`. Empty under non-tty / no utmp.
-  const whoUser = tryExec("who am i").split(/\s+/)[0];
-  if (isUsable(whoUser)) return whoUser;
-
-  // POSIX `logname` gives controlling-tty owner. Slightly different code
-  // path from `who am i` — kept as a separate fallback because they fail
-  // independently on minimal images.
-  const logname = tryExec("logname");
-  if (isUsable(logname)) return logname;
-
-  // systemd Linux: `loginctl list-sessions` columns are: SESSION UID USER ...
-  const loginctl = tryExec("loginctl list-sessions --no-legend");
-  for (const line of loginctl.split("\n")) {
-    const fields = line.trim().split(/\s+/);
-    if (fields.length >= 3 && isUsable(fields[2])) return fields[2];
-  }
-
-  // Env fallbacks (root-filtered) so a user-shell install without sudo at
-  // all (rare for --scheduled, possible for plain --agent without root)
-  // still captures the obvious answer.
-  for (const env of ["LOGNAME", "USER"]) {
-    if (isUsable(process.env[env])) return process.env[env];
-  }
-
-  return null;
-}