agenshield 0.11.3 → 0.11.4-beta.537

package/bin/agenshield

@@ -90,6 +90,43 @@ find_installed() {
   return 1
 }
 
+# ── Detect leftover AgenShield artifacts when no runnable binary remains ─────
+# A half-finished prior uninstall (or a manually-deleted binary) leaves system
+# state behind that deleting the binary alone does NOT remove: a dangling
+# /usr/local/bin/agenshield symlink, the node-ca-trust LaunchAgent, a stale
+# NODE_EXTRA_CA_CERTS in the launchd session, ~/.agenshield, the .app,
+# LaunchDaemons, … `uninstall` uses this to decide whether to bootstrap the
+# real uninstaller vs. report "nothing to do". `if`-guards (not `&&` chains)
+# keep this safe under `set -e`.
+agenshield_residue_present() {
+  if [ -L /usr/local/bin/agenshield ] || [ -e /usr/local/bin/agenshield ]; then return 0; fi
+  if [ -d "$HOME/.agenshield" ]; then return 0; fi
+  if [ -d /Library/AgenShield ]; then return 0; fi
+  if [ -d /opt/agenshield ]; then return 0; fi
+  if [ -d /Applications/AgenShield.app ]; then return 0; fi
+  if [ -f /Library/LaunchDaemons/com.frontegg.AgenShield.daemon.plist ]; then return 0; fi
+  if [ -f /Library/LaunchDaemons/com.frontegg.AgenShield.privilege-helper.plist ]; then return 0; fi
+  if [ -f "$HOME/Library/LaunchAgents/com.frontegg.AgenShield.node-ca-trust.plist" ]; then return 0; fi
+  if [ -f "$HOME/Library/LaunchAgents/com.frontegg.AgenShield.menubar.plist" ]; then return 0; fi
+  if command -v launchctl >/dev/null 2>&1; then
+    _ca="$(launchctl getenv NODE_EXTRA_CA_CERTS 2>/dev/null || true)"
+    if [ -n "$_ca" ]; then return 0; fi
+  fi
+  return 1
+}
+
+# Manual remediation printed when we cannot bootstrap the real uninstaller.
+print_manual_cleanup_hint() {
+  echo "  Remove the leftover artifacts manually:" >&2
+  echo "    sudo rm -f /usr/local/bin/agenshield" >&2
+  echo "    sudo rm -rf /Library/AgenShield /opt/agenshield /Applications/AgenShield.app" >&2
+  echo "    rm -rf \"\$HOME/.agenshield\"" >&2
+  echo "    rm -f \"\$HOME/Library/LaunchAgents/com.frontegg.AgenShield.\"*.plist" >&2
+  echo "    launchctl unsetenv NODE_EXTRA_CA_CERTS; unset NODE_EXTRA_CA_CERTS" >&2
+  echo "  Then fully quit & reopen your terminal and GUI apps (Cursor, Claude Desktop, VS Code)" >&2
+  echo "  so they drop the stale NODE_EXTRA_CA_CERTS value." >&2
+}
+
 # ── `install` → run the full installer with the user's args ─────────────────
 # install.sh handles the macOS .pkg / Linux tarball download + checksum verify
 # + enrollment (--token/--cloud-url/--org) + service setup.
@@ -110,17 +147,43 @@ if [ "${1:-}" = "install" ]; then
   exec env AGENSHIELD_VERSION="$WRAPPER_VERSION" sh "$INSTALLER" "$@"
 fi
 
-# ── `uninstall` → delegate if installed; NEVER bootstrap-install ─────────────
-# `npx agenshield uninstall` must never reinstall AgenShield just to remove it.
-# The generic path below bootstraps (downloads + runs install.sh) whenever no
-# binary is found — so a SECOND `uninstall` after the first one removed the
-# binary used to re-download and launch the INSTALLER. If the binary is already
-# gone, there is nothing to uninstall: report and exit cleanly instead.
+# ── `uninstall` → delegate if installed, else bootstrap+run when residue remains ─
+# `npx agenshield uninstall` must remove AgenShield even after the binary itself
+# is gone but system residue remains. Three cases:
+#   1. A runnable binary exists → delegate to it (the real, thorough uninstaller).
+#   2. No binary, but residue   → bootstrap the signed binary from GitHub Releases
+#      detected                   (--skip-services) and run the REAL uninstaller —
+#                                 the only thing that removes the keychain CA,
+#                                 sandbox users, ACLs, the node-ca-trust LaunchAgent
+#                                 + its NODE_EXTRA_CA_CERTS env, LaunchDaemons, etc.
+#                                 If the bootstrap download fails (offline / no
+#                                 published release), print manual cleanup steps.
+#   3. No binary, no residue    → genuinely nothing to do; report and exit 0.
+# Bootstrapping ONLY when residue is present avoids the re-download churn the old
+# code guarded against: a successful uninstall removes the residue, so the next
+# run lands in case 3 and exits cleanly.
 if [ "${1:-}" = "uninstall" ]; then
   BIN="$(find_installed || true)"
   if [ -n "$BIN" ]; then
     exec "$BIN" "$@"
   fi
+  if agenshield_residue_present; then
+    if [ ! -f "$INSTALLER" ]; then
+      echo "agenshield: leftover AgenShield artifacts detected, but the bundled installer is missing." >&2
+      print_manual_cleanup_hint
+      exit 1
+    fi
+    echo "agenshield: binary missing but leftover artifacts detected — bootstrapping${WRAPPER_VERSION:+ v$WRAPPER_VERSION} to run a full uninstall…" >&2
+    if AGENSHIELD_VERSION="$WRAPPER_VERSION" sh "$INSTALLER" --skip-services >&2; then
+      BIN="$(find_installed || true)"
+      if [ -n "$BIN" ]; then
+        exec "$BIN" "$@"
+      fi
+    fi
+    echo "agenshield: could not bootstrap the uninstaller (download or install failed)." >&2
+    print_manual_cleanup_hint
+    exit 1
+  fi
   echo "agenshield: not installed — nothing to uninstall." >&2
   exit 0
 fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agenshield",
-  "version": "0.11.3",
+  "version": "0.11.4-beta.537",
   "description": "AgenShield — AI Agent Security Platform",
   "bin": {
     "agenshield": "bin/agenshield"