examedix-reach 0.1.0 → 0.1.1

package/DISCLOSURE

@@ -17,8 +17,10 @@ Reach includes security controls including:
 - no inbound workstation listener;
 - local filesystem boundaries;
 - blocking of credential stores, private keys and common secret files;
-- Power Mode disabled by default for ordinary users;
+- Power Mode disabled by default unless explicitly authorized in a local Windows consent dialog;
 - audit metadata with sensitive values redacted;
 - Windows DPAPI protection for the local device credential.
 
 Unauthorized access, credential theft, covert surveillance, malware deployment, destructive misuse, or bypassing security controls is prohibited by the Reach Terms of Service.
+
+Explicit local consent is collected before pairing/agent startup, stored on the computer, and may be changed with the power-mode command. A missing or inconsistent consent record fails closed. Power Mode runs with the permissions of the logged-in Windows user and is not a security sandbox.

package/README.md

@@ -1,18 +1,30 @@
 # ExamediX Reach
 
-ExamediX Reach securely connects ChatGPT to Windows computers you own or are authorized to administer.
+ExamediX Reach connects ChatGPT to Windows computers you own or are authorized to administer.
 
 ## Quick start
 
-Requirements: Windows 10/11 and Node.js 20 or newer.
+Requires Windows 10/11 and Node.js 20 or newer.
 
 ```powershell
-npx examedix-reach@latest remote
+npx --yes examedix-reach@latest remote
 ```
 
-On first run Reach prints a pairing code and opens the Reach account page. Sign in or create an account, enter the code, and keep the process running while you want the computer reachable from ChatGPT.
+On the first run, Reach asks for **explicit local permission** to enable Power Mode, **before** starting the agent and pairing the computer. **No** is selected by default. Choose **No** for restricted operation, or **Yes** if you knowingly want ChatGPT to run PowerShell and Windows programs with your Windows user permissions. These commands may change or delete files, install software and use network services. Power Mode is not a sandbox.
 
-Useful commands:
+Reach then displays a pairing code and opens the account page. Sign in or create an account, pair your computer, and keep the agent process running while you need access through ChatGPT.
+
+## Change Power Mode permission
+
+```powershell
+npx --yes examedix-reach@latest power-mode
+```
+
+This shows the local consent dialog again. After changing permission, **stop and restart the running Reach agent**.
+
+The choice is stored locally in `%LOCALAPPDATA%\ExamediX\ReachData` and is reused on future starts when its consent record and agent configuration agree. A missing or inconsistent record never silently enables Power Mode.
+
+Additional commands:
 
 ```powershell
 npx examedix-reach@latest setup
@@ -20,7 +32,7 @@ npx examedix-reach@latest doctor
 npx examedix-reach@latest --version
 ```
 
-Reach makes an outbound TLS connection only. It does not require an inbound Windows port.
+Reach uses an outbound TLS connection; no inbound Windows port is required.
 
 Security and privacy: https://examedix.ch/reach/security  
-Support: https://examedix.ch/reach/support
+Support: https://examedix.ch/reach/support

package/bin/reach.js

@@ -2,44 +2,53 @@
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { spawn } from "node:child_process";
+import { spawn, spawnSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
+import readline from "node:readline/promises";
 
-const VERSION="0.1.0";
-const here=path.dirname(fileURLToPath(import.meta.url));
-const agent=path.resolve(here,"..","dist","agent.js");
-const command=(process.argv[2]||"remote").toLowerCase();
-const root=process.env.REACH_ROOT || (
-  process.platform==="win32" && process.env.LOCALAPPDATA
-    ? path.join(process.env.LOCALAPPDATA,"ExamediX","ReachData")
-    : path.join(os.homedir(),".examedix-reach")
+// Keep this version in sync with package.json before publishing.
+const VERSION = "0.1.1";
+const here = path.dirname(fileURLToPath(import.meta.url));
+const agent = path.resolve(here, "..", "dist", "agent.js");
+const command = (process.argv[2] || "remote").toLowerCase();
+const root = process.env.REACH_ROOT || (
+  process.platform === "win32" && process.env.LOCALAPPDATA
+    ? path.join(process.env.LOCALAPPDATA, "ExamediX", "ReachData")
+    : path.join(os.homedir(), ".examedix-reach")
 );
+const configFile = path.join(root, "config.json");
+const consentFile = path.join(root, "power-mode-consent.json");
 
-function openBrowser(url){
-  try{
-    if(process.platform==="win32"){
-      const p=spawn("cmd.exe",["/d","/c","start","",url],{detached:true,stdio:"ignore",windowsHide:true});
+function openBrowser(url) {
+  try {
+    if (process.platform === "win32") {
+      const p = spawn("cmd.exe", ["/d", "/c", "start", "", url], {
+        detached: true, stdio: "ignore", windowsHide: true
+      });
+      p.unref();
+    } else if (process.platform === "darwin") {
+      const p = spawn("open", [url], { detached: true, stdio: "ignore" });
       p.unref();
-    } else if(process.platform==="darwin"){
-      const p=spawn("open",[url],{detached:true,stdio:"ignore"}); p.unref();
     } else {
-      const p=spawn("xdg-open",[url],{detached:true,stdio:"ignore"}); p.unref();
+      const p = spawn("xdg-open", [url], { detached: true, stdio: "ignore" });
+      p.unref();
     }
-  }catch{}
+  } catch {}
 }
 
-function printHelp(){
+function printHelp() {
   console.log(`ExamediX Reach ${VERSION}
 
 Usage:
-  examedix-reach remote      Connect this computer to Reach (default)
-  examedix-reach setup       Create/show a pairing code, then exit
-  examedix-reach doctor      Check local prerequisites and Reach service
-  examedix-reach --version   Show version
+  examedix-reach remote       Connect this computer to Reach (default)
+  examedix-reach setup        Create/show a pairing code, then exit
+  examedix-reach power-mode   Review or change local Power Mode permission
+  examedix-reach doctor       Check local prerequisites and Reach service
+  examedix-reach --version    Show version
 
 Examples:
   npx examedix-reach@latest remote
-  npx examedix-reach@latest setup
+  npx examedix-reach@latest power-mode
 
 Local data:
   ${root}
@@ -49,70 +58,202 @@ Reach:
 `);
 }
 
-async function doctor(){
-  const result={};
-  result.node=process.version;
-  result.platform=`${process.platform} ${os.release()}`;
-  result.root=root;
-  result.deviceFile=fs.existsSync(path.join(root,"device.json"));
-  result.agentFile=fs.existsSync(agent);
-  try{
-    const r=await fetch("https://examedix.ch/reach/health",{signal:AbortSignal.timeout(10000)});
-    result.service=r.ok?"online":`http-${r.status}`;
-  }catch(e){result.service="unreachable"; result.error=e.message;}
-  console.log(JSON.stringify(result,null,2));
-  process.exit(result.agentFile&&result.service==="online"?0:1);
+async function doctor() {
+  const result = {};
+  result.node = process.version;
+  result.platform = `${process.platform} ${os.release()}`;
+  result.root = root;
+  result.deviceFile = fs.existsSync(path.join(root, "device.json"));
+  result.agentFile = fs.existsSync(agent);
+  try {
+    const r = await fetch("https://examedix.ch/reach/health", {
+      signal: AbortSignal.timeout(10000)
+    });
+    result.service = r.ok ? "online" : `http-${r.status}`;
+  } catch (e) {
+    result.service = "unreachable";
+    result.error = e.message;
+  }
+  console.log(JSON.stringify(result, null, 2));
+  process.exit(result.agentFile && result.service === "online" ? 0 : 1);
+}
+
+function windowsOnly() {
+  if (process.platform !== "win32") {
+    throw new Error("ExamediX Reach currently supports Windows only.");
+  }
+}
+
+function readObject(file) {
+  if (!fs.existsSync(file)) return {};
+  const obj = JSON.parse(fs.readFileSync(file, "utf8"));
+  if (!obj || typeof obj !== "object" || Array.isArray(obj)) {
+    throw new Error(`Invalid JSON object in ${file}; refusing to overwrite it.`);
+  }
+  return obj;
+}
+
+// Atomic replace to avoid a truncated configuration on interrupted writes.
+function atomicWriteJson(file, data) {
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  const tmp = `${file}.${process.pid}.${Date.now()}.tmp`;
+  try {
+    fs.writeFileSync(tmp, `${JSON.stringify(data, null, 2)}\n`, {
+      encoding: "utf8", flag: "wx", mode: 0o600
+    });
+    fs.renameSync(tmp, file);
+  } catch (err) {
+    try { fs.unlinkSync(tmp); } catch {}
+    throw err;
+  }
+}
+
+function readPriorConsent() {
+  const record = readObject(consentFile);
+  return typeof record.enabled === "boolean" ? record.enabled : null;
+}
+
+function setPowerMode(enabled, recordConsent = true) {
+  // Preserve all other agent settings rather than replacing config.json.
+  const cfg = readObject(configFile);
+  cfg.allowArbitraryExecution = enabled;
+  atomicWriteJson(configFile, cfg);
+  if (recordConsent) {
+    atomicWriteJson(consentFile, {
+      enabled,
+      recordedAt: new Date().toISOString(),
+      source: "examedix-reach-cli-explicit-local-consent"
+    });
+  }
+}
+
+// Exit code 10 means the person clicked Yes; 20 means No.
+// Other exit statuses mean the Windows dialog could not be shown.
+function askWindowsDialog() {
+  const script = String.raw`
+Add-Type -AssemblyName System.Windows.Forms
+$body = 'Power Mode lets ChatGPT, through ExamediX Reach, run Windows programs and PowerShell commands using your Windows account permissions.' + [Environment]::NewLine + [Environment]::NewLine + 'Commands may change or delete files, install software, and access network services.' + [Environment]::NewLine + [Environment]::NewLine + 'Enable Power Mode on this computer?' + [Environment]::NewLine + [Environment]::NewLine + 'Choose No for the safer restricted mode. You can change your choice later.'
+$result = [System.Windows.Forms.MessageBox]::Show($body, 'ExamediX Reach - Power Mode', [System.Windows.Forms.MessageBoxButtons]::YesNo, [System.Windows.Forms.MessageBoxIcon]::Warning, [System.Windows.Forms.MessageBoxDefaultButton]::Button2)
+if ($result -eq [System.Windows.Forms.DialogResult]::Yes) { exit 10 }
+if ($result -eq [System.Windows.Forms.DialogResult]::No) { exit 20 }
+exit 1
+`;
+  const run = spawnSync("powershell.exe", [
+    "-NoProfile", "-STA", "-NonInteractive", "-Command", script
+  ], { encoding: "utf8", windowsHide: true, timeout: 300000 });
+  if (run.status === 10) return true;
+  if (run.status === 20) return false;
+  if (run.error) console.error(`Windows consent dialog unavailable: ${run.error.message}`);
+  if (run.stderr && run.stderr.trim()) console.error(run.stderr.trim());
+  return null;
+}
+
+async function askTerminalFallback() {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) return null;
+  console.log("\nExamediX Reach - Power Mode");
+  console.log("Enabling Power Mode allows ChatGPT to run programs and PowerShell commands with your Windows permissions.");
+  console.log("Commands may change/delete files or use the network. Default: No.");
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    const answer = await rl.question("Enable Power Mode? [y/N]: ");
+    return /^y(es)?$/i.test(answer.trim());
+  } finally {
+    rl.close();
+  }
+}
+
+async function askConsent() {
+  const choice = askWindowsDialog();
+  if (choice !== null) return choice;
+  return askTerminalFallback();
 }
 
-function runAgent(args,openOnPair=false){
-  if(process.platform!=="win32"){
-    console.error("ExamediX Reach 0.1.0 currently supports Windows only.");
-    process.exit(1);
+async function ensurePowerModeChoice(force = false) {
+  windowsOnly();
+  fs.mkdirSync(root, { recursive: true });
+  const prior = readPriorConsent();
+  const cfg = readObject(configFile);
+
+  if (!force && prior !== null && cfg.allowArbitraryExecution === prior) {
+    console.log(`ExamediX Reach Power Mode: ${prior ? "ON" : "OFF"} (saved choice)`);
+    return;
+  }
+
+  // Fail closed whenever we lack a valid, matching record of explicit consent.
+  if (prior === null || cfg.allowArbitraryExecution !== prior) {
+    setPowerMode(false, false);
   }
-  fs.mkdirSync(root,{recursive:true});
-  const child=spawn(process.execPath,[agent,"--root",root,...args],{
-    stdio:["inherit","pipe","pipe"],
-    windowsHide:false
+
+  const selected = await askConsent();
+  if (selected === null) {
+    setPowerMode(false, false);
+    console.log("Power Mode OFF. Consent dialog unavailable; run in an interactive Windows session to select Power Mode.");
+    return;
+  }
+
+  setPowerMode(selected, true);
+  console.log(`ExamediX Reach Power Mode: ${selected ? "ON (authorized locally)" : "OFF (restricted mode)"}`);
+}
+
+function runAgent(args, openOnPair = false) {
+  windowsOnly();
+  fs.mkdirSync(root, { recursive: true });
+  const child = spawn(process.execPath, [agent, "--root", root, ...args], {
+    stdio: ["inherit", "pipe", "pipe"],
+    windowsHide: false
   });
-  let opened=false;
-  child.stdout.on("data",buf=>{
-    const text=buf.toString();
+  let opened = false;
+  child.stdout.on("data", buf => {
+    const text = buf.toString();
     process.stdout.write(text);
-    if(openOnPair&&!opened&&text.includes("PAIRING CODE:")){
-      opened=true;
+    if (openOnPair && !opened && text.includes("PAIRING CODE:")) {
+      opened = true;
       console.log("\nOpening ExamediX Reach account/pairing page...");
       openBrowser("https://examedix.ch/reach/signup");
     }
   });
-  child.stderr.on("data",buf=>process.stderr.write(buf));
-  const forward=sig=>{try{child.kill(sig);}catch{}};
-  process.on("SIGINT",()=>forward("SIGINT"));
-  process.on("SIGTERM",()=>forward("SIGTERM"));
-  child.on("exit",code=>process.exit(code??0));
+  child.stderr.on("data", buf => process.stderr.write(buf));
+  child.on("error", err => { console.error(`Could not start Reach agent: ${err.message}`); process.exitCode = 1; });
+  const forward = sig => { try { child.kill(sig); } catch {} };
+  process.on("SIGINT", () => forward("SIGINT"));
+  process.on("SIGTERM", () => forward("SIGTERM"));
+  child.on("exit", code => process.exit(code ?? 0));
 }
 
-if(command==="--version"||command==="-v"||command==="version"){
-  console.log(VERSION);
-  process.exit(0);
-}
-if(command==="--help"||command==="-h"||command==="help"){
-  printHelp();
-  process.exit(0);
-}
-if(command==="doctor"){
-  await doctor();
-}
-if(command==="setup"){
-  const first=!fs.existsSync(path.join(root,"device.json"));
-  runAgent(["--pair-only"],first);
-} else if(command==="remote"){
-  const first=!fs.existsSync(path.join(root,"device.json"));
-  if(first){
-    console.log("First Reach connection: a pairing code will be created.");
+async function main() {
+  if (command === "--version" || command === "-v" || command === "version") {
+    console.log(VERSION);
+    return;
+  }
+  if (command === "--help" || command === "-h" || command === "help") {
+    printHelp();
+    return;
+  }
+  if (command === "doctor") {
+    await doctor();
+    return;
+  }
+  if (command === "power-mode") {
+    await ensurePowerModeChoice(true);
+    console.log("Restart a running Reach agent to apply the new permission.");
+    return;
+  }
+  if (command === "setup" || command === "remote") {
+    // The approval must happen before the agent starts and before pairing.
+    await ensurePowerModeChoice();
+    const first = !fs.existsSync(path.join(root, "device.json"));
+    if (command === "remote" && first) {
+      console.log("First Reach connection: a pairing code will be created.");
+    }
+    runAgent(command === "setup" ? ["--pair-only"] : [], first);
+    return;
   }
-  runAgent([],first);
-} else {
   console.error(`Unknown command: ${command}\n`);
   printHelp();
-  process.exit(2);
+  process.exitCode = 2;
 }
+
+main().catch(err => {
+  console.error(`ExamediX Reach: ${err.message}`);
+  process.exitCode = 1;
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "examedix-reach",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Securely connect ChatGPT to Windows computers you own or are authorized to administer.",
   "type": "module",
   "license": "UNLICENSED",