examedix-reach 0.1.0 → 0.1.2

package/DISCLOSURE

@@ -17,8 +17,10 @@ Reach includes security controls including:
 - no inbound workstation listener;
 - local filesystem boundaries;
 - blocking of credential stores, private keys and common secret files;
-- Power Mode disabled by default for ordinary users;
+- Power Mode disabled by default unless explicitly authorized in a local Windows consent dialog;
 - audit metadata with sensitive values redacted;
 - Windows DPAPI protection for the local device credential.
 
 Unauthorized access, credential theft, covert surveillance, malware deployment, destructive misuse, or bypassing security controls is prohibited by the Reach Terms of Service.
+
+Explicit local consent is collected before pairing/agent startup, stored on the computer, and may be changed with the power-mode command. A missing or inconsistent consent record fails closed. Power Mode runs with the permissions of the logged-in Windows user and is not a security sandbox.

package/README.md

@@ -1,18 +1,30 @@
 # ExamediX Reach
 
-ExamediX Reach securely connects ChatGPT to Windows computers you own or are authorized to administer.
+ExamediX Reach connects ChatGPT to Windows computers you own or are authorized to administer.
 
 ## Quick start
 
-Requirements: Windows 10/11 and Node.js 20 or newer.
+Requires Windows 10/11 and Node.js 20 or newer.
 
 ```powershell
-npx examedix-reach@latest remote
+npx --yes examedix-reach@latest remote
 ```
 
-On first run Reach prints a pairing code and opens the Reach account page. Sign in or create an account, enter the code, and keep the process running while you want the computer reachable from ChatGPT.
+On the first run, Reach asks for **explicit local permission** to enable Power Mode, **before** starting the agent and pairing the computer. **No** is selected by default. Choose **No** for restricted operation, or **Yes** if you knowingly want ChatGPT to run PowerShell and Windows programs with your Windows user permissions. These commands may change or delete files, install software and use network services. Power Mode is not a sandbox.
 
-Useful commands:
+Reach then displays a pairing code and opens the account page. Sign in or create an account, pair your computer, and keep the agent process running while you need access through ChatGPT.
+
+## Change Power Mode permission
+
+```powershell
+npx --yes examedix-reach@latest power-mode
+```
+
+This shows the local consent dialog again. After changing permission, **stop and restart the running Reach agent**.
+
+The choice is stored locally in `%LOCALAPPDATA%\ExamediX\ReachData` and is reused on future starts when its consent record and agent configuration agree. A missing or inconsistent record never silently enables Power Mode.
+
+Additional commands:
 
 ```powershell
 npx examedix-reach@latest setup
@@ -20,7 +32,11 @@ npx examedix-reach@latest doctor
 npx examedix-reach@latest --version
 ```
 
-Reach makes an outbound TLS connection only. It does not require an inbound Windows port.
+Reach uses an outbound TLS connection; no inbound Windows port is required.
 
 Security and privacy: https://examedix.ch/reach/security  
 Support: https://examedix.ch/reach/support
+
+## Third-party software licenses
+
+ExamediX Reach's agent is proprietary (npm `license: UNLICENSED`). Its open-source dependencies retain their own licenses. See [THIRD-PARTY-NOTICES.txt](THIRD-PARTY-NOTICES.txt) and [THIRD-PARTY-LICENSES](THIRD-PARTY-LICENSES) for the verified attributions, license texts and version notes. In particular, `pdf-parse` is Apache-2.0; Reach selects the MIT option of JSZip's dual license. The npm archive does not contain the Node.js executable or Chromium; those are covered separately if included with a Windows installer.

package/THIRD-PARTY-LICENSES/binary-0.3.0-MIT.txt

@@ -0,0 +1,25 @@
+binary 0.3.0
+Source: https://github.com/substack/node-binary
+License: MIT (package.json and README.markdown in the published npm archive)
+Maintainer and copyright attribution: James Halliday <mail@substack.net>
+
+MIT License
+Copyright (c) James Halliday
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/THIRD-PARTY-LICENSES/buffers-0.1.1-MIT-X11.txt

@@ -0,0 +1,29 @@
+buffers 0.1.1
+Source: https://github.com/substack/node-buffers
+License: MIT/X11 - verified from an upstream historical license declaration
+https://github.com/substack/node-buffers/commit/1b745ee35d33eb166e15ef1866073a07c6d7de87
+Also documented in the Debian source copyright record:
+https://sources.debian.org/copyright/license/node-buffers/0.1.1-2/
+The npm 0.1.1 archive itself does not state the license.
+Maintainer and copyright attribution: James Halliday <mail@substack.net>
+
+MIT/X11 License
+Copyright (c) James Halliday
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/THIRD-PARTY-LICENSES/chainsaw-0.1.0-MIT-X11.txt

@@ -0,0 +1,25 @@
+chainsaw 0.1.0
+Source: https://github.com/substack/node-chainsaw
+License: MIT/X11 (package.json in the published npm archive)
+Maintainer and copyright attribution: James Halliday <mail@substack.net>
+
+MIT/X11 License
+Copyright (c) James Halliday
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.