apvs

APV managed support setup helper for macOS and Windows.

Install:

npm install -g apv-ai

Local install while testing from this repository:

npm install -g .

Use:

apvs doctor
apvs install --token APV-XXXX-XXXX
apvs uninstall

Or, after public release, run without global install:

npx apv-ai doctor
npx apv-ai install --token APV-XXXX-XXXX

Safety:

• npm install apv-ai only installs this CLI. It does not modify the machine.
• The package has no npm dependencies and no install/postinstall lifecycle scripts.
• No NetBird setup key, private key, npm token, password, or API secret is embedded in this package.
• The embedded SSH key is a public key used only if apvs install is run with consent on macOS.

Supported platforms:

• macOS arm64 and x64/amd64.
• Windows arm64 and x64/amd64.

What apvs install does after typed consent and an invite token / NetBird setup key:

• Auto-detects OS and CPU architecture.
• If --token is provided, exchanges it with https://ai.amazingphotovideo.com so the admin dashboard marks the invite used and records the install attempt.
• Downloads the matching official NetBird package from GitHub releases.
• Enrolls the machine into APV's private support network at https://netbird.chels.ai.

macOS-specific behavior:

• Requires pkgutil --check-signature to pass before installing the NetBird pkg.
• Enables macOS Remote Login / SSH.
• Creates or updates local support user apv-support.
• Adds apv-support to the local admin group.
• Grants apv-support passwordless sudo via /etc/sudoers.d/apv-managed-support.
• Installs APV's embedded public SSH key into /Users/apv-support/.ssh/authorized_keys.
• Installs a visible hourly LaunchDaemon at /Library/LaunchDaemons/com.apv.managedsupport.ensure.plist for support continuity.

Windows-specific behavior in this dev version:

• Installs the official NetBird MSI for the detected architecture.
• Enrolls NetBird with the provided setup key.
• Does not create a Windows admin user.
• Does not enable OpenSSH.
• Does not install APV-specific persistence beyond the official NetBird service.

This intentionally gives APV network-level support access after enrollment. On macOS it also gives APV remote administrator access. Continue only with client authorization.

Setup-key handling:

• Preferred flow: npx apv-ai install --token APV-XXXX-XXXX from the APV admin invite flow.
• Recommended: run apvs install and paste the setup key into the hidden prompt.
• --setup-key and NETBIRD_SETUP_KEY are supported for automation, but can be exposed through shell history, environment capture, or process inspection on the local machine.
• The APV backend creates a one-off NetBird setup key during token exchange. If no token is provided, the CLI falls back to the hidden NetBird setup-key prompt.

Dry-run:

apvs install --dry-run

Dry-run prints the detected platform, architecture, NetBird download URL, and management URL without changing the machine.