NORAX CONNECT HELPER - README
==============================

WHAT THIS IS
------------
A small, local chat assistant for your Windows PC. You describe a
problem; it chats with Norax's hosted AI through your Tailscale
network and, when a fix needs a command, shows you the EXACT
command and waits for your yes/no. Nothing runs without your
approval. Closing the window closes the helper.

Honest scope:
- This is its own LOCAL session sharing Norax's hosted
  intelligence. It is NOT your synced Discord session and it has
  no access to Norax's memory or tools.
- Inference is remote (via the relay on the tailnet) - the helper
  does NOT run a local model, so it needs the Tailscale
  connection to work.

WHAT'S IN THE FOLDER
--------------------
  Connect-Helper.cmd      Double-click this ONE file.
  Connect-Helper.ps1     The helper app (plain text, readable in Notepad).
  README.txt             This file.

REQUIREMENTS
------------
- Windows 10/11 with built-in Windows PowerShell (already included).
- No Python, Node, OpenSSH, or any Windows optional feature.
- No admin rights to launch. Commands run as YOUR user. If a fix
  needs admin, close the helper and relaunch Connect-Helper.cmd
  via right-click "Run as administrator".
- Tailscale, signed in to the SAME tailnet as Norax. If you do
  not have it, install it yourself from
  https://tailscale.com/download/windows (this helper never
  installs it silently).
- The Connect Helper pairing key - ask Norax (the owner) for it
  in chat.

SETUP (3 STEPS)
---------------
1. Sign in to Tailscale (same tailnet as Norax).
2. Download the ZIP, right-click, "Extract All", open the folder,
   double-click Connect-Helper.cmd.
3. Enter the pairing key when asked, then describe your problem.

THE FIRST RUN
-------------
The helper asks for the pairing key once, then stores it
ENCRYPTED (Windows DPAPI, your user account only) in:
    %LOCALAPPDATA%\NoraxConnectHelper\settings.json
The key is never printed to screen or logs. The relay address is
the only non-secret stored there.

HOW COMMAND APPROVAL WORKS
--------------------------
For EVERY proposed command - including read-only diagnostics -
the helper shows:
  - your current working folder,
  - why the command is proposed,
  - the EXACT full PowerShell command.
You type "yes" to run it; anything else declines it. Declined
commands are never run, and the assistant is told you declined so
it can propose something else. Approved commands run as YOUR user
with a time limit; their output (truncated if huge), errors, and
exit code are sent back to the assistant AUTOMATICALLY - you do
not need to type anything between steps, the fix continues on
its own up to a bounded number of steps per message. You can
change the working folder with /cd <path>, see it with /cwd, and
quit with /exit.

IF THE PAIRING KEY IS REJECTED
------------------------------
The key may have been rotated. Ask Norax for the current key,
delete %LOCALAPPDATA%\NoraxConnectHelper\settings.json, and
start Connect-Helper.cmd again to re-enter it. (That file is the
helper's ONLY setting storage; deleting it resets setup.)

PRIVACY / SAFETY
----------------
- No remote-control: the helper never opens an inbound port,
  never auto-starts with Windows, never polls in the background.
  It is a visible console you run when you want help.
- The pairing key grants CHAT ONLY. It is not an SSH key and not
  Norax's own credentials, and it cannot be used to reach your
  PC.
- Commands run only as your user. This helper will not disable
  Windows Defender, SmartScreen, or your firewall.
- Your chat goes to Norax's hosted model via the tailnet relay;
  nothing is sent anywhere else. The helper itself makes no other
  network connections.

HONEST LIMITATIONS
------------------
- Developed and tested on the relay/server side; the Windows
  console experience has NOT been verified on a physical Windows
  PC - if anything looks off, tell Norax in chat.
- If Tailscale or the relay is down, the helper says so and
  exits; it cannot answer offline.

QUESTIONS
---------
Ask Norax directly in chat.