[Init] Initial commit - NetMesh terminal manager

electron/capabilities/services/vaultService.cjs

@@ -0,0 +1,257 @@
+"use strict";
+
+/** Matches waitForScriptRun default (1h) plus bridge overhead. */
+const VAULT_AGENT_SCRIPT_WAIT_TIMEOUT_MS = 3_605_000;
+
+function parseVaultAgentWaitFlag(raw) {
+  if (raw === undefined || raw === null || raw === "") return false;
+  if (typeof raw === "boolean") return raw;
+  const normalized = String(raw).trim().toLowerCase();
+  return normalized === "true" || normalized === "1" || normalized === "yes";
+}
+
+function vaultAgentInvokeOptions(op, params = {}) {
+  if (op !== "snippets.run" && op !== "scripts.run") return undefined;
+  if (!parseVaultAgentWaitFlag(params.wait)) return undefined;
+  return { timeoutMs: VAULT_AGENT_SCRIPT_WAIT_TIMEOUT_MS };
+}
+
+/**
+ * Vault domain service. Read-only metadata and notes/snippets are served from
+ * renderer vault state via VaultAgentBridge; credentials never cross the bridge.
+ */
+function createVaultService(ctx = {}) {
+  const { invokeVaultAgent } = ctx;
+
+  function requireBridge() {
+    if (typeof invokeVaultAgent !== "function") {
+      return { ok: false, error: "Vault agent bridge is unavailable." };
+    }
+    return null;
+  }
+
+  return {
+    getHost: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("host.get", { hostId: params.hostId });
+    },
+    listHosts: async () => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("host.list", {});
+    },
+    openHost: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("host.open", {
+        hostId: params.hostId,
+        chatSessionId: params.chatSessionId,
+      });
+    },
+    createHosts: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("hosts.create", params);
+    },
+    updateHost: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("host.update", params);
+    },
+    deleteHost: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("host.delete", { hostId: params.hostId });
+    },
+    importHosts: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("host.import", params);
+    },
+    getHostNotes: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("host.notes.get", { hostId: params.hostId });
+    },
+    setHostNotes: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("host.notes.set", {
+        hostId: params.hostId,
+        notes: params.notes,
+      });
+    },
+    listNotes: async () => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("note.list", {});
+    },
+    getNote: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("note.get", {
+        noteId: params.noteId,
+        offset: params.offset,
+        maxChars: params.maxChars,
+        query: params.query,
+        expectedUpdatedAt: params.expectedUpdatedAt,
+      });
+    },
+    createNote: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("note.create", params);
+    },
+    updateNote: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("note.update", params);
+    },
+    deleteNote: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("note.delete", { noteId: params.noteId });
+    },
+    listIdentities: async () => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("identity.list", {});
+    },
+    listProxyProfiles: async () => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("proxyProfile.list", {});
+    },
+    listGroups: async () => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("group.list", {});
+    },
+    createGroup: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("group.create", params);
+    },
+    updateGroup: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("group.update", params);
+    },
+    deleteGroup: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("group.delete", params);
+    },
+    listSnippets: async () => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("snippets.list", {});
+    },
+    getSnippet: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("snippets.get", { snippetId: params.snippetId });
+    },
+    runSnippet: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("snippets.run", {
+        snippetId: params.snippetId,
+        sessionId: params.sessionId,
+        variables: params.variables,
+        chatSessionId: params.chatSessionId,
+        wait: params.wait,
+      }, vaultAgentInvokeOptions("snippets.run", params));
+    },
+    createSnippet: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("snippets.create", params);
+    },
+    updateSnippet: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("snippets.update", params);
+    },
+    deleteSnippet: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("snippets.delete", params);
+    },
+    listScripts: async () => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.list", {});
+    },
+    getScript: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.get", { scriptId: params.scriptId, snippetId: params.scriptId });
+    },
+    createScript: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.create", params);
+    },
+    updateScript: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.update", params);
+    },
+    deleteScript: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.delete", params);
+    },
+    runScript: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.run", params, vaultAgentInvokeOptions("scripts.run", params));
+    },
+    getScriptReference: async () => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.reference", {});
+    },
+    listScriptRuns: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.runs.list", params);
+    },
+    stopScriptRun: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.run.stop", params);
+    },
+    pauseScriptRun: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.run.pause", params);
+    },
+    resumeScriptRun: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.run.resume", params);
+    },
+    setScriptTargets: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("scripts.targets.set", params);
+    },
+    listHostConnectScripts: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("host.connectScripts.list", params);
+    },
+    setHostConnectScripts: async (params = {}) => {
+      const bridgeErr = requireBridge();
+      if (bridgeErr) return bridgeErr;
+      return invokeVaultAgent("host.connectScripts.set", params);
+    },
+  };
+}
+
+module.exports = {
+  createVaultService,
+};