agentgate-mcp 0.2.0

package/src/vault.js

@@ -0,0 +1,105 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+
+const ALGO = 'aes-256-gcm';
+
+export class Vault {
+  constructor({ vaultFile, keyringFile }) {
+    this.vaultFile = vaultFile;
+    this.keyringFile = keyringFile;
+  }
+
+  initialize() {
+    if (!fs.existsSync(this.keyringFile)) {
+      const masterKey = crypto.randomBytes(32).toString('base64');
+      fs.writeFileSync(this.keyringFile, JSON.stringify({ masterKey }, null, 2), {
+        mode: 0o600
+      });
+    }
+
+    if (!fs.existsSync(this.vaultFile)) {
+      this.writePayload({
+        google: {
+          email: null,
+          cookies: null,
+          gmailOAuthToken: null
+        },
+        billing: {
+          cardHolder: null,
+          cardNumber: null,
+          cardLast4: null,
+          cardExpMonth: null,
+          cardExpYear: null,
+          cardCvc: null,
+          cardZip: null
+        }
+      });
+      fs.chmodSync(this.vaultFile, 0o600);
+    }
+  }
+
+  getPayload() {
+    return this.readPayload();
+  }
+
+  setGoogleAccount({ email, cookies, gmailOAuthToken }) {
+    const payload = this.readPayload();
+    payload.google = { email, cookies, gmailOAuthToken };
+    this.writePayload(payload);
+  }
+
+  setBilling(billingPatch) {
+    const payload = this.readPayload();
+    payload.billing = {
+      ...payload.billing,
+      ...billingPatch
+    };
+    this.writePayload(payload);
+  }
+
+  readPayload() {
+    const encrypted = JSON.parse(fs.readFileSync(this.vaultFile, 'utf8'));
+    const key = this.getMasterKey();
+    const iv = Buffer.from(encrypted.iv, 'base64');
+    const authTag = Buffer.from(encrypted.authTag, 'base64');
+    const ciphertext = Buffer.from(encrypted.ciphertext, 'base64');
+
+    const decipher = crypto.createDecipheriv(ALGO, key, iv);
+    decipher.setAuthTag(authTag);
+
+    const plaintext = Buffer.concat([
+      decipher.update(ciphertext),
+      decipher.final()
+    ]).toString('utf8');
+
+    return JSON.parse(plaintext);
+  }
+
+  writePayload(payload) {
+    const key = this.getMasterKey();
+    const iv = crypto.randomBytes(12);
+    const cipher = crypto.createCipheriv(ALGO, key, iv);
+
+    const ciphertext = Buffer.concat([
+      cipher.update(JSON.stringify(payload), 'utf8'),
+      cipher.final()
+    ]);
+
+    const authTag = cipher.getAuthTag();
+    const output = {
+      iv: iv.toString('base64'),
+      authTag: authTag.toString('base64'),
+      ciphertext: ciphertext.toString('base64')
+    };
+
+    fs.writeFileSync(this.vaultFile, JSON.stringify(output, null, 2), {
+      mode: 0o600
+    });
+  }
+
+  getMasterKey() {
+    const raw = fs.readFileSync(this.keyringFile, 'utf8');
+    const parsed = JSON.parse(raw);
+    return Buffer.from(parsed.masterKey, 'base64');
+  }
+}