create-workframe 0.1.0

package/workframe-api/platform_auth.py

@@ -0,0 +1,194 @@
+"""Stack-level sign-in: Discord OAuth + Telegram Login (workframe admin config)."""
+
+from __future__ import annotations
+
+import hashlib
+import hmac
+import json
+import os
+import secrets
+import urllib.parse
+import urllib.request
+from typing import Any
+from urllib.parse import urlparse
+
+import stack_config
+
+APP_BASE_URL = os.environ.get("APP_BASE_URL", "http://127.0.0.1:18644").rstrip("/")
+
+
+def _oauth_public(block: dict[str, Any]) -> dict[str, Any]:
+    client_id = str(block.get("client_id") or "").strip()
+    return {
+        "client_id": client_id,
+        "has_secret": bool(str(block.get("client_secret") or "").strip()),
+        "enabled": bool(client_id),
+    }
+
+
+def resolved_discord_oauth() -> dict[str, str]:
+    block = stack_config._stack_oauth_raw("discord_oauth")  # ponytail: stack_config sibling module
+    return {
+        "client_id": str(block.get("client_id") or "").strip(),
+        "client_secret": str(block.get("client_secret") or "").strip(),
+    }
+
+
+def discord_oauth_configured() -> bool:
+    cfg = resolved_discord_oauth()
+    return bool(cfg.get("client_id") and cfg.get("client_secret"))
+
+
+def resolved_telegram_login() -> dict[str, str]:
+    block = stack_config._stack_oauth_raw("telegram_login")
+    return {
+        "bot_username": str(block.get("bot_username") or "").strip().lstrip("@"),
+        "bot_token": str(block.get("bot_token") or "").strip(),
+    }
+
+
+def telegram_login_configured() -> bool:
+    cfg = resolved_telegram_login()
+    return bool(cfg.get("bot_username") and cfg.get("bot_token"))
+
+
+def telegram_login_domain() -> str:
+    host = urlparse(APP_BASE_URL).hostname or ""
+    return host.strip()
+
+
+def public_discord_oauth() -> dict[str, Any]:
+    return _oauth_public(stack_config._stack_oauth_raw("discord_oauth"))
+
+
+def public_telegram_login() -> dict[str, Any]:
+    cfg = resolved_telegram_login()
+    domain = telegram_login_domain()
+    return {
+        "bot_username": cfg.get("bot_username") or "",
+        "has_token": bool(cfg.get("bot_token")),
+        "enabled": telegram_login_configured(),
+        "domain": domain,
+    }
+
+
+def discord_redirect_uri() -> str:
+    return f"{APP_BASE_URL}/api/oauth/discord/callback"
+
+
+def _discord_exchange_code(code: str, client_id: str, client_secret: str, redirect_uri: str) -> dict[str, Any]:
+    body = urllib.parse.urlencode(
+        {
+            "client_id": client_id,
+            "client_secret": client_secret,
+            "grant_type": "authorization_code",
+            "code": code,
+            "redirect_uri": redirect_uri,
+        },
+    ).encode("utf-8")
+    req = urllib.request.Request(
+        "https://discord.com/api/oauth2/token",
+        data=body,
+        headers={"Content-Type": "application/x-www-form-urlencoded"},
+        method="POST",
+    )
+    try:
+        with urllib.request.urlopen(req, timeout=30) as resp:
+            raw = resp.read().decode("utf-8", errors="replace")
+    except urllib.error.HTTPError as exc:
+        raw = exc.read().decode("utf-8", errors="replace")
+    except OSError as exc:
+        return {"error": str(exc)}
+    try:
+        data = json.loads(raw)
+    except json.JSONDecodeError:
+        return {"error": raw or "discord_token_exchange_failed"}
+    return data if isinstance(data, dict) else {"error": "invalid_discord_response"}
+
+
+def _discord_fetch_user(access_token: str) -> dict[str, Any]:
+    req = urllib.request.Request(
+        "https://discord.com/api/users/@me",
+        headers={"Authorization": f"Bearer {access_token}"},
+    )
+    try:
+        with urllib.request.urlopen(req, timeout=20) as resp:
+            data = json.loads(resp.read().decode("utf-8", errors="replace"))
+    except (OSError, urllib.error.HTTPError, json.JSONDecodeError) as exc:
+        return {"error": str(exc)}
+    return data if isinstance(data, dict) else {"error": "invalid_discord_user"}
+
+
+def start_discord_link(
+    *,
+    state: str,
+    redirect_url: str,
+) -> dict[str, Any]:
+    cfg = resolved_discord_oauth()
+    client_id = str(cfg.get("client_id") or "").strip()
+    if not client_id or not str(cfg.get("client_secret") or "").strip():
+        return {
+            "ok": False,
+            "error": "discord_oauth_not_configured",
+            "message": "Workframe admin must register a Discord OAuth app under Integrations.",
+        }
+    params = urllib.parse.urlencode(
+        {
+            "client_id": client_id,
+            "redirect_uri": discord_redirect_uri(),
+            "response_type": "code",
+            "scope": "identify",
+            "state": state,
+            "prompt": "consent",
+        },
+    )
+    return {
+        "ok": True,
+        "provider": "discord",
+        "redirect_url": redirect_url or f"https://discord.com/api/oauth2/authorize?{params}",
+        "output": "",
+        "error": None,
+    }
+
+
+def complete_discord_link(code: str) -> dict[str, Any]:
+    cfg = resolved_discord_oauth()
+    client_id = str(cfg.get("client_id") or "").strip()
+    client_secret = str(cfg.get("client_secret") or "").strip()
+    if not client_id or not client_secret:
+        return {"ok": False, "error": "discord_oauth_not_configured"}
+    token_data = _discord_exchange_code(code, client_id, client_secret, discord_redirect_uri())
+    if token_data.get("error"):
+        return {"ok": False, "error": str(token_data.get("error"))}
+    access_token = str(token_data.get("access_token") or "").strip()
+    if not access_token:
+        return {"ok": False, "error": "discord_missing_access_token"}
+    user = _discord_fetch_user(access_token)
+    if user.get("error"):
+        return {"ok": False, "error": str(user.get("error"))}
+    discord_id = str(user.get("id") or "").strip()
+    if not discord_id:
+        return {"ok": False, "error": "discord_missing_user_id"}
+    return {"ok": True, "provider": "discord", "platform_ids": {"discord": discord_id}}
+
+
+def verify_telegram_login(payload: dict[str, Any]) -> dict[str, Any]:
+    """Validate Telegram Login widget payload; returns user id on success."""
+    cfg = resolved_telegram_login()
+    bot_token = str(cfg.get("bot_token") or "").strip()
+    if not bot_token:
+        return {"ok": False, "error": "telegram_login_not_configured"}
+    data = {k: str(v) for k, v in payload.items() if k != "hash" and v is not None}
+    check_hash = str(payload.get("hash") or "").strip()
+    if not check_hash or not data.get("id"):
+        return {"ok": False, "error": "telegram_invalid_payload"}
+    check_line = "\n".join(f"{k}={data[k]}" for k in sorted(data))
+    secret = hashlib.sha256(bot_token.encode("utf-8")).digest()
+    computed = hmac.new(secret, check_line.encode("utf-8"), hashlib.sha256).hexdigest()
+    if not hmac.compare_digest(computed, check_hash):
+        return {"ok": False, "error": "telegram_hash_mismatch"}
+    return {"ok": True, "provider": "telegram", "platform_ids": {"telegram": str(data["id"]).strip()}}
+
+
+def new_oauth_state() -> str:
+    return secrets.token_urlsafe(24)

package/workframe-api/profile_secret_policy.py

@@ -0,0 +1,86 @@
+"""Speed bump for cross-profile secret reads — not an ACL. Real isolation = vault + per-profile mount."""
+from __future__ import annotations
+
+import re
+
+# ponytail: shared by workframe-api and workframe-supervisor (copy in supervisor image)
+_PROFILE_SECRET_PATH = re.compile(
+    r"(?:/opt/data/)?profiles/[^/\s]+/(?:\.env|auth\.json|credentials\.json|\.git-credentials|cookies\.txt)",
+    re.IGNORECASE,
+)
+_PROFILE_SLUG_REF = re.compile(
+    r"(?:/opt/data/)?profiles/([a-z0-9][a-z0-9-]{0,63})(?:/|$|\s)",
+    re.IGNORECASE,
+)
+_READ_VERBS = re.compile(
+    r"\b(?:cat|head|tail|sed|awk|grep|egrep|rg|less|more|od|xxd|nl|sort|wc|strings|dd|python3?|perl|ruby|node)\b",
+    re.IGNORECASE,
+)
+_SHELL_BYPASS = re.compile(
+    r"(?:\*|find\b[^\n]*-exec\b|xargs\b|\btar\b|\bbase64\b|\.e''nv|\.e\"\"nv"
+    r"|&&\s*(?:cat|head|tail|sed|awk|grep|python3?|perl|dd|od|xxd|nl|sort|wc)\b"
+    r"|\|\s*(?:cat|head|tail|sed|awk|grep|python3?|perl|dd|od|xxd|nl|sort|wc)\b)",
+    re.IGNORECASE,
+)
+# ponytail: shell var indirection ceiling — catches `P=…profiles/u-bob; cat $P/.env`
+# but NOT python string concat ('pro'+'files/…'). Real fix = per-profile secret broker.
+_VAR_PROFILE_ASSIGN = re.compile(
+    r"\b([A-Za-z_][A-Za-z0-9_]*)=(?:[^\s;&|]*\s*)?(?:/opt/data/)?profiles/[a-z0-9][a-z0-9-]{0,63}",
+    re.IGNORECASE,
+)
+_VAR_DEREF_SECRET = re.compile(
+    r"\$\{?([A-Za-z_][A-Za-z0-9_]*)\}?[^\s;&|]*/(?:\.env|auth\.json|credentials\.json|\.git-credentials|cookies\.txt)",
+    re.IGNORECASE,
+)
+
+
+def _cmd_blob(cmd: list[str] | str) -> str:
+    return " ".join(str(part) for part in cmd) if isinstance(cmd, list) else str(cmd)
+
+
+def referenced_profile_slugs(cmd: list[str] | str) -> set[str]:
+    return {m.group(1).lower() for m in _PROFILE_SLUG_REF.finditer(_cmd_blob(cmd))}
+
+
+def is_secret_read_attempt(cmd: list[str] | str) -> bool:
+    blob = _cmd_blob(cmd)
+    if _PROFILE_SECRET_PATH.search(blob):
+        return True
+    if "profiles/" in blob.lower() and _SHELL_BYPASS.search(blob):
+        return True
+    if _PROFILE_SLUG_REF.search(blob) and _READ_VERBS.search(blob):
+        return True
+    assigned = {m.group(1) for m in _VAR_PROFILE_ASSIGN.finditer(blob)}
+    if assigned:
+        for m in _VAR_DEREF_SECRET.finditer(blob):
+            if m.group(1) in assigned:
+                return True
+    return False
+
+
+def touches_foreign_profile_secrets(cmd: list[str] | str, allowed_profile: str) -> bool:
+    """True when command references another profile's tree (0022 N2 / 0023 C1)."""
+    allowed = str(allowed_profile or "").strip().lower()
+    if not allowed:
+        return False
+    slugs = referenced_profile_slugs(cmd)
+    return bool(slugs - {allowed})
+
+
+def exec_blocked_for_profile(cmd: list[str] | str, acting_profile: str = "") -> bool:
+    if is_secret_read_attempt(cmd):
+        return True
+    if acting_profile and touches_foreign_profile_secrets(cmd, acting_profile):
+        return True
+    return False
+
+
+if __name__ == "__main__":
+    assert is_secret_read_attempt(["cat", "profiles/u-alice-dev/.env"])
+    assert is_secret_read_attempt("cat profiles/u-bob-dev/*")
+    assert is_secret_read_attempt("cd /opt/data/profiles/u-bob && head .env")
+    assert is_secret_read_attempt("cd profiles/u-x && python3 -c \"print(open('.env').read())\"")
+    assert touches_foreign_profile_secrets("cd profiles/u-bob && head .env", "u-alice-dev")
+    assert not touches_foreign_profile_secrets("hermes -p u-alice-dev gateway status", "u-alice-dev")
+    assert not is_secret_read_attempt(["hermes", "-p", "dev", "gateway", "run"])
+    print("profile_secret_policy ok")

package/workframe-api/public/assets/index-DPXu_lGn.css

@@ -0,0 +1 @@
+:root{--lightningcss-light: ;--lightningcss-dark:initial;color-scheme:dark;--wf-font-sans:"Inter Tight", ui-sans-serif, system-ui, sans-serif;--wf-font-mono:"JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;--wf-blur:34px;--wf-header-height:56px;--wf-footer-height:28px}[data-theme=dark]{--lightningcss-light: ;--lightningcss-dark:initial;color-scheme:dark;--wf-bg:#0a0a0f;--wf-text:#e8e8ee;--wf-muted:#727280;--wf-border:#ffffff12;--wf-border-strong:#ffffff1c;--wf-surface:#12121a94;--wf-surface-soft:#12121a61;--wf-primary:#ffffffe6;--wf-primary-foreground:#0a0a0f;--wf-violet:#6d28d9;--wf-violet-glow:#7c3aed;--wf-ring:#6d28d961}[data-theme=light]{--lightningcss-light:initial;--lightningcss-dark: ;color-scheme:light;--wf-bg:#f2f2f7;--wf-text:#1c1c1e;--wf-muted:#8e8e93;--wf-border:#00000014;--wf-border-strong:#0000001f;--wf-surface:#fffc;--wf-surface-soft:#ffffff80;--wf-primary:#000;--wf-primary-foreground:#fff;--wf-violet:#6d28d9;--wf-violet-glow:#7c3aed;--wf-ring:#6d28d961}*{box-sizing:border-box;margin:0;padding:0}body{font-family:var(--wf-font-sans);background:var(--wf-bg);color:var(--wf-text);-webkit-font-smoothing:antialiased;line-height:1.5}.wf-shell{flex-direction:column;min-height:100vh;display:flex}.wf-shell--centered{justify-content:center;align-items:center}.wf-header{height:var(--wf-header-height);border-bottom:1px solid var(--wf-border);background:var(--wf-surface);-webkit-backdrop-filter:blur(var(--wf-blur));backdrop-filter:blur(var(--wf-blur));justify-content:space-between;align-items:center;padding:0 20px;display:flex}.wf-header__brand{letter-spacing:-.02em;color:var(--wf-text);font-size:18px;font-weight:700}.wf-header__actions{gap:8px;display:flex}.wf-auth{background:var(--wf-surface);border:1px solid var(--wf-border);width:100%;max-width:400px;-webkit-backdrop-filter:blur(var(--wf-blur));backdrop-filter:blur(var(--wf-blur));border-radius:16px;padding:32px}.wf-auth__title{letter-spacing:-.02em;margin:0 0 8px;font-size:24px;font-weight:700}.wf-auth__subtitle{color:var(--wf-muted);margin:0 0 24px;font-size:14px}.wf-field{margin-bottom:16px}.wf-field__label{color:var(--wf-muted);margin-bottom:6px;font-size:13px;font-weight:500;display:block}.wf-input{background:var(--wf-surface-soft);border:1px solid var(--wf-border);width:100%;height:40px;color:var(--wf-text);font-size:14px;font-family:var(--wf-font-sans);border-radius:8px;outline:none;padding:0 12px;transition:border-color .15s}.wf-input:focus{border-color:var(--wf-violet);box-shadow:0 0 0 3px var(--wf-ring)}.wf-input::placeholder{color:var(--wf-muted)}.wf-btn{height:40px;font-size:14px;font-weight:500;font-family:var(--wf-font-sans);cursor:pointer;border:none;border-radius:8px;justify-content:center;align-items:center;padding:0 16px;transition:all .15s;display:inline-flex}.wf-btn--primary{background:var(--wf-primary);color:var(--wf-primary-foreground)}.wf-btn--primary:hover{opacity:.9}.wf-btn--secondary{background:var(--wf-surface-soft);color:var(--wf-text);border:1px solid var(--wf-border)}.wf-btn--secondary:hover{background:var(--wf-border)}.wf-btn--ghost{color:var(--wf-text);background:0 0}.wf-btn--ghost:hover{background:var(--wf-surface-soft)}.wf-btn--sm{height:32px;padding:0 12px;font-size:13px}.wf-btn:disabled{opacity:.5;cursor:not-allowed}.wf-error{color:#ef4444;background:#ef44441a;border:1px solid #ef444433;border-radius:8px;margin-bottom:16px;padding:10px 12px;font-size:13px}.wf-success{color:#22c55e;background:#22c55e1a;border:1px solid #22c55e33;border-radius:8px;margin-bottom:16px;padding:10px 12px;font-size:13px}.wf-otp{justify-content:center;gap:8px;margin-bottom:16px;display:flex}.wf-otp__digit{text-align:center;width:44px;height:48px;font-size:20px;font-weight:600;font-family:var(--wf-font-mono);background:var(--wf-surface-soft);border:1px solid var(--wf-border);color:var(--wf-text);border-radius:8px;outline:none;padding:0;transition:border-color .15s}.wf-otp__digit:focus{border-color:var(--wf-violet);box-shadow:0 0 0 3px var(--wf-ring)}.wf-layout{flex:1;display:flex;overflow:hidden}.wf-sidebar{border-right:1px solid var(--wf-border);background:var(--wf-surface);width:200px;padding:16px 0}.wf-sidebar__link{color:var(--wf-muted);cursor:pointer;padding:8px 20px;font-size:14px;text-decoration:none;transition:all .15s;display:block}.wf-sidebar__link:hover{color:var(--wf-text);background:var(--wf-surface-soft)}.wf-sidebar__link--active{color:var(--wf-text);background:var(--wf-surface-soft);font-weight:500}.wf-main{flex:1;padding:24px;overflow-y:auto}.wf-profile{max-width:480px}.wf-profile__avatar{background:var(--wf-violet);color:#fff;border-radius:50%;justify-content:center;align-items:center;width:64px;height:64px;margin-bottom:24px;font-size:24px;font-weight:600;display:flex}.wf-profile__name{margin:0 0 4px;font-size:20px;font-weight:600}.wf-profile__email{color:var(--wf-muted);margin:0 0 24px;font-size:14px}.wf-otp{gap:8px;margin-bottom:16px;display:flex}.wf-otp .wf-input{text-align:center;letter-spacing:4px;font-size:20px;font-weight:600}