|
| 1 | +package main |
| 2 | + |
| 3 | +import ( |
| 4 | + "errors" |
| 5 | + "fmt" |
| 6 | + "os" |
| 7 | + "strings" |
| 8 | + |
| 9 | + qi "github.com/profullstack/agentbbs/internal/qryptinvite" |
| 10 | + "github.com/profullstack/agentbbs/internal/store" |
| 11 | +) |
| 12 | + |
| 13 | +// qryptInviteCmd is the ops side of qrypt.chat invites: |
| 14 | +// `agentbbs qrypt-invite <user>` mints a single-use anonymous invite on behalf |
| 15 | +// of an existing member, respecting their per-account quota, and prints the |
| 16 | +// token + redeem URL (docs/qrypt-invites.md). |
| 17 | +func qryptInviteCmd(st store.Store, args []string) { |
| 18 | + if len(args) < 1 { |
| 19 | + fmt.Fprintln(os.Stderr, "usage: agentbbs qrypt-invite <username>") |
| 20 | + os.Exit(2) |
| 21 | + } |
| 22 | + name := strings.ToLower(args[0]) |
| 23 | + if _, found, err := st.UserByName(name); err != nil { |
| 24 | + fmt.Fprintln(os.Stderr, "lookup:", err) |
| 25 | + os.Exit(1) |
| 26 | + } else if !found { |
| 27 | + fmt.Fprintf(os.Stderr, "no such account: %s (register via ssh join@)\n", name) |
| 28 | + os.Exit(1) |
| 29 | + } |
| 30 | + |
| 31 | + cfg := qi.ConfigFromEnv() |
| 32 | + priv, err := cfg.PrivateKey() |
| 33 | + if err != nil { |
| 34 | + fmt.Fprintln(os.Stderr, err) |
| 35 | + os.Exit(1) |
| 36 | + } |
| 37 | + |
| 38 | + token, jti, err := qi.Mint(cfg.IssuerID, priv, cfg.TTL) |
| 39 | + if err != nil { |
| 40 | + fmt.Fprintln(os.Stderr, "mint:", err) |
| 41 | + os.Exit(1) |
| 42 | + } |
| 43 | + if err := st.RecordQryptInvite(name, jti, cfg.Quota); err != nil { |
| 44 | + if errors.Is(err, store.ErrQuotaExceeded) { |
| 45 | + used, _ := st.QryptInviteCount(name) |
| 46 | + fmt.Fprintf(os.Stderr, "%s is at their invite quota (%d/%d)\n", name, used, cfg.Quota) |
| 47 | + os.Exit(1) |
| 48 | + } |
| 49 | + fmt.Fprintln(os.Stderr, "record:", err) |
| 50 | + os.Exit(1) |
| 51 | + } |
| 52 | + |
| 53 | + used, _ := st.QryptInviteCount(name) |
| 54 | + remaining := cfg.Quota - used |
| 55 | + if remaining < 0 { |
| 56 | + remaining = 0 |
| 57 | + } |
| 58 | + fmt.Printf("qrypt.chat invite for %s (issuer %s, expires in %s, single-use):\n\n", name, cfg.IssuerID, cfg.TTL) |
| 59 | + fmt.Printf(" redeem %s\n", cfg.RedeemURLFor(token)) |
| 60 | + fmt.Printf(" token %s\n", token) |
| 61 | + fmt.Printf(" jti %s\n\n", jti) |
| 62 | + if cfg.Quota > 0 { |
| 63 | + fmt.Printf("invites left for %s: %d/%d\n", name, remaining, cfg.Quota) |
| 64 | + } |
| 65 | +} |
| 66 | + |
| 67 | +// qryptIssuerKeygen prints a fresh Ed25519 issuer keypair for first-time setup: |
| 68 | +// the base64 seed (private — goes in AGENTBBS_QRYPT_ISSUER_KEY) and the base64 |
| 69 | +// raw public key (goes in qrypt.chat's invite_issuers row). |
| 70 | +func qryptIssuerKeygen() { |
| 71 | + seed, pub, err := qi.GenerateIssuerKey() |
| 72 | + if err != nil { |
| 73 | + fmt.Fprintln(os.Stderr, "keygen:", err) |
| 74 | + os.Exit(1) |
| 75 | + } |
| 76 | + cfg := qi.ConfigFromEnv() |
| 77 | + fmt.Println("Fresh qrypt.chat invite-issuer keypair:") |
| 78 | + fmt.Println() |
| 79 | + fmt.Println(" 1) On agentbbs, set the PRIVATE seed (keep it secret):") |
| 80 | + fmt.Printf(" AGENTBBS_QRYPT_ISSUER_KEY=%s\n\n", seed) |
| 81 | + fmt.Println(" 2) In qrypt.chat, insert an invite_issuers row with the PUBLIC key:") |
| 82 | + fmt.Printf(" id %s\n", cfg.IssuerID) |
| 83 | + fmt.Printf(" ed25519_public_key %s\n\n", pub) |
| 84 | + fmt.Printf(" INSERT INTO invite_issuers (id, name, ed25519_public_key)\n") |
| 85 | + fmt.Printf(" VALUES ('%s', 'AgentBBS', '%s');\n", cfg.IssuerID, pub) |
| 86 | +} |
0 commit comments