feat: add session manager and API layer

Add the session manager (internal/sessions/manager.go) that orchestrates multiple simultaneous SSH, Telnet, and RAW TCP sessions with: - Protocol-specific connection logic using existing client implementations - Credential resolution via OS keychain → encrypted vault → user prompt - Wails runtime event emission for frontend state synchronisation - Full session lifecycle management (connect, disconnect, reconnect) - RAW session history and capture support - Telnet break signal forwarding Add the Wails-bound API service (internal/api/api.go) exposing: - Profile CRUD with search, filtering, favourites, and duplication - Session management (connect, disconnect, resize, write) - RAW-specific text/hex/escaped write methods - Secret store initialisation, unlock/lock, and per-profile secrets - Known host listing and deletion - Preferences get/save - Profile import/export with skip/overwrite/duplicate strategies - Audit log retrieval - Native file dialog wrappers and app info Remove conflicting protocol client stubs (client.go) that duplicated the comprehensive implementations in sshclient.go, telnetclient.go, and rawclient.go.
2026-04-15 00:00:00 +01:00
parent 61e99e9fca
commit bd7cf6cbf9
5 changed files with 1251 additions and 901 deletions
@@ -0,0 +1,618 @@
+// Package api provides the Wails-bound API surface that the frontend calls.
+// All methods are called from JavaScript and must return JSON-serialisable types.
+package api
+
+import (
+	"context"
+	"encoding/base64"
+	"encoding/json"
+	"fmt"
+	"runtime"
+	"time"
+
+	wailsRuntime "github.com/wailsapp/wails/v2/pkg/runtime"
+
+	"github.com/copilot-ssh-client/app/internal/audit"
+	"github.com/copilot-ssh-client/app/internal/models"
+	"github.com/copilot-ssh-client/app/internal/preferences"
+	"github.com/copilot-ssh-client/app/internal/secrets"
+	"github.com/copilot-ssh-client/app/internal/sessions"
+	"github.com/copilot-ssh-client/app/internal/storage"
+	"github.com/google/uuid"
+)
+
+// appVersion is set at build time via ldflags.
+var appVersion = "dev"
+
+// Service is the main API surface exposed to the frontend via Wails bindings.
+type Service struct {
+	store         *storage.Store
+	secretStore   *secrets.SecretStore
+	keychainStore *secrets.KeychainStore
+	sessions      *sessions.Manager
+	auditLog      *audit.Logger
+	prefs         *preferences.Manager
+	ctx           context.Context
+}
+
+// NewService creates a Service wired to the given backing components.
+func NewService(
+	store *storage.Store,
+	secretStore *secrets.SecretStore,
+	keychainStore *secrets.KeychainStore,
+	sess *sessions.Manager,
+	auditLog *audit.Logger,
+	prefs *preferences.Manager,
+) *Service {
+	return &Service{
+		store:         store,
+		secretStore:   secretStore,
+		keychainStore: keychainStore,
+		sessions:      sess,
+		auditLog:      auditLog,
+		prefs:         prefs,
+	}
+}
+
+// SetContext stores the Wails runtime context.
+func (s *Service) SetContext(ctx context.Context) {
+	s.ctx = ctx
+}
+
+// ---------------------------------------------------------------------------
+// Profile operations
+// ---------------------------------------------------------------------------
+
+// CreateProfile validates and persists a new connection profile.
+func (s *Service) CreateProfile(profile models.Profile) (models.Profile, error) {
+	if profile.ID == "" {
+		profile.ID = uuid.New().String()
+	}
+	now := time.Now()
+	profile.CreatedAt = now
+	profile.UpdatedAt = now
+
+	if profile.Tags == nil {
+		profile.Tags = []string{}
+	}
+
+	if err := s.store.CreateProfile(&profile); err != nil {
+		return models.Profile{}, fmt.Errorf("failed to create profile: %w", err)
+	}
+	s.auditLog.LogProfileCreate(profile.ID, profile.DisplayName)
+	return profile, nil
+}
+
+// GetProfile retrieves a profile by ID.
+func (s *Service) GetProfile(id string) (models.Profile, error) {
+	p, err := s.store.GetProfile(id)
+	if err != nil {
+		return models.Profile{}, fmt.Errorf("profile not found: %w", err)
+	}
+	return *p, nil
+}
+
+// UpdateProfile persists changes to an existing profile.
+func (s *Service) UpdateProfile(profile models.Profile) error {
+	profile.UpdatedAt = time.Now()
+	if err := s.store.UpdateProfile(&profile); err != nil {
+		return fmt.Errorf("failed to update profile: %w", err)
+	}
+	s.auditLog.LogProfileUpdate(profile.ID, profile.DisplayName)
+	return nil
+}
+
+// DeleteProfile removes a profile and its associated secrets.
+func (s *Service) DeleteProfile(id string) error {
+	p, err := s.store.GetProfile(id)
+	if err != nil {
+		return fmt.Errorf("profile not found: %w", err)
+	}
+
+	if err := s.store.DeleteProfile(id); err != nil {
+		return fmt.Errorf("failed to delete profile: %w", err)
+	}
+
+	// Best-effort secret cleanup.
+	if s.secretStore != nil && s.secretStore.IsUnlocked() {
+		_ = s.secretStore.DeleteProfileSecrets(id)
+	}
+
+	s.auditLog.LogProfileDelete(id, p.DisplayName)
+	return nil
+}
+
+// ListProfiles returns all stored profiles.
+func (s *Service) ListProfiles() ([]models.Profile, error) {
+	profiles, err := s.store.ListProfiles()
+	if err != nil {
+		return nil, err
+	}
+	return derefProfiles(profiles), nil
+}
+
+// SearchProfiles searches profiles by display name, host, or tags.
+func (s *Service) SearchProfiles(query string) ([]models.Profile, error) {
+	profiles, err := s.store.SearchProfiles(query)
+	if err != nil {
+		return nil, err
+	}
+	return derefProfiles(profiles), nil
+}
+
+// ListProfilesByProtocol returns profiles filtered by protocol type.
+func (s *Service) ListProfilesByProtocol(protocol string) ([]models.Profile, error) {
+	profiles, err := s.store.ListProfilesByProtocol(protocol)
+	if err != nil {
+		return nil, err
+	}
+	return derefProfiles(profiles), nil
+}
+
+// ListProfilesByTag returns profiles that contain the given tag.
+func (s *Service) ListProfilesByTag(tag string) ([]models.Profile, error) {
+	profiles, err := s.store.ListProfilesByTag(tag)
+	if err != nil {
+		return nil, err
+	}
+	return derefProfiles(profiles), nil
+}
+
+// ListProfilesByFolder returns profiles in the specified folder.
+func (s *Service) ListProfilesByFolder(folder string) ([]models.Profile, error) {
+	profiles, err := s.store.ListProfilesByFolder(folder)
+	if err != nil {
+		return nil, err
+	}
+	return derefProfiles(profiles), nil
+}
+
+// ListFavourites returns all favourite profiles.
+func (s *Service) ListFavourites() ([]models.Profile, error) {
+	profiles, err := s.store.ListFavourites()
+	if err != nil {
+		return nil, err
+	}
+	return derefProfiles(profiles), nil
+}
+
+// SetFavourite updates the favourite status of a profile.
+func (s *Service) SetFavourite(id string, favourite bool) error {
+	return s.store.SetFavourite(id, favourite)
+}
+
+// DuplicateProfile creates a copy of an existing profile with a new ID.
+func (s *Service) DuplicateProfile(id string) (models.Profile, error) {
+	orig, err := s.store.GetProfile(id)
+	if err != nil {
+		return models.Profile{}, fmt.Errorf("profile not found: %w", err)
+	}
+
+	dup := *orig
+	dup.ID = uuid.New().String()
+	dup.DisplayName = orig.DisplayName + " (copy)"
+	now := time.Now()
+	dup.CreatedAt = now
+	dup.UpdatedAt = now
+	dup.LastConnected = nil
+
+	if err := s.store.CreateProfile(&dup); err != nil {
+		return models.Profile{}, fmt.Errorf("failed to duplicate profile: %w", err)
+	}
+	s.auditLog.LogProfileCreate(dup.ID, dup.DisplayName)
+	return dup, nil
+}
+
+// NewProfile returns a new profile with sensible defaults for the given protocol.
+func (s *Service) NewProfile(protocol string) models.Profile {
+	return models.NewProfile(models.Protocol(protocol))
+}
+
+// ---------------------------------------------------------------------------
+// Session operations
+// ---------------------------------------------------------------------------
+
+// ConnectSession loads a profile by ID and opens a session.
+func (s *Service) ConnectSession(profileID string) (string, error) {
+	profile, err := s.store.GetProfile(profileID)
+	if err != nil {
+		return "", fmt.Errorf("profile not found: %w", err)
+	}
+
+	sessionID, err := s.sessions.Connect(profile, s.promptSecret)
+	if err != nil {
+		return "", err
+	}
+
+	// Update last-connected timestamp.
+	now := time.Now()
+	profile.LastConnected = &now
+	profile.UpdatedAt = now
+	_ = s.store.UpdateProfile(profile)
+
+	return sessionID, nil
+}
+
+// ConnectQuick opens a session from an ad-hoc (unsaved) profile.
+func (s *Service) ConnectQuick(profile models.Profile) (string, error) {
+	if profile.ID == "" {
+		profile.ID = uuid.New().String()
+	}
+	return s.sessions.Connect(&profile, s.promptSecret)
+}
+
+// DisconnectSession closes a session by ID.
+func (s *Service) DisconnectSession(sessionID string) error {
+	return s.sessions.Disconnect(sessionID)
+}
+
+// ReconnectSession closes and re-establishes a session.
+func (s *Service) ReconnectSession(sessionID string) error {
+	return s.sessions.Reconnect(sessionID, s.promptSecret)
+}
+
+// WriteSession writes base64-encoded data to a session.
+func (s *Service) WriteSession(sessionID string, data string) error {
+	decoded, err := base64.StdEncoding.DecodeString(data)
+	if err != nil {
+		return fmt.Errorf("invalid base64 data: %w", err)
+	}
+	return s.sessions.WriteToSession(sessionID, decoded)
+}
+
+// ResizeSession sends a terminal size change to a session.
+func (s *Service) ResizeSession(sessionID string, cols int, rows int) error {
+	return s.sessions.ResizeSession(sessionID, cols, rows)
+}
+
+// ListSessions returns all active sessions.
+func (s *Service) ListSessions() []models.SessionInfo {
+	return s.sessions.ListSessions()
+}
+
+// RenameSession changes the display name of a session tab.
+func (s *Service) RenameSession(sessionID string, name string) error {
+	return s.sessions.RenameSession(sessionID, name)
+}
+
+// PinSession toggles the pinned state of a session tab.
+func (s *Service) PinSession(sessionID string, pinned bool) error {
+	return s.sessions.PinSession(sessionID, pinned)
+}
+
+// CloseAllSessions terminates all active sessions.
+func (s *Service) CloseAllSessions() {
+	s.sessions.CloseAll()
+}
+
+// ---------------------------------------------------------------------------
+// RAW-specific
+// ---------------------------------------------------------------------------
+
+// WriteSessionText sends plain text to a RAW session.
+func (s *Service) WriteSessionText(sessionID string, text string) error {
+	return s.sessions.WriteSessionText(sessionID, text)
+}
+
+// WriteSessionHex sends hex-encoded data to a RAW session.
+func (s *Service) WriteSessionHex(sessionID string, hexStr string) error {
+	return s.sessions.WriteSessionHex(sessionID, hexStr)
+}
+
+// WriteSessionEscaped sends text with C-style escape sequences to a RAW session.
+func (s *Service) WriteSessionEscaped(sessionID string, text string) error {
+	return s.sessions.WriteSessionEscaped(sessionID, text)
+}
+
+// GetSessionHistory returns the data history for a RAW session.
+func (s *Service) GetSessionHistory(sessionID string) ([]map[string]interface{}, error) {
+	entries, err := s.sessions.GetSessionHistory(sessionID)
+	if err != nil {
+		return nil, err
+	}
+
+	result := make([]map[string]interface{}, len(entries))
+	for i, e := range entries {
+		result[i] = map[string]interface{}{
+			"timestamp": e.Timestamp.UnixMilli(),
+			"direction": e.Direction,
+			"data":      base64.StdEncoding.EncodeToString(e.Data),
+		}
+	}
+	return result, nil
+}
+
+// ClearSessionHistory clears the data history for a RAW session.
+func (s *Service) ClearSessionHistory(sessionID string) error {
+	return s.sessions.ClearSessionHistory(sessionID)
+}
+
+// SaveSessionCapture saves the RAW session data to a file.
+func (s *Service) SaveSessionCapture(sessionID string, path string) error {
+	return s.sessions.SaveSessionCapture(sessionID, path)
+}
+
+// ---------------------------------------------------------------------------
+// Telnet-specific
+// ---------------------------------------------------------------------------
+
+// SendBreak transmits a Telnet BRK command to a session.
+func (s *Service) SendBreak(sessionID string) error {
+	return s.sessions.SendBreak(sessionID)
+}
+
+// ---------------------------------------------------------------------------
+// Secret store
+// ---------------------------------------------------------------------------
+
+// IsSecretStoreInitialised reports whether the encrypted vault has been created.
+func (s *Service) IsSecretStoreInitialised() bool {
+	if s.secretStore == nil {
+		return false
+	}
+	return s.secretStore.IsInitialised()
+}
+
+// InitialiseSecretStore creates a new encrypted vault with the given master password.
+func (s *Service) InitialiseSecretStore(masterPassword string) error {
+	if s.secretStore == nil {
+		return fmt.Errorf("secret store is not configured")
+	}
+	return s.secretStore.Initialise(masterPassword)
+}
+
+// UnlockSecretStore decrypts the vault using the master password.
+func (s *Service) UnlockSecretStore(masterPassword string) error {
+	if s.secretStore == nil {
+		return fmt.Errorf("secret store is not configured")
+	}
+	return s.secretStore.Unlock(masterPassword)
+}
+
+// LockSecretStore zeroes key material and locks the vault.
+func (s *Service) LockSecretStore() {
+	if s.secretStore != nil {
+		s.secretStore.Lock()
+	}
+}
+
+// IsSecretStoreUnlocked reports whether the vault is currently unlocked.
+func (s *Service) IsSecretStoreUnlocked() bool {
+	if s.secretStore == nil {
+		return false
+	}
+	return s.secretStore.IsUnlocked()
+}
+
+// SetProfileSecret encrypts and stores a secret for the given profile.
+func (s *Service) SetProfileSecret(profileID string, secretType string, value string) error {
+	key := fmt.Sprintf("profile:%s:%s", profileID, secretType)
+
+	// Try the OS keychain first.
+	if s.keychainStore != nil && s.keychainStore.Available() {
+		return s.keychainStore.SetSecret(key, value)
+	}
+
+	// Fall back to the encrypted file store.
+	if s.secretStore == nil || !s.secretStore.IsUnlocked() {
+		return fmt.Errorf("secret store is locked; unlock it first")
+	}
+	return s.secretStore.SetSecret(key, value)
+}
+
+// DeleteProfileSecrets removes all secrets associated with a profile.
+func (s *Service) DeleteProfileSecrets(profileID string) error {
+	// Remove from both stores where possible.
+	if s.secretStore != nil && s.secretStore.IsUnlocked() {
+		_ = s.secretStore.DeleteProfileSecrets(profileID)
+	}
+	// OS keychain entries need individual deletion — handled at a higher level
+	// because we cannot enumerate keychain keys by prefix portably.
+	return nil
+}
+
+// ---------------------------------------------------------------------------
+// Known hosts
+// ---------------------------------------------------------------------------
+
+// ListKnownHosts returns all stored host key entries.
+func (s *Service) ListKnownHosts() ([]models.KnownHost, error) {
+	hosts, err := s.store.ListKnownHosts()
+	if err != nil {
+		return nil, err
+	}
+	result := make([]models.KnownHost, len(hosts))
+	for i, h := range hosts {
+		result[i] = *h
+	}
+	return result, nil
+}
+
+// DeleteKnownHost removes a known host entry by ID.
+func (s *Service) DeleteKnownHost(id string) error {
+	return s.store.DeleteKnownHost(id)
+}
+
+// ---------------------------------------------------------------------------
+// Preferences
+// ---------------------------------------------------------------------------
+
+// GetPreferences returns the current application preferences.
+func (s *Service) GetPreferences() (models.AppPreferences, error) {
+	p := s.prefs.Get()
+	if p == nil {
+		return models.DefaultAppPreferences(), nil
+	}
+	return *p, nil
+}
+
+// SavePreferences persists the given application preferences.
+func (s *Service) SavePreferences(prefs models.AppPreferences) error {
+	return s.prefs.Save(&prefs)
+}
+
+// ---------------------------------------------------------------------------
+// Import / Export
+// ---------------------------------------------------------------------------
+
+// ExportProfiles serialises all profiles to a JSON string. When includeSecrets
+// is true, decrypted credentials are embedded (use with caution).
+func (s *Service) ExportProfiles(includeSecrets bool) (string, error) {
+	profiles, err := s.store.ListProfiles()
+	if err != nil {
+		return "", fmt.Errorf("failed to list profiles for export: %w", err)
+	}
+
+	data, err := json.MarshalIndent(profiles, "", "  ")
+	if err != nil {
+		return "", fmt.Errorf("failed to serialise profiles: %w", err)
+	}
+
+	s.auditLog.LogExport(len(profiles), includeSecrets)
+	return string(data), nil
+}
+
+// ImportProfiles deserialises profiles from a JSON string and persists them.
+// The strategy parameter controls conflict resolution:
+//   - "skip" ignores profiles whose ID already exists
+//   - "overwrite" replaces existing profiles
+//   - "duplicate" always creates a new profile with a fresh ID
+func (s *Service) ImportProfiles(jsonData string, strategy string) (int, error) {
+	var profiles []*models.Profile
+	if err := json.Unmarshal([]byte(jsonData), &profiles); err != nil {
+		return 0, fmt.Errorf("invalid JSON: %w", err)
+	}
+
+	imported := 0
+	for _, p := range profiles {
+		switch strategy {
+		case "skip":
+			if existing, _ := s.store.GetProfile(p.ID); existing != nil {
+				continue
+			}
+			if err := s.store.CreateProfile(p); err != nil {
+				continue
+			}
+			imported++
+
+		case "overwrite":
+			p.UpdatedAt = time.Now()
+			if existing, _ := s.store.GetProfile(p.ID); existing != nil {
+				if err := s.store.UpdateProfile(p); err != nil {
+					continue
+				}
+			} else {
+				if err := s.store.CreateProfile(p); err != nil {
+					continue
+				}
+			}
+			imported++
+
+		case "duplicate":
+			p.ID = uuid.New().String()
+			now := time.Now()
+			p.CreatedAt = now
+			p.UpdatedAt = now
+			if err := s.store.CreateProfile(p); err != nil {
+				continue
+			}
+			imported++
+
+		default:
+			return 0, fmt.Errorf("unknown import strategy %q (expected skip, overwrite, or duplicate)", strategy)
+		}
+	}
+
+	s.auditLog.LogImport(imported)
+	return imported, nil
+}
+
+// ---------------------------------------------------------------------------
+// Audit
+// ---------------------------------------------------------------------------
+
+// ListAuditEntries returns the most recent audit entries.
+func (s *Service) ListAuditEntries(limit int) ([]models.AuditEntry, error) {
+	entries, err := s.auditLog.ListEntries(limit)
+	if err != nil {
+		return nil, err
+	}
+	result := make([]models.AuditEntry, len(entries))
+	for i, e := range entries {
+		result[i] = *e
+	}
+	return result, nil
+}
+
+// ---------------------------------------------------------------------------
+// Utility
+// ---------------------------------------------------------------------------
+
+// SelectFile opens a native file dialog and returns the chosen path.
+func (s *Service) SelectFile(title string, filters string) (string, error) {
+	if s.ctx == nil {
+		return "", fmt.Errorf("application context not set")
+	}
+
+	opts := wailsRuntime.OpenDialogOptions{
+		Title: title,
+	}
+	if filters != "" {
+		opts.Filters = []wailsRuntime.FileFilter{
+			{DisplayName: "Files", Pattern: filters},
+		}
+	}
+
+	path, err := wailsRuntime.OpenFileDialog(s.ctx, opts)
+	if err != nil {
+		return "", fmt.Errorf("file dialog failed: %w", err)
+	}
+	return path, nil
+}
+
+// SaveFile opens a native save dialog and returns the chosen path.
+func (s *Service) SaveFile(title string, defaultName string) (string, error) {
+	if s.ctx == nil {
+		return "", fmt.Errorf("application context not set")
+	}
+
+	path, err := wailsRuntime.SaveFileDialog(s.ctx, wailsRuntime.SaveDialogOptions{
+		Title:           title,
+		DefaultFilename: defaultName,
+	})
+	if err != nil {
+		return "", fmt.Errorf("save dialog failed: %w", err)
+	}
+	return path, nil
+}
+
+// GetAppInfo returns build and environment information.
+func (s *Service) GetAppInfo() map[string]string {
+	return map[string]string{
+		"version":  appVersion,
+		"go":       runtime.Version(),
+		"os":       runtime.GOOS,
+		"arch":     runtime.GOARCH,
+		"platform": runtime.GOOS + "/" + runtime.GOARCH,
+	}
+}
+
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+
+// promptSecret is a placeholder secret prompt that returns an error when
+// called outside of an interactive context. In production this would be
+// replaced by a Wails dialog event.
+func (s *Service) promptSecret(prompt string) (string, error) {
+	return "", fmt.Errorf("interactive secret prompt not available: %s", prompt)
+}
+
+// derefProfiles converts a slice of profile pointers to values.
+func derefProfiles(ptrs []*models.Profile) []models.Profile {
+	result := make([]models.Profile, len(ptrs))
+	for i, p := range ptrs {
+		result[i] = *p
+	}
+	return result
+}