mirror of
https://github.com/profullstack/agentbbs.git
synced 2026-08-13 22:37:28 +00:00
Anthony Ettinger
232b8151a2
A privileged operator console reached as `ssh admin@host`, gated by route
plus the $AGENTBBS_ADMINS allowlist (admin status is operator-granted only,
never self-assigned in-band). It is a self-contained Bubble Tea model, not a
hub plugin, so it never appears in the public menu.
Sections (PRD §6):
- Users & members: list accounts; b = suspend/ban (operators protected).
Banned accounts are blocked at the hub and pod@ routes.
- Sessions & pods: live in-memory session registry; k = disconnect.
- Moderation & audit: admin action log + agent@ transcripts (tab to switch).
- Config & plugins: runtime snapshot; space = enable/disable a plugin
(persisted; filtered from the hub on next sign-in).
Every privileged action is written to a new admin_actions audit table.
store: + banned column, admin_actions and plugin_state tables, and the
backing methods (ListUsers/SetBanned/RecentSessions/LogAdminAction/
RecentAdminActions/RecentChatsAll/DisabledPlugins/SetPluginDisabled), with
unit tests. auth: admin allowlist helpers + tests. Docs in docs/admin.md;
README M2 flipped to done.
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
95 lines
3.3 KiB
Go
95 lines
3.3 KiB
Go
// Package auth resolves SSH connections into AgentBBS identities (PRD §4.4).
|
|
package auth
|
|
|
|
import (
|
|
"os"
|
|
"strings"
|
|
|
|
"github.com/charmbracelet/ssh"
|
|
gossh "golang.org/x/crypto/ssh"
|
|
)
|
|
|
|
// Kind classifies an identity.
|
|
type Kind string
|
|
|
|
const (
|
|
Guest Kind = "guest"
|
|
Member Kind = "member"
|
|
Agent Kind = "agent"
|
|
)
|
|
|
|
// User is the resolved identity for one session.
|
|
type User struct {
|
|
Name string
|
|
Kind Kind
|
|
PubKeyFP string // SHA256 fingerprint, empty for guests without a key
|
|
StoreID int64 // 0 for guests
|
|
}
|
|
|
|
// GuestNames are usernames that always map to an anonymous guest hub session.
|
|
var GuestNames = map[string]bool{"bbs": true, "play": true, "guest": true}
|
|
|
|
// PodNames are usernames that route to a personal pod instead of the hub.
|
|
// Pod access requires an active paid membership (PRD pods addendum).
|
|
var PodNames = map[string]bool{"pod": true}
|
|
|
|
// JoinNames are usernames that trigger the onboarding flow: register the
|
|
// visitor's public key, print instructions, and disconnect.
|
|
var JoinNames = map[string]bool{"join": true, "signup": true, "register": true}
|
|
|
|
// DomainNames are usernames that route to the custom-domain self-service flow:
|
|
// list/add/remove the domains pointed at a member's homepage.
|
|
var DomainNames = map[string]bool{"domain": true, "domains": true}
|
|
|
|
// AdminNames are usernames that route to the privileged admin console (PRD §6).
|
|
// The route only opens for accounts whose name is in the operator allowlist
|
|
// (see IsAdmin); the name itself confers nothing.
|
|
var AdminNames = map[string]bool{"admin": true, "sysop": true}
|
|
|
|
// IsGuestName reports whether the SSH username requests anonymous hub access.
|
|
func IsGuestName(u string) bool { return GuestNames[strings.ToLower(u)] }
|
|
|
|
// IsPodName reports whether the SSH username requests the pod route.
|
|
func IsPodName(u string) bool { return PodNames[strings.ToLower(u)] }
|
|
|
|
// IsJoinName reports whether the SSH username requests onboarding.
|
|
func IsJoinName(u string) bool { return JoinNames[strings.ToLower(u)] }
|
|
|
|
// IsDomainName reports whether the SSH username requests the custom-domain flow.
|
|
func IsDomainName(u string) bool { return DomainNames[strings.ToLower(u)] }
|
|
|
|
// IsAdminName reports whether the SSH username requests the admin console.
|
|
func IsAdminName(u string) bool { return AdminNames[strings.ToLower(u)] }
|
|
|
|
// Admins returns the operator-configured admin allowlist: the lowercased,
|
|
// comma/space-separated account names in $AGENTBBS_ADMINS. Admin status can
|
|
// only be granted by the operator (via env), never self-assigned in-band.
|
|
func Admins() map[string]bool {
|
|
out := map[string]bool{}
|
|
for _, f := range strings.FieldsFunc(os.Getenv("AGENTBBS_ADMINS"), func(r rune) bool {
|
|
return r == ',' || r == ' ' || r == '\t' || r == '\n'
|
|
}) {
|
|
out[strings.ToLower(f)] = true
|
|
}
|
|
return out
|
|
}
|
|
|
|
// IsAdmin reports whether the account name is in the operator allowlist.
|
|
func IsAdmin(name string) bool { return Admins()[strings.ToLower(name)] }
|
|
|
|
// KindFor infers the identity kind from a (non-guest) username.
|
|
// Usernames prefixed "agent-" are automated clients (PRD §3).
|
|
func KindFor(username string) Kind {
|
|
if strings.HasPrefix(strings.ToLower(username), "agent-") {
|
|
return Agent
|
|
}
|
|
return Member
|
|
}
|
|
|
|
// Fingerprint returns the SHA256 fingerprint for a session public key, or "".
|
|
func Fingerprint(key ssh.PublicKey) string {
|
|
if key == nil {
|
|
return ""
|
|
}
|
|
return gossh.FingerprintSHA256(key)
|
|
}
|