Amr Gharbeia
6c333af7aa
Some checks failed
Deploy-Agent-V15-Stdin / JOB-V15-STDIN (push) Failing after 4s
83 lines
3.5 KiB
Common Lisp
83 lines
3.5 KiB
Common Lisp
(defun vault-get-secret (provider &key type)
|
|
"Retrieves a secret (api-key or session) for a provider.")
|
|
|
|
(defun vault-set-secret (provider secret &key type)
|
|
"Securely stores a secret and triggers a Merkle snapshot.")
|
|
|
|
|
|
|
|
(defvar opencortex::*vault-memory* (make-hash-table :test 'equal)
|
|
"In-memory cache of sensitive credentials.")
|
|
|
|
(defun vault-mask-string (str)
|
|
"Returns a masked version of a sensitive string."
|
|
(if (and str (> (length str) 8))
|
|
(format nil "~a...~a" (subseq str 0 4) (subseq str (- (length str) 4)))
|
|
"[REDACTED]"))
|
|
|
|
(defun vault-get-secret (provider &key (type :api-key))
|
|
"Retrieves a credential. Type can be :api-key or :session."
|
|
(let* ((key (format nil "~a-~a" provider type))
|
|
(val (gethash key opencortex::*vault-memory*)))
|
|
(if val
|
|
val
|
|
;; Fallback to environment
|
|
(let ((env-var (case provider
|
|
((:gemini :gemini-api) "GEMINI_API_KEY")
|
|
(:openai "OPENAI_API_KEY")
|
|
(:anthropic "ANTHROPIC_API_KEY")
|
|
(:groq "GROQ_API_KEY")
|
|
(:openrouter "OPENROUTER_API_KEY")
|
|
(:telegram "TELEGRAM_BOT_TOKEN")
|
|
(:signal "SIGNAL_ACCOUNT_NUMBER")
|
|
(:matrix-homeserver "MATRIX_HOMESERVER")
|
|
(:matrix-token "MATRIX_ACCESS_TOKEN")
|
|
(t nil))))
|
|
(when (and env-var (eq type :api-key))
|
|
(uiop:getenv env-var))))))
|
|
|
|
(defun vault-set-secret (provider secret &key (type :api-key))
|
|
"Securely stores a secret and triggers a Merkle snapshot."
|
|
(let ((key (format nil "~a-~a" provider type)))
|
|
(setf (gethash key opencortex::*vault-memory*) secret)
|
|
(harness-log "VAULT - Updated ~a for ~a. Triggering Merkle snapshot..." type provider)
|
|
(snapshot-memory)
|
|
t))
|
|
|
|
(defun vault-onboard-gemini-web ()
|
|
"Instructions for the Autonomous Cookie Handshake."
|
|
(harness-log "--- GEMINI WEB ONBOARDING ---")
|
|
(harness-log "1. Visit gemini.google.com")
|
|
(harness-log "2. Run the 'Get Gemini Cookies' Bookmarklet.")
|
|
(harness-log " CODE: javascript:(function(){const c=document.cookie.split('; ').reduce((r,v)=>{const [n,val]=v.split('=');r[n]=val;return r},{});const target=['__Secure-1PSID','__Secure-1PSIDTS'];const out=target.map(n=>({name:n,value:c[n]}));prompt('Copy JSON:',JSON.stringify(out));})();")
|
|
(harness-log "PLATFORM GUIDE: Chrome/Firefox/Safari all support Bookmarklets via 'Add Page' or 'New Bookmark'.")
|
|
t)
|
|
|
|
(progn
|
|
(defskill :skill-credentials-vault
|
|
:priority 200 ; High priority, foundational
|
|
:trigger (lambda (ctx) (eq (getf (getf ctx :payload) :sensor) :onboarding-request))
|
|
:probabilistic nil
|
|
:deterministic (lambda (action ctx)
|
|
(vault-onboard-gemini-web)
|
|
action)))
|
|
|
|
#|
|
|
(defpackage :opencortex-vault-tests
|
|
(:use :cl :fiveam :opencortex))
|
|
(in-package :opencortex-vault-tests)
|
|
|
|
(def-suite vault-suite :description "Tests for the Credentials Vault.")
|
|
(in-suite vault-suite)
|
|
|
|
(test test-masking
|
|
(is (equal "sk-t...-key" (opencortex::vault-mask-string "sk-test-key")))
|
|
(is (equal "[REDACTED]" (opencortex::vault-mask-string "short"))))
|
|
|
|
(test test-vault-persistence
|
|
"Verify that setting a secret triggers a snapshot (mock check)."
|
|
(let ((old-version (opencortex::org-object-version (gethash "root" *memory*))))
|
|
(opencortex:vault-set-secret :test "secret-val")
|
|
(is (> (opencortex::org-object-version (gethash "root" *memory*)) old-version))))
|
|
|#
|