564 lines
18 KiB
Dart
564 lines
18 KiB
Dart
import 'account_runtime_client.dart';
|
|
import 'runtime_controllers_settings.dart';
|
|
import 'runtime_models.dart';
|
|
|
|
Future<void> loginAccountSettingsInternal(
|
|
SettingsController controller, {
|
|
required String baseUrl,
|
|
required String identifier,
|
|
required String password,
|
|
}) async {
|
|
final normalizedBaseUrl = normalizeAccountBaseUrlSettingsInternal(
|
|
baseUrl,
|
|
fallback: controller.snapshotInternal.accountBaseUrl,
|
|
);
|
|
if (normalizedBaseUrl.isEmpty) {
|
|
controller.accountStatusInternal = 'Account base URL is required';
|
|
controller.notifyListeners();
|
|
return;
|
|
}
|
|
if (identifier.trim().isEmpty || password.isEmpty) {
|
|
controller.accountStatusInternal = 'Email and password are required';
|
|
controller.notifyListeners();
|
|
return;
|
|
}
|
|
|
|
controller.accountBusyInternal = true;
|
|
controller.accountStatusInternal = 'Signing in...';
|
|
controller.pendingAccountMfaTicketInternal = '';
|
|
controller.pendingAccountBaseUrlInternal = '';
|
|
controller.notifyListeners();
|
|
|
|
try {
|
|
final client = controller.buildAccountClient(normalizedBaseUrl);
|
|
final payload = await client.login(
|
|
identifier: identifier.trim(),
|
|
password: password,
|
|
);
|
|
final requiresMfa =
|
|
payload['mfaRequired'] == true || payload['mfa_required'] == true;
|
|
if (requiresMfa) {
|
|
controller.pendingAccountMfaTicketInternal =
|
|
_stringValue(payload['mfaToken']).isNotEmpty
|
|
? _stringValue(payload['mfaToken'])
|
|
: _stringValue(payload['mfaTicket']);
|
|
controller.pendingAccountBaseUrlInternal = normalizedBaseUrl;
|
|
controller.accountStatusInternal = 'MFA required';
|
|
return;
|
|
}
|
|
|
|
await completeAccountSignInSettingsInternal(
|
|
controller,
|
|
baseUrl: normalizedBaseUrl,
|
|
payload: payload,
|
|
identifier: identifier.trim(),
|
|
);
|
|
} on AccountRuntimeException catch (error) {
|
|
controller.accountStatusInternal = error.message;
|
|
} finally {
|
|
controller.accountBusyInternal = false;
|
|
controller.notifyListeners();
|
|
}
|
|
}
|
|
|
|
Future<void> verifyAccountMfaSettingsInternal(
|
|
SettingsController controller, {
|
|
required String baseUrl,
|
|
required String code,
|
|
}) async {
|
|
final normalizedBaseUrl = normalizeAccountBaseUrlSettingsInternal(
|
|
baseUrl,
|
|
fallback: controller.pendingAccountBaseUrlInternal.isNotEmpty
|
|
? controller.pendingAccountBaseUrlInternal
|
|
: controller.snapshotInternal.accountBaseUrl,
|
|
);
|
|
if (normalizedBaseUrl.isEmpty) {
|
|
controller.accountStatusInternal = 'Account base URL is required';
|
|
controller.notifyListeners();
|
|
return;
|
|
}
|
|
if (controller.pendingAccountMfaTicketInternal.trim().isEmpty) {
|
|
controller.accountStatusInternal = 'MFA ticket is missing';
|
|
controller.notifyListeners();
|
|
return;
|
|
}
|
|
if (code.trim().isEmpty) {
|
|
controller.accountStatusInternal = 'MFA code is required';
|
|
controller.notifyListeners();
|
|
return;
|
|
}
|
|
|
|
controller.accountBusyInternal = true;
|
|
controller.accountStatusInternal = 'Verifying MFA...';
|
|
controller.notifyListeners();
|
|
|
|
try {
|
|
final client = controller.buildAccountClient(normalizedBaseUrl);
|
|
final payload = await client.verifyMfa(
|
|
mfaToken: controller.pendingAccountMfaTicketInternal,
|
|
code: code.trim(),
|
|
);
|
|
final identifier =
|
|
(await controller.storeInternal.loadAccountSessionIdentifier())
|
|
?.trim() ??
|
|
controller.snapshotInternal.accountUsername.trim();
|
|
controller.pendingAccountMfaTicketInternal = '';
|
|
controller.pendingAccountBaseUrlInternal = '';
|
|
await completeAccountSignInSettingsInternal(
|
|
controller,
|
|
baseUrl: normalizedBaseUrl,
|
|
payload: payload,
|
|
identifier: identifier,
|
|
);
|
|
} on AccountRuntimeException catch (error) {
|
|
controller.accountStatusInternal = error.message;
|
|
} finally {
|
|
controller.accountBusyInternal = false;
|
|
controller.notifyListeners();
|
|
}
|
|
}
|
|
|
|
Future<void> completeAccountSignInSettingsInternal(
|
|
SettingsController controller, {
|
|
required String baseUrl,
|
|
required Map<String, dynamic> payload,
|
|
required String identifier,
|
|
}) async {
|
|
final token = _stringValue(payload['token']).isNotEmpty
|
|
? _stringValue(payload['token'])
|
|
: _stringValue(payload['access_token']);
|
|
if (token.isEmpty) {
|
|
controller.accountStatusInternal = 'Account session token is missing';
|
|
return;
|
|
}
|
|
final user = _asMap(payload['user']);
|
|
final sessionSummary = AccountSessionSummary(
|
|
userId: _stringValue(user['id']),
|
|
email: _stringValue(user['email']),
|
|
name: _stringValue(user['name']).isNotEmpty
|
|
? _stringValue(user['name'])
|
|
: _stringValue(user['username']),
|
|
role: _stringValue(user['role']),
|
|
mfaEnabled: user['mfaEnabled'] == true,
|
|
);
|
|
await controller.storeInternal.saveAccountSessionToken(token);
|
|
await controller.storeInternal.saveAccountSessionExpiresAtMs(
|
|
_parseExpiresAtMs(payload['expiresAt']),
|
|
);
|
|
await controller.storeInternal.saveAccountSessionUserId(
|
|
sessionSummary.userId,
|
|
);
|
|
await controller.storeInternal.saveAccountSessionIdentifier(identifier);
|
|
await controller.storeInternal.saveAccountSessionSummary(sessionSummary);
|
|
controller.accountStatusInternal = 'Signed in';
|
|
await restoreAccountSessionSettingsInternal(
|
|
controller,
|
|
baseUrl: baseUrl,
|
|
quiet: true,
|
|
);
|
|
}
|
|
|
|
Future<void> restoreAccountSessionSettingsInternal(
|
|
SettingsController controller, {
|
|
String baseUrl = '',
|
|
bool quiet = false,
|
|
}) async {
|
|
final normalizedBaseUrl = normalizeAccountBaseUrlSettingsInternal(
|
|
baseUrl,
|
|
fallback: controller.snapshotInternal.accountBaseUrl,
|
|
);
|
|
final token =
|
|
(await controller.storeInternal.loadAccountSessionToken())?.trim() ?? '';
|
|
if (normalizedBaseUrl.isEmpty || token.isEmpty) {
|
|
return;
|
|
}
|
|
|
|
if (!quiet) {
|
|
controller.accountBusyInternal = true;
|
|
controller.accountStatusInternal = 'Restoring account session...';
|
|
controller.notifyListeners();
|
|
}
|
|
|
|
try {
|
|
final client = controller.buildAccountClient(normalizedBaseUrl);
|
|
final session = await client.loadSession(token: token);
|
|
await controller.storeInternal.saveAccountSessionSummary(session);
|
|
if (session.userId.trim().isNotEmpty) {
|
|
await controller.storeInternal.saveAccountSessionUserId(session.userId);
|
|
}
|
|
final identifier = session.email.trim().isNotEmpty
|
|
? session.email.trim()
|
|
: (await controller.storeInternal.loadAccountSessionIdentifier())
|
|
?.trim() ??
|
|
'';
|
|
if (identifier.isNotEmpty) {
|
|
await controller.storeInternal.saveAccountSessionIdentifier(identifier);
|
|
}
|
|
controller.accountStatusInternal = session.email.trim().isEmpty
|
|
? 'Signed in'
|
|
: 'Signed in as ${session.email.trim()}';
|
|
await syncAccountSettingsInternal(
|
|
controller,
|
|
baseUrl: normalizedBaseUrl,
|
|
quiet: true,
|
|
);
|
|
} on AccountRuntimeException catch (error) {
|
|
if (error.statusCode == 401) {
|
|
await logoutAccountSettingsInternal(
|
|
controller,
|
|
statusMessage: 'Session expired',
|
|
quiet: true,
|
|
);
|
|
} else {
|
|
controller.accountStatusInternal =
|
|
'Session restore failed: ${error.message}';
|
|
}
|
|
} finally {
|
|
if (!quiet) {
|
|
controller.accountBusyInternal = false;
|
|
controller.notifyListeners();
|
|
}
|
|
}
|
|
}
|
|
|
|
Future<AccountSyncResult> syncAccountSettingsInternal(
|
|
SettingsController controller, {
|
|
String baseUrl = '',
|
|
bool quiet = false,
|
|
}) async {
|
|
final normalizedBaseUrl = normalizeAccountBaseUrlSettingsInternal(
|
|
baseUrl,
|
|
fallback: controller.snapshotInternal.accountBaseUrl,
|
|
);
|
|
final token =
|
|
(await controller.storeInternal.loadAccountSessionToken())?.trim() ?? '';
|
|
if (normalizedBaseUrl.isEmpty || token.isEmpty) {
|
|
const result = AccountSyncResult(
|
|
state: 'blocked',
|
|
message: 'Account session is unavailable',
|
|
);
|
|
controller.accountStatusInternal = result.message;
|
|
if (!quiet) {
|
|
controller.notifyListeners();
|
|
}
|
|
return result;
|
|
}
|
|
|
|
if (!quiet) {
|
|
controller.accountBusyInternal = true;
|
|
controller.accountStatusInternal = 'Syncing remote defaults...';
|
|
controller.notifyListeners();
|
|
}
|
|
|
|
try {
|
|
final client = controller.buildAccountClient(normalizedBaseUrl);
|
|
final response = await client.loadProfile(token: token);
|
|
final previousState =
|
|
await controller.storeInternal.loadAccountSyncState() ??
|
|
AccountSyncState.defaults();
|
|
final nextState = previousState.copyWith(
|
|
syncedDefaults: response.profile,
|
|
syncState: 'ready',
|
|
syncMessage: 'Remote defaults synced',
|
|
lastSyncAtMs: DateTime.now().millisecondsSinceEpoch,
|
|
lastSyncSource: normalizedBaseUrl,
|
|
lastSyncError: '',
|
|
profileScope: response.profileScope,
|
|
tokenConfigured: response.tokenConfigured,
|
|
);
|
|
await controller.storeInternal.saveAccountSyncState(nextState);
|
|
final currentSettings = controller.snapshotInternal;
|
|
final currentModeConfig = currentSettings.acpBridgeServerModeConfig;
|
|
final nextModeConfig = currentModeConfig.copyWith(
|
|
cloudSynced: currentModeConfig.cloudSynced.copyWith(
|
|
accountBaseUrl: normalizedBaseUrl,
|
|
accountIdentifier: currentSettings.accountUsername.trim().isNotEmpty
|
|
? currentSettings.accountUsername.trim()
|
|
: controller.accountSessionInternal?.email.trim() ?? '',
|
|
lastSyncAt: nextState.lastSyncAtMs,
|
|
remoteServerSummary: currentModeConfig.cloudSynced.remoteServerSummary
|
|
.copyWith(
|
|
endpoint: response.profile.openclawUrl.trim().isNotEmpty
|
|
? response.profile.openclawUrl.trim()
|
|
: response.profile.apisixUrl.trim(),
|
|
hasAdvancedOverrides: false,
|
|
),
|
|
),
|
|
);
|
|
if (nextModeConfig.toJson().toString() !=
|
|
currentModeConfig.toJson().toString()) {
|
|
await controller.saveSnapshot(
|
|
currentSettings.copyWith(
|
|
accountLocalMode: false,
|
|
acpBridgeServerModeConfig: nextModeConfig,
|
|
),
|
|
);
|
|
}
|
|
await applyAccountSyncedDefaultsSettingsInternal(
|
|
controller,
|
|
state: nextState,
|
|
);
|
|
await controller.reloadDerivedStateInternal();
|
|
final email = controller.accountSessionInternal?.email.trim() ?? '';
|
|
controller.accountStatusInternal = email.isEmpty
|
|
? 'Signed in'
|
|
: 'Signed in as $email';
|
|
return const AccountSyncResult(
|
|
state: 'ready',
|
|
message: 'Remote defaults synced',
|
|
);
|
|
} on AccountRuntimeException catch (error) {
|
|
final previousState =
|
|
await controller.storeInternal.loadAccountSyncState() ??
|
|
AccountSyncState.defaults();
|
|
if (_isNonBlockingAccountProfileSyncError(error)) {
|
|
final fallbackState = previousState.copyWith(
|
|
syncState: 'ready',
|
|
syncMessage: 'Remote defaults unavailable; using existing settings',
|
|
lastSyncAtMs: DateTime.now().millisecondsSinceEpoch,
|
|
lastSyncSource: normalizedBaseUrl,
|
|
lastSyncError: error.message,
|
|
);
|
|
await controller.storeInternal.saveAccountSyncState(fallbackState);
|
|
await controller.reloadDerivedStateInternal();
|
|
final email = controller.accountSessionInternal?.email.trim() ?? '';
|
|
controller.accountStatusInternal = email.isEmpty
|
|
? 'Signed in'
|
|
: 'Signed in as $email';
|
|
return const AccountSyncResult(
|
|
state: 'ready',
|
|
message: 'Remote defaults unavailable; using existing settings',
|
|
);
|
|
}
|
|
final errorState = previousState.copyWith(
|
|
syncState: 'error',
|
|
syncMessage: error.message,
|
|
lastSyncAtMs: DateTime.now().millisecondsSinceEpoch,
|
|
lastSyncSource: normalizedBaseUrl,
|
|
lastSyncError: error.message,
|
|
);
|
|
await controller.storeInternal.saveAccountSyncState(errorState);
|
|
await controller.reloadDerivedStateInternal();
|
|
controller.accountStatusInternal = error.message;
|
|
return AccountSyncResult(state: 'error', message: error.message);
|
|
} finally {
|
|
if (!quiet) {
|
|
controller.accountBusyInternal = false;
|
|
controller.notifyListeners();
|
|
}
|
|
}
|
|
}
|
|
|
|
bool _isNonBlockingAccountProfileSyncError(AccountRuntimeException error) {
|
|
return error.errorCode == 'xworkmate_secret_read_failed';
|
|
}
|
|
|
|
Future<void> applyAccountSyncedDefaultsSettingsInternal(
|
|
SettingsController controller, {
|
|
required AccountSyncState state,
|
|
}) async {
|
|
final previous = controller.snapshotInternal;
|
|
var next = previous;
|
|
final defaults = state.syncedDefaults;
|
|
if (defaults.openclawUrl.trim().isNotEmpty) {
|
|
final remoteProfile = previous.gatewayProfiles[kGatewayRemoteProfileIndex];
|
|
final normalized = normalizeGatewayManualEndpointInternal(
|
|
host: defaults.openclawUrl,
|
|
port: remoteProfile.port,
|
|
tls: remoteProfile.tls,
|
|
);
|
|
next = next.copyWithGatewayProfileAt(
|
|
kGatewayRemoteProfileIndex,
|
|
remoteProfile.copyWith(
|
|
mode: RuntimeConnectionMode.remote,
|
|
useSetupCode: false,
|
|
setupCode: '',
|
|
host: normalized.host,
|
|
port: normalized.port,
|
|
tls: normalized.tls,
|
|
),
|
|
);
|
|
}
|
|
|
|
final gatewayTokenLocator = defaults.locatorForTarget(
|
|
kAccountManagedSecretTargetOpenclawGatewayToken,
|
|
);
|
|
if (gatewayTokenLocator != null) {
|
|
final remoteProfile = next.gatewayProfiles[kGatewayRemoteProfileIndex];
|
|
next = next.copyWithGatewayProfileAt(
|
|
kGatewayRemoteProfileIndex,
|
|
remoteProfile.copyWith(tokenRef: gatewayTokenLocator.target),
|
|
);
|
|
}
|
|
|
|
if (defaults.vaultUrl.trim().isNotEmpty) {
|
|
next = next.copyWith(
|
|
vault: next.vault.copyWith(address: defaults.vaultUrl.trim()),
|
|
);
|
|
}
|
|
|
|
if (defaults.vaultNamespace.trim().isNotEmpty) {
|
|
next = next.copyWith(
|
|
vault: next.vault.copyWith(namespace: defaults.vaultNamespace.trim()),
|
|
);
|
|
}
|
|
|
|
if (defaults.apisixUrl.trim().isNotEmpty) {
|
|
next = next.copyWith(
|
|
aiGateway: next.aiGateway.copyWith(baseUrl: defaults.apisixUrl.trim()),
|
|
);
|
|
}
|
|
|
|
final aiGatewayLocator = defaults.locatorForTarget(
|
|
kAccountManagedSecretTargetAIGatewayAccessToken,
|
|
);
|
|
if (aiGatewayLocator != null) {
|
|
next = next.copyWith(
|
|
aiGateway: next.aiGateway.copyWith(apiKeyRef: aiGatewayLocator.target),
|
|
);
|
|
}
|
|
|
|
final ollamaLocator = defaults.locatorForTarget(
|
|
kAccountManagedSecretTargetOllamaCloudApiKey,
|
|
);
|
|
if (ollamaLocator != null) {
|
|
next = next.copyWith(
|
|
ollamaCloud: next.ollamaCloud.copyWith(apiKeyRef: ollamaLocator.target),
|
|
);
|
|
}
|
|
|
|
if (next.accountLocalMode) {
|
|
next = next.copyWith(accountLocalMode: false);
|
|
}
|
|
next = next.copyWith(
|
|
acpBridgeServerModeConfig: next.acpBridgeServerModeConfig.copyWith(
|
|
cloudSynced: next.acpBridgeServerModeConfig.cloudSynced.copyWith(
|
|
accountBaseUrl: next.accountBaseUrl,
|
|
accountIdentifier: next.accountUsername,
|
|
lastSyncAt: state.lastSyncAtMs,
|
|
remoteServerSummary: next
|
|
.acpBridgeServerModeConfig
|
|
.cloudSynced
|
|
.remoteServerSummary
|
|
.copyWith(
|
|
endpoint: defaults.openclawUrl.trim().isNotEmpty
|
|
? defaults.openclawUrl.trim()
|
|
: defaults.apisixUrl.trim(),
|
|
hasAdvancedOverrides: false,
|
|
),
|
|
),
|
|
),
|
|
);
|
|
|
|
if (next.toJsonString() != previous.toJsonString()) {
|
|
await controller.saveSnapshot(next);
|
|
}
|
|
}
|
|
|
|
Future<void> logoutAccountSettingsInternal(
|
|
SettingsController controller, {
|
|
String statusMessage = 'Signed out',
|
|
bool quiet = false,
|
|
}) async {
|
|
if (!quiet) {
|
|
controller.accountBusyInternal = true;
|
|
controller.notifyListeners();
|
|
}
|
|
controller.pendingAccountMfaTicketInternal = '';
|
|
controller.pendingAccountBaseUrlInternal = '';
|
|
await controller.storeInternal.clearAccountSessionToken();
|
|
await controller.storeInternal.clearAccountSessionExpiresAtMs();
|
|
await controller.storeInternal.clearAccountSessionUserId();
|
|
await controller.storeInternal.clearAccountSessionIdentifier();
|
|
await controller.storeInternal.clearAccountSessionSummary();
|
|
await controller.storeInternal.clearAccountSyncState();
|
|
await controller.storeInternal.clearAccountManagedSecrets();
|
|
final currentSnapshot = controller.snapshotInternal;
|
|
final clearedCloudSync = currentSnapshot.acpBridgeServerModeConfig.cloudSynced
|
|
.copyWith(
|
|
accountIdentifier: '',
|
|
lastSyncAt: 0,
|
|
remoteServerSummary: currentSnapshot
|
|
.acpBridgeServerModeConfig
|
|
.cloudSynced
|
|
.remoteServerSummary
|
|
.copyWith(endpoint: '', hasAdvancedOverrides: false),
|
|
);
|
|
if (!controller.snapshotInternal.accountLocalMode) {
|
|
await controller.saveSnapshot(
|
|
currentSnapshot.copyWith(
|
|
accountLocalMode: true,
|
|
acpBridgeServerModeConfig: currentSnapshot.acpBridgeServerModeConfig
|
|
.copyWith(cloudSynced: clearedCloudSync),
|
|
),
|
|
);
|
|
} else {
|
|
controller.snapshotInternal = currentSnapshot.copyWith(
|
|
acpBridgeServerModeConfig: currentSnapshot.acpBridgeServerModeConfig
|
|
.copyWith(cloudSynced: clearedCloudSync),
|
|
);
|
|
await controller.reloadDerivedStateInternal();
|
|
}
|
|
controller.accountStatusInternal = statusMessage;
|
|
if (!quiet) {
|
|
controller.accountBusyInternal = false;
|
|
controller.notifyListeners();
|
|
}
|
|
}
|
|
|
|
Future<void> cancelAccountMfaChallengeSettingsInternal(
|
|
SettingsController controller,
|
|
) async {
|
|
controller.pendingAccountMfaTicketInternal = '';
|
|
controller.pendingAccountBaseUrlInternal = '';
|
|
if (!controller.accountSignedIn) {
|
|
controller.accountStatusInternal = 'Signed out';
|
|
}
|
|
controller.notifyListeners();
|
|
}
|
|
|
|
String normalizeAccountBaseUrlSettingsInternal(
|
|
String raw, {
|
|
String fallback = '',
|
|
}) {
|
|
final candidate = raw.trim().isNotEmpty ? raw.trim() : fallback.trim();
|
|
if (candidate.isEmpty) {
|
|
return '';
|
|
}
|
|
return candidate.endsWith('/')
|
|
? candidate.substring(0, candidate.length - 1)
|
|
: candidate;
|
|
}
|
|
|
|
int _parseExpiresAtMs(Object? value) {
|
|
if (value is int) {
|
|
return value;
|
|
}
|
|
if (value is num) {
|
|
return value.toInt();
|
|
}
|
|
final raw = _stringValue(value);
|
|
if (raw.isEmpty) {
|
|
return 0;
|
|
}
|
|
final asInt = int.tryParse(raw);
|
|
if (asInt != null) {
|
|
return asInt;
|
|
}
|
|
return DateTime.tryParse(raw)?.millisecondsSinceEpoch ?? 0;
|
|
}
|
|
|
|
Map<String, dynamic> _asMap(Object? value) {
|
|
if (value is Map<String, dynamic>) {
|
|
return value;
|
|
}
|
|
if (value is Map) {
|
|
return value.cast<String, dynamic>();
|
|
}
|
|
return const <String, dynamic>{};
|
|
}
|
|
|
|
String _stringValue(Object? value) {
|
|
return value?.toString().trim() ?? '';
|
|
}
|