mirror of
https://github.com/Dvorinka/Primora.git
synced 2026-10-28 15:51:23 +00:00
Tomas DvorakandDevin
585bb04ab2
Local vault (apps/cli): clean-room PRMVLT01 format — Argon2id → XChaCha20-Poly1305, AEAD-bound header, atomic writes. vault:* / secrets:* / inject (primora:// refs) / agent credential broker (dummy tokens in the child, real secret on the wire) / TTL sessions / stack:* operator group. Project vault (backend): core.project_secrets, AES-256-GCM via the platform encryptor. Metadata-only list, audit-logged reveal, and secret://NAME refs resolved at job delivery — refs stored, values never. Surfaces: dashboard Vault page (+ local-vault card under the Tauri shell), desktop vault window via IPC to the primora binary, secrets:* --remote CLI mode, metadata/write-only MCP tools so agents consume secrets via secret:// refs without holding plaintext. Authored By: TDvorak <[email protected]> Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
91 lines
2.9 KiB
HTML
91 lines
2.9 KiB
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
|
<meta name="color-scheme" content="dark" />
|
|
<title>Primora</title>
|
|
<link rel="icon" type="image/svg+xml" href="icon.svg" />
|
|
<link rel="stylesheet" href="style.css" />
|
|
</head>
|
|
<body>
|
|
<main class="card">
|
|
<img src="icon.svg" class="logo" alt="" />
|
|
<h1>Primora</h1>
|
|
<p class="sub">Connect to your self-hosted deployment.</p>
|
|
<form id="form">
|
|
<input
|
|
id="url"
|
|
type="text"
|
|
inputmode="url"
|
|
placeholder="https://primora.example.com"
|
|
autocomplete="off"
|
|
spellcheck="false"
|
|
autofocus
|
|
/>
|
|
<button type="submit" id="go">Connect</button>
|
|
</form>
|
|
<p id="err" class="err" hidden></p>
|
|
<p class="hint">The desktop app renders the console served by your own server. Nothing is hosted by us.</p>
|
|
<p class="hint"><a href="#" id="vault-link" class="vlink">Open the local Secrets Vault</a></p>
|
|
</main>
|
|
|
|
<script type="module">
|
|
const tauri = window.__TAURI__;
|
|
const form = document.getElementById("form");
|
|
const input = document.getElementById("url");
|
|
const button = document.getElementById("go");
|
|
const err = document.getElementById("err");
|
|
|
|
const fail = (msg) => {
|
|
err.textContent = msg;
|
|
err.hidden = false;
|
|
button.disabled = false;
|
|
button.textContent = "Connect";
|
|
};
|
|
|
|
if (!tauri) {
|
|
fail("This page is meant to run inside the Primora desktop app.");
|
|
} else {
|
|
// A saved deployment URL means "skip the form" on every launch.
|
|
const saved = await tauri.core.invoke("get_server_url").catch(() => null);
|
|
if (saved) location.replace(saved);
|
|
}
|
|
|
|
document.getElementById("vault-link").addEventListener("click", (e) => {
|
|
e.preventDefault();
|
|
tauri?.event.emit("open-vault");
|
|
});
|
|
|
|
form.addEventListener("submit", async (event) => {
|
|
event.preventDefault();
|
|
err.hidden = true;
|
|
button.disabled = true;
|
|
button.textContent = "Checking…";
|
|
|
|
let url = input.value.trim();
|
|
if (!/^https?:\/\//i.test(url)) url = `https://${url}`;
|
|
|
|
try {
|
|
await tauri.core.invoke("set_server_url", { url });
|
|
} catch (e) {
|
|
fail(String(e));
|
|
return;
|
|
}
|
|
|
|
// Reachability probe — opaque (no-cors), so it proves the host answers,
|
|
// not that it is a Primora deployment. A wrong-but-alive URL is recoverable
|
|
// via the tray menu's "Change server".
|
|
try {
|
|
await fetch(url, { mode: "no-cors", signal: AbortSignal.timeout(8000) });
|
|
} catch {
|
|
fail("Server did not respond. Check the URL and that the deployment is up.");
|
|
return;
|
|
}
|
|
|
|
location.replace(url);
|
|
});
|
|
</script>
|
|
</body>
|
|
</html>
|