Changeset 0.38.1 (#234)

Co-authored-by: gobha <jasafpro@gmail.com>
Co-committed-by: gobha <jasafpro@gmail.com>

server/sandbox/connections_module.go

@@ -0,0 +1,107 @@
+// Package sandbox — connections_module.go
+//
+// v0.38.1: Connections module for Starlark extensions.
+// Requires permission: connections.read
+//
+// Starlark API:
+//   conn = connections.get("gitea")                    → dict or None
+//   conn = connections.get("gitea", name="Work Gitea") → dict or None
+//   all  = connections.list("gitea")                   → list of dicts
+//
+// Each returned dict contains the connection's config fields with
+// secrets decrypted. The module delegates to a ConnectionResolver
+// interface so the runner stays agnostic to the vault.
+package sandbox
+
+import (
+	"context"
+
+	"go.starlark.net/starlark"
+	"go.starlark.net/starlarkstruct"
+
+	"chat-switchboard/models"
+)
+
+// ConnectionResolver resolves extension connections with secret decryption.
+// Implemented by the handler layer which owns the vault.
+type ConnectionResolver interface {
+	// Resolve returns a single connection's decrypted config via the
+	// scope chain (personal → team → global). Empty name = first match.
+	Resolve(ctx context.Context, userID, connType, name string) (*models.ExtConnection, error)
+
+	// ResolveAll returns all accessible connections of a type with
+	// decrypted configs.
+	ResolveAll(ctx context.Context, userID, connType string) ([]models.ExtConnection, error)
+}
+
+// BuildConnectionsModule creates the "connections" module.
+func BuildConnectionsModule(ctx context.Context, resolver ConnectionResolver, userID string) *starlarkstruct.Module {
+	return MakeModule("connections", starlark.StringDict{
+		"get": starlark.NewBuiltin("connections.get", func(
+			thread *starlark.Thread, b *starlark.Builtin,
+			args starlark.Tuple, kwargs []starlark.Tuple,
+		) (starlark.Value, error) {
+			var connType string
+			var name string
+			if err := starlark.UnpackArgs(b.Name(), args, kwargs,
+				"type", &connType,
+				"name?", &name,
+			); err != nil {
+				return nil, err
+			}
+
+			conn, err := resolver.Resolve(ctx, userID, connType, name)
+			if err != nil || conn == nil {
+				return starlark.None, nil
+			}
+			return connectionToDict(conn), nil
+		}),
+
+		"list": starlark.NewBuiltin("connections.list", func(
+			thread *starlark.Thread, b *starlark.Builtin,
+			args starlark.Tuple, kwargs []starlark.Tuple,
+		) (starlark.Value, error) {
+			var connType string
+			if err := starlark.UnpackPositionalArgs(b.Name(), args, kwargs, 1, &connType); err != nil {
+				return nil, err
+			}
+
+			conns, err := resolver.ResolveAll(ctx, userID, connType)
+			if err != nil {
+				return starlark.NewList(nil), nil
+			}
+
+			elems := make([]starlark.Value, len(conns))
+			for i := range conns {
+				elems[i] = connectionToDict(&conns[i])
+			}
+			return starlark.NewList(elems), nil
+		}),
+	})
+}
+
+// connectionToDict converts an ExtConnection to a Starlark dict.
+// Config fields are flattened into the top-level dict alongside id/name/type.
+func connectionToDict(conn *models.ExtConnection) *starlark.Dict {
+	d := starlark.NewDict(4 + len(conn.Config))
+	d.SetKey(starlark.String("id"), starlark.String(conn.ID))
+	d.SetKey(starlark.String("type"), starlark.String(conn.Type))
+	d.SetKey(starlark.String("name"), starlark.String(conn.Name))
+	d.SetKey(starlark.String("scope"), starlark.String(conn.Scope))
+
+	for k, v := range conn.Config {
+		switch val := v.(type) {
+		case string:
+			d.SetKey(starlark.String(k), starlark.String(val))
+		case float64:
+			d.SetKey(starlark.String(k), starlark.Float(val))
+		case bool:
+			d.SetKey(starlark.String(k), starlark.Bool(val))
+		default:
+			// Fallback: coerce to string
+			d.SetKey(starlark.String(k), starlark.String(""))
+		}
+	}
+
+	return d
+}