mikael-lovqvists-claude-agent
67c1c3f9a4
Each request is signed with HMAC-SHA256 over timestamp+body using a per-user secret loaded from a --secrets file (never env vars or git). Users have a canApprove list controlling who may approve queued actions. Queue entries track submitted_by for permission checks on approve/deny. Also renames all identifiers to snake_case throughout the codebase. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
36 lines
1.0 KiB
JavaScript
36 lines
1.0 KiB
JavaScript
// Conduit client module — import this when using conduit programmatically.
|
|
// Usage: const client = create_conduit_client("agent", secret); await client.call_action("list-actions");
|
|
|
|
import { sign_request } from "./auth.mjs";
|
|
|
|
const BASE_URL = process.env.CONDUIT_URL || "http://localhost:3015";
|
|
|
|
export function create_conduit_client(username, secret) {
|
|
function auth_headers(body_string) {
|
|
return sign_request(secret, username, body_string);
|
|
}
|
|
|
|
async function call_action(action, params = {}) {
|
|
const body_string = JSON.stringify({ action, ...params });
|
|
const res = await fetch(`${BASE_URL}/action`, {
|
|
method: "POST",
|
|
headers: { "Content-Type": "application/json", ...auth_headers(body_string) },
|
|
body: body_string,
|
|
});
|
|
return res.json();
|
|
}
|
|
|
|
async function list_actions() {
|
|
return call_action("list-actions");
|
|
}
|
|
|
|
async function get_queue() {
|
|
const res = await fetch(`${BASE_URL}/queue`, {
|
|
headers: auth_headers(""),
|
|
});
|
|
return res.json();
|
|
}
|
|
|
|
return { call_action, list_actions, get_queue };
|
|
}
|