@@ -2,25 +2,31 @@

 (in-package :asdf-user)

 (defsystem :aws-access 

-    :description "A simple tool for access to CJ's AWS accounts"

-    :author "Ed L <edward@elangley.org>"

-    :license "MIT"

-    :depends-on (:alexandria

-                 :aws-sdk

-                 :aws-sdk/services/sts

-                 :cells

-                 :cl-yaml

-                 :fwoar-lisputils

-                 :serapeum

-                 :ubiquitous

-                 :uiop

-                 :yason

-                 :cxml

-                 :xpath)

-    :serial t

-    :components ((:module "src"

-                  :serial t

-                  :components ((:file "package")

-                               (:file "domain")

-                               (:file "mfa-tool")

-                               (:file "capi-interface")))))

+  :description "A simple tool for access to CJ's AWS accounts"

+  :author "Ed L <edward@elangley.org>"

+  :license "MIT"

+  :depends-on (:alexandria

+               :aws-sdk

+               :aws-sdk/services/sts

+               :cells

+               :cl-yaml

+               :cxml

+               :daydreamer

+               :fwoar-lisputils

+               :serapeum

+               :ubiquitous

+               :uiop

+               :xpath

+               :yason)

+  :serial t

+  :components ((:module "src"

+                :serial t

+                :components ((:file "package")

+                             (:file "store")

+                             (:file "aws-dispatcher")

+                             (:file "domain")

+                             (:file "objc-utils")

+                             (:file "mfa-tool")

+                             (:file "stack-store")

+                             (:file "stack")

+                             (:file "capi-interface")))))

new file mode 100644

@@ -0,0 +1,52 @@

+(defpackage :mfa-tool.aws-dispatcher

+  (:use :cl)

+  (:export #:aws-dispatcher #:update-stacks #:select-stack #:stacks #:stack))

+(in-package :mfa-tool.aws-dispatcher)

+

+(defclass aws-dispatcher ()

+  ((%region :reader region :accessor %region

+            :initarg :region)

+   (%credentials :reader credentials

+                 :initarg :credentials))

+  (:default-initargs

+   :region "us-east-1"

+   :credentials (error "AWS-DISPATCHER requires a :CREDENTIALS initarg")))

+

+(defclass update-stacks ()

+  ((%stacks :initarg :stacks :reader stacks)))

+(defun update-stacks (stacks)

+  (fw.lu:new 'update-stacks stacks))

+

+(defclass select-stack ()

+  ((%stacks :initarg :stack :reader stack)))

+

+(defun select-stack (stack)

+  (fw.lu:new 'select-stack stack))

+

+(defclass update-region ()

+  ((%new-region :initarg :region :reader region)))

+(defun update-region (region)

+  (fw.lu:new 'update-region region))

+

+(defmethod mfa-tool.store:dispatch :around ((store aws-dispatcher) action)

+  (let ((aws-sdk:*session* (aws-sdk:make-session :credentials (credentials store)

+                                                 :region (region store))))

+    (call-next-method)))

+

+(defmethod mfa-tool.store:execute ((store aws-dispatcher) (action update-region))

+  (setf (%region store) (region action)))

+

+(defmethod mfa-tool.store:dispatch :after ((store aws-dispatcher) (action update-region))

+  (mfa-tool.store:dispatch store :|Get Stacks|))

+

+(defmethod mfa-tool.store:dispatch :after ((store aws-dispatcher) (action (eql :|Get Stacks|)))

+  (bt:make-thread

+   (lambda ()

+     (let ((aws-sdk:*session* (aws-sdk:make-session :credentials (credentials store)

+                                                    :region (region store))))

+       (mfa-tool.store:dispatch store

+                                (update-stacks (mapcar 'daydreamer.aws-result:extract-stack

+                                                       (daydreamer.aws-result:extract-list

+                                                        (cdar

+                                                         (aws/cloudformation:describe-stacks))))))))

+   :name "Stack Fetcher"))

\ No newline at end of file

@@ -1,7 +1,8 @@

 (in-package :mfa-tool)

 (capi:define-interface mfa-tool ()

-  ((%default-account :initarg :default-account :reader default-account)

+  ((assumed-credentials :accessor assumed-credentials :initform (make-hash-table :test 'equal))

+   (%default-account :initarg :default-account :reader default-account)

    (%signin-url :accessor signin-url))

   (:panes

    (output-pane capi:collector-pane :reader output

@@ -31,7 +32,8 @@

                      :reader account-selector)

    (action-buttons capi:push-button-panel

                    :items '(:|Open Web Console|

-                            :|Authorize iTerm|)

+                            :|Authorize iTerm|

+                            :|Cloudformation Stacks|)

                    :selection-callback 'execute-action

                    :callback-type :data-interface)

    (listener-button capi:push-button

@@ -71,6 +73,11 @@

                               (probe-file 

                                (merge-pathnames (make-pathname :name "AuthorizeShell" :type "scpt") 

                                                 (bundle-resource-root))))))

+  (:method ((action (eql :|Cloudformation Stacks|)) (interface mfa-tool))

+   (let ((stack-interface (make-instance 'mfa-tool.stack:stack-interface

+                                         :credentials (current-credentials interface))))

+     (mfa-tool.store:dispatch stack-interface :|Get Stacks|)

+     (capi:display stack-interface)))

   (:method ((action (eql :|Lisp REPL|)) (interface mfa-tool))

     (capi:contain (make-instance 'capi:listener-pane)

                   :best-width 1280

@@ -133,6 +140,14 @@

   (:menu-bar edit-menu window-menu))

+(defun start-in-repl (&optional (accounts (asdf:system-relative-pathname :aws-access "accounts.json")))

+  (ubiquitous:restore :cj.mfa-tool)

+  (setf aws:*session* (aws:make-session)

+        *print-readably* nil

+        *accounts* (reprocess-accounts (load-accounts accounts)))

+  (interface :default-account 

+             (ubiquitous:value :default-account)))

+

 (defun main ()

   (setf *debugger-hook* 'debugging

         *print-readably* nil

@@ -1,7 +1,7 @@

 (in-package :mfa-tool)

 (defvar *accounts* ())

-

+(defvar *main-credentials* (aws-sdk:make-credentials))

 (defun session-name ()

   (format nil "bootstrap~d" (+ 5000 (random 5000))))

@@ -27,6 +27,7 @@

           (mfa-serial-number *user_management_account_id*

                              user))

         (role-arn (role-arn account role)))

+    (let ((aws-sdk:*session* (aws-sdk:make-session :credentials *main-credentials*))))

     (loop

       (restart-case

           (return

@@ -72,6 +73,13 @@

    (url :reader url

         :initform (cells:c? (get-url (^url-params))))))

+(defgeneric session-credentials (source)

+  (:method ((source sts-result-handler))

+   (aws-sdk:make-credentials

+    :access-key-id (session-id source)

+    :secret-access-key (session-key source)

+    :session-token (session-token source))))

+

 (defun url-from-signin-token (signin-token)

   (format nil "https://signin.aws.amazon.com/federation?Action=login&Destination=https%3A%2F%2Fconsole.aws.amazon.com&SigninToken=~a"

           signin-token))

@@ -7,25 +7,29 @@

 (defparameter *developer-p* (equal "elangley" (uiop/os:getenv "USER")))

-(defun bundle-resource-root ()

-  (make-pathname :directory

-                 (pathname-directory

-                  (objc:invoke-into 'string

-                                    (objc:invoke "NSBundle" "mainBundle") 

-                                    "pathForResource:ofType:" "app" "icns"))))

+(defgeneric assumed-credentials (store))

+(defgeneric (setf assumed-credentials) (value store))

-(defun clear-cookies ()

-  (let ((cookie-storage (objc:invoke "NSHTTPCookieStorage" "sharedHTTPCookieStorage")))

-    (map nil

-         (lambda (cookie) 

-           (objc:invoke cookie-storage "deleteCookie:" cookie))

-         (objc:invoke-into 'array cookie-storage "cookies"))))

+(defun current-account (interface)

+  (cdr (capi:choice-selected-item (account-selector interface))))

+

+(defun credentials-for-account (interface account)

+   (gethash account 

+            (assumed-credentials interface)))

+(defun (setf credentials-for-account) (new-credentials interface account)

+  (setf (gethash account

+                 (assumed-credentials interface))

+        new-credentials))

+

+(defun current-credentials (interface)

+  (credentials-for-account interface

+                           (current-account interface)))

 (defun go-on (_ interface)

   (declare (ignore _))

   (let ((token (capi:text-input-pane-text (mfa-input interface)))

         (user-name (capi:text-input-pane-text (user-input interface)))

-        (account (cdr (capi:choice-selected-item (account-selector interface)))))

+        (account (current-account interface)))

     (clear-cookies)

     (multiple-value-bind (signin-token creds)

         (handler-bind (((or dexador:http-request-forbidden

@@ -58,8 +62,8 @@

                 (session-token creds)))

       (capi:set-button-panel-enabled-items (slot-value interface 'action-buttons)

                                            :set t)

-      (setf (signin-url interface) 

-            (url-from-signin-token signin-token)))))

+      (setf (credentials-for-account interface account) (session-credentials creds)

+            (signin-url interface) (url-from-signin-token signin-token)))))

 (defun close-active-screen ()

   (let ((active-interface

new file mode 100644

@@ -0,0 +1,15 @@

+(in-package :mfa-tool)

+

+(defun bundle-resource-root ()

+  (make-pathname :directory

+                 (pathname-directory

+                  (objc:invoke-into 'string

+                                    (objc:invoke "NSBundle" "mainBundle") 

+                                    "pathForResource:ofType:" "app" "icns"))))

+

+(defun clear-cookies ()

+  (let ((cookie-storage (objc:invoke "NSHTTPCookieStorage" "sharedHTTPCookieStorage")))

+    (map nil

+         (lambda (cookie) 

+           (objc:invoke cookie-storage "deleteCookie:" cookie))

+         (objc:invoke-into 'array cookie-storage "cookies"))))

new file mode 100644

@@ -0,0 +1,43 @@

+(defpackage :mfa-tool.stack-store

+  (:use :cl)

+  (:export #:stack-store #:available-stacks selected-stack parameters outputs))

+(in-package :mfa-tool.stack-store)

+

+(defun column (key)

+  (serapeum:op (serapeum:assocadr key _

+                                  :test 'equal)))

+

+(defclass stack-store (mfa-tool.store:store mfa-tool.aws-dispatcher:aws-dispatcher)

+  ((%available-stacks :accessor available-stacks :initform nil)

+   (%selected-stack :accessor selected-stack :initform nil)

+   (%parameters :accessor parameters :initform nil)

+   (%outputs :accessor outputs :initform nil)))

+

+

+(defun output-columns (output)

+  (funcall (data-lens:juxt (column "OutputKey")

+                           (column "OutputValue"))

+           output))

+

+(defun parameter-columns (output)

+  (funcall (data-lens:juxt (column "ParameterKey")

+                           (column "ParameterValue"))

+           output))

+

+(defmethod mfa-tool.store:dispatch :after ((store stack-store)

+                                           (action mfa-tool.aws-dispatcher:update-stacks))

+  (alexandria:when-let ((stack (car (mfa-tool.aws-dispatcher:stacks action))))

+    (mfa-tool.store:dispatch store (mfa-tool.aws-dispatcher:select-stack stack))))

+

+(defmethod mfa-tool.store:execute ((store stack-store) (action mfa-tool.aws-dispatcher:update-stacks))

+  (setf (available-stacks store) (sort (mfa-tool.aws-dispatcher:stacks action)

+                                       'string-lessp

+                                       :key 'daydreamer.aws-result:stack-name)))

+

+(defmethod mfa-tool.store:execute ((store stack-store) (action mfa-tool.aws-dispatcher:select-stack))

+  (let ((stack (mfa-tool.aws-dispatcher:stack action)))

+    (setf (selected-stack store) stack

+

+          (parameters store) (mapcar 'parameter-columns (daydreamer.aws-result:parameters stack))

+

+          (outputs store) (mapcar 'output-columns (daydreamer.aws-result:outputs stack)))))

new file mode 100644

@@ -0,0 +1,144 @@

+(in-package :mfa-tool)

+(defpackage :mfa-tool.stack

+  (:use :cl)

+  (:export #:stack-interface

+           #:format-stack-status))

+(in-package :mfa-tool.stack)

+

+(defun dispatch-with-action-creator (action-creator)

+  (lambda (store data)

+    (mfa-tool.store:dispatch store

+                             (funcall action-creator data))))

+

+(defmacro with-pp ((pane) &body body)

+  `(capi:apply-in-pane-process ,pane

+                               (lambda ()

+                                 ,@body)))

+

+(defun human-readable-stack-status (stack)

+  (nstring-capitalize

+   (substitute #\space #\_

+               (string (daydreamer.aws-result:stack-status stack)))))

+(defun format-stack-status (stream stack &optional colon-p at-sign-p)

+  (declare (ignore colon-p at-sign-p))

+  (princ (human-readable-stack-status stack)

+         stream))

+

+(defun get-output-columns (type col1 col2)

+  `((:title ,(format nil "~a Name" type) 

+     :adjust :right

+     :width (character ,(max (+ (length type) 5) col1)))

+    (:title "Value" 

+     :adjust :left

+     :width (character ,(max (+ (length type) 5) col2)))))

+

+(capi:define-interface stack-interface (capi:interface mfa-tool.stack-store:stack-store)

+  ()

+  (:panes

+   (region-chooser capi:option-pane

+                   :reader region-chooser

+                   ;; :external-max-width '(character 35)

+                   :items (list "us-east-1" "us-east-2"

+                                "us-west-1" "us-west-2"

+                                "ca-central-1"

+                                "eu-central-1"

+                                "eu-west-1" "eu-west-2")

+                   :selection-callback (dispatch-with-action-creator 'mfa-tool.aws-dispatcher::update-region)

+                   :callback-type :interface-data)

+

+   (stack-chooser capi:list-panel

+                  :reader stack-chooser

+                  ;; :external-max-width '(character 35)

+                  :items ()

+                  :print-function 'daydreamer.aws-result:stack-name

+                  :selection-callback (dispatch-with-action-creator 'mfa-tool.aws-dispatcher:select-stack)

+                  :callback-type :interface-data)

+

+   (status-display capi:display-pane

+                   :background :transparent

+                   :reader status-display

+                   :text "")

+

+   (outputs-display capi:multi-column-list-panel

+                    :columns (get-output-columns "Output" 10 10)

+                    :header-args (list :selection-callback :sort)

+                    :sort-descriptions (list (capi:make-sorting-description

+                                              :type "Output Name"

+                                              :key 'car

+                                              :sort 'string-lessp

+                                              :reverse-sort 'string-greaterp)

+                                             (capi:make-sorting-description

+                                              :type "Value"

+                                              :key 'cadr

+                                              :sort 'string-lessp

+                                              :reverse-sort 'string-greaterp))

+                    :items nil

+                    :vertical-scroll t

+                    :reader outputs-display

+                    :visible-min-height '(character 10)

+                    :visible-min-width '(character 50))

+   (parameters-display capi:multi-column-list-panel

+                       :columns (get-output-columns "Parameter" 10 10)

+                       :header-args (list :selection-callback :sort)

+                       :sort-descriptions (list (capi:make-sorting-description

+                                                 :type "Parameter Name"

+                                                 :key 'car

+                                                 :sort 'string-lessp

+                                                 :reverse-sort 'string-greaterp)

+                                                (capi:make-sorting-description

+                                                 :type "Value"

+                                                 :key 'cadr

+                                                 :sort 'string-lessp

+                                                 :reverse-sort 'string-greaterp))

+                       :items nil

+                       :vertical-scroll t

+                       :reader parameters-display

+                       :visible-min-height '(character 10)

+                       :visible-min-width '(character 50)))

+  (:layouts

+   (key-layout capi:column-layout

+               '(region-chooser

+                 stack-chooser)

+               :visible-max-width '(character 35))

+   (attribute-layout capi:column-layout

+                     '(status-display

+                       parameters-display

+                       outputs-display))

+   (main-layout capi:row-layout

+                '(key-layout

+                  attribute-layout)))

+  (:default-initargs

+   :layout 'main-layout

+   :title "Stack Explorer"

+   :visible-min-width 800))

+

+(defmethod mfa-tool.store:execute :after ((interface stack-interface) (_ mfa-tool.aws-dispatcher:update-stacks))

+  (with-pp (interface)

+    (with-accessors ((stack-chooser stack-chooser)) interface

+      (setf (capi:collection-items stack-chooser)

+            (mfa-tool.stack-store:available-stacks interface)))))

+

+(defun max-widths (cols)

+  (loop for (col1 col2) in cols

+        maximizing (length col1) into len1

+        maximizing (length col2) into len2

+        finally (return (list len1 len2))))

+

+(defmethod mfa-tool.store:execute :after ((interface stack-interface) (_ mfa-tool.aws-dispatcher:select-stack))

+  (with-pp (interface)

+    (with-accessors ((status-display status-display) (selected-stack mfa-tool.stack-store:selected-stack)

+                     (outputs-display outputs-display) (outputs mfa-tool.stack-store:outputs)

+                     (parameters-display parameters-display) (parameters mfa-tool.stack-store:parameters))

+        interface

+      (capi:modify-multi-column-list-panel-columns

+       outputs-display :columns (apply 'get-output-columns "Output" (max-widths outputs)))

+      (capi:modify-multi-column-list-panel-columns

+       parameters-display :columns (apply 'get-output-columns "Parameter" (max-widths parameters)))

+      

+      (setf (capi:display-pane-text status-display)

+            (format nil "~a: ~/mfa-tool.stack:format-stack-status/"

+                    (daydreamer.aws-result:stack-name selected-stack)

+                    selected-stack)

+            (capi:collection-items parameters-display) parameters

+            (capi:collection-items outputs-display) outputs))))

+

new file mode 100644

@@ -0,0 +1,20 @@

+(defpackage :mfa-tool.store

+  (:use :cl)

+  (:export #:store #:execute #:dispatch))

+(in-package :mfa-tool.store)

+

+(defclass store ()

+  ())

+

+(defgeneric execute (store action)

+  (:argument-precedence-order action store)

+  (:method :around (store action)

+   (call-next-method)

+   store)

+  (:method (store action)

+   store))

+

+(defgeneric dispatch (store action)

+  (:argument-precedence-order action store)

+  (:method ((store store) action)

+   (execute store action)))

\ No newline at end of file