@gpzhang2001/sharpkit-analysis 0.2.1

package/src/stores.ts

@@ -0,0 +1,97 @@
+/**
+ * Run-scoped JSON mirror stores (strix .state/ mirrors): atomic writes
+ * (temp-in-dir + rename), hydrate-on-start, per-store in-memory maps.
+ * One instance per scan, owned by the analysis service.
+ * @module @gpzhang2001/sharpkit-analysis/stores
+ */
+
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises'
+import { dirname, join } from 'node:path'
+
+/** A JSON file mirror with atomic write and hydrate. */
+export class JsonMirrorStore {
+  private readonly path: string | null
+  private readonly map = new Map<string, Record<string, unknown>>()
+
+  constructor(path: string | null) {
+    this.path = path
+  }
+
+  /** Load the mirror file; corrupt JSON is tolerated as empty on hydrate (resume aid only). */
+  async hydrate(): Promise<void> {
+    if (this.path === null) return
+    try {
+      const raw = await readFile(this.path, 'utf8')
+      const parsed = JSON.parse(raw) as unknown
+      if (typeof parsed !== 'object' || parsed === null) return
+      for (const [key, value] of Object.entries(parsed as Record<string, unknown>)) {
+        if (typeof value === 'object' && value !== null) this.map.set(key, value as Record<string, unknown>)
+      }
+    } catch {
+      // Missing or unreadable mirror: start empty.
+    }
+  }
+
+  /** Persist the whole map atomically (strix `_persist_locked`). */
+  async persist(): Promise<void> {
+    if (this.path === null) return
+    const payload = JSON.stringify(Object.fromEntries(this.map), null, 2)
+    await mkdir(dirname(this.path), { recursive: true })
+    const temp = `${dirname(this.path)}/.${join('', this.path.split('/').pop() ?? 'store')}.${process.pid}.tmp`
+    await writeFile(temp, payload, 'utf8')
+    await rename(temp, this.path)
+  }
+
+  get(key: string): Record<string, unknown> | undefined {
+    return this.map.get(key)
+  }
+
+  set(key: string, value: Record<string, unknown>): void {
+    this.map.set(key, value)
+  }
+
+  delete(key: string): boolean {
+    return this.map.delete(key)
+  }
+
+  values(): Record<string, unknown>[] {
+    return [...this.map.values()]
+  }
+
+  get size(): number {
+    return this.map.size
+  }
+}
+
+/** Generate a 6-hex id with bounded collision retries (strix parity). */
+export function generateId(existing: ReadonlySet<string>): string | null {
+  for (let attempt = 0; attempt < 1024; attempt++) {
+    const id = Math.random().toString(16).slice(2, 8).padEnd(6, '0')
+    if (!existing.has(id)) return id
+  }
+  return null
+}
+
+/**
+ * Normalize a remote target to its identity (threat_model/tools.py
+ * `_normalize_remote_target` + `_normalize_git_remote`): scp-style and
+ * scheme'd git remotes map to https URLs, `.git` stripped, trailing slash
+ * stripped, host lowercased with default ports collapsed.
+ * @param target - the raw target string.
+ */
+export function normalizeTargetIdentity(target: string): string {
+  const trimmed = target.trim()
+  const scp = /^git@([^:]+):(.+?)(?:\.git)?$/.exec(trimmed)
+  if (scp !== null) return `https://${scp[1]?.toLowerCase()}/${scp[2]}`
+  const withScheme = /^([a-z][a-z0-9+.-]*):\/\/([^/?#]+)([^#]*)/i.exec(trimmed)
+  if (withScheme !== null) {
+    const scheme = withScheme[1] ?? ''
+    const authority = withScheme[2] ?? ''
+    const path = withScheme[3] ?? ''
+    const defaultPort = scheme.toLowerCase() === 'https' ? '443' : scheme.toLowerCase() === 'http' ? '80' : null
+    let host = authority.toLowerCase()
+    if (defaultPort !== null && host.endsWith(`:${defaultPort}`)) host = host.slice(0, -defaultPort.length - 1)
+    return `https://${host}${path.replace(/\/$/, '')}`.replace(/\.git$/, '')
+  }
+  return trimmed.replace(/\/$/, '').replace(/\.git$/, '')
+}