@mycadet/assistant 0.12.11 → 0.13.0

package/src/runtime/migrations/vbundle-metadata-merge.ts

@@ -1,113 +0,0 @@
-import { z } from "zod";
-
-/**
- * Merge helper for `data/credentials/metadata.json` on bundle import.
- *
- * The leftover workspace credential metadata file may remain on disk after
- * CES import. CES owns identity and policy records. Bundle import still
- * merges `cadet:*` catalog rows so platform identity survives a
- * local-to-platform teleport.
- *
- * On a local→platform teleport, the bundle carries the SOURCE's metadata
- * (no `cadet:*` entries, since the source is local), and a naive overwrite
- * would wipe out the `cadet:*` entries that Django's post-hatch
- * provisioning just wrote on the TARGET. This module merges bundle and live
- * metadata with one rule:
- *
- *   - Drop `service === "cadet"` entries the bundle tries to ship
- *     (defense-in-depth — they represent the source's identity, not the
- *     target's). This mirrors the CES-side filter in migration-routes.ts.
- *   - Preserve every `service === "cadet"` entry the target already has.
- *   - Import bundle entries for every other service normally (user OAuth,
- *     channel credentials).
- *
- * Malformed input (missing file, unparseable JSON, unrecognized schema) is
- * handled by the callers: they should treat "no live metadata" as no
- * preservation needed, and leave the bundle's file untouched if its schema
- * can't be merged cleanly.
- */
-
-const CADET_SERVICE = "cadet";
-
-const MetadataRecordSchema = z.looseObject({
-  credentialId: z.string(),
-  service: z.string(),
-  field: z.string(),
-});
-type MetadataRecord = z.infer<typeof MetadataRecordSchema>;
-
-// A malformed record becomes null instead of failing the whole file, so one
-// bad entry cannot invalidate the valid siblings around it.
-const MetadataFileSchema = z.looseObject({
-  version: z.number().optional(),
-  credentials: z.array(MetadataRecordSchema.nullish().catch(null)).optional(),
-});
-type MetadataFile = z.infer<typeof MetadataFileSchema>;
-
-function parseMetadata(json: string | null | undefined): MetadataFile | null {
-  if (!json) {
-    return null;
-  }
-  try {
-    const parsed = MetadataFileSchema.safeParse(JSON.parse(json));
-    return parsed.success ? parsed.data : null;
-  } catch {
-    return null;
-  }
-}
-
-function extractCadetRecords(file: MetadataFile | null): MetadataRecord[] {
-  return (file?.credentials ?? []).filter(
-    (record): record is MetadataRecord =>
-      record != null && record.service === CADET_SERVICE,
-  );
-}
-
-/**
- * Merge the bundle's metadata.json content with any `cadet:*` entries
- * present in the target's live metadata.json.
- *
- * Returns the merged JSON string, preserving the bundle's schema version
- * and formatting (2-space indent). If the bundle's JSON is unparseable the
- * original input is returned unchanged — we never want to corrupt the
- * bundle's file by emitting an empty or restructured payload.
- *
- * If the live JSON is unparseable or missing, the bundle's file is returned
- * verbatim (no preservation possible — nothing to preserve).
- */
-export function mergeMetadataPreservingCadet(
-  bundleJson: string,
-  liveJson: string | null,
-): string {
-  const bundle = parseMetadata(bundleJson);
-  if (!bundle) {
-    return bundleJson;
-  }
-
-  const preservedCadet = extractCadetRecords(parseMetadata(liveJson));
-
-  // Drop any `service === "cadet"` entries from the bundle (defense-in-depth).
-  const filteredBundle = (bundle.credentials ?? []).filter(
-    (record): record is MetadataRecord =>
-      record != null && record.service !== CADET_SERVICE,
-  );
-
-  // Union: bundle non-cadet entries + target cadet entries. If the
-  // preserved list happens to collide with a bundle entry on credentialId,
-  // the preserved version wins (it belongs to the target's live identity).
-  const merged = [...filteredBundle, ...preservedCadet];
-
-  const output: MetadataFile = {
-    ...bundle,
-    credentials: merged,
-  };
-
-  return JSON.stringify(output, null, 2);
-}
-
-/** @internal For direct use by tests. */
-const _internal = {
-  CADET_SERVICE,
-  parseMetadata,
-  extractCadetRecords,
-};