@tapicker/bridge 1.0.0

package/src/bridge/pairing-state.ts

@@ -0,0 +1,92 @@
+import { randomUUID } from 'node:crypto'
+import { mkdir, open, readFile, rename, unlink } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { z } from 'zod'
+import { BridgeError } from '../errors.js'
+
+const PairingStateSchema = z
+  .object({
+    version: z.literal(1),
+    clients: z
+      .array(
+        z
+          .object({
+            clientId: z.uuid(),
+            credential: z.uuid(),
+          })
+          .strict(),
+      )
+      .default([]),
+  })
+  .strict()
+
+export type PairedExtensionIdentity = z.infer<typeof PairingStateSchema>['clients'][number]
+
+export interface PairingStatePersistence {
+  load(): Promise<PairedExtensionIdentity[]>
+  save(identities: PairedExtensionIdentity[]): Promise<void>
+}
+
+export class PairingStateFile implements PairingStatePersistence {
+  constructor(private readonly filePath: string) {}
+
+  async load(): Promise<PairedExtensionIdentity[]> {
+    await mkdir(dirname(this.filePath), { recursive: true, mode: 0o700 })
+
+    let content: string
+    try {
+      content = await readFile(this.filePath, 'utf8')
+    } catch (error) {
+      if ((error as NodeJS.ErrnoException).code === 'ENOENT') return []
+      throw error
+    }
+
+    let value: unknown
+    try {
+      value = JSON.parse(content)
+    } catch (cause) {
+      throw new BridgeError('InvalidPairingState', 'Saved Bridge pairing state is not valid JSON', {
+        status: 500,
+        cause,
+      })
+    }
+
+    const parsed = PairingStateSchema.safeParse(value)
+    if (!parsed.success) {
+      throw new BridgeError(
+        'InvalidPairingState',
+        `Saved Bridge pairing state at ${this.filePath} has an unsupported format. This pre-release version does not migrate old state automatically; update it to the version 1 clients-array format or remove it and pair Extensions again.`,
+        { status: 500, details: parsed.error.issues },
+      )
+    }
+
+    return parsed.data.clients
+  }
+
+  async save(identities: PairedExtensionIdentity[]): Promise<void> {
+    const directory = dirname(this.filePath)
+    await mkdir(directory, { recursive: true, mode: 0o700 })
+
+    const temporaryPath = join(directory, `.paired-clients-${process.pid}-${randomUUID()}.tmp`)
+    const content = JSON.stringify({ version: 1, clients: identities }, null, 2)
+    let file: Awaited<ReturnType<typeof open>> | undefined
+
+    try {
+      file = await open(temporaryPath, 'wx', 0o600)
+      await file.writeFile(content, 'utf8')
+      await file.sync()
+      await file.close()
+      file = undefined
+      await rename(temporaryPath, this.filePath)
+    } catch (error) {
+      await file?.close().catch(() => undefined)
+      await unlink(temporaryPath).catch(() => undefined)
+      throw error
+    }
+  }
+}
+
+export function getDefaultBridgeDataDir(home = homedir()) {
+  return join(home, '.tapicker')
+}