fix(sessiond): remove legacy session archive migration

The migration moved ~/.pi-web/archived-sessions* into a custom
PI_WEB_DATA_DIR at session daemon startup. Remove it outright: data
directories are independent, and anyone who sets a custom data
directory can copy archived-sessions.json and archived-sessions/
manually while the daemon is stopped.

Without the migration, runSessionDaemonStartup's only remaining
contract was sequencing create/register/listen, so inline those steps
into sessiond.ts and drop the wrapper module and its tests.
This commit is contained in:
Federico Jaramillo Martinez
2026-07-28 16:13:59 +02:00
parent 69b125b001
commit 1a191bfa13
5 changed files with 121 additions and 1809 deletions
+121 -117
View File
@@ -27,7 +27,6 @@ import { getPiWebRuntimeComponent } from "./piWebStatus.js";
import { SESSIOND_RUNTIME_CAPABILITIES } from "../shared/capabilities.js";
import { agentSessionDirEnvKeys, effectivePiWebConfig, maxUploadBytes, offlineModeEnabled } from "../config.js";
import { createActiveAgentProfileDescriptor } from "../sessiond/activeAgentProfile.js";
import { runSessionDaemonStartup } from "./sessiond/sessionDaemonStartup.js";
import { sessionServiceDependencies } from "./sessiond/sessionServiceDependencies.js";
const daemonEnvironment: NodeJS.ProcessEnv = Object.freeze({ ...process.env });
@@ -40,125 +39,130 @@ const activeAgentProfile = createActiveAgentProfileDescriptor({
const app = Fastify({ logger: true, bodyLimit: maxUploadBytes(daemonEnvironment, config) });
await app.register(fastifyWebsocket);
await runSessionDaemonStartup({
logger: app.log,
async createRuntime() {
const eventHub = new SessionEventHub();
const notificationStore = new SessionNotificationStore();
const unreadStore = new SessionUnreadStore({
persistence: new FileSessionUnreadPersistence(),
onPersistenceError(operation, error) {
app.log.error({ err: error, operation }, "session unread persistence failed");
},
});
await unreadStore.load();
const workspaceActivity = new WorkspaceActivityService(eventHub);
const auth = await AuthService.create({ agentDir: activeAgentProfile.dir, logger: app.log });
// Capture providers registered by global extensions while the runtime is
// still mutable, then freeze every later extension-provider mutation before
// any real session can load project resources.
await bootstrapAndFreezeGlobalExtensionProviders(auth.runtime, activeAgentProfile.dir, app.log);
// The shared model runtime is constructed offline so request paths never
// wait on provider-catalog fetches; this is the single bounded network
// refresher, and auth changes (login/logout) ask it for a prompt run. It
// stays fully inert when the operator asked for offline behavior.
const catalogRefresher = new ModelCatalogRefresher({
runtime: auth.runtime,
logger: app.log,
offline: offlineModeEnabled(daemonEnvironment),
});
catalogRefresher.start();
auth.subscribe(() => { catalogRefresher.requestRefresh(); });
// Cross-workspace session relationships are reported regardless of whether
// agents may spawn sessions: children can predate a config change, and the
// session tree should stay honest about them either way.
const projectWorkspaceDeps = { projects: new ProjectService(new ProjectStore()), workspaces: new WorkspaceService() };
const projectWorkspaces = new RegisteredProjectWorkspaceCwds(projectWorkspaceDeps);
const spawnTargets = config.spawnSessions ? new ProjectScopedSpawnTargetResolver(projectWorkspaceDeps) : undefined;
const sessions = new PiSessionService(eventHub, sessionServiceDependencies({
modelRuntime: auth.runtime,
const runtime = await createSessionDaemonRuntime();
registerSessionDaemonRoutes(runtime);
await listenSessionDaemon(runtime);
type SessionDaemonRuntime = Awaited<ReturnType<typeof createSessionDaemonRuntime>>;
async function createSessionDaemonRuntime() {
const eventHub = new SessionEventHub();
const notificationStore = new SessionNotificationStore();
const unreadStore = new SessionUnreadStore({
persistence: new FileSessionUnreadPersistence(),
onPersistenceError(operation, error) {
app.log.error({ err: error, operation }, "session unread persistence failed");
},
});
await unreadStore.load();
const workspaceActivity = new WorkspaceActivityService(eventHub);
const auth = await AuthService.create({ agentDir: activeAgentProfile.dir, logger: app.log });
// Capture providers registered by global extensions while the runtime is
// still mutable, then freeze every later extension-provider mutation before
// any real session can load project resources.
await bootstrapAndFreezeGlobalExtensionProviders(auth.runtime, activeAgentProfile.dir, app.log);
// The shared model runtime is constructed offline so request paths never
// wait on provider-catalog fetches; this is the single bounded network
// refresher, and auth changes (login/logout) ask it for a prompt run. It
// stays fully inert when the operator asked for offline behavior.
const catalogRefresher = new ModelCatalogRefresher({
runtime: auth.runtime,
logger: app.log,
offline: offlineModeEnabled(daemonEnvironment),
});
catalogRefresher.start();
auth.subscribe(() => { catalogRefresher.requestRefresh(); });
// Cross-workspace session relationships are reported regardless of whether
// agents may spawn sessions: children can predate a config change, and the
// session tree should stay honest about them either way.
const projectWorkspaceDeps = { projects: new ProjectService(new ProjectStore()), workspaces: new WorkspaceService() };
const projectWorkspaces = new RegisteredProjectWorkspaceCwds(projectWorkspaceDeps);
const spawnTargets = config.spawnSessions ? new ProjectScopedSpawnTargetResolver(projectWorkspaceDeps) : undefined;
const sessions = new PiSessionService(eventHub, sessionServiceDependencies({
modelRuntime: auth.runtime,
agentDir: activeAgentProfile.dir,
workspaceActivity,
logger: app.log,
...(spawnTargets === undefined ? {} : { spawnTargets }),
projectWorkspaces,
subsessionsEnabled: config.subsessions,
askUserEnabled: config.askUser,
notificationStore,
unreadStore,
catalogRefreshStatus: catalogRefresher,
sessionManager: createPiSessionManagerGateway({
agentDir: activeAgentProfile.dir,
workspaceActivity,
logger: app.log,
...(spawnTargets === undefined ? {} : { spawnTargets }),
projectWorkspaces,
subsessionsEnabled: config.subsessions,
askUserEnabled: config.askUser,
notificationStore,
unreadStore,
catalogRefreshStatus: catalogRefresher,
sessionManager: createPiSessionManagerGateway({
agentDir: activeAgentProfile.dir,
env: daemonEnvironment,
sessionDirEnvKeys: activeAgentProfile.sessionDirEnvKeys,
}),
}));
auth.subscribe((change) => { sessions.applyAuthChange(change); });
const terminals = new TerminalService(eventHub, workspaceActivity);
const runtimeComponent = Object.freeze({
...getPiWebRuntimeComponent("sessiond", SESSIOND_RUNTIME_CAPABILITIES),
activeAgentProfile,
});
return { eventHub, workspaceActivity, auth, sessions, terminals, unreadStore, activeAgentProfile, runtimeComponent, catalogRefresher };
},
registerRoutes({ eventHub, workspaceActivity, auth, sessions, terminals, runtimeComponent }) {
registerWorkspaceActivityRoutes(app, workspaceActivity);
registerAuthRoutes(app, auth);
registerSessionRoutes(app, sessions, eventHub);
registerTerminalRoutes(app, terminals);
env: daemonEnvironment,
sessionDirEnvKeys: activeAgentProfile.sessionDirEnvKeys,
}),
}));
auth.subscribe((change) => { sessions.applyAuthChange(change); });
const terminals = new TerminalService(eventHub, workspaceActivity);
const runtimeComponent = Object.freeze({
...getPiWebRuntimeComponent("sessiond", SESSIOND_RUNTIME_CAPABILITIES),
activeAgentProfile,
});
return { eventHub, workspaceActivity, auth, sessions, terminals, unreadStore, activeAgentProfile, runtimeComponent, catalogRefresher };
}
app.get("/health", () => ({
ok: true,
activeSessions: sessions.activeCount(),
checkedAt: new Date().toISOString(),
version: {
component: runtimeComponent.component,
label: runtimeComponent.label,
...(runtimeComponent.runtimeVersion === undefined ? {} : { runtimeVersion: runtimeComponent.runtimeVersion }),
stale: false,
available: runtimeComponent.available,
},
}));
function registerSessionDaemonRoutes({ eventHub, workspaceActivity, auth, sessions, terminals, runtimeComponent }: SessionDaemonRuntime): void {
registerWorkspaceActivityRoutes(app, workspaceActivity);
registerAuthRoutes(app, auth);
registerSessionRoutes(app, sessions, eventHub);
registerTerminalRoutes(app, terminals);
app.get("/runtime", () => runtimeComponent);
},
async listen({ auth, sessions, terminals, unreadStore, catalogRefresher }) {
let shuttingDown = false;
async function shutdown(signal: NodeJS.Signals): Promise<void> {
if (shuttingDown) return;
shuttingDown = true;
app.log.info({ signal }, "shutting down session daemon");
const attempt = async (operation: string, run: () => void | Promise<void>): Promise<void> => {
try {
await run();
} catch (error: unknown) {
process.exitCode = 1;
app.log.error({ err: error, operation }, "session daemon shutdown operation failed");
}
};
await attempt("dispose terminals", () => { terminals.dispose(); });
await attempt("dispose catalog refresher", () => { catalogRefresher.dispose(); });
await attempt("dispose auth", () => { auth.dispose(); });
await attempt("dispose sessions", () => sessions.dispose());
await attempt("flush session unread state", () => unreadStore.flush());
await attempt("close server", () => app.close());
}
app.get("/health", () => ({
ok: true,
activeSessions: sessions.activeCount(),
checkedAt: new Date().toISOString(),
version: {
component: runtimeComponent.component,
label: runtimeComponent.label,
...(runtimeComponent.runtimeVersion === undefined ? {} : { runtimeVersion: runtimeComponent.runtimeVersion }),
stale: false,
available: runtimeComponent.available,
},
}));
process.once("SIGINT", (signal) => { void shutdown(signal); });
process.once("SIGTERM", (signal) => { void shutdown(signal); });
app.get("/runtime", () => runtimeComponent);
}
const portValue = daemonEnvironment["PI_WEB_SESSIOND_PORT"];
const port = portValue !== undefined && portValue !== "" ? Number(portValue) : undefined;
const host = daemonEnvironment["PI_WEB_SESSIOND_HOST"] ?? "127.0.0.1";
async function listenSessionDaemon({ auth, sessions, terminals, unreadStore, catalogRefresher }: SessionDaemonRuntime): Promise<void> {
let shuttingDown = false;
async function shutdown(signal: NodeJS.Signals): Promise<void> {
if (shuttingDown) return;
shuttingDown = true;
app.log.info({ signal }, "shutting down session daemon");
const attempt = async (operation: string, run: () => void | Promise<void>): Promise<void> => {
try {
await run();
} catch (error: unknown) {
process.exitCode = 1;
app.log.error({ err: error, operation }, "session daemon shutdown operation failed");
}
};
await attempt("dispose terminals", () => { terminals.dispose(); });
await attempt("dispose catalog refresher", () => { catalogRefresher.dispose(); });
await attempt("dispose auth", () => { auth.dispose(); });
await attempt("dispose sessions", () => sessions.dispose());
await attempt("flush session unread state", () => unreadStore.flush());
await attempt("close server", () => app.close());
}
if (port !== undefined) {
await app.listen({ port, host });
} else {
const path = sessiondSocketPath();
await mkdir(dirname(path), { recursive: true });
await rm(path, { force: true });
await app.listen({ path });
process.on("exit", () => void rm(path, { force: true }));
}
},
});
process.once("SIGINT", (signal) => { void shutdown(signal); });
process.once("SIGTERM", (signal) => { void shutdown(signal); });
const portValue = daemonEnvironment["PI_WEB_SESSIOND_PORT"];
const port = portValue !== undefined && portValue !== "" ? Number(portValue) : undefined;
const host = daemonEnvironment["PI_WEB_SESSIOND_HOST"] ?? "127.0.0.1";
if (port !== undefined) {
await app.listen({ port, host });
} else {
const path = sessiondSocketPath();
await mkdir(dirname(path), { recursive: true });
await rm(path, { force: true });
await app.listen({ path });
process.on("exit", () => void rm(path, { force: true }));
}
}
@@ -1,261 +0,0 @@
import { existsSync, readFileSync } from "node:fs";
import { mkdtemp, mkdir, rm, writeFile } from "node:fs/promises";
import { tmpdir } from "node:os";
import { join } from "node:path";
import { afterEach, describe, expect, it, vi } from "vitest";
import {
migrateLegacySessionArchive,
type LegacySessionArchiveMigrationOptions,
type LegacySessionArchiveMigrationResult,
} from "../sessions/sessionArchiveMigration.js";
import { runSessionDaemonStartup } from "./sessionDaemonStartup.js";
const tempRoots: string[] = [];
describe("session daemon archive migration startup", () => {
afterEach(async () => {
await Promise.all(tempRoots.splice(0).map((path) => rm(path, { recursive: true, force: true })));
});
it("finishes an eligible migration before constructing PiSessionService, registering archive routes, or listening", async () => {
const fixture = await createLegacyArchiveFixture();
const logger = createLogger();
const boundaries: string[] = [];
const runtime = { ready: true };
const startedRuntime = await runSessionDaemonStartup({
logger,
migrateArchive: () => migrateLegacySessionArchive(fixture.options),
createRuntime() {
boundaries.push("construct-session-service");
expectMigrationComplete(fixture);
return runtime;
},
registerRoutes(createdRuntime) {
boundaries.push("register-archive-routes");
expect(createdRuntime).toBe(runtime);
expectMigrationComplete(fixture);
},
listen(createdRuntime) {
boundaries.push("listen");
expect(createdRuntime).toBe(runtime);
expectMigrationComplete(fixture);
return Promise.resolve();
},
});
expect(startedRuntime).toBe(runtime);
expect(boundaries).toEqual([
"construct-session-service",
"register-archive-routes",
"listen",
]);
expect(logger.info).toHaveBeenCalledWith(
{ archiveFileCount: 1 },
"migrated legacy session archive to the configured PI_WEB_DATA_DIR",
);
});
it("does not initialize archive consumers while a mutation-free eligibility check is pending", async () => {
const logger = createLogger();
const migration = deferred<LegacySessionArchiveMigrationResult>();
const boundaries: string[] = [];
const startup = runSessionDaemonStartup({
logger,
migrateArchive: () => migration.promise,
createRuntime() {
boundaries.push("construct-session-service");
return { ready: true };
},
registerRoutes() {
boundaries.push("register-archive-routes");
},
listen() {
boundaries.push("listen");
return Promise.resolve();
},
});
expect(boundaries).toEqual([]);
migration.resolve({ status: "skipped", reason: "legacy-index-missing" });
await startup;
expect(boundaries).toEqual([
"construct-session-service",
"register-archive-routes",
"listen",
]);
expect(logger.debug).toHaveBeenCalledWith(
{ reason: "legacy-index-missing" },
"legacy session archive migration is not eligible; continuing session daemon startup",
);
});
it("warns and continues normal startup when eligibility inspection is inconclusive", async () => {
const logger = createLogger();
const inspectionError = Object.assign(new Error("permission denied"), { code: "EACCES" });
const createRuntime = vi.fn(() => ({ ready: true }));
const registerRoutes = vi.fn();
const listen = vi.fn(() => Promise.resolve());
await runSessionDaemonStartup({
logger,
migrateArchive: () => Promise.resolve<LegacySessionArchiveMigrationResult>({
status: "skipped",
reason: "inspection-failed",
error: inspectionError,
}),
createRuntime,
registerRoutes,
listen,
});
expect(logger.warn).toHaveBeenCalledWith(
{ err: inspectionError, reason: "inspection-failed" },
"could not inspect legacy session archive migration eligibility; continuing session daemon startup without migration",
);
expect(createRuntime).toHaveBeenCalledOnce();
expect(registerRoutes).toHaveBeenCalledOnce();
expect(listen).toHaveBeenCalledOnce();
});
it("logs an eligible migration failure and stops before archive consumers can mutate destination state", async () => {
const logger = createLogger();
const migrationError = new Error("copy failed");
const rollbackError = new Error("rollback failed");
const createRuntime = vi.fn(() => ({ ready: true }));
const registerRoutes = vi.fn();
const listen = vi.fn(() => Promise.resolve());
await expect(runSessionDaemonStartup({
logger,
migrateArchive: () => Promise.resolve<LegacySessionArchiveMigrationResult>({
status: "failed",
phase: "publish-files",
error: migrationError,
rollbackErrors: [rollbackError],
}),
createRuntime,
registerRoutes,
listen,
})).rejects.toThrow("Legacy session archive migration failed during publish-files; session daemon startup stopped");
expect(logger.error).toHaveBeenCalledWith(
{
err: migrationError,
phase: "publish-files",
rollbackErrorCount: 1,
rollbackErrors: [rollbackError],
},
"legacy session archive migration failed before commit and rollback was incomplete; stopping session daemon startup",
);
expect(createRuntime).not.toHaveBeenCalled();
expect(registerRoutes).not.toHaveBeenCalled();
expect(listen).not.toHaveBeenCalled();
});
it("warns but starts from the committed destination when legacy cleanup is incomplete", async () => {
const logger = createLogger();
const cleanupError = new Error("legacy index could not be removed");
const createRuntime = vi.fn(() => ({ ready: true }));
const registerRoutes = vi.fn();
const listen = vi.fn(() => Promise.resolve());
await runSessionDaemonStartup({
logger,
migrateArchive: () => Promise.resolve<LegacySessionArchiveMigrationResult>({
status: "migrated",
archiveFileCount: 2,
cleanup: "incomplete",
cleanupErrors: [cleanupError],
}),
createRuntime,
registerRoutes,
listen,
});
expect(logger.warn).toHaveBeenCalledWith(
{
archiveFileCount: 2,
cleanupErrorCount: 1,
cleanupErrors: [cleanupError],
},
"legacy session archive migration committed but cleanup was incomplete; continuing with the migrated destination archive",
);
expect(createRuntime).toHaveBeenCalledOnce();
expect(registerRoutes).toHaveBeenCalledOnce();
expect(listen).toHaveBeenCalledOnce();
});
});
interface LegacyArchiveFixture {
legacyIndexPath: string;
legacyFilePath: string;
destinationIndexPath: string;
destinationFilePath: string;
options: LegacySessionArchiveMigrationOptions;
}
async function createLegacyArchiveFixture(): Promise<LegacyArchiveFixture> {
const root = await mkdtemp(join(tmpdir(), "pi-web-sessiond-startup-"));
tempRoots.push(root);
const homeDir = join(root, "home");
const legacyRoot = join(homeDir, ".pi-web");
const legacyArchiveDir = join(legacyRoot, "archived-sessions");
const legacyIndexPath = join(legacyRoot, "archived-sessions.json");
const legacyFilePath = join(legacyArchiveDir, "legacy-session.jsonl");
const destinationRoot = join(root, "managed-state");
const destinationIndexPath = join(destinationRoot, "archived-sessions.json");
const destinationFilePath = join(destinationRoot, "archived-sessions", "legacy-session.jsonl");
await mkdir(legacyArchiveDir, { recursive: true });
await writeFile(legacyFilePath, "legacy session\n", "utf8");
await writeFile(legacyIndexPath, `${JSON.stringify({
sessions: [{
sessionId: "legacy-session",
cwd: join(root, "workspace"),
archivedAt: "2026-01-01T00:00:00.000Z",
archivePath: legacyFilePath,
}],
}, null, 2)}\n`, "utf8");
return {
legacyIndexPath,
legacyFilePath,
destinationIndexPath,
destinationFilePath,
options: {
env: { PI_WEB_DATA_DIR: destinationRoot },
cwd: root,
homeDir,
createAttemptId: () => "sessiond-startup-test",
},
};
}
function expectMigrationComplete(fixture: LegacyArchiveFixture): void {
expect(existsSync(fixture.legacyIndexPath)).toBe(false);
expect(existsSync(fixture.legacyFilePath)).toBe(false);
expect(readFileSync(fixture.destinationFilePath, "utf8")).toBe("legacy session\n");
expect(JSON.parse(readFileSync(fixture.destinationIndexPath, "utf8"))).toMatchObject({
sessions: [{ archivePath: fixture.destinationFilePath }],
});
}
function createLogger() {
return {
debug: vi.fn(),
info: vi.fn(),
warn: vi.fn(),
error: vi.fn(),
};
}
function deferred<T>() {
let resolve!: (value: T | PromiseLike<T>) => void;
const promise = new Promise<T>((resolvePromise) => {
resolve = resolvePromise;
});
return { promise, resolve };
}
@@ -1,95 +0,0 @@
import {
migrateLegacySessionArchive,
type LegacySessionArchiveMigrationResult,
} from "../sessions/sessionArchiveMigration.js";
export interface SessionDaemonStartupLogger {
debug(details: Record<string, unknown>, message: string): void;
info(details: Record<string, unknown>, message: string): void;
warn(details: Record<string, unknown>, message: string): void;
error(details: Record<string, unknown>, message: string): void;
}
export interface SessionDaemonStartupSteps<Runtime> {
logger: SessionDaemonStartupLogger;
createRuntime(): Runtime | Promise<Runtime>;
registerRoutes(runtime: Runtime): void;
listen(runtime: Runtime): Promise<void>;
migrateArchive?: () => Promise<LegacySessionArchiveMigrationResult>;
}
/**
* Keeps archive migration ahead of every archive-state consumer in sessiond.
* A failed eligible migration stops startup so runtime writes cannot make a
* clean retry ambiguous; mutation-free eligibility skips still start normally.
*/
export async function runSessionDaemonStartup<Runtime>(
steps: SessionDaemonStartupSteps<Runtime>,
): Promise<Runtime> {
const result = await (steps.migrateArchive ?? migrateLegacySessionArchive)();
reportMigrationResult(result, steps.logger);
if (result.status === "failed") {
throw new Error(
`Legacy session archive migration failed during ${result.phase}; session daemon startup stopped`,
{ cause: result.error },
);
}
const runtime = await steps.createRuntime();
steps.registerRoutes(runtime);
await steps.listen(runtime);
return runtime;
}
function reportMigrationResult(
result: LegacySessionArchiveMigrationResult,
logger: SessionDaemonStartupLogger,
): void {
if (result.status === "skipped") {
if (result.reason === "inspection-failed") {
logger.warn(
{ err: result.error, reason: result.reason },
"could not inspect legacy session archive migration eligibility; continuing session daemon startup without migration",
);
} else {
logger.debug(
{ reason: result.reason },
"legacy session archive migration is not eligible; continuing session daemon startup",
);
}
return;
}
if (result.status === "failed") {
logger.error(
{
err: result.error,
phase: result.phase,
rollbackErrorCount: result.rollbackErrors.length,
rollbackErrors: result.rollbackErrors,
},
result.rollbackErrors.length === 0
? "legacy session archive migration failed before commit; stopping session daemon startup"
: "legacy session archive migration failed before commit and rollback was incomplete; stopping session daemon startup",
);
return;
}
if (result.cleanup === "incomplete") {
logger.warn(
{
archiveFileCount: result.archiveFileCount,
cleanupErrorCount: result.cleanupErrors.length,
cleanupErrors: result.cleanupErrors,
},
"legacy session archive migration committed but cleanup was incomplete; continuing with the migrated destination archive",
);
return;
}
logger.info(
{ archiveFileCount: result.archiveFileCount },
"migrated legacy session archive to the configured PI_WEB_DATA_DIR",
);
}
@@ -1,555 +0,0 @@
import { constants } from "node:fs";
import {
access,
appendFile,
copyFile,
link as createHardLink,
lstat,
mkdtemp,
mkdir,
readFile,
readdir,
realpath,
rm,
unlink,
writeFile,
} from "node:fs/promises";
import { tmpdir } from "node:os";
import { dirname, join, resolve, sep } from "node:path";
import { afterEach, describe, expect, it } from "vitest";
import {
inspectLegacySessionArchiveMigration,
migrateLegacySessionArchive,
type LegacySessionArchiveMigrationOptions,
} from "./sessionArchiveMigration.js";
const tempRoots: string[] = [];
describe("legacy session archive migration preflight", () => {
afterEach(async () => {
await Promise.all(tempRoots.splice(0).map((path) => rm(path, { recursive: true, force: true })));
});
it("proves the ordinary legacy layout eligible without creating destination state", async () => {
const fixture = await createLegacyArchiveFixture();
await expect(inspectLegacySessionArchiveMigration(fixture.options)).resolves.toEqual({
status: "eligible",
legacyIndexPath: fixture.legacyIndexPath,
destinationIndexPath: fixture.destinationIndexPath,
archiveFileCount: 1,
});
expect(await exists(fixture.destinationRoot)).toBe(false);
await expect(readFile(fixture.legacyFilePath, "utf8")).resolves.toBe("legacy session\n");
});
it("skips when PI_WEB_DATA_DIR is not explicitly configured", async () => {
const fixture = await createLegacyArchiveFixture();
await expect(migrateLegacySessionArchive({ ...fixture.options, env: {} })).resolves.toEqual({
status: "skipped",
reason: "data-dir-not-configured",
});
await expectLegacyStateUntouched(fixture);
expect(await exists(fixture.destinationRoot)).toBe(false);
});
it("skips when the configured data root resolves to the legacy root", async () => {
const fixture = await createLegacyArchiveFixture();
await expect(migrateLegacySessionArchive({
...fixture.options,
env: { PI_WEB_DATA_DIR: fixture.legacyRoot },
})).resolves.toEqual({ status: "skipped", reason: "data-dir-not-distinct" });
await expectLegacyStateUntouched(fixture);
});
it("skips when no legacy index exists without adopting loose legacy files", async () => {
const fixture = await createLegacyArchiveFixture();
await unlink(fixture.legacyIndexPath);
await expect(migrateLegacySessionArchive(fixture.options)).resolves.toEqual({
status: "skipped",
reason: "legacy-index-missing",
});
await expect(readFile(fixture.legacyFilePath, "utf8")).resolves.toBe("legacy session\n");
await expect(readFile(fixture.activeFilePath, "utf8")).resolves.toBe("active session\n");
expect(await exists(fixture.destinationRoot)).toBe(false);
});
it("skips malformed legacy indexes without creating destination state", async () => {
const fixture = await createLegacyArchiveFixture();
await writeFile(fixture.legacyIndexPath, "not json\n", "utf8");
await expect(migrateLegacySessionArchive(fixture.options)).resolves.toEqual({
status: "skipped",
reason: "legacy-index-invalid",
});
await expect(readFile(fixture.legacyIndexPath, "utf8")).resolves.toBe("not json\n");
expect(await exists(fixture.destinationRoot)).toBe(false);
});
it("treats inconclusive filesystem inspection as a mutation-free skip", async () => {
const fixture = await createLegacyArchiveFixture();
const inspectionError = Object.assign(new Error("inspection denied"), { code: "EACCES" });
const result = await migrateLegacySessionArchive({
...fixture.options,
fileSystem: {
lstat: (path) => path === fixture.destinationIndexPath
? Promise.reject(inspectionError)
: lstat(path),
},
});
expect(result).toMatchObject({
status: "skipped",
reason: "inspection-failed",
error: inspectionError,
});
await expectLegacyStateUntouched(fixture);
expect(await exists(fixture.destinationRoot)).toBe(false);
});
it("does not merge with or overwrite an existing destination index", async () => {
const fixture = await createLegacyArchiveFixture();
await mkdir(fixture.destinationRoot, { recursive: true });
await writeFile(fixture.destinationIndexPath, "destination owner\n", "utf8");
await expect(migrateLegacySessionArchive(fixture.options)).resolves.toEqual({
status: "skipped",
reason: "destination-index-exists",
});
await expect(readFile(fixture.destinationIndexPath, "utf8")).resolves.toBe("destination owner\n");
await expectLegacyStateUntouched(fixture);
});
it("leaves an interrupted pre-commit file untouched instead of adopting a non-empty destination archive", async () => {
const fixture = await createLegacyArchiveFixture({ createDestinationArchive: true });
await writeFile(fixture.destinationFilePath, "partial destination copy\n", "utf8");
await expect(migrateLegacySessionArchive(fixture.options)).resolves.toEqual({
status: "skipped",
reason: "destination-archive-not-empty-or-invalid",
});
await expect(readFile(fixture.destinationFilePath, "utf8")).resolves.toBe("partial destination copy\n");
await expectLegacyStateUntouched(fixture);
});
it("skips archive paths that are not direct regular files in the legacy archive directory", async () => {
const fixture = await createLegacyArchiveFixture();
const outsidePath = join(fixture.root, "outside.jsonl");
await writeFile(outsidePath, "outside\n", "utf8");
const firstRecord = requiredRecord(fixture.document.sessions, 0);
const changedDocument = {
...fixture.document,
sessions: [{ ...firstRecord, archivePath: outsidePath }, ...fixture.document.sessions.slice(1)],
};
await writeArchiveIndex(fixture.legacyIndexPath, changedDocument);
await expect(migrateLegacySessionArchive(fixture.options)).resolves.toEqual({
status: "skipped",
reason: "legacy-archive-layout-invalid",
});
await expect(readFile(outsidePath, "utf8")).resolves.toBe("outside\n");
await expect(readFile(fixture.legacyFilePath, "utf8")).resolves.toBe("legacy session\n");
expect(await exists(fixture.destinationRoot)).toBe(false);
});
it("uses Windows case-insensitive path semantics without weakening Linux containment", async () => {
const fixture = await createLegacyArchiveFixture();
const casedArchivePath = resolve(fixture.legacyFilePath.toUpperCase());
const firstRecord = requiredRecord(fixture.document.sessions, 0);
await writeArchiveIndex(fixture.legacyIndexPath, {
...fixture.document,
sessions: [
{ ...firstRecord, archivePath: casedArchivePath },
...fixture.document.sessions.slice(1),
],
});
const mapCaseVariant = (path: string): string => path.toLowerCase() === casedArchivePath.toLowerCase()
? fixture.legacyFilePath
: path;
const fileSystem = {
lstat: (path: string) => lstat(mapCaseVariant(path)),
realpath: (path: string) => realpath(mapCaseVariant(path)),
};
await expect(inspectLegacySessionArchiveMigration({
...fixture.options,
platform: "linux",
fileSystem,
})).resolves.toEqual({ status: "skipped", reason: "legacy-archive-layout-invalid" });
await expect(inspectLegacySessionArchiveMigration({
...fixture.options,
platform: "win32",
fileSystem,
})).resolves.toEqual({
status: "eligible",
legacyIndexPath: fixture.legacyIndexPath,
destinationIndexPath: fixture.destinationIndexPath,
archiveFileCount: 1,
});
});
it("skips legacy directories containing unindexed entries", async () => {
const fixture = await createLegacyArchiveFixture();
const unexpectedPath = join(fixture.legacyArchiveDir, "unexpected.tmp");
await writeFile(unexpectedPath, "unexpected\n", "utf8");
await expect(migrateLegacySessionArchive(fixture.options)).resolves.toEqual({
status: "skipped",
reason: "legacy-archive-layout-invalid",
});
await expect(readFile(unexpectedPath, "utf8")).resolves.toBe("unexpected\n");
await expectLegacyStateUntouched(fixture);
expect(await exists(fixture.destinationRoot)).toBe(false);
});
it("skips duplicate session IDs", async () => {
const fixture = await createLegacyArchiveFixture();
const firstRecord = requiredRecord(fixture.document.sessions, 0);
const secondRecord = requiredRecord(fixture.document.sessions, 1);
await writeArchiveIndex(fixture.legacyIndexPath, {
...fixture.document,
sessions: [firstRecord, { ...secondRecord, sessionId: firstRecord["sessionId"] }],
});
await expect(migrateLegacySessionArchive(fixture.options)).resolves.toEqual({
status: "skipped",
reason: "archive-record-conflict",
});
await expect(readFile(fixture.legacyFilePath, "utf8")).resolves.toBe("legacy session\n");
expect(await exists(fixture.destinationRoot)).toBe(false);
});
it("skips duplicate source and destination file mappings", async () => {
const fixture = await createLegacyArchiveFixture();
const firstRecord = requiredRecord(fixture.document.sessions, 0);
await writeArchiveIndex(fixture.legacyIndexPath, {
...fixture.document,
sessions: [firstRecord, { ...firstRecord, sessionId: "second-file-record" }],
});
await expect(migrateLegacySessionArchive(fixture.options)).resolves.toEqual({
status: "skipped",
reason: "archive-record-conflict",
});
await expectLegacyStateUntouched({
...fixture,
sourceIndexContents: await readFile(fixture.legacyIndexPath, "utf8"),
});
expect(await exists(fixture.destinationRoot)).toBe(false);
});
});
describe("legacy session archive migration execution", () => {
afterEach(async () => {
await Promise.all(tempRoots.splice(0).map((path) => rm(path, { recursive: true, force: true })));
});
it("copies across the source boundary, atomically publishes the rewritten index, then removes legacy state", async () => {
const fixture = await createLegacyArchiveFixture({ createDestinationArchive: true });
const copies: { source: string; destination: string; mode: number }[] = [];
const links: { source: string; destination: string }[] = [];
await expect(migrateLegacySessionArchive({
...fixture.options,
fileSystem: {
copyFile: async (source, destination, mode) => {
copies.push({ source, destination, mode });
await copyFile(source, destination, mode);
},
link: async (source, destination) => {
links.push({ source, destination });
await createHardLink(source, destination);
},
unlink: async (path) => {
if (path === fixture.legacyFilePath || path === fixture.legacyIndexPath) {
expect(await exists(fixture.destinationIndexPath)).toBe(true);
}
await unlink(path);
},
},
})).resolves.toEqual({ status: "migrated", archiveFileCount: 1, cleanup: "complete" });
expect(copies).toHaveLength(2);
expect(copies[0]).toMatchObject({ source: fixture.legacyFilePath, mode: constants.COPYFILE_EXCL });
expect(copies[0]?.destination).toContain(".archived-sessions-migration-test-attempt");
expect(copies[1]).toMatchObject({ destination: fixture.destinationFilePath, mode: constants.COPYFILE_EXCL });
expect(links).toEqual([{
source: join(fixture.destinationRoot, ".archived-sessions-migration-test-attempt", "archived-sessions.json"),
destination: fixture.destinationIndexPath,
}]);
await expect(readFile(fixture.destinationFilePath, "utf8")).resolves.toBe("legacy session\n");
const migratedDocument: unknown = JSON.parse(await readFile(fixture.destinationIndexPath, "utf8"));
const firstRecord = requiredRecord(fixture.document.sessions, 0);
expect(migratedDocument).toEqual({
...fixture.document,
sessions: [
{ ...firstRecord, archivePath: fixture.destinationFilePath },
requiredRecord(fixture.document.sessions, 1),
],
});
expect(await exists(fixture.legacyIndexPath)).toBe(false);
expect(await exists(fixture.legacyFilePath)).toBe(false);
expect(await exists(fixture.legacyArchiveDir)).toBe(false);
await expect(readFile(fixture.activeFilePath, "utf8")).resolves.toBe("active session\n");
expect(new Set(await readdir(fixture.destinationRoot))).toEqual(new Set([
"archived-sessions",
"archived-sessions.json",
]));
});
it("retries safely when an interrupted staging-only attempt left an unowned sibling tree", async () => {
const fixture = await createLegacyArchiveFixture();
const abandonedFile = join(
fixture.destinationRoot,
".archived-sessions-migration-interrupted-attempt",
"files",
"abandoned.jsonl",
);
await mkdir(dirname(abandonedFile), { recursive: true });
await writeFile(abandonedFile, "unowned staging data\n", "utf8");
await expect(migrateLegacySessionArchive(fixture.options)).resolves.toEqual({
status: "migrated",
archiveFileCount: 1,
cleanup: "complete",
});
await expect(readFile(abandonedFile, "utf8")).resolves.toBe("unowned staging data\n");
await expect(readFile(fixture.destinationFilePath, "utf8")).resolves.toBe("legacy session\n");
expect(await exists(fixture.destinationIndexPath)).toBe(true);
expect(await exists(fixture.legacyIndexPath)).toBe(false);
});
it("rolls back destination artifacts and preserves all legacy state when staged-copy verification fails", async () => {
const fixture = await createLegacyArchiveFixture();
const result = await migrateLegacySessionArchive({
...fixture.options,
fileSystem: {
copyFile: async (source, destination, mode) => {
await copyFile(source, destination, mode);
if (source === fixture.legacyFilePath) await appendFile(destination, "corrupt", "utf8");
},
},
});
expect(result).toMatchObject({ status: "failed", phase: "stage", rollbackErrors: [] });
await expectLegacyStateUntouched(fixture);
expect(await exists(fixture.destinationIndexPath)).toBe(false);
await expect(readdir(fixture.destinationRoot)).resolves.toEqual([]);
});
it("revalidates source files before commit and rolls back if one changes during migration", async () => {
const fixture = await createLegacyArchiveFixture();
const result = await migrateLegacySessionArchive({
...fixture.options,
fileSystem: {
copyFile: async (source, destination, mode) => {
await copyFile(source, destination, mode);
if (destination === fixture.destinationFilePath) {
await appendFile(fixture.legacyFilePath, "changed during migration\n", "utf8");
}
},
},
});
expect(result).toMatchObject({ status: "failed", phase: "commit-index", rollbackErrors: [] });
await expect(readFile(fixture.legacyIndexPath, "utf8")).resolves.toBe(fixture.sourceIndexContents);
await expect(readFile(fixture.legacyFilePath, "utf8")).resolves.toBe(
"legacy session\nchanged during migration\n",
);
await expect(readFile(fixture.activeFilePath, "utf8")).resolves.toBe("active session\n");
expect(await exists(fixture.destinationIndexPath)).toBe(false);
expect(await exists(fixture.destinationArchiveDir)).toBe(false);
});
it("rolls back published files but never source state when atomic index publication fails", async () => {
const fixture = await createLegacyArchiveFixture();
const publicationError = Object.assign(new Error("link failed"), { code: "EIO" });
const result = await migrateLegacySessionArchive({
...fixture.options,
fileSystem: {
link: () => Promise.reject(publicationError),
},
});
expect(result).toMatchObject({
status: "failed",
phase: "commit-index",
error: publicationError,
rollbackErrors: [],
});
await expectLegacyStateUntouched(fixture);
expect(await exists(fixture.destinationIndexPath)).toBe(false);
expect(await exists(fixture.destinationArchiveDir)).toBe(false);
await expect(readdir(fixture.destinationRoot)).resolves.toEqual([]);
});
it("does not overwrite a destination index that appears at the atomic commit boundary", async () => {
const fixture = await createLegacyArchiveFixture();
const publicationError = Object.assign(new Error("destination index won the race"), { code: "EEXIST" });
const result = await migrateLegacySessionArchive({
...fixture.options,
fileSystem: {
link: async (_source, destination) => {
await writeFile(destination, "destination owner\n", { encoding: "utf8", flag: "wx" });
throw publicationError;
},
},
});
expect(result).toMatchObject({
status: "failed",
phase: "commit-index",
error: publicationError,
rollbackErrors: [],
});
await expect(readFile(fixture.destinationIndexPath, "utf8")).resolves.toBe("destination owner\n");
expect(await exists(fixture.destinationArchiveDir)).toBe(false);
await expectLegacyStateUntouched(fixture);
});
it("keeps the committed destination authoritative when legacy cleanup fails", async () => {
const fixture = await createLegacyArchiveFixture();
const cleanupError = Object.assign(new Error("source cleanup failed"), { code: "EACCES" });
const result = await migrateLegacySessionArchive({
...fixture.options,
fileSystem: {
unlink: async (path) => {
if (path === fixture.legacyFilePath) throw cleanupError;
await unlink(path);
},
},
});
expect(result).toMatchObject({
status: "migrated",
cleanup: "incomplete",
cleanupErrors: [cleanupError],
});
await expect(readFile(fixture.destinationFilePath, "utf8")).resolves.toBe("legacy session\n");
expect(await exists(fixture.destinationIndexPath)).toBe(true);
await expectLegacyStateUntouched(fixture);
});
});
interface LegacyArchiveFixture {
root: string;
legacyRoot: string;
legacyIndexPath: string;
legacyArchiveDir: string;
legacyFilePath: string;
activeFilePath: string;
destinationRoot: string;
destinationIndexPath: string;
destinationArchiveDir: string;
destinationFilePath: string;
sourceIndexContents: string;
document: { marker: string; sessions: Record<string, unknown>[] };
options: LegacySessionArchiveMigrationOptions;
}
async function createLegacyArchiveFixture(
setup: { createDestinationArchive?: boolean } = {},
): Promise<LegacyArchiveFixture> {
const root = await mkdtemp(join(tmpdir(), "pi-web-archive-migration-"));
tempRoots.push(root);
const homeDir = join(root, "home");
const legacyRoot = join(homeDir, ".pi-web");
const legacyIndexPath = join(legacyRoot, "archived-sessions.json");
const legacyArchiveDir = join(legacyRoot, "archived-sessions");
const legacyFilePath = join(legacyArchiveDir, "2026-01-01_file-session.jsonl");
const activeFilePath = join(root, "active", "2026-01-01_file-session.jsonl");
const destinationRoot = join(root, "managed-state");
const destinationIndexPath = join(destinationRoot, "archived-sessions.json");
const destinationArchiveDir = join(destinationRoot, "archived-sessions");
const destinationFilePath = join(destinationArchiveDir, "2026-01-01_file-session.jsonl");
const document = {
marker: "preserve root metadata",
sessions: [
{
sessionId: "file-session",
cwd: `${join(root, "workspace")}${sep}..${sep}workspace`,
archivedAt: "2026-01-01T00:02:00.000Z",
originalPath: activeFilePath,
archivePath: legacyFilePath,
created: "2026-01-01T00:00:00.000Z",
modified: "2026-01-01T00:01:00.000Z",
messageCount: 2,
firstMessage: "hello",
name: "Legacy file session",
customMetadata: { preserved: true },
},
{
sessionId: "metadata-only",
cwd: "/workspace",
archivedAt: "2026-01-02T00:00:00.000Z",
name: "Metadata only",
},
],
};
await mkdir(legacyArchiveDir, { recursive: true });
await mkdir(join(root, "active"), { recursive: true });
await writeFile(legacyFilePath, "legacy session\n", "utf8");
await writeFile(activeFilePath, "active session\n", "utf8");
const sourceIndexContents = await writeArchiveIndex(legacyIndexPath, document);
if (setup.createDestinationArchive === true) await mkdir(destinationArchiveDir, { recursive: true });
return {
root,
legacyRoot,
legacyIndexPath,
legacyArchiveDir,
legacyFilePath,
activeFilePath,
destinationRoot,
destinationIndexPath,
destinationArchiveDir,
destinationFilePath,
sourceIndexContents,
document,
options: {
env: { PI_WEB_DATA_DIR: destinationRoot },
cwd: root,
homeDir,
createAttemptId: () => "test-attempt",
},
};
}
async function writeArchiveIndex(path: string, document: unknown): Promise<string> {
const contents = `${JSON.stringify(document, null, 2)}\n`;
await writeFile(path, contents, "utf8");
return contents;
}
async function expectLegacyStateUntouched(fixture: LegacyArchiveFixture): Promise<void> {
await expect(readFile(fixture.legacyIndexPath, "utf8")).resolves.toBe(fixture.sourceIndexContents);
await expect(readFile(fixture.legacyFilePath, "utf8")).resolves.toBe("legacy session\n");
await expect(readFile(fixture.activeFilePath, "utf8")).resolves.toBe("active session\n");
}
function requiredRecord(records: Record<string, unknown>[], index: number): Record<string, unknown> {
const record = records[index];
if (record === undefined) throw new Error(`Missing fixture record ${index.toString()}`);
return record;
}
async function exists(path: string): Promise<boolean> {
try {
await access(path, constants.F_OK);
return true;
} catch {
return false;
}
}
@@ -1,781 +0,0 @@
import { randomUUID } from "node:crypto";
import { constants, type Dirent, type Stats } from "node:fs";
import {
copyFile,
link,
lstat,
mkdir,
open,
readFile,
readdir,
realpath,
rm,
rmdir,
unlink,
writeFile,
} from "node:fs/promises";
import { homedir } from "node:os";
import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
import { piWebDataDir } from "../../config.js";
import { parseSessionArchiveFile, type ArchivedSessionRecord } from "./sessionArchiveStore.js";
export type LegacySessionArchiveMigrationSkipReason =
| "data-dir-not-configured"
| "data-dir-not-distinct"
| "legacy-index-missing"
| "legacy-index-invalid"
| "destination-index-exists"
| "destination-archive-not-empty-or-invalid"
| "legacy-archive-layout-invalid"
| "archive-record-conflict"
| "inspection-failed";
export interface LegacySessionArchiveMigrationSkipped {
status: "skipped";
reason: LegacySessionArchiveMigrationSkipReason;
error?: unknown;
}
export type LegacySessionArchiveMigrationPreflight =
| LegacySessionArchiveMigrationSkipped
| {
status: "eligible";
legacyIndexPath: string;
destinationIndexPath: string;
archiveFileCount: number;
};
export type LegacySessionArchiveMigrationPhase = "stage" | "publish-files" | "commit-index";
export type LegacySessionArchiveMigrationResult =
| LegacySessionArchiveMigrationSkipped
| {
status: "failed";
phase: LegacySessionArchiveMigrationPhase;
error: unknown;
rollbackErrors: unknown[];
}
| {
status: "migrated";
archiveFileCount: number;
cleanup: "complete";
}
| {
status: "migrated";
archiveFileCount: number;
cleanup: "incomplete";
cleanupErrors: unknown[];
};
export interface SessionArchiveMigrationReadHandle {
read(buffer: Buffer, offset: number, length: number, position: null): Promise<{ bytesRead: number }>;
close(): Promise<void>;
}
export interface SessionArchiveMigrationFileSystem {
lstat(path: string): Promise<Stats>;
realpath(path: string): Promise<string>;
readFile(path: string): Promise<string>;
readdir(path: string): Promise<Dirent[]>;
mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;
copyFile(source: string, destination: string, mode: number): Promise<void>;
writeFile(path: string, contents: string): Promise<void>;
link(source: string, destination: string): Promise<void>;
unlink(path: string): Promise<void>;
rmdir(path: string): Promise<void>;
rmOwnedTree(path: string): Promise<void>;
open(path: string): Promise<SessionArchiveMigrationReadHandle>;
}
export interface LegacySessionArchiveMigrationOptions {
env?: NodeJS.ProcessEnv;
cwd?: string;
homeDir?: string;
platform?: NodeJS.Platform;
createAttemptId?: () => string;
fileSystem?: Partial<SessionArchiveMigrationFileSystem>;
}
interface PlannedArchiveFile {
sourcePath: string;
destinationPath: string;
fileName: string;
}
interface MigrationPlan {
legacyRoot: string;
canonicalLegacyRoot: string;
legacyIndexPath: string;
legacyArchiveDir: string;
canonicalLegacyArchiveDir: string;
legacyArchiveDirExists: boolean;
destinationRoot: string;
canonicalDestinationRoot: string;
destinationIndexPath: string;
destinationArchiveDir: string;
canonicalDestinationArchiveDir: string;
destinationArchiveDirExists: boolean;
sourceIndexContents: string;
destinationIndexContents: string;
files: PlannedArchiveFile[];
platform: NodeJS.Platform;
}
interface InternalEligiblePreflight {
status: "eligible";
plan: MigrationPlan;
}
type InternalPreflight = LegacySessionArchiveMigrationSkipped | InternalEligiblePreflight;
const defaultFileSystem: SessionArchiveMigrationFileSystem = {
lstat: async (path) => lstat(path),
realpath: async (path) => realpath(path),
readFile: async (path) => readFile(path, "utf8"),
readdir: async (path) => readdir(path, { withFileTypes: true }),
mkdir: async (path, options) => {
await mkdir(path, options);
},
copyFile: async (source, destination, mode) => copyFile(source, destination, mode),
writeFile: async (path, contents) => {
await writeFile(path, contents, { encoding: "utf8", flag: "wx" });
},
link: async (source, destination) => link(source, destination),
unlink: async (path) => unlink(path),
rmdir: async (path) => rmdir(path),
rmOwnedTree: async (path) => {
await rm(path, { recursive: true, force: true });
},
open: async (path) => open(path, "r"),
};
export async function inspectLegacySessionArchiveMigration(
options: LegacySessionArchiveMigrationOptions = {},
): Promise<LegacySessionArchiveMigrationPreflight> {
const preflight = await buildMigrationPreflight(options, migrationFileSystem(options));
if (preflight.status === "skipped") return preflight;
return {
status: "eligible",
legacyIndexPath: preflight.plan.legacyIndexPath,
destinationIndexPath: preflight.plan.destinationIndexPath,
archiveFileCount: preflight.plan.files.length,
};
}
export async function migrateLegacySessionArchive(
options: LegacySessionArchiveMigrationOptions = {},
): Promise<LegacySessionArchiveMigrationResult> {
const fileSystem = migrationFileSystem(options);
const preflight = await buildMigrationPreflight(options, fileSystem);
if (preflight.status === "skipped") return preflight;
const plan = preflight.plan;
let phase: LegacySessionArchiveMigrationPhase = "stage";
let stagingRoot: string | undefined;
let stagingCreated = false;
let destinationArchiveCreated = false;
const ownedDestinationFiles: string[] = [];
try {
await fileSystem.mkdir(plan.destinationRoot, { recursive: true });
const currentDestinationRoot = await canonicalizeAllowMissing(plan.destinationRoot, fileSystem);
if (!pathsEqual(currentDestinationRoot, plan.canonicalDestinationRoot, plan.platform)) {
throw new Error("Destination data root changed after migration preflight");
}
await assertDestinationStateUnchanged(plan, fileSystem);
const attemptId = safeAttemptId((options.createAttemptId ?? randomUUID)());
// Keep staging beside, not inside, the authoritative archive directory so an
// interrupted staging copy cannot be mistaken for destination archive data.
stagingRoot = join(plan.destinationRoot, `.archived-sessions-migration-${attemptId}`);
await fileSystem.mkdir(stagingRoot);
stagingCreated = true;
const stagingFilesDir = join(stagingRoot, "files");
await fileSystem.mkdir(stagingFilesDir);
const stagedFiles = new Map<string, string>();
for (const file of plan.files) {
const stagedPath = join(stagingFilesDir, file.fileName);
await fileSystem.copyFile(file.sourcePath, stagedPath, constants.COPYFILE_EXCL);
if (!await filesEqual(file.sourcePath, stagedPath, fileSystem)) {
throw new Error(`Staged archive file verification failed: ${file.fileName}`);
}
stagedFiles.set(file.destinationPath, stagedPath);
}
const stagedIndexPath = join(stagingRoot, "archived-sessions.json");
await fileSystem.writeFile(stagedIndexPath, plan.destinationIndexContents);
if (await fileSystem.readFile(stagedIndexPath) !== plan.destinationIndexContents) {
throw new Error("Staged archive index verification failed");
}
phase = "publish-files";
await assertDestinationStateUnchanged(plan, fileSystem);
if (plan.files.length > 0 && !plan.destinationArchiveDirExists) {
await fileSystem.mkdir(plan.destinationArchiveDir);
destinationArchiveCreated = true;
}
for (const file of plan.files) {
const stagedPath = stagedFiles.get(file.destinationPath);
if (stagedPath === undefined) throw new Error(`Missing staged archive file: ${file.fileName}`);
try {
await fileSystem.copyFile(stagedPath, file.destinationPath, constants.COPYFILE_EXCL);
ownedDestinationFiles.push(file.destinationPath);
} catch (error: unknown) {
if (!isNodeErrorWithCode(error, "EEXIST")) ownedDestinationFiles.push(file.destinationPath);
throw error;
}
if (!await filesEqual(stagedPath, file.destinationPath, fileSystem)) {
throw new Error(`Published archive file verification failed: ${file.fileName}`);
}
}
phase = "commit-index";
await assertPlanReadyToCommit(plan, stagedIndexPath, fileSystem);
// A same-directory hard link atomically publishes the already-verified index
// and, unlike rename on POSIX, fails rather than replacing an existing index.
await fileSystem.link(stagedIndexPath, plan.destinationIndexPath);
} catch (error: unknown) {
const rollbackErrors = await rollbackUncommittedDestination({
stagingRoot,
stagingCreated,
destinationArchiveDir: plan.destinationArchiveDir,
destinationArchiveCreated,
ownedDestinationFiles,
}, fileSystem);
return { status: "failed", phase, error, rollbackErrors };
}
const cleanupErrors: unknown[] = [];
try {
await fileSystem.rmOwnedTree(stagingRoot);
} catch (error: unknown) {
cleanupErrors.push(error);
}
cleanupErrors.push(...await removeCommittedLegacyState(plan, fileSystem));
return cleanupErrors.length === 0
? { status: "migrated", archiveFileCount: plan.files.length, cleanup: "complete" }
: { status: "migrated", archiveFileCount: plan.files.length, cleanup: "incomplete", cleanupErrors };
}
async function buildMigrationPreflight(
options: LegacySessionArchiveMigrationOptions,
fileSystem: SessionArchiveMigrationFileSystem,
): Promise<InternalPreflight> {
const env = options.env ?? process.env;
const configuredDataDir = env["PI_WEB_DATA_DIR"];
if (configuredDataDir === undefined || configuredDataDir.trim() === "") {
return migrationSkipped("data-dir-not-configured");
}
const cwd = options.cwd ?? process.cwd();
const platform = options.platform ?? process.platform;
const legacyRoot = resolve(options.homeDir ?? homedir(), ".pi-web");
const destinationRoot = piWebDataDir(env, cwd);
const legacyIndexPath = join(legacyRoot, "archived-sessions.json");
const legacyArchiveDir = join(legacyRoot, "archived-sessions");
const destinationIndexPath = join(destinationRoot, "archived-sessions.json");
const destinationArchiveDir = join(destinationRoot, "archived-sessions");
try {
const canonicalLegacyRoot = await canonicalizeAllowMissing(legacyRoot, fileSystem);
const canonicalDestinationRoot = await canonicalizeAllowMissing(destinationRoot, fileSystem);
if (pathsEqual(canonicalLegacyRoot, canonicalDestinationRoot, platform)) {
return migrationSkipped("data-dir-not-distinct");
}
const legacyIndexStats = await lstatIfExists(legacyIndexPath, fileSystem);
if (legacyIndexStats === undefined) return migrationSkipped("legacy-index-missing");
if (!legacyIndexStats.isFile() || legacyIndexStats.isSymbolicLink()) {
return migrationSkipped("legacy-index-invalid");
}
const sourceIndexContents = await fileSystem.readFile(legacyIndexPath);
const parsedDocument = parseArchiveDocument(sourceIndexContents);
if (parsedDocument === undefined) return migrationSkipped("legacy-index-invalid");
if (await lstatIfExists(destinationIndexPath, fileSystem) !== undefined) {
return migrationSkipped("destination-index-exists");
}
const destinationArchiveStats = await lstatIfExists(destinationArchiveDir, fileSystem);
let destinationArchiveDirExists = false;
if (destinationArchiveStats !== undefined) {
if (!destinationArchiveStats.isDirectory() || destinationArchiveStats.isSymbolicLink()) {
return migrationSkipped("destination-archive-not-empty-or-invalid");
}
if ((await fileSystem.readdir(destinationArchiveDir)).length !== 0) {
return migrationSkipped("destination-archive-not-empty-or-invalid");
}
destinationArchiveDirExists = true;
}
const legacyArchiveStats = await lstatIfExists(legacyArchiveDir, fileSystem);
if (legacyArchiveStats !== undefined && (!legacyArchiveStats.isDirectory() || legacyArchiveStats.isSymbolicLink())) {
return migrationSkipped("legacy-archive-layout-invalid");
}
const legacyArchiveDirExists = legacyArchiveStats !== undefined;
const canonicalLegacyArchiveDir = legacyArchiveDirExists
? await fileSystem.realpath(legacyArchiveDir)
: await canonicalizeAllowMissing(legacyArchiveDir, fileSystem);
const canonicalDestinationArchiveDir = destinationArchiveDirExists
? await fileSystem.realpath(destinationArchiveDir)
: join(canonicalDestinationRoot, "archived-sessions");
if (pathsOverlap(canonicalLegacyArchiveDir, canonicalDestinationArchiveDir, platform)) {
return migrationSkipped("data-dir-not-distinct");
}
const plannedFiles = await planArchiveFiles({
sessions: parsedDocument.sessions,
legacyArchiveDir,
canonicalLegacyArchiveDir,
legacyArchiveDirExists,
destinationArchiveDir,
canonicalDestinationArchiveDir,
platform,
}, fileSystem);
if (plannedFiles.status === "skipped") return plannedFiles;
if (!await legacyDirectoryMatchesPlan(legacyArchiveDir, legacyArchiveDirExists, plannedFiles.files, platform, fileSystem)) {
return migrationSkipped("legacy-archive-layout-invalid");
}
const rewrittenSessions = parsedDocument.rawSessions.map((record, index) => {
const destinationPath = plannedFiles.destinationPathsByRecord[index];
return destinationPath === undefined ? record : { ...record, archivePath: destinationPath };
});
const destinationIndexContents = `${JSON.stringify({ ...parsedDocument.rawDocument, sessions: rewrittenSessions }, null, 2)}\n`;
return {
status: "eligible",
plan: {
legacyRoot,
canonicalLegacyRoot,
legacyIndexPath,
legacyArchiveDir,
canonicalLegacyArchiveDir,
legacyArchiveDirExists,
destinationRoot,
canonicalDestinationRoot,
destinationIndexPath,
destinationArchiveDir,
canonicalDestinationArchiveDir,
destinationArchiveDirExists,
sourceIndexContents,
destinationIndexContents,
files: plannedFiles.files,
platform,
},
};
} catch (error: unknown) {
return migrationSkipped("inspection-failed", error);
}
}
interface ParsedArchiveDocument {
rawDocument: Record<string, unknown>;
rawSessions: Record<string, unknown>[];
sessions: ArchivedSessionRecord[];
}
function parseArchiveDocument(contents: string): ParsedArchiveDocument | undefined {
try {
const value: unknown = JSON.parse(contents);
if (!isRecord(value)) return undefined;
const rawSessions = recordArray(value["sessions"]);
if (rawSessions === undefined) return undefined;
const archive = parseSessionArchiveFile(value);
return { rawDocument: value, rawSessions, sessions: archive.sessions };
} catch {
return undefined;
}
}
async function planArchiveFiles(
input: {
sessions: ArchivedSessionRecord[];
legacyArchiveDir: string;
canonicalLegacyArchiveDir: string;
legacyArchiveDirExists: boolean;
destinationArchiveDir: string;
canonicalDestinationArchiveDir: string;
platform: NodeJS.Platform;
},
fileSystem: SessionArchiveMigrationFileSystem,
): Promise<LegacySessionArchiveMigrationSkipped | { status: "planned"; files: PlannedArchiveFile[]; destinationPathsByRecord: (string | undefined)[] }> {
const sessionIds = new Set<string>();
const sourcePaths = new Set<string>();
const destinationPaths = new Set<string>();
const destinationPathsByRecord: (string | undefined)[] = Array.from({ length: input.sessions.length });
const files: PlannedArchiveFile[] = [];
for (const [index, session] of input.sessions.entries()) {
if (session.sessionId.trim() === "" || sessionIds.has(session.sessionId)) {
return migrationSkipped("archive-record-conflict");
}
sessionIds.add(session.sessionId);
if (session.archivePath === undefined) continue;
if (!input.legacyArchiveDirExists || !isAbsolute(session.archivePath)) {
return migrationSkipped("legacy-archive-layout-invalid");
}
const sourcePath = resolve(session.archivePath);
if (!pathsEqual(dirname(sourcePath), input.legacyArchiveDir, input.platform)) {
return migrationSkipped("legacy-archive-layout-invalid");
}
const sourceStats = await lstatIfExists(sourcePath, fileSystem);
if (sourceStats === undefined || !sourceStats.isFile() || sourceStats.isSymbolicLink()) {
return migrationSkipped("legacy-archive-layout-invalid");
}
const canonicalSourcePath = await fileSystem.realpath(sourcePath);
if (!pathsEqual(dirname(canonicalSourcePath), input.canonicalLegacyArchiveDir, input.platform)) {
return migrationSkipped("legacy-archive-layout-invalid");
}
const fileName = basename(sourcePath);
const destinationPath = join(input.destinationArchiveDir, fileName);
const canonicalDestinationPath = join(input.canonicalDestinationArchiveDir, fileName);
const sourceKey = pathKey(canonicalSourcePath, input.platform);
const destinationKey = collisionKey(canonicalDestinationPath);
if (sourcePaths.has(sourceKey) || destinationPaths.has(destinationKey)) {
return migrationSkipped("archive-record-conflict");
}
sourcePaths.add(sourceKey);
destinationPaths.add(destinationKey);
destinationPathsByRecord[index] = destinationPath;
files.push({ sourcePath, destinationPath, fileName });
}
return { status: "planned", files, destinationPathsByRecord };
}
async function legacyDirectoryMatchesPlan(
legacyArchiveDir: string,
legacyArchiveDirExists: boolean,
files: PlannedArchiveFile[],
platform: NodeJS.Platform,
fileSystem: SessionArchiveMigrationFileSystem,
): Promise<boolean> {
const archiveStats = await lstatIfExists(legacyArchiveDir, fileSystem);
if (!legacyArchiveDirExists) return archiveStats === undefined && files.length === 0;
if (archiveStats === undefined || !archiveStats.isDirectory() || archiveStats.isSymbolicLink()) return false;
const entries = await fileSystem.readdir(legacyArchiveDir);
if (entries.some((entry) => !entry.isFile() || entry.isSymbolicLink())) return false;
const actualNames = new Set(entries.map((entry) => pathNameKey(entry.name, platform)));
const expectedNames = new Set(files.map((file) => pathNameKey(file.fileName, platform)));
if (actualNames.size !== entries.length || expectedNames.size !== files.length || actualNames.size !== expectedNames.size) return false;
return [...expectedNames].every((name) => actualNames.has(name));
}
async function assertDestinationStateUnchanged(
plan: MigrationPlan,
fileSystem: SessionArchiveMigrationFileSystem,
): Promise<void> {
if (await lstatIfExists(plan.destinationIndexPath, fileSystem) !== undefined) {
throw new Error("Destination archive index appeared after migration preflight");
}
const archiveStats = await lstatIfExists(plan.destinationArchiveDir, fileSystem);
if (!plan.destinationArchiveDirExists) {
if (archiveStats !== undefined) throw new Error("Destination archive directory appeared after migration preflight");
return;
}
if (archiveStats === undefined || !archiveStats.isDirectory() || archiveStats.isSymbolicLink()) {
throw new Error("Destination archive directory changed after migration preflight");
}
if ((await fileSystem.readdir(plan.destinationArchiveDir)).length !== 0) {
throw new Error("Destination archive directory is no longer empty");
}
}
async function assertPlanReadyToCommit(
plan: MigrationPlan,
stagedIndexPath: string,
fileSystem: SessionArchiveMigrationFileSystem,
): Promise<void> {
const currentLegacyRoot = await canonicalizeAllowMissing(plan.legacyRoot, fileSystem);
const currentDestinationRoot = await canonicalizeAllowMissing(plan.destinationRoot, fileSystem);
if (!pathsEqual(currentLegacyRoot, plan.canonicalLegacyRoot, plan.platform)
|| !pathsEqual(currentDestinationRoot, plan.canonicalDestinationRoot, plan.platform)) {
throw new Error("Archive data root changed during migration");
}
const legacyIndexStats = await lstatIfExists(plan.legacyIndexPath, fileSystem);
if (legacyIndexStats === undefined || !legacyIndexStats.isFile() || legacyIndexStats.isSymbolicLink()) {
throw new Error("Legacy archive index changed during migration");
}
if (await fileSystem.readFile(plan.legacyIndexPath) !== plan.sourceIndexContents) {
throw new Error("Legacy archive index changed during migration");
}
if (!await legacyDirectoryMatchesPlan(plan.legacyArchiveDir, plan.legacyArchiveDirExists, plan.files, plan.platform, fileSystem)) {
throw new Error("Legacy archive directory changed during migration");
}
if (plan.legacyArchiveDirExists
&& !pathsEqual(await fileSystem.realpath(plan.legacyArchiveDir), plan.canonicalLegacyArchiveDir, plan.platform)) {
throw new Error("Legacy archive directory changed during migration");
}
if (await lstatIfExists(plan.destinationIndexPath, fileSystem) !== undefined) {
throw new Error("Destination archive index appeared during migration");
}
if (await fileSystem.readFile(stagedIndexPath) !== plan.destinationIndexContents) {
throw new Error("Staged archive index changed during migration");
}
if (plan.files.length === 0) {
const destinationStats = await lstatIfExists(plan.destinationArchiveDir, fileSystem);
if (plan.destinationArchiveDirExists) {
if (destinationStats === undefined || !destinationStats.isDirectory() || destinationStats.isSymbolicLink()
|| !pathsEqual(await fileSystem.realpath(plan.destinationArchiveDir), plan.canonicalDestinationArchiveDir, plan.platform)
|| (await fileSystem.readdir(plan.destinationArchiveDir)).length !== 0) {
throw new Error("Destination archive directory changed during migration");
}
} else if (destinationStats !== undefined) {
throw new Error("Destination archive directory appeared during migration");
}
return;
}
const destinationStats = await lstatIfExists(plan.destinationArchiveDir, fileSystem);
if (destinationStats === undefined || !destinationStats.isDirectory() || destinationStats.isSymbolicLink()) {
throw new Error("Destination archive directory is not a real directory");
}
if (!pathsEqual(await fileSystem.realpath(plan.destinationArchiveDir), plan.canonicalDestinationArchiveDir, plan.platform)) {
throw new Error("Destination archive directory changed during migration");
}
const destinationEntries = await fileSystem.readdir(plan.destinationArchiveDir);
if (destinationEntries.some((entry) => !entry.isFile() || entry.isSymbolicLink())) {
throw new Error("Destination archive directory contains an unexpected entry");
}
const actualNames = new Set(destinationEntries.map((entry) => pathNameKey(entry.name, plan.platform)));
const expectedNames = new Set(plan.files.map((file) => pathNameKey(file.fileName, plan.platform)));
if (actualNames.size !== destinationEntries.length || actualNames.size !== expectedNames.size
|| ![...expectedNames].every((name) => actualNames.has(name))) {
throw new Error("Destination archive directory does not match the migration plan");
}
for (const file of plan.files) {
const sourceStats = await lstatIfExists(file.sourcePath, fileSystem);
const destinationFileStats = await lstatIfExists(file.destinationPath, fileSystem);
if (sourceStats === undefined || !sourceStats.isFile() || sourceStats.isSymbolicLink()
|| destinationFileStats === undefined || !destinationFileStats.isFile() || destinationFileStats.isSymbolicLink()) {
throw new Error(`Archive file changed during migration: ${file.fileName}`);
}
if (!await filesEqual(file.sourcePath, file.destinationPath, fileSystem)) {
throw new Error(`Archive file verification failed before commit: ${file.fileName}`);
}
}
}
async function rollbackUncommittedDestination(
state: {
stagingRoot: string | undefined;
stagingCreated: boolean;
destinationArchiveDir: string;
destinationArchiveCreated: boolean;
ownedDestinationFiles: string[];
},
fileSystem: SessionArchiveMigrationFileSystem,
): Promise<unknown[]> {
const errors: unknown[] = [];
for (const path of [...state.ownedDestinationFiles].reverse()) {
try {
await removeFileIfPresent(path, fileSystem);
} catch (error: unknown) {
errors.push(error);
}
}
if (state.destinationArchiveCreated) {
try {
await removeDirectoryIfPresent(state.destinationArchiveDir, fileSystem);
} catch (error: unknown) {
errors.push(error);
}
}
if (state.stagingCreated && state.stagingRoot !== undefined) {
try {
await fileSystem.rmOwnedTree(state.stagingRoot);
} catch (error: unknown) {
errors.push(error);
}
}
return errors;
}
async function removeCommittedLegacyState(
plan: MigrationPlan,
fileSystem: SessionArchiveMigrationFileSystem,
): Promise<unknown[]> {
const errors: unknown[] = [];
// Remove the index last. If any file/directory cleanup fails, the complete
// legacy index remains as a recovery marker while the destination is valid.
for (const file of plan.files) {
try {
await removeFileIfPresent(file.sourcePath, fileSystem);
} catch (error: unknown) {
errors.push(error);
return errors;
}
}
if (plan.legacyArchiveDirExists) {
try {
await removeDirectoryIfPresent(plan.legacyArchiveDir, fileSystem);
} catch (error: unknown) {
errors.push(error);
return errors;
}
}
try {
await removeFileIfPresent(plan.legacyIndexPath, fileSystem);
} catch (error: unknown) {
errors.push(error);
}
return errors;
}
async function filesEqual(
firstPath: string,
secondPath: string,
fileSystem: SessionArchiveMigrationFileSystem,
): Promise<boolean> {
const first = await fileSystem.open(firstPath);
try {
const second = await fileSystem.open(secondPath);
try {
const firstBuffer = Buffer.allocUnsafe(64 * 1024);
const secondBuffer = Buffer.allocUnsafe(64 * 1024);
for (;;) {
const [firstBytes, secondBytes] = await Promise.all([
readChunk(first, firstBuffer),
readChunk(second, secondBuffer),
]);
if (firstBytes !== secondBytes) return false;
if (firstBytes === 0) return true;
if (!firstBuffer.subarray(0, firstBytes).equals(secondBuffer.subarray(0, secondBytes))) return false;
}
} finally {
await second.close();
}
} finally {
await first.close();
}
}
async function readChunk(handle: SessionArchiveMigrationReadHandle, buffer: Buffer): Promise<number> {
let total = 0;
while (total < buffer.length) {
const { bytesRead } = await handle.read(buffer, total, buffer.length - total, null);
if (bytesRead === 0) break;
total += bytesRead;
}
return total;
}
async function canonicalizeAllowMissing(path: string, fileSystem: SessionArchiveMigrationFileSystem): Promise<string> {
let cursor = resolve(path);
const missingParts: string[] = [];
for (;;) {
try {
const canonical = await fileSystem.realpath(cursor);
return resolve(canonical, ...missingParts);
} catch (error: unknown) {
if (!isNodeErrorWithCode(error, "ENOENT")) throw error;
if (await lstatIfExists(cursor, fileSystem) !== undefined) {
throw new Error(`Cannot resolve existing path: ${cursor}`, { cause: error });
}
const parent = dirname(cursor);
if (parent === cursor) throw error;
missingParts.unshift(basename(cursor));
cursor = parent;
}
}
}
async function lstatIfExists(path: string, fileSystem: SessionArchiveMigrationFileSystem): Promise<Stats | undefined> {
try {
return await fileSystem.lstat(path);
} catch (error: unknown) {
if (isNodeErrorWithCode(error, "ENOENT")) return undefined;
throw error;
}
}
async function removeFileIfPresent(path: string, fileSystem: SessionArchiveMigrationFileSystem): Promise<void> {
try {
await fileSystem.unlink(path);
} catch (error: unknown) {
if (!isNodeErrorWithCode(error, "ENOENT")) throw error;
}
}
async function removeDirectoryIfPresent(path: string, fileSystem: SessionArchiveMigrationFileSystem): Promise<void> {
try {
await fileSystem.rmdir(path);
} catch (error: unknown) {
if (!isNodeErrorWithCode(error, "ENOENT")) throw error;
}
}
function migrationFileSystem(options: LegacySessionArchiveMigrationOptions): SessionArchiveMigrationFileSystem {
return { ...defaultFileSystem, ...options.fileSystem };
}
function migrationSkipped(
reason: LegacySessionArchiveMigrationSkipReason,
error?: unknown,
): LegacySessionArchiveMigrationSkipped {
return error === undefined ? { status: "skipped", reason } : { status: "skipped", reason, error };
}
function pathsOverlap(first: string, second: string, platform: NodeJS.Platform): boolean {
return pathContains(first, second, platform) || pathContains(second, first, platform);
}
function pathContains(parent: string, candidate: string, platform: NodeJS.Platform): boolean {
const parentPath = pathKey(parent, platform);
const candidatePath = pathKey(candidate, platform);
const pathFromParent = relative(parentPath, candidatePath);
const firstSegment = pathFromParent.split(/[\\/]/, 1)[0];
return pathFromParent === "" || (firstSegment !== ".." && !isAbsolute(pathFromParent));
}
function pathsEqual(first: string, second: string, platform: NodeJS.Platform): boolean {
return pathKey(first, platform) === pathKey(second, platform);
}
function pathKey(path: string, platform: NodeJS.Platform): string {
const normalized = resolve(path);
return platform === "win32" ? normalized.toLowerCase() : normalized;
}
function pathNameKey(name: string, platform: NodeJS.Platform): string {
return platform === "win32" ? name.toLowerCase() : name;
}
function collisionKey(path: string): string {
// Conservatively reject case/normalization variants even when the source
// platform happens to allow them; the destination filesystem may not.
return resolve(path).normalize("NFC").toLowerCase();
}
function safeAttemptId(value: string): string {
return value.replace(/[^a-zA-Z0-9._-]/g, "_") || "attempt";
}
function recordArray(value: unknown): Record<string, unknown>[] | undefined {
if (!Array.isArray(value)) return undefined;
const records: Record<string, unknown>[] = [];
for (const item of value) {
if (!isRecord(item)) return undefined;
records.push(item);
}
return records;
}
function isRecord(value: unknown): value is Record<string, unknown> {
return typeof value === "object" && value !== null && !Array.isArray(value);
}
function isNodeErrorWithCode(error: unknown, code: string): error is NodeJS.ErrnoException {
return error instanceof Error && "code" in error && error.code === code;
}