systemprompt_cloud/cli_session/

store.rs

//! On-disk index of CLI sessions keyed by tenant or `local`.

use std::collections::HashMap;
use std::fs;
use std::path::{Path, PathBuf};

use chrono::{DateTime, Utc};
use serde::{Deserialize, Serialize};
use systemprompt_identifiers::TenantId;

use super::{CliSession, LOCAL_SESSION_KEY, SessionKey};
use crate::error::CloudResult;

const STORE_VERSION: u32 = 1;

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct SessionStore {
    pub version: u32,
    pub sessions: HashMap<String, CliSession>,
    pub active_key: Option<String>,
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub active_profile_name: Option<String>,
    pub updated_at: DateTime<Utc>,
}

impl Default for SessionStore {
    fn default() -> Self {
        Self::new()
    }
}

impl SessionStore {
    #[must_use]
    pub fn new() -> Self {
        Self {
            version: STORE_VERSION,
            sessions: HashMap::new(),
            active_key: None,
            active_profile_name: None,
            updated_at: Utc::now(),
        }
    }

    #[must_use]
    pub fn get_valid_session(&self, key: &SessionKey) -> Option<&CliSession> {
        self.sessions
            .get(&key.as_storage_key())
            .filter(|s| !s.is_expired() && s.has_valid_credentials())
    }

    pub fn get_valid_session_mut(&mut self, key: &SessionKey) -> Option<&mut CliSession> {
        self.sessions
            .get_mut(&key.as_storage_key())
            .filter(|s| !s.is_expired() && s.has_valid_credentials())
    }

    #[must_use]
    pub fn get_session(&self, key: &SessionKey) -> Option<&CliSession> {
        self.sessions.get(&key.as_storage_key())
    }

    pub fn upsert_session(&mut self, key: &SessionKey, session: CliSession) {
        self.sessions.insert(key.as_storage_key(), session);
        self.updated_at = Utc::now();
    }

    pub fn remove_session(&mut self, key: &SessionKey) -> Option<CliSession> {
        let storage_key = key.as_storage_key();
        let removed = self.sessions.remove(&storage_key);
        if removed.is_some() {
            self.updated_at = Utc::now();
        }
        removed
    }

    pub fn set_active(&mut self, key: &SessionKey) {
        self.active_key = Some(key.as_storage_key());
        self.updated_at = Utc::now();
    }

    pub fn set_active_with_profile(&mut self, key: &SessionKey, profile_name: &str) {
        self.active_key = Some(key.as_storage_key());
        self.active_profile_name = Some(profile_name.to_string());
        self.updated_at = Utc::now();
    }

    pub fn set_active_with_profile_path(
        &mut self,
        key: &SessionKey,
        profile_name: &str,
        profile_path: PathBuf,
    ) {
        self.active_key = Some(key.as_storage_key());
        self.active_profile_name = Some(profile_name.to_string());

        if let Some(session) = self.sessions.get_mut(&key.as_storage_key()) {
            session.update_profile_path(profile_path);
        }

        self.updated_at = Utc::now();
    }

    #[must_use]
    pub fn active_session_key(&self) -> Option<SessionKey> {
        self.active_key.as_ref().map(|k| {
            if k == LOCAL_SESSION_KEY {
                SessionKey::Local
            } else {
                k.strip_prefix("tenant_").map_or(SessionKey::Local, |id| {
                    SessionKey::Tenant(TenantId::new(id))
                })
            }
        })
    }

    #[must_use]
    pub fn active_session(&self) -> Option<&CliSession> {
        self.active_session_key()
            .and_then(|key| self.get_valid_session(&key))
    }

    pub fn prune_expired(&mut self) -> usize {
        let expired_keys: Vec<String> = self
            .sessions
            .iter()
            .filter(|(_, s)| s.is_expired())
            .map(|(k, _)| k.clone())
            .collect();

        let count = expired_keys.len();
        for key in &expired_keys {
            self.sessions.remove(key);
        }

        if count > 0 {
            self.updated_at = Utc::now();
        }
        count
    }

    #[must_use]
    pub fn find_by_profile_name(&self, name: &str) -> Option<&CliSession> {
        self.sessions
            .values()
            .find(|s| s.profile_name.as_str() == name && !s.is_expired())
    }

    #[must_use]
    pub fn all_sessions(&self) -> Vec<(&String, &CliSession)> {
        self.sessions.iter().collect()
    }

    #[must_use]
    pub fn len(&self) -> usize {
        self.sessions.len()
    }

    #[must_use]
    pub fn is_empty(&self) -> bool {
        self.sessions.is_empty()
    }

    #[must_use]
    pub fn load(sessions_dir: &Path) -> Option<Self> {
        let index_path = sessions_dir.join("index.json");
        let content = match fs::read_to_string(&index_path) {
            Ok(c) => c,
            Err(e) => {
                tracing::debug!(error = %e, "No session store found");
                return None;
            },
        };
        match serde_json::from_str(&content) {
            Ok(store) => Some(store),
            Err(e) => {
                tracing::warn!(error = %e, "Failed to parse session store");
                None
            },
        }
    }

    #[expect(
        clippy::unnecessary_wraps,
        reason = "Preserves the existing public signature for callers using `?`"
    )]
    pub fn load_or_create(sessions_dir: &Path) -> CloudResult<Self> {
        Ok(Self::load(sessions_dir).unwrap_or_default())
    }

    pub fn save(&self, sessions_dir: &Path) -> CloudResult<()> {
        fs::create_dir_all(sessions_dir)?;

        let gitignore_path = sessions_dir.join(".gitignore");
        if !gitignore_path.exists() {
            fs::write(&gitignore_path, "*\n")?;
        }

        let index_path = sessions_dir.join("index.json");
        let content = serde_json::to_string_pretty(self)?;
        let temp_path = index_path.with_extension("tmp");
        fs::write(&temp_path, &content)?;

        #[cfg(unix)]
        {
            use std::os::unix::fs::PermissionsExt;
            let mut perms = fs::metadata(&temp_path)?.permissions();
            perms.set_mode(0o600);
            fs::set_permissions(&temp_path, perms)?;
        }

        fs::rename(&temp_path, &index_path)?;
        Ok(())
    }
}