paired-devices.ts

1// Paired-device registry — v3 chirp-sync.2//3// Long-term records live in `chrome.storage.local`. Keys must not leave4// the device via a third-party sync service — `longTermPublicKeyHex` and5// `signingPublicKeyHex` are cryptographic keys; routing them through6// Google's or Mozilla's sync back-end violates the local-only trust model.7//8// `lastKnownIp` is network-specific and also lives in `chrome.storage.local`,9// keyed by `longTermPublicKeyHex` (not on the device record itself) so10// network-specific addresses don't roam across profiles.11//12// `deviceId` is the canonical primary key (UUID v4, stable for the13// lifetime of the installation). `longTermPublicKeyHex` is also unique14// per device but rotates if the user reinstalls before re-pairing, so we15// key on deviceId and update the key in place during re-pair.16//17// The registry has only ever lived in `chrome.storage.local` for released18// builds, so no cross-profile evacuation path is needed — the public keys19// never leave the device via a third-party sync back-end. Unpairing is20// local-only; Noise XX rejection on the next connection is the security21// boundary (see removePairedDeviceById).2223import type { PairedDevice } from "../shared/sync-types";2425const REGISTRY_KEY = "peach_paired_devices_v3";26const LAST_IP_KEY_PREFIX = "peach_last_known_ip_v3:";27const LAST_SYNC_AT_KEY = "peach_last_sync_at";28const LAST_SYNC_RESULT_KEY = "peach_last_sync_result";2930export async function listPairedDevices(): Promise<PairedDevice[]> {31  try {32    const result = await chrome.storage.local.get(REGISTRY_KEY);33    const devices = (result as Record<string, unknown>)[REGISTRY_KEY];34    if (Array.isArray(devices)) return devices.filter(isPairedDevice);35    return [];36  } catch {37    return [];38  }39}4041export async function findPairedDeviceById(deviceId: string): Promise<PairedDevice | null> {42  const devices = await listPairedDevices();43  return devices.find((d) => d.deviceId === deviceId) ?? null;44}4546export async function findPairedDeviceByPubkey(pubkeyHex: string): Promise<PairedDevice | null> {47  const devices = await listPairedDevices();48  return devices.find((d) => d.longTermPublicKeyHex === pubkeyHex) ?? null;49}5051/**52 * Add or update a device by `deviceId`. On re-pair the new pubkey53 * silently replaces the old one; the deviceId is stable across the54 * other device's reinstall.55 */56export async function upsertPairedDevice(device: PairedDevice): Promise<void> {57  if (!device.deviceId) throw new Error("device.deviceId is required");58  if (!device.longTermPublicKeyHex) throw new Error("device.longTermPublicKeyHex is required");59  if (!device.deviceName) throw new Error("device.deviceName is required");60  if (!device.deviceType) throw new Error("device.deviceType is required");6162  const devices = await listPairedDevices();63  const idx = devices.findIndex((d) => d.deviceId === device.deviceId);64  if (idx >= 0) {65    devices[idx] = { ...devices[idx], ...device };66  } else {67    devices.push(device);68  }69  await chrome.storage.local.set({ [REGISTRY_KEY]: devices });70}7172export async function removePairedDeviceById(deviceId: string): Promise<void> {73  const devices = await listPairedDevices();74  const filtered = devices.filter((d) => d.deviceId !== deviceId);75  // Unpairing is local-only — there is no remote unpair RPC. The remote76  // device retains this device in its own registry. Noise XX rejection on77  // the next connection attempt is the security boundary.78  await chrome.storage.local.set({ [REGISTRY_KEY]: filtered });79  // Also clear the per-network IP cache for this device.80  const device = devices.find((d) => d.deviceId === deviceId);81  if (device?.longTermPublicKeyHex) {82    await chrome.storage.local.remove(LAST_IP_KEY_PREFIX + device.longTermPublicKeyHex);83  }84}8586export async function clearPairedDevices(): Promise<void> {87  await chrome.storage.local.remove(REGISTRY_KEY);88}8990export async function markLastSyncedAt(deviceId: string, when: number): Promise<void> {91  const devices = await listPairedDevices();92  const idx = devices.findIndex((d) => d.deviceId === deviceId);93  if (idx < 0) return;94  devices[idx] = { ...devices[idx], lastSyncedAt: when };95  await chrome.storage.local.set({ [REGISTRY_KEY]: devices });96}9798export async function getLastKnownIp(pubkeyHex: string): Promise<string | null> {99  try {100    const key = LAST_IP_KEY_PREFIX + pubkeyHex;101    const result = await chrome.storage.local.get(key);102    const value = (result as Record<string, unknown>)[key];103    return typeof value === "string" ? value : null;104  } catch {105    return null;106  }107}108109export async function setLastKnownIp(pubkeyHex: string, ip: string): Promise<void> {110  await chrome.storage.local.set({ [LAST_IP_KEY_PREFIX + pubkeyHex]: ip });111}112113export async function clearLastKnownIp(pubkeyHex: string): Promise<void> {114  await chrome.storage.local.remove(LAST_IP_KEY_PREFIX + pubkeyHex);115}116117export async function getLastSyncAt(): Promise<number | null> {118  try {119    const result = await chrome.storage.local.get(LAST_SYNC_AT_KEY);120    const value = (result as Record<string, unknown>)[LAST_SYNC_AT_KEY];121    if (typeof value === "number") return value;122    if (typeof value === "string" && value !== "") {123      const n = Number.parseInt(value, 10);124      return Number.isFinite(n) ? n : null;125    }126    return null;127  } catch {128    return null;129  }130}131132export async function setLastSyncAt(when: number): Promise<void> {133  await chrome.storage.local.set({ [LAST_SYNC_AT_KEY]: when });134}135136export interface SyncResult {137  entriesReceived: number;138  entriesSent: number;139}140141export async function getLastSyncResult(): Promise<SyncResult | null> {142  try {143    const result = await chrome.storage.local.get(LAST_SYNC_RESULT_KEY);144    const value = (result as Record<string, unknown>)[LAST_SYNC_RESULT_KEY];145    if (146      value &&147      typeof value === "object" &&148      typeof (value as Record<string, unknown>).entriesReceived === "number" &&149      typeof (value as Record<string, unknown>).entriesSent === "number"150    ) {151      return value as SyncResult;152    }153    return null;154  } catch {155    return null;156  }157}158159export async function setLastSyncResult(result: SyncResult): Promise<void> {160  await chrome.storage.local.set({ [LAST_SYNC_RESULT_KEY]: result });161}162163function isPairedDevice(x: unknown): x is PairedDevice {164  if (typeof x !== "object" || x === null) return false;165  const r = x as Record<string, unknown>;166  if (typeof r.deviceId !== "string" || !r.deviceId) return false;167  if (typeof r.pairedAt !== "number") return false;168  return true;169}