Class JsonFileStore

packages/agent-core/src/mcp/oauth/store.ts:66–130

}

export class JsonFileStore {
  private readonly dir: string;

  constructor(dir: string = defaultMcpCredentialsDir()) {
    this.dir = dir;
  }

  read<T>(file: string): T | undefined {
    const path = join(this.dir, file);
    let raw: string;
    try {
      raw = readFileSync(path, 'utf-8');
    } catch {
      return undefined;
    }
    try {
      return JSON.parse(raw) as T;
    } catch {
      return undefined;
    }
  }

  write(file: string, data: unknown): void {
    mkdirSync(this.dir, { recursive: true, mode: 0o700 });
    try {
      chmodSync(this.dir, 0o700);
    } catch {
      // best-effort; Windows / read-only FS may refuse
    }
    const target = join(this.dir, file);
    const tmp = `${target}.tmp.${process.pid}.${randomBytes(4).toString('hex')}`;
    const buf = Buffer.from(`${JSON.stringify(data, null, 2)}\n`, 'utf-8');
    const fd = openSync(tmp, 'w', 0o600);
    try {
      let written = 0;
      while (written < buf.length) {
        written += writeSync(fd, buf, written, buf.length - written);
      }
      fsyncSync(fd);
    } finally {
      closeSync(fd);
    }
    try {
      chmodSync(tmp, 0o600);
      renameSync(tmp, target);
    } catch (error) {
      try {
        unlinkSync(tmp);
      } catch {
        /* ignore */
      }
      throw error;
    }
  }

  remove(file: string): void {
    try {
      unlinkSync(join(this.dir, file));