Refactor VPN proxy client implementation

test/server/state-store.test.js

@@ -8,8 +8,8 @@ import {
   atomicWriteJson,
   createStateStore,
   STATE_SCHEMA_VERSION,
-} from '../../src/server/services/stateStore.js';
-import { createServerId } from '../../src/shared/serverIdentity.js';
+} from '../../dist/server/services/stateStore.js';
+import { createServerId } from '../../dist/shared/serverIdentity.js';
 
 const fixture = (t) => {
   const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'harbor-state-store-'));
@@ -17,6 +17,16 @@ const fixture = (t) => {
   return path.join(directory, 'state.json');
 };
 
+test('raw JSON stores stay typed unknown until a migrator validates them', () => {
+  const source = fs.readFileSync(
+    new URL('../../src/server/services/stateStore.ts', import.meta.url),
+    'utf8',
+  );
+  assert.match(source, /createJsonStore\(options: RawJsonStoreOptions\): JsonStore<unknown>/);
+  assert.match(source, /const migrate = options\.migrate \|\| \(\(value: unknown\) => value\)/);
+  assert.doesNotMatch(source, /value as T|migrate = \(value\) => value as/);
+});
+
 test('data invariant: failure before rename preserves the last successful file', (t) => {
   const filePath = fixture(t);
   atomicWriteJson(filePath, { revision: 1 });