33 lines
1.5 KiB
TypeScript
33 lines
1.5 KiB
TypeScript
import { readFile, realpath, unlink, writeFile, rename } from 'node:fs/promises';
|
|
import { dirname, relative, isAbsolute, resolve } from 'node:path';
|
|
import { randomUUID } from 'node:crypto';
|
|
|
|
/** Only confirmed publications may release their public source images. */
|
|
export async function cleanupPublished(recordPath: string, imageDir: string) {
|
|
const record = JSON.parse(await readFile(recordPath, 'utf8'));
|
|
if (record.status !== 'published' || !record.postId || record.imagesDeletedAt) return false;
|
|
const root = await realpath(imageDir).catch(error => {
|
|
if ((error as NodeJS.ErrnoException).code === 'ENOENT') return resolve(imageDir);
|
|
throw error;
|
|
});
|
|
const paths: string[] = [];
|
|
for (const image of record.images) {
|
|
let path: string;
|
|
try { path = await realpath(image.imagePath); }
|
|
catch (error) { if ((error as NodeJS.ErrnoException).code === 'ENOENT') continue; throw error; }
|
|
const child = relative(root, path);
|
|
if (!child || child.startsWith('..') || isAbsolute(child) || dirname(path) !== root) {
|
|
throw new Error('Refusing image cleanup outside the capture directory');
|
|
}
|
|
paths.push(path);
|
|
}
|
|
for (const path of paths) {
|
|
try { await unlink(path); }
|
|
catch (error) { if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error; }
|
|
}
|
|
const temporary = `${recordPath}.${randomUUID()}.tmp`;
|
|
await writeFile(temporary, JSON.stringify({ ...record, imagesDeletedAt: new Date().toISOString() }, null, 2), { mode: 0o600 });
|
|
await rename(temporary, recordPath);
|
|
return true;
|
|
}
|