Class FileStore

packages/pinpoint/src/storage/file-store.ts:23–148

const VALID_ID = /^[a-zA-Z0-9_-]+$/;

export class FileStore implements PinStorage {
  private dir: string;

  constructor(dataDir: string = "data/pins") {
    this.dir = resolve(dataDir);
  }

  private validateId(id: string): void {
    if (!VALID_ID.test(id)) {
      throw new Error(`Invalid pin ID: ${id}`);
    }
  }

  private pinPath(id: string): string {
    this.validateId(id);
    const resolved = join(this.dir, `${id}.json`);
    // Ensure resolved path is within the data directory
    if (!resolved.startsWith(this.dir)) {
      throw new Error("Path traversal detected");
    }
    return resolved;
  }

  private async ensureDir(): Promise<void> {
    await mkdir(this.dir, { recursive: true });
  }

  private async readPin(filePath: string): Promise<Pin | null> {
    try {
      const content = await readFile(filePath, "utf-8");
      const parsed = JSON.parse(content);
      const result = PinSchema.safeParse(parsed);
      return result.success ? (result.data as Pin) : null;
    } catch {
      return null;
    }
  }

  private async atomicWrite(filePath: string, data: string): Promise<void> {
    await this.ensureDir();
    const tempPath = join(tmpdir(), `pinpoint-${randomUUID()}.tmp`);
    await writeFile(tempPath, data, "utf-8");
    await rename(tempPath, filePath);
  }

  async load(pageUrl: string): Promise<Pin[]> {
    return this.list({ pageUrl });
  }

  async save(pin: Pin): Promise<void> {
    const filePath = this.pinPath(pin.id);
    await this.atomicWrite(filePath, JSON.stringify(pin, null, 2));
  }

  async update(id: string, patch: Partial<Pin>): Promise<void> {
    const filePath = this.pinPath(id);
    const existing = await this.readPin(filePath);
    if (!existing) return;