@dikolab/kbdb 0.5.0 → 0.6.1

package/dist/worker.mjs

@@ -17,7 +17,7 @@ import {
   resolveBaseDir,
   resolveLogLevel,
   resolveWasmDir
-} from "./chunk-BJXEVALU.mjs";
+} from "./chunk-QLJ33C74.mjs";
 
 // src/worker.ts
 import { existsSync as existsSync5 } from "node:fs";
@@ -819,6 +819,17 @@ function emptyItem(kbid, score) {
   };
 }
 
+// src/shared/worker-daemon/functions/validate-daemon-path.function.ts
+function validateDaemonPath(path) {
+  if (!path.startsWith("/")) {
+    throw new IpcError(-32602, `path must be absolute: ${path}`);
+  }
+  if (path.split("/").includes("..")) {
+    throw new IpcError(-32602, `path traversal not allowed: ${path}`);
+  }
+  return path;
+}
+
 // src/shared/embedding/functions/rebuild-vectors.function.ts
 import { readdirSync as readdirSync2, readFileSync as readFileSync5, existsSync as existsSync3 } from "node:fs";
 import { join as join5 } from "node:path";
@@ -994,6 +1005,7 @@ function encodeAddSectionParams(params) {
   const replaceByte = new Uint8Array([
     params.replace === true ? 1 : 0
   ]);
+  const levelBytes = params.level != null ? new Uint8Array([1, params.level]) : new Uint8Array([0]);
   const parts = [
     encodeSectionType(params.sectionType, params.mimeType),
     encodeString(params.content),
@@ -1005,7 +1017,8 @@ function encodeAddSectionParams(params) {
     encodeOptionString(params.sourceMtime),
     tagsCountBytes,
     ...tagParts,
-    replaceByte
+    replaceByte,
+    levelBytes
   ];
   const totalLen = parts.reduce((sum, p) => sum + p.length, 0);
   const result = new Uint8Array(totalLen);
@@ -1232,6 +1245,13 @@ function decodePagedSearchResult(bytes) {
 }
 
 // src/shared/wasm-codec/functions/decode-section-records.function.ts
+function decodeOptionU8(bytes, offset) {
+  const tag = bytes[offset];
+  if (tag === 1) {
+    return { value: bytes[offset + 1], bytesRead: 2 };
+  }
+  return { value: null, bytesRead: 1 };
+}
 function decodeOptionString2(bytes, offset) {
   const tag = bytes[offset];
   if (tag === 0) {
@@ -1328,6 +1348,12 @@ function decodeSectionRecords(bytes) {
       offset += v.bytesRead;
       supersedes = v.value;
     }
+    let level = null;
+    if (offset < bytes.length) {
+      const v = decodeOptionU8(bytes, offset);
+      offset += v.bytesRead;
+      level = v.value;
+    }
     const record = {
       kbid: kbid.value,
       docid: docid.value,
@@ -1348,7 +1374,8 @@ function decodeSectionRecords(bytes) {
       sourceMtime,
       updatedAt,
       tags,
-      supersedes
+      supersedes,
+      level
     };
     if (st.mimeType !== void 0) {
       record.mimeType = st.mimeType;
@@ -2314,7 +2341,8 @@ var WorkerDaemon = class {
       sourcePath: typeof params["sourcePath"] === "string" ? params["sourcePath"] : void 0,
       sourceMtime: typeof params["sourceMtime"] === "string" ? params["sourceMtime"] : void 0,
       tags,
-      replace: params["replace"] === true
+      replace: params["replace"] === true,
+      level: typeof params["level"] === "number" ? params["level"] : void 0
     };
     const encoded = encodeAddSectionParams(input);
     const bytes = this.callWasmSync("worker_add_section", encoded);
@@ -2345,7 +2373,8 @@ var WorkerDaemon = class {
       title: params["title"] ?? null,
       description: params["description"] ?? null,
       docid: params["docid"] ?? null,
-      typeName: updTypeName
+      typeName: updTypeName,
+      level: typeof params["level"] === "number" ? params["level"] : void 0
     };
     const encoded = encodeUpdateSectionParams(oldKbid, input);
     const bytes = this.callWasmSync("worker_update_section", encoded);
@@ -2508,7 +2537,8 @@ var WorkerDaemon = class {
   }
   // -- Export (read operation, no lock required) --
   handleExport(params) {
-    const targetPath = params["targetPath"] ?? params["path"] ?? "./kbdb-export/";
+    const targetPath = params["targetPath"] ?? params["path"] ?? join6(this.targetDir, "kbdb-export");
+    validateDaemonPath(targetPath);
     const encoded = new TextEncoder().encode(targetPath);
     const start = Date.now();
     const bytes = this.callWasmSync("worker_export", encoded);
@@ -2524,6 +2554,7 @@ var WorkerDaemon = class {
   }
   async handleImport(params) {
     const sourcePath = params["sourcePath"] ?? "";
+    validateDaemonPath(sourcePath);
     const dryRun = params["dryRun"] === true;
     const start = Date.now();
     const sectionCount = this.countFiles(