@monoes/monomindcli 2.3.3 → 2.4.0

package/dist/src/ui/server.mjs

@@ -5920,8 +5920,19 @@ new Sigma(g,document.getElementById('g'),{renderEdgeLabels:false,labelColor:{col
     // when this endpoint is cold/absent. Fully local — model + store on disk.
     if (req.method === 'POST' && url === '/api/knowledge/search') {
       let body = '';
-      req.on('data', c => { body += c; });
+      let overLimit = false;
+      req.on('data', c => {
+        if (overLimit) return;
+        body += c;
+        if (body.length > 64 * 1024) { // queries are prompts, not documents
+          overLimit = true;
+          res.writeHead(413, { 'Content-Type': 'application/json' });
+          res.end('{"error":"request body too large"}');
+          req.destroy();
+        }
+      });
       req.on('end', async () => {
+        if (overLimit) return;
         try {
           const payload = JSON.parse(body || '{}');
           const query = String(payload.query || '').slice(0, 2000);
@@ -5939,11 +5950,21 @@ new Sigma(g,document.getElementById('g'),{renderEdgeLabels:false,labelColor:{col
             res.end('{"error":"knowledge bridge unavailable"}');
             return;
           }
-          const out = await bridge.bridgeSearchEntries({ query, namespace, limit });
+          // scope: project | global | all (default all) — project results get a
+          // small tie boost; global hits are flagged so callers can show origin.
+          const scope = payload.scope === 'project' || payload.scope === 'global' ? payload.scope : 'all';
+          const [proj, glob] = await Promise.all([
+            scope !== 'global' ? bridge.bridgeSearchEntries({ query, namespace, limit }).catch(() => null) : null,
+            scope !== 'project' ? bridge.bridgeSearchEntries({ query, namespace: 'knowledge:global', limit, dbPath: '@global' }).catch(() => null) : null,
+          ]);
+          const merged = [
+            ...(proj?.results || []).map(r => ({ key: r.key, content: String(r.content || '').slice(0, 2000), score: r.score + 0.05, global: false, tags: r.tags })),
+            ...(glob?.results || []).map(r => ({ key: r.key, content: String(r.content || '').slice(0, 2000), score: r.score, global: true, tags: r.tags })),
+          ].sort((a, b) => b.score - a.score).slice(0, limit);
           res.writeHead(200, { 'Content-Type': 'application/json', ...(corsOrigin ? { 'Access-Control-Allow-Origin': corsOrigin } : {}) });
           res.end(JSON.stringify({
-            method: out?.searchMethod || 'none',
-            results: (out?.results || []).map(r => ({ key: r.key, content: String(r.content || '').slice(0, 2000), score: r.score })),
+            method: proj?.searchMethod || glob?.searchMethod || 'none',
+            results: merged,
           }));
         } catch (err) {
           res.writeHead(500, { 'Content-Type': 'application/json' });