oh-my-adhd 0.2.14 → 0.2.16

package/dist/mcp/lib/brain.js

@@ -12,6 +12,8 @@ const LOG_FILE = path.join(BRAIN_DIR, "logs", "brain.log");
 const VERSION_FILE = path.join(BRAIN_DIR, "VERSION");
 export const SCHEMA_VERSION = 1;
 export const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+export const SENSITIVE_DIRS = [".ssh", ".aws", ".gnupg", ".kube", ".docker",
+    path.join(".config", "git"), path.join(".config", "gh")];
 async function appendLog(level, msg) {
     try {
         const entry = `${new Date().toISOString()} [${level}] ${msg}\n`;

package/dist/mcp/mcp/tools/wiki-export.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { getThreads, getThread, getPages } from "../../lib/brain.js";
+import { getThreads, getThread, getPages, SENSITIVE_DIRS } from "../../lib/brain.js";
 import fs from "fs/promises";
 import path from "path";
 import os from "os";
@@ -31,8 +31,6 @@ export function registerWikiExport(server) {
                 };
             }
             // Block writes into known sensitive dirs — use realpath for symlink safety
-            const SENSITIVE_DIRS = [".ssh", ".aws", ".gnupg", ".kube", ".docker",
-                path.join(".config", "git"), path.join(".config", "gh")];
             const homeDir = os.homedir();
             let realResolved = resolved;
             try {

package/dist/mcp/mcp/tools/wiki-import.js

@@ -1,7 +1,8 @@
 import { z } from "zod";
-import { ensureBrainDirs, BRAIN_DIR, SCHEMA_VERSION, UUID_RE, withBrainLock } from "../../lib/brain.js";
+import { ensureBrainDirs, BRAIN_DIR, SCHEMA_VERSION, UUID_RE, SENSITIVE_DIRS, withBrainLock } from "../../lib/brain.js";
 import fs from "fs/promises";
 import path from "path";
+import os from "os";
 const SLUG_RE = /^[a-z0-9가-힣][a-z0-9가-힣_-]{0,127}$/;
 const MAX_CONTENT_BYTES = 5 * 1024 * 1024; // 5MB per thread
 const MAX_ITEMS = 10000; // max threads or pages per import
@@ -18,6 +19,21 @@ export function registerWikiImport(server) {
                     isError: true,
                 };
             }
+            // Block reads from sensitive dirs — mirrors wiki_export denylist
+            const homeDir = os.homedir();
+            let realInputDir = path.dirname(resolved);
+            try {
+                realInputDir = await fs.realpath(realInputDir);
+            }
+            catch { /* dir may not exist */ }
+            const realHome = await fs.realpath(homeDir).catch(() => homeDir);
+            const relInputDir = path.relative(realHome, realInputDir).toLowerCase();
+            if (SENSITIVE_DIRS.some(d => relInputDir === d.toLowerCase() || relInputDir.startsWith(d.toLowerCase() + path.sep))) {
+                return {
+                    content: [{ type: "text", text: "오류: 보안상 해당 경로에서는 가져올 수 없습니다." }],
+                    isError: true,
+                };
+            }
             // Check file size before reading into memory
             try {
                 const stat = await fs.stat(resolved);
@@ -132,6 +148,7 @@ export function registerWikiImport(server) {
                         manifest[idx] = meta;
                     else
                         manifest.push(meta);
+                    existingIds.add(id); // prevent duplicate IDs within same import
                     importedThreads++;
                 }
                 // Write updated manifest atomically inside lock
@@ -148,6 +165,8 @@ export function registerWikiImport(server) {
                         const content = typeof page.content === "string" ? page.content : "";
                         if (!SLUG_RE.test(slug) || !content)
                             continue;
+                        if (Buffer.byteLength(content, "utf-8") > MAX_CONTENT_BYTES)
+                            continue;
                         const pageFile = path.join(pagesDir, `${slug}.md`);
                         const pageTmp = pageFile + ".tmp";
                         await fs.writeFile(pageTmp, content, "utf-8");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oh-my-adhd",
-  "version": "0.2.14",
+  "version": "0.2.16",
   "description": "ADHD second brain — zero-friction capture, auto context restore, unstick. MCP-native Claude Code plugin.",
   "author": "Yeachan Heo",
   "repository": {