oh-my-adhd 0.2.16 → 0.2.17

package/dist/mcp/lib/brain.js

@@ -14,6 +14,17 @@ export const SCHEMA_VERSION = 1;
 export const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 export const SENSITIVE_DIRS = [".ssh", ".aws", ".gnupg", ".kube", ".docker",
     path.join(".config", "git"), path.join(".config", "gh")];
+export async function isSensitivePath(filePath) {
+    const homeDir = os.homedir();
+    let realDir = path.dirname(filePath);
+    try {
+        realDir = await fs.realpath(realDir);
+    }
+    catch { /* dir may not exist yet */ }
+    const realHome = await fs.realpath(homeDir).catch(() => homeDir);
+    const rel = path.relative(realHome, realDir).toLowerCase();
+    return SENSITIVE_DIRS.some(d => rel === d.toLowerCase() || rel.startsWith(d.toLowerCase() + path.sep));
+}
 async function appendLog(level, msg) {
     try {
         const entry = `${new Date().toISOString()} [${level}] ${msg}\n`;

package/dist/mcp/mcp/tools/wiki-export.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { getThreads, getThread, getPages, SENSITIVE_DIRS } from "../../lib/brain.js";
+import { getThreads, getThread, getPages, isSensitivePath } from "../../lib/brain.js";
 import fs from "fs/promises";
 import path from "path";
 import os from "os";
@@ -30,16 +30,8 @@ export function registerWikiExport(server) {
                     isError: true,
                 };
             }
-            // Block writes into known sensitive dirs — use realpath for symlink safety
-            const homeDir = os.homedir();
-            let realResolved = resolved;
-            try {
-                realResolved = await fs.realpath(path.dirname(resolved));
-            }
-            catch { /* dir may not exist yet */ }
-            const realHome = await fs.realpath(homeDir).catch(() => homeDir);
-            const relDir = path.relative(realHome, realResolved).toLowerCase();
-            if (SENSITIVE_DIRS.some(d => relDir === d.toLowerCase() || relDir.startsWith(d.toLowerCase() + path.sep))) {
+            // Block writes into known sensitive dirs
+            if (await isSensitivePath(resolved)) {
                 return {
                     content: [{ type: "text", text: "오류: 보안상 해당 경로에는 내보낼 수 없습니다." }],
                     isError: true,

package/dist/mcp/mcp/tools/wiki-import.js

@@ -1,8 +1,7 @@
 import { z } from "zod";
-import { ensureBrainDirs, BRAIN_DIR, SCHEMA_VERSION, UUID_RE, SENSITIVE_DIRS, withBrainLock } from "../../lib/brain.js";
+import { ensureBrainDirs, BRAIN_DIR, SCHEMA_VERSION, UUID_RE, isSensitivePath, withBrainLock } from "../../lib/brain.js";
 import fs from "fs/promises";
 import path from "path";
-import os from "os";
 const SLUG_RE = /^[a-z0-9가-힣][a-z0-9가-힣_-]{0,127}$/;
 const MAX_CONTENT_BYTES = 5 * 1024 * 1024; // 5MB per thread
 const MAX_ITEMS = 10000; // max threads or pages per import
@@ -20,15 +19,7 @@ export function registerWikiImport(server) {
                 };
             }
             // Block reads from sensitive dirs — mirrors wiki_export denylist
-            const homeDir = os.homedir();
-            let realInputDir = path.dirname(resolved);
-            try {
-                realInputDir = await fs.realpath(realInputDir);
-            }
-            catch { /* dir may not exist */ }
-            const realHome = await fs.realpath(homeDir).catch(() => homeDir);
-            const relInputDir = path.relative(realHome, realInputDir).toLowerCase();
-            if (SENSITIVE_DIRS.some(d => relInputDir === d.toLowerCase() || relInputDir.startsWith(d.toLowerCase() + path.sep))) {
+            if (await isSensitivePath(resolved)) {
                 return {
                     content: [{ type: "text", text: "오류: 보안상 해당 경로에서는 가져올 수 없습니다." }],
                     isError: true,
@@ -165,8 +156,10 @@ export function registerWikiImport(server) {
                         const content = typeof page.content === "string" ? page.content : "";
                         if (!SLUG_RE.test(slug) || !content)
                             continue;
-                        if (Buffer.byteLength(content, "utf-8") > MAX_CONTENT_BYTES)
+                        if (Buffer.byteLength(content, "utf-8") > MAX_CONTENT_BYTES) {
+                            skippedThreads++;
                             continue;
+                        }
                         const pageFile = path.join(pagesDir, `${slug}.md`);
                         const pageTmp = pageFile + ".tmp";
                         await fs.writeFile(pageTmp, content, "utf-8");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oh-my-adhd",
-  "version": "0.2.16",
+  "version": "0.2.17",
   "description": "ADHD second brain — zero-friction capture, auto context restore, unstick. MCP-native Claude Code plugin.",
   "author": "Yeachan Heo",
   "repository": {