scai 0.1.123 → 0.1.125

package/dist/daemon/runFolderCapsuleBatch.js

@@ -217,20 +217,21 @@ Expected JSON shape:
                 confidence: Math.min(0.9, 0.4 + target.score * 0.1),
             };
             // --------------------------------------------------
-            // Persist capsule (inline folderPath)
+            // Persist capsule safely using parameterized queries
             // --------------------------------------------------
             const now = new Date().toISOString();
+            // Insert folder capsule
             db.prepare(`
-                INSERT INTO folder_capsules (
-                    path, depth, capsule_json, confidence, last_generated, source_file_count
-                )
-                VALUES ('${capsule.path.replace(/'/g, "''")}', ${capsule.depth}, '${JSON.stringify(capsule)}', ${capsule.confidence}, '${now}', ${files.length})
-            `).run();
+    INSERT INTO folder_capsules (
+        path, depth, capsule_json, confidence, last_generated, source_file_count
+    ) VALUES (?, ?, ?, ?, ?, ?)
+`).run(capsule.path, capsule.depth, JSON.stringify(capsule), capsule.confidence, now, files.length);
+            // Update file processing status
             db.prepare(`
-                UPDATE files
-                SET processing_status = 'capsuled'
-                WHERE path LIKE '${folderPathSQL}/%'
-            `).run();
+    UPDATE files
+    SET processing_status = 'capsuled'
+    WHERE path LIKE ?
+`).run(`${folderPath}/%`);
             log(`✅ Folder capsule written: ${folderPath}`);
         }
         catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scai",
-  "version": "0.1.123",
+  "version": "0.1.125",
   "type": "module",
   "bin": {
     "scai": "./dist/index.js"