security: fix 5 review findings (2 high, 3 medium)

HIGH:
- Lock setup TOTP/NAS endpoints behind _require_setup() guard
  (prevented unauthenticated admin 2FA takeover after setup)
- Sanitize upload filename with Path().name + resolve() validation
  (prevented path traversal writing outside Inbox)

MEDIUM:
- Add score > 0.01 filter to hybrid search via subquery
  (prevented returning irrelevant documents with zero score)
- Implement Inbox → Knowledge file move after classification
  (classify_worker now moves files based on ai_domain)
- Add Anthropic Messages API support in _request()
  (premium/Claude path now sends correct format and parses
  content[0].text instead of choices[0].message.content)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

app/api/documents.py

@@ -127,16 +127,25 @@ async def upload_document(
     if not file.filename:
         raise HTTPException(status_code=400, detail="파일명이 필요합니다")
 
+    # 파일명 정규화 (경로 이탈 방지)
+    safe_name = Path(file.filename).name
+    if not safe_name or safe_name.startswith("."):
+        raise HTTPException(status_code=400, detail="유효하지 않은 파일명")
+
     # Inbox에 파일 저장
     inbox_dir = Path(settings.nas_mount_path) / "PKM" / "Inbox"
     inbox_dir.mkdir(parents=True, exist_ok=True)
-    target = inbox_dir / file.filename
+    target = (inbox_dir / safe_name).resolve()
+
+    # Inbox 하위 경로 검증
+    if not str(target).startswith(str(inbox_dir.resolve())):
+        raise HTTPException(status_code=400, detail="잘못된 파일 경로")
 
     # 중복 파일명 처리
     counter = 1
     stem, suffix = target.stem, target.suffix
     while target.exists():
-        target = inbox_dir / f"{stem}_{counter}{suffix}"
+        target = inbox_dir.resolve() / f"{stem}_{counter}{suffix}"
         counter += 1
 
     content = await file.read()

app/api/search.py

@@ -165,23 +165,26 @@ async def _search_hybrid(session: AsyncSession, query: str, limit: int) -> list[
 
     result = await session.execute(
         text(f"""
-            SELECT d.id, d.title, d.ai_domain, d.ai_summary, d.file_format,
-                   (
-                       :w_fts * coalesce(ts_rank(
-                           to_tsvector('simple', coalesce(d.title, '') || ' ' || coalesce(d.extracted_text, '')),
-                           plainto_tsquery('simple', :query)
-                       ), 0)
-                       + :w_trgm * coalesce(similarity(
-                           coalesce(d.title, '') || ' ' || coalesce(d.extracted_text, ''),
-                           :query
-                       ), 0)
-                       + :w_vector * {vector_score}
-                   ) AS score,
-                   left(d.extracted_text, 200) AS snippet
-            FROM documents d
-            {vector_clause}
-            WHERE coalesce(d.extracted_text, '') != ''
-            ORDER BY score DESC
+            SELECT * FROM (
+                SELECT d.id, d.title, d.ai_domain, d.ai_summary, d.file_format,
+                       (
+                           :w_fts * coalesce(ts_rank(
+                               to_tsvector('simple', coalesce(d.title, '') || ' ' || coalesce(d.extracted_text, '')),
+                               plainto_tsquery('simple', :query)
+                           ), 0)
+                           + :w_trgm * coalesce(similarity(
+                               coalesce(d.title, '') || ' ' || coalesce(d.extracted_text, ''),
+                               :query
+                           ), 0)
+                           + :w_vector * {vector_score}
+                       ) AS score,
+                       left(d.extracted_text, 200) AS snippet
+                FROM documents d
+                {vector_clause}
+                WHERE coalesce(d.extracted_text, '') != ''
+            ) sub
+            WHERE sub.score > 0.01
+            ORDER BY sub.score DESC
             LIMIT :limit
         """),
         params,

app/api/setup.py

@@ -154,8 +154,7 @@ async def totp_init(
     session: Annotated[AsyncSession, Depends(get_session)],
 ):
     """TOTP 시크릿 생성 + otpauth URI 반환 (DB에 저장하지 않음)"""
-    # 셋업 중이거나 인증된 유저만 사용 가능
-    # 셋업 중에는 admin 생성 직후 호출됨
+    await _require_setup(session)
     secret = pyotp.random_base32()
     totp = pyotp.TOTP(secret)
     uri = totp.provisioning_uri(
@@ -171,7 +170,7 @@ async def totp_verify(
     session: Annotated[AsyncSession, Depends(get_session)],
 ):
     """TOTP 코드 검증 후 DB에 시크릿 저장"""
-    # 코드 검증
+    await _require_setup(session)
     totp = pyotp.TOTP(body.secret)
     if not totp.verify(body.code):
         raise HTTPException(
@@ -194,8 +193,12 @@ async def totp_verify(
 
 
 @router.post("/verify-nas", response_model=VerifyNASResponse)
-async def verify_nas(body: VerifyNASRequest):
+async def verify_nas(
+    body: VerifyNASRequest,
+    session: Annotated[AsyncSession, Depends(get_session)],
+):
     """NAS 마운트 경로 읽기/쓰기 테스트"""
+    await _require_setup(session)
     path = Path(body.path)
     exists = path.exists()
     readable = path.is_dir() and any(True for _ in path.iterdir()) if exists else False