fix(batch): resolve pandoc path handling and include-subfolders option

- Normalize pandoc command parsing with path.basename() to support bundled binary paths
- Use bundled pandoc binary in convertWithPandoc instead of relying on PATH
- Forward includeSubfolders checkbox state from renderer to main process
- Add pandoc availability check before batch conversion
- Re-enable Start button when batch conversion completes
- Clean up obsolete dist build artifact causing test snapshot warning
- Bump version to 4.4.4

tests/security-path-handling.test.js

@@ -8,25 +8,18 @@ const path = require('path');
 describe('Security: Path Handling', () => {
   describe('path traversal prevention', () => {
     it('should detect path traversal patterns', () => {
-      const maliciousPaths = [
-        '../etc/passwd',
-        '../../sensitive',
-        './../outside'
-      ];
+      const maliciousPaths = ['../etc/passwd', '../../sensitive', './../outside'];
 
-      maliciousPaths.forEach(pathStr => {
+      maliciousPaths.forEach((pathStr) => {
         // Path traversal attempts contain .. patterns
         expect(pathStr).toMatch(/\.\./);
       });
     });
 
     it('should normalize relative paths safely', () => {
-      const safePaths = [
-        './documents/file.md',
-        'relative/path/file.txt'
-      ];
+      const safePaths = ['./documents/file.md', 'relative/path/file.txt'];
 
-      safePaths.forEach(pathStr => {
+      safePaths.forEach((pathStr) => {
         const normalized = path.normalize(pathStr);
         // Safe relative paths should normalize cleanly
         expect(normalized).toBeDefined();
@@ -37,7 +30,7 @@ describe('Security: Path Handling', () => {
     it('should detect absolute paths', () => {
       const absolutePath = '/etc/passwd';
       const isAbsolute = path.isAbsolute(absolutePath);
-      
+
       // Linux/Mac: /path is absolute
       if (process.platform !== 'win32') {
         expect(isAbsolute).toBe(true);
@@ -47,9 +40,9 @@ describe('Security: Path Handling', () => {
     it('should safely join paths with base directory', () => {
       const baseDir = '/safe/base/directory';
       const userInput = 'documents/file.md';
-      
+
       const joined = path.join(baseDir, userInput);
-      
+
       // Result should contain the safe base
       expect(joined).toContain('base');
       expect(joined).toContain('documents');
@@ -58,14 +51,9 @@ describe('Security: Path Handling', () => {
 
   describe('filename safety', () => {
     it('should identify safe filenames', () => {
-      const safeNames = [
-        'document.md',
-        'my-file.txt',
-        'file_name.pdf',
-        'report_2026_04_24.xlsx'
-      ];
+      const safeNames = ['document.md', 'my-file.txt', 'file_name.pdf', 'report_2026_04_24.xlsx'];
 
-      safeNames.forEach(name => {
+      safeNames.forEach((name) => {
         // Safe names should not contain path separators or null bytes
         const isSafe = !/[\\/\0]/.test(name) && name.length > 0;
         expect(isSafe).toBe(true);
@@ -73,12 +61,9 @@ describe('Security: Path Handling', () => {
     });
 
     it('should flag filenames with path separators', () => {
-      const problematicNames = [
-        'file/with/slashes.txt',
-        'file\\with\\backslashes.txt'
-      ];
+      const problematicNames = ['file/with/slashes.txt', 'file\\with\\backslashes.txt'];
 
-      problematicNames.forEach(name => {
+      problematicNames.forEach((name) => {
         // These contain path separators and should be flagged
         const hasPathSeparators = /[\\/]/.test(name);
         expect(hasPathSeparators).toBe(true);
@@ -87,7 +72,7 @@ describe('Security: Path Handling', () => {
 
     it('should enforce minimum filename length', () => {
       const emptyName = '';
-      
+
       expect(emptyName.length).toBe(0);
       expect(emptyName.length > 0).toBe(false);
     });
@@ -95,10 +80,8 @@ describe('Security: Path Handling', () => {
 
   describe('validation patterns', () => {
     it('should validate path existence check pattern', () => {
-      const validationPattern = /^[a-zA-Z0-9._\-/]+$/;
-      
       const validPaths = ['documents/file.md', 'folder_2026/data.csv'];
-      validPaths.forEach(pathStr => {
+      validPaths.forEach((pathStr) => {
         // These should match a reasonable filename pattern
         expect(typeof pathStr).toBe('string');
       });
@@ -106,7 +89,7 @@ describe('Security: Path Handling', () => {
 
     it('should prevent null byte injection', () => {
       const pathWithNullByte = 'file.txt\0.exe';
-      
+
       const isSafe = !pathWithNullByte.includes('\0');
       expect(isSafe).toBe(false); // Has null byte, not safe
     });