@geminilight/mindos 0.1.0

package/app/lib/i18n.ts

@@ -0,0 +1,300 @@
+export type Locale = 'en' | 'zh';
+
+export const messages = {
+  en: {
+    common: {
+      relatedFiles: 'Related Files',
+    },
+    app: {
+      tagline: 'Personal knowledge OS — browse, edit, and query your second brain.',
+      footer: 'MindOS · personal knowledge OS',
+    },
+    home: {
+      recentlyModified: 'Recently Modified',
+      continueEditing: 'Continue editing',
+      newNote: 'New Notes',
+      plugins: 'Plugins',
+      showMore: 'Show more',
+      showLess: 'Show less',
+      shortcuts: {
+        searchFiles: 'Search files',
+        askAI: 'Ask AI',
+        editFile: 'Edit file',
+        save: 'Save',
+        settings: 'Settings',
+      },
+      relativeTime: {
+        justNow: 'just now',
+        minutesAgo: (n: number) => `${n}m ago`,
+        hoursAgo: (n: number) => `${n}h ago`,
+        daysAgo: (n: number) => `${n}d ago`,
+      },
+    },
+    sidebar: {
+      searchTitle: 'Search (⌘K)',
+      askTitle: 'Ask AI (⌘/)',
+      settingsTitle: 'Settings (⌘,)',
+      collapseTitle: 'Collapse sidebar',
+      expandTitle: 'Expand sidebar',
+    },
+    search: {
+      placeholder: 'Search files...',
+      noResults: 'No results found',
+      prompt: 'Type to search across all files',
+      navigate: 'navigate',
+      open: 'open',
+      close: 'close',
+    },
+    ask: {
+      title: 'MindOS Agent',
+      placeholder: 'Ask a question... or type @ to attach a file',
+      emptyPrompt: 'Ask anything about your knowledge base',
+      send: 'send',
+      attachFile: 'attach file',
+      attachCurrent: 'attach current file',
+      stopTitle: 'Stop',
+      connecting: 'Thinking with your mind...',
+      thinking: 'Thinking...',
+      searching: 'Searching knowledge base...',
+      generating: 'Generating response...',
+      stopped: 'Generation stopped.',
+      errorNoResponse: 'No response from AI. Please check your API key and provider settings.',
+      suggestions: [
+        'Summarize this document',
+        'List all action items and TODOs',
+        'What are the key points?',
+        'Find related notes on this topic',
+      ],
+    },
+    fileTree: {
+      newFileTitle: 'New file in this directory',
+      rename: 'Rename',
+      delete: 'Delete',
+      create: 'Create',
+      enterFileName: 'Enter a file name',
+      failed: 'Failed',
+      confirmDelete: (name: string) => `Delete "${name}"? This cannot be undone.`,
+    },
+    dirView: {
+      gridView: 'Grid view',
+      listView: 'List view',
+      emptyFolder: 'This folder is empty.',
+      fileCount: (n: number) => `${n} files`,
+    },
+    settings: {
+      title: 'Settings',
+      tabs: { ai: 'AI', appearance: 'Appearance', knowledge: 'Knowledge Base', plugins: 'Plugins', shortcuts: 'Shortcuts' },
+      ai: {
+        provider: 'Provider',
+        model: 'Model',
+        apiKey: 'API Key',
+        baseUrl: 'Base URL',
+        baseUrlHint: 'Optional. Use for proxies or OpenAI-compatible APIs.',
+        keyHint: 'Stored locally in ~/.mindos/config.json',
+        envHint: 'Fields marked env have a value from environment variables. You can override them here, or restore all to env defaults.',
+        envFieldNote: (key: string) => `Env var ${key} is set. Clear this field to fall back to it.`,
+        resetToEnv: 'Reset to env value',
+        restoreFromEnv: 'Restore from env',
+        noApiKey: 'API key is not set. AI features will be unavailable until you add one.',
+      },
+      appearance: {
+        readingFont: 'Reading font',
+        contentWidth: 'Content width',
+        colorTheme: 'Color theme',
+        dark: 'Dark',
+        light: 'Light',
+        language: 'Language',
+        browserNote: 'Appearance settings are saved in your browser.',
+        fontPreview: 'The quick brown fox jumps over the lazy dog.',
+      },
+      knowledge: {
+        sopRoot: 'Knowledge base root',
+        sopRootHint: 'Absolute path to your notes directory. Requires server restart to take effect.',
+        sopRootEnvHint: (key: string) => `MIND_ROOT env var is set to "${key}". Fill in above to override it.`,
+        envNote: 'MIND_ROOT env var is set. Fill in above to override it — your value takes priority.',
+        webPassword: 'Web UI password',
+        webPasswordHint: 'Protect the browser UI with a password. Leave empty to disable. Changes take effect on next page load.',
+        webPasswordClear: 'Clear password',
+        authToken: 'MCP / API auth token',
+        authTokenHint: 'Bearer token for Agent and MCP clients. Not required for browser access.',
+        authTokenNone: 'No token set — API is open to all requests.',
+        authTokenCopy: 'Copy',
+        authTokenCopied: 'Copied!',
+        authTokenReset: 'Regenerate',
+        authTokenClear: 'Clear token',
+        authTokenResetConfirm: 'Regenerate token? All existing MCP clients will need to update their config.',
+        authTokenMcpPort: 'MCP port',
+      },
+      plugins: {
+        title: 'Installed Renderers',
+        builtinBadge: 'built-in',
+        enabled: 'Enabled',
+        disabled: 'Disabled',
+        matchHint: 'Auto-activates on',
+        noPlugins: 'No renderers installed.',
+        comingSoon: 'Plugin marketplace coming soon.',
+      },
+      save: 'Save',
+      saved: 'Saved',
+      saveFailed: 'Save failed',
+    },
+    shortcuts: [
+      { keys: ['⌘', 'K'], description: 'Search' },
+      { keys: ['⌘', '/'], description: 'Ask AI' },
+      { keys: ['⌘', ','], description: 'Settings' },
+      { keys: ['E'], description: 'Edit current file' },
+      { keys: ['⌘', 'S'], description: 'Save' },
+      { keys: ['Esc'], description: 'Cancel edit / close modal' },
+      { keys: ['@'], description: 'Attach file in Ask AI' },
+    ],
+  },
+  zh: {
+    common: {
+      relatedFiles: '关联视图',
+    },
+    app: {
+      tagline: '个人知识操作系统 — 浏览、编辑并查询你的第二大脑。',
+      footer: 'MindOS · 个人知识操作系统',
+    },
+    home: {
+      recentlyModified: '最近修改',
+      continueEditing: '继续编辑',
+      newNote: '新建笔记',
+      plugins: '插件',
+      showMore: '查看更多',
+      showLess: '收起',
+      shortcuts: {
+        searchFiles: '搜索文件',
+        askAI: '问 AI',
+        editFile: '编辑文件',
+        save: '保存',
+        settings: '设置',
+      },
+      relativeTime: {
+        justNow: '刚刚',
+        minutesAgo: (n: number) => `${n} 分钟前`,
+        hoursAgo: (n: number) => `${n} 小时前`,
+        daysAgo: (n: number) => `${n} 天前`,
+      },
+    },
+    sidebar: {
+      searchTitle: '搜索 (⌘K)',
+      askTitle: '问 AI (⌘/)',
+      settingsTitle: '设置 (⌘,)',
+      collapseTitle: '收起侧栏',
+      expandTitle: '展开侧栏',
+    },
+    search: {
+      placeholder: '搜索文件...',
+      noResults: '没有找到结果',
+      prompt: '输入关键词搜索所有文件',
+      navigate: '上下导航',
+      open: '打开',
+      close: '关闭',
+    },
+    ask: {
+      title: 'MindOS Agent',
+      placeholder: '输入问题，或输入 @ 添加附件文件',
+      emptyPrompt: '可以问任何关于知识库的问题',
+      send: '发送',
+      attachFile: '附加文件',
+      attachCurrent: '附加当前文件',
+      stopTitle: '停止',
+      connecting: '正在与你的心智一起思考...' ,
+      thinking: '思考中...',
+      searching: '正在搜索知识库...',
+      generating: '正在生成回复...',
+      stopped: '已停止生成。',
+      errorNoResponse: 'AI 未返回响应，请检查 API Key 和服务商设置。',
+      suggestions: [
+        '总结这篇文档',
+        '列出所有待办事项',
+        '这篇文档的核心要点是什么？',
+        '查找与这个主题相关的笔记',
+      ],
+    },
+    fileTree: {
+      newFileTitle: '在此目录新建文件',
+      rename: '重命名',
+      delete: '删除',
+      create: '创建',
+      enterFileName: '请输入文件名',
+      failed: '操作失败',
+      confirmDelete: (name: string) => `确定删除「${name}」？此操作不可撤销。`,
+    },
+    dirView: {
+      gridView: '网格视图',
+      listView: '列表视图',
+      emptyFolder: '此目录为空。',
+      fileCount: (n: number) => `${n} 个文件`,
+    },
+    settings: {
+      title: '设置',
+      tabs: { ai: 'AI', appearance: '外观', knowledge: '知识库', plugins: '插件', shortcuts: '快捷键' },
+      ai: {
+        provider: '服务商',
+        model: '模型',
+        apiKey: 'API 密钥',
+        baseUrl: '接口地址',
+        baseUrlHint: '可选。用于代理或 OpenAI 兼容 API。',
+        keyHint: '本地存储于 ~/.mindos/config.json',
+        envHint: '标有 env 的字段存在环境变量值。你可以在此覆盖，或一键恢复为环境变量默认值。',
+        envFieldNote: (key: string) => `环境变量 ${key} 已设置。清空此字段将回退到环境变量值。`,
+        resetToEnv: '恢复为环境变量',
+        restoreFromEnv: '从环境变量恢复',
+        noApiKey: 'API 密钥未设置，AI 功能暂不可用，请在此填写。',
+      },
+      appearance: {
+        readingFont: '正文字体',
+        contentWidth: '内容宽度',
+        colorTheme: '颜色主题',
+        dark: '深色',
+        light: '浅色',
+        language: '语言',
+        browserNote: '外观设置保存在浏览器本地。',
+        fontPreview: '人之初，性本善；性相近，习相远。',
+      },
+      knowledge: {
+        sopRoot: '知识库根目录',
+        sopRootHint: '笔记目录的绝对路径，修改后需要重启服务器。',
+        sopRootEnvHint: (key: string) => `MIND_ROOT 环境变量已设置为 "${key}"，填写上方路径可覆盖它。`,
+        envNote: 'MIND_ROOT 环境变量已设置。填写上方路径后，你的值优先生效。',
+        webPassword: '网页访问密码',
+        webPasswordHint: '设置后访问浏览器 UI 需要登录，留空则关闭密码保护。下次刷新页面后生效。',
+        webPasswordClear: '清除密码',
+        authToken: 'MCP / API 访问令牌',
+        authTokenHint: 'Agent 和 MCP 客户端使用的 Bearer Token，浏览器访问无需此项。',
+        authTokenNone: '未设置令牌 — API 对所有请求开放。',
+        authTokenCopy: '复制',
+        authTokenCopied: '已复制！',
+        authTokenReset: '重新生成',
+        authTokenClear: '清除令牌',
+        authTokenResetConfirm: '重新生成令牌？所有 MCP 客户端配置都需要更新。',
+        authTokenMcpPort: 'MCP 端口',
+      },
+      plugins: {
+        title: '已安装渲染器',
+        builtinBadge: '内置',
+        enabled: '已启用',
+        disabled: '已禁用',
+        matchHint: '自动匹配',
+        noPlugins: '暂无渲染器。',
+        comingSoon: '插件市场即将上线。',
+      },
+      save: '保存',
+      saved: '已保存',
+      saveFailed: '保存失败',
+    },
+    shortcuts: [
+      { keys: ['⌘', 'K'], description: '搜索' },
+      { keys: ['⌘', '/'], description: '问 AI' },
+      { keys: ['⌘', ','], description: '设置' },
+      { keys: ['E'], description: '编辑当前文件' },
+      { keys: ['⌘', 'S'], description: '保存' },
+      { keys: ['Esc'], description: '取消编辑 / 关闭弹窗' },
+      { keys: ['@'], description: '在 AI 对话中添加附件' },
+    ],
+  },
+} as const;
+
+export type Messages = typeof messages['en'];

package/app/lib/jwt.ts

@@ -0,0 +1,58 @@
+/**
+ * Minimal JWT implementation using Web Crypto (HMAC-SHA256).
+ * Compatible with both Next.js Edge runtime (proxy) and Node.js API routes.
+ */
+
+const ALG = { name: 'HMAC', hash: 'SHA-256' };
+
+function b64url(buf: ArrayBuffer): string {
+  return btoa(String.fromCharCode(...new Uint8Array(buf)))
+    .replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+
+function b64urlEncode(str: string): string {
+  return btoa(unescape(encodeURIComponent(str)))
+    .replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+
+function b64urlDecode(str: string): string {
+  return decodeURIComponent(escape(atob(str.replace(/-/g, '+').replace(/_/g, '/'))));
+}
+
+async function importKey(secret: string): Promise<CryptoKey> {
+  return crypto.subtle.importKey(
+    'raw',
+    new TextEncoder().encode(secret),
+    ALG,
+    false,
+    ['sign', 'verify'],
+  );
+}
+
+export async function signJwt(payload: Record<string, unknown>, secret: string): Promise<string> {
+  const header = b64urlEncode(JSON.stringify({ alg: 'HS256', typ: 'JWT' }));
+  const body   = b64urlEncode(JSON.stringify(payload));
+  const key    = await importKey(secret);
+  const sig    = await crypto.subtle.sign(ALG.name, key, new TextEncoder().encode(`${header}.${body}`));
+  return `${header}.${body}.${b64url(sig)}`;
+}
+
+export async function verifyJwt(token: string, secret: string): Promise<Record<string, unknown> | null> {
+  const parts = token.split('.');
+  if (parts.length !== 3) return null;
+
+  const [header, body, sig] = parts;
+  const key = await importKey(secret);
+  const valid = await crypto.subtle.verify(
+    ALG.name,
+    key,
+    Uint8Array.from(atob(sig.replace(/-/g, '+').replace(/_/g, '/')), c => c.charCodeAt(0)),
+    new TextEncoder().encode(`${header}.${body}`),
+  );
+  if (!valid) return null;
+
+  const payload = JSON.parse(b64urlDecode(body)) as Record<string, unknown>;
+  if (typeof payload.exp === 'number' && Date.now() / 1000 > payload.exp) return null;
+
+  return payload;
+}

package/app/lib/renderers/index.ts

@@ -0,0 +1,79 @@
+import { registerRenderer } from './registry';
+import { TodoRenderer } from '@/components/renderers/TodoRenderer';
+import { CsvRenderer } from '@/components/renderers/CsvRenderer';
+import { GraphRenderer } from '@/components/renderers/GraphRenderer';
+import { TimelineRenderer } from '@/components/renderers/TimelineRenderer';
+import { SummaryRenderer } from '@/components/renderers/SummaryRenderer';
+import { ConfigRenderer } from '@/components/renderers/ConfigRenderer';
+
+registerRenderer({
+  id: 'todo',
+  name: 'TODO Board',
+  description: 'Renders TODO.md/TODO.csv as an interactive kanban board grouped by section. Check items off directly — changes are written back to the source file.',
+  author: 'MindOS',
+  icon: '✅',
+  tags: ['productivity', 'tasks', 'markdown'],
+  builtin: true,
+  match: ({ filePath }) => /\bTODO\b.*\.(md|csv)$/i.test(filePath),
+  component: TodoRenderer,
+});
+
+registerRenderer({
+  id: 'csv',
+  name: 'CSV Views',
+  description: 'Renders any CSV file as Table, Gallery, or Board. Each view is independently configurable — choose which columns map to title, description, tag, and group.',
+  author: 'MindOS',
+  icon: '📊',
+  tags: ['csv', 'table', 'gallery', 'board', 'data'],
+  builtin: true,
+  match: ({ extension, filePath }) => extension === 'csv' && !/\bTODO\b/i.test(filePath),
+  component: CsvRenderer,
+});
+
+registerRenderer({
+  id: 'config-panel',
+  name: 'Config Panel',
+  description: 'Renders CONFIG.json as an editable control panel based on uiSchema/keySpecs. Changes are written back to the JSON file directly.',
+  author: 'MindOS',
+  icon: '🧩',
+  tags: ['config', 'json', 'settings', 'schema'],
+  builtin: true,
+  match: ({ filePath, extension }) => extension === 'json' && /(^|\/)CONFIG\.json$/i.test(filePath),
+  component: ConfigRenderer,
+});
+
+registerRenderer({
+  id: 'graph',
+  name: 'Wiki Graph',
+  description: 'Force-directed graph of wikilink references across all markdown files. Supports Global and Local (2-hop) scope filters.',
+  author: 'MindOS',
+  icon: '🕸️',
+  tags: ['graph', 'wiki', 'links', 'visualization'],
+  builtin: true,
+  match: ({ extension }) => extension === 'md',
+  component: GraphRenderer,
+});
+
+registerRenderer({
+  id: 'timeline',
+  name: 'Timeline',
+  description: 'Renders changelog and journal files as a vertical timeline. Any markdown with ## date headings (e.g. ## 2025-01-15) becomes a card in the feed.',
+  author: 'MindOS',
+  icon: '📅',
+  tags: ['timeline', 'changelog', 'journal', 'history'],
+  builtin: true,
+  match: ({ filePath }) => /\b(CHANGELOG|changelog|TIMELINE|timeline|journal|Journal|diary|Diary)\b.*\.md$/i.test(filePath),
+  component: TimelineRenderer,
+});
+
+registerRenderer({
+  id: 'summary',
+  name: 'AI Briefing',
+  description: 'Streams an AI-generated daily briefing summarizing your most recently modified files — key changes, recurring themes, and suggested next actions.',
+  author: 'MindOS',
+  icon: '✨',
+  tags: ['ai', 'summary', 'briefing', 'daily'],
+  builtin: true,
+  match: ({ filePath }) => /\b(SUMMARY|summary|Summary|BRIEFING|briefing|Briefing|DAILY|daily|Daily)\b.*\.md$/i.test(filePath),
+  component: SummaryRenderer,
+});

package/app/lib/renderers/registry.ts

@@ -0,0 +1,70 @@
+import { ComponentType } from 'react';
+
+export interface RendererContext {
+  filePath: string;
+  content: string;
+  extension: string;
+  saveAction: (content: string) => Promise<void>;
+}
+
+export interface RendererDefinition {
+  id: string;
+  name: string;
+  description: string;
+  author: string;
+  icon: string;          // emoji or short string
+  tags: string[];
+  builtin: boolean;      // true = ships with MindOS; false = user-installed (future)
+  match: (ctx: Pick<RendererContext, 'filePath' | 'extension'>) => boolean;
+  component: ComponentType<RendererContext>;
+}
+
+const registry: RendererDefinition[] = [];
+
+// Disabled plugin IDs — persisted to localStorage on client
+let _disabledIds: Set<string> = new Set();
+
+export function loadDisabledState() {
+  if (typeof window === 'undefined') return;
+  try {
+    const raw = localStorage.getItem('mindos-disabled-renderers');
+    _disabledIds = new Set(raw ? JSON.parse(raw) : []);
+  } catch {
+    _disabledIds = new Set();
+  }
+}
+
+export function setRendererEnabled(id: string, enabled: boolean) {
+  if (enabled) {
+    _disabledIds.delete(id);
+  } else {
+    _disabledIds.add(id);
+  }
+  if (typeof window !== 'undefined') {
+    localStorage.setItem('mindos-disabled-renderers', JSON.stringify([..._disabledIds]));
+  }
+}
+
+export function isRendererEnabled(id: string): boolean {
+  return !_disabledIds.has(id);
+}
+
+export function registerRenderer(def: RendererDefinition) {
+  if (!registry.find(r => r.id === def.id)) registry.push(def);
+}
+
+export function resolveRenderer(
+  filePath: string,
+  extension: string,
+  forceId?: string,
+): RendererDefinition | undefined {
+  if (forceId) {
+    const r = registry.find(d => d.id === forceId);
+    return r && isRendererEnabled(r.id) ? r : undefined;
+  }
+  return registry.find(r => isRendererEnabled(r.id) && r.match({ filePath, extension }));
+}
+
+export function getAllRenderers(): RendererDefinition[] {
+  return registry;
+}

package/app/lib/settings.ts

@@ -0,0 +1,150 @@
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+
+const SETTINGS_PATH = path.join(os.homedir(), '.mindos', 'config.json');
+
+export interface ProviderConfig {
+  apiKey: string;
+  model: string;
+  baseUrl?: string; // only for openai-compatible providers
+}
+
+export interface AiConfig {
+  provider: 'anthropic' | 'openai';
+  providers: {
+    anthropic: ProviderConfig;
+    openai: ProviderConfig;
+  };
+}
+
+export interface ServerSettings {
+  ai: AiConfig;
+  mindRoot: string;   // empty = use env var / default
+  // Fields managed by CLI only (not edited via GUI, preserved on write)
+  port?: number;
+  mcpPort?: number;
+  authToken?: string;
+  webPassword?: string;
+  startMode?: 'dev' | 'start';
+}
+
+const DEFAULTS: ServerSettings = {
+  ai: {
+    provider: 'anthropic',
+    providers: {
+      anthropic: { apiKey: '', model: 'claude-sonnet-4-6' },
+      openai:    { apiKey: '', model: 'gpt-5.4', baseUrl: '' },
+    },
+  },
+  mindRoot: '',
+};
+
+/** Safely extract a string field from an unknown object, returning fallback if missing or wrong type */
+function str(obj: unknown, key: string, fallback: string): string {
+  if (obj && typeof obj === 'object') {
+    const val = (obj as Record<string, unknown>)[key];
+    if (typeof val === 'string' && val.trim() !== '') return val;
+  }
+  return fallback;
+}
+
+/** Parse a provider config from unknown input, filling missing/invalid fields with defaults */
+function parseProvider(raw: unknown, defaults: ProviderConfig): ProviderConfig {
+  return {
+    apiKey:   str(raw, 'apiKey',  defaults.apiKey),
+    model:    str(raw, 'model',   defaults.model),
+    ...(defaults.baseUrl !== undefined
+      ? { baseUrl: str(raw, 'baseUrl', defaults.baseUrl) }
+      : {}),
+  };
+}
+
+/** Migrate old flat ai structure to new providers dict, if needed */
+function migrateAi(parsed: Record<string, unknown>): AiConfig {
+  const ai = parsed.ai as Record<string, unknown> | undefined;
+  if (!ai) return { ...DEFAULTS.ai };
+
+  const providerField = ai.provider;
+  const provider: 'anthropic' | 'openai' =
+    providerField === 'anthropic' || providerField === 'openai' ? providerField : 'anthropic';
+
+  // Already new format
+  if (ai.providers && typeof ai.providers === 'object') {
+    const p = ai.providers as Record<string, unknown>;
+    return {
+      provider,
+      providers: {
+        anthropic: parseProvider(p.anthropic, DEFAULTS.ai.providers.anthropic),
+        openai:    parseProvider(p.openai,    DEFAULTS.ai.providers.openai),
+      },
+    };
+  }
+
+  // Old flat format — migrate
+  return {
+    provider,
+    providers: {
+      anthropic: {
+        apiKey: str(ai, 'anthropicApiKey', ''),
+        model:  str(ai, 'anthropicModel',  'claude-sonnet-4-6'),
+      },
+      openai: {
+        apiKey:   str(ai, 'openaiApiKey',  ''),
+        model:    str(ai, 'openaiModel',   'gpt-5.4'),
+        baseUrl:  str(ai, 'openaiBaseUrl', ''),
+      },
+    },
+  };
+}
+
+export function readSettings(): ServerSettings {
+  try {
+    const raw = fs.readFileSync(SETTINGS_PATH, 'utf-8');
+    const parsed = JSON.parse(raw) as Record<string, unknown>;
+    return {
+      ai: migrateAi(parsed),
+      mindRoot: (parsed.mindRoot ?? parsed.sopRoot ?? DEFAULTS.mindRoot) as string,
+      webPassword: typeof parsed.webPassword === 'string' ? parsed.webPassword : undefined,
+      authToken:   typeof parsed.authToken   === 'string' ? parsed.authToken   : undefined,
+      mcpPort:     typeof parsed.mcpPort     === 'number' ? parsed.mcpPort     : undefined,
+    };
+  } catch {
+    return { ...DEFAULTS, ai: { ...DEFAULTS.ai, providers: { ...DEFAULTS.ai.providers } } };
+  }
+}
+
+export function writeSettings(settings: ServerSettings): void {
+  const dir = path.dirname(SETTINGS_PATH);
+  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+  // Merge into existing config to preserve fields like port, authToken, mcpPort
+  let existing: Record<string, unknown> = {};
+  try { existing = JSON.parse(fs.readFileSync(SETTINGS_PATH, 'utf-8')); } catch { /* ignore */ }
+  const merged: Record<string, unknown> = { ...existing, ai: settings.ai, mindRoot: settings.mindRoot };
+  if (settings.webPassword !== undefined) merged.webPassword = settings.webPassword;
+  if (settings.authToken   !== undefined) merged.authToken   = settings.authToken;
+  fs.writeFileSync(SETTINGS_PATH, JSON.stringify(merged, null, 2) + '\n', 'utf-8');
+}
+
+/** Effective AI config — settings file overrides env vars when non-empty */
+export function effectiveAiConfig() {
+  const s = readSettings();
+  const provider = (s.ai.provider || process.env.AI_PROVIDER || 'anthropic') as 'anthropic' | 'openai';
+  const anthropic = s.ai.providers.anthropic;
+  const openai    = s.ai.providers.openai;
+
+  return {
+    provider,
+    anthropicApiKey: anthropic.apiKey || process.env.ANTHROPIC_API_KEY || '',
+    anthropicModel:  anthropic.model  || process.env.ANTHROPIC_MODEL   || 'claude-sonnet-4-6',
+    openaiApiKey:    openai.apiKey    || process.env.OPENAI_API_KEY    || '',
+    openaiModel:     openai.model     || process.env.OPENAI_MODEL      || 'gpt-5.4',
+    openaiBaseUrl:   openai.baseUrl   || process.env.OPENAI_BASE_URL   || '',
+  };
+}
+
+/** Effective MIND_ROOT — settings file can override, env var is fallback */
+export function effectiveSopRoot(): string {
+  const s = readSettings();
+  return s.mindRoot || process.env.MIND_ROOT || path.join(os.homedir(), '.mindos', 'my-mind');
+}

package/app/lib/types.ts

@@ -0,0 +1,32 @@
+// Re-export core types as single source of truth
+export type { FileNode, SearchResult, BacklinkEntry } from './core/types';
+
+export interface SearchMatch {
+  indices: [number, number][];
+  value: string;
+  key: string;
+}
+
+/** Frontend-facing backlink shape returned by /api/backlinks (transformed from core BacklinkEntry) */
+export interface BacklinkItem {
+  filePath: string;
+  snippets: string[];
+}
+
+export interface Message {
+  role: 'user' | 'assistant';
+  content: string;
+}
+
+export interface LocalAttachment {
+  name: string;
+  content: string;
+}
+
+export interface ChatSession {
+  id: string;
+  currentFile?: string;
+  createdAt: number;
+  updatedAt: number;
+  messages: Message[];
+}