@geminilight/mindos 0.6.52 → 0.6.54

package/app/app/api/sync/route.ts

@@ -1,7 +1,7 @@
 export const dynamic = 'force-dynamic';
 import { NextRequest, NextResponse } from 'next/server';
 import { execSync, execFile } from 'child_process';
-import { existsSync, readFileSync, writeFileSync, unlinkSync } from 'fs';
+import { existsSync, readFileSync, writeFileSync, unlinkSync, renameSync } from 'fs';
 import { join, resolve } from 'path';
 import { homedir } from 'os';
 
@@ -13,8 +13,23 @@ function loadConfig() {
   try { return JSON.parse(readFileSync(CONFIG_PATH, 'utf-8')); } catch { return {}; }
 }
 
+/** Atomic write to prevent data corruption on crash/power loss */
+function atomicWriteJSON(filePath: string, data: unknown) {
+  const content = JSON.stringify(data, null, 2) + '\n';
+  const tmp = filePath + '.tmp';
+  writeFileSync(tmp, content, 'utf-8');
+  renameSync(tmp, filePath);
+}
+
 function saveConfig(config: Record<string, unknown>) {
-  writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2) + '\n', 'utf-8');
+  atomicWriteJSON(CONFIG_PATH, config);
+}
+
+/** Validate that a file path is safely within mindRoot (prevents path traversal) */
+function isPathWithinMindRoot(mindRoot: string, filePath: string): boolean {
+  const normalizedPath = resolve(mindRoot, filePath);
+  // Must start with mindRoot + separator to prevent escape via symlinks or ../
+  return normalizedPath.startsWith(mindRoot + '/') || normalizedPath === mindRoot;
 }
 
 function loadSyncState() {
@@ -175,7 +190,7 @@ export async function POST(req: NextRequest) {
         delete config.sync;
         saveConfig(config);
         // Clear sync state
-        try { writeFileSync(SYNC_STATE_PATH, '{}', 'utf-8'); } catch {}
+        try { atomicWriteJSON(SYNC_STATE_PATH, {}); } catch {}
         return NextResponse.json({ ok: true, enabled: false });
       }
 
@@ -205,8 +220,12 @@ export async function POST(req: NextRequest) {
         if (!file || typeof file !== 'string') {
           return NextResponse.json({ error: 'Missing file path' }, { status: 400 });
         }
-        const conflictPath = join(mindRoot, file + '.sync-conflict');
-        const originalPath = join(mindRoot, file);
+        // Security: prevent path traversal attacks
+        if (!isPathWithinMindRoot(mindRoot, file)) {
+          return NextResponse.json({ error: 'Invalid file path' }, { status: 400 });
+        }
+        const conflictPath = resolve(mindRoot, file + '.sync-conflict');
+        const originalPath = resolve(mindRoot, file);
         try {
           if (strategy === 'keep-remote' && existsSync(conflictPath)) {
             // Replace local with remote version
@@ -221,7 +240,7 @@ export async function POST(req: NextRequest) {
           const state = loadSyncState();
           if (state.conflicts) {
             state.conflicts = state.conflicts.filter((c: { file: string }) => c.file !== file);
-            writeFileSync(SYNC_STATE_PATH, JSON.stringify(state, null, 2) + '\n', 'utf-8');
+            atomicWriteJSON(SYNC_STATE_PATH, state);
           }
           return NextResponse.json({ ok: true });
         } catch (e) {
@@ -234,8 +253,12 @@ export async function POST(req: NextRequest) {
         if (!file || typeof file !== 'string') {
           return NextResponse.json({ error: 'Missing file path' }, { status: 400 });
         }
-        const localPath = join(mindRoot, file);
-        const remotePath = join(mindRoot, file + '.sync-conflict');
+        // Security: prevent path traversal attacks
+        if (!isPathWithinMindRoot(mindRoot, file)) {
+          return NextResponse.json({ error: 'Invalid file path' }, { status: 400 });
+        }
+        const localPath = resolve(mindRoot, file);
+        const remotePath = resolve(mindRoot, file + '.sync-conflict');
         const local = existsSync(localPath) ? readFileSync(localPath, 'utf-8') : '';
         const remote = existsSync(remotePath) ? readFileSync(remotePath, 'utf-8') : '';
         return NextResponse.json({ local, remote });
@@ -247,17 +270,17 @@ export async function POST(req: NextRequest) {
         if (commitInterval === undefined && pullInterval === undefined) {
           return NextResponse.json({ error: 'At least one interval must be provided' }, { status: 400 });
         }
-        if (commitInterval !== undefined && (commitInterval < 10 || commitInterval > 300)) {
-          return NextResponse.json({ error: 'autoCommitInterval must be between 10 and 300 seconds' }, { status: 400 });
+        if (commitInterval !== undefined && (!Number.isInteger(commitInterval) || commitInterval < 10 || commitInterval > 300)) {
+          return NextResponse.json({ error: 'autoCommitInterval must be an integer between 10 and 300 seconds' }, { status: 400 });
         }
-        if (pullInterval !== undefined && (pullInterval < 60 || pullInterval > 3600)) {
-          return NextResponse.json({ error: 'autoPullInterval must be between 60 and 3600 seconds' }, { status: 400 });
+        if (pullInterval !== undefined && (!Number.isInteger(pullInterval) || pullInterval < 60 || pullInterval > 3600)) {
+          return NextResponse.json({ error: 'autoPullInterval must be an integer between 60 and 3600 seconds' }, { status: 400 });
         }
         const fullConfig = loadConfig();
         if (!fullConfig.sync) fullConfig.sync = {};
         if (commitInterval !== undefined) fullConfig.sync.autoCommitInterval = commitInterval;
         if (pullInterval !== undefined) fullConfig.sync.autoPullInterval = pullInterval;
-        writeFileSync(CONFIG_PATH, JSON.stringify(fullConfig, null, 2) + '\n', 'utf-8');
+        atomicWriteJSON(CONFIG_PATH, fullConfig);
         return NextResponse.json({
           autoCommitInterval: fullConfig.sync.autoCommitInterval || 30,
           autoPullInterval: fullConfig.sync.autoPullInterval || 300,

package/app/app/api/update/route.ts

@@ -3,25 +3,39 @@ import { NextResponse } from 'next/server';
 import { spawn } from 'node:child_process';
 import { resolve } from 'node:path';
 
+/**
+ * Strip ALL MINDOS_ and MIND_ prefixed env vars so the update child
+ * process re-derives paths from its own installation root after npm install.
+ * This prevents the "fake update" bug where the new process inherits
+ * stale MINDOS_PROJECT_ROOT / MINDOS_CLI_PATH pointing to old code.
+ */
+function cleanEnvForUpdate(): NodeJS.ProcessEnv {
+  const cleaned = { ...process.env };
+  for (const key of Object.keys(cleaned)) {
+    if (key.startsWith('MINDOS_') || key.startsWith('MIND_')) {
+      delete cleaned[key];
+    }
+  }
+  delete cleaned.AUTH_TOKEN;
+  delete cleaned.WEB_PASSWORD;
+  delete cleaned.NODE_OPTIONS;
+  return cleaned;
+}
+
 /**
  * POST /api/update — trigger `mindos update` as a detached child process.
  *
- * Similar to /api/restart: spawns the CLI command and returns immediately.
- * The update process will npm install, remove build stamp, and restart
- * the server. The current process will be killed during restart.
+ * Spawns the CLI command and returns immediately. The update process will
+ * npm install, remove build stamp, and restart the server.
+ * The current process will be killed during restart.
  */
 export async function POST() {
   try {
+    // Resolve CLI path BEFORE cleaning env (we still need current vars)
     const cliPath = process.env.MINDOS_CLI_PATH || resolve(process.env.MINDOS_PROJECT_ROOT || process.cwd(), '..', 'bin', 'cli.js');
     const nodeBin = process.env.MINDOS_NODE_BIN || process.execPath;
 
-    // Strip MINDOS_* env vars so the child reads fresh config
-    const childEnv = { ...process.env };
-    delete childEnv.MINDOS_WEB_PORT;
-    delete childEnv.MINDOS_MCP_PORT;
-    delete childEnv.MIND_ROOT;
-    delete childEnv.AUTH_TOKEN;
-    delete childEnv.WEB_PASSWORD;
+    const childEnv = cleanEnvForUpdate();
 
     const child = spawn(nodeBin, [cliPath, 'update'], {
       detached: true,

package/app/app/global-error.tsx

@@ -14,13 +14,13 @@ export default function GlobalError({
 }) {
   return (
     <html lang="en">
-      <body style={{ margin: 0, fontFamily: 'system-ui, sans-serif', background: '#0f0f0f', color: '#e5e5e5' }}>
+      <body style={{ margin: 0, fontFamily: "'IBM Plex Sans', system-ui, sans-serif", background: '#131210', color: '#e8e4dc' }}>
         <div style={{
           display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center',
           minHeight: '100vh', gap: '16px', padding: '24px', textAlign: 'center',
         }}>
           <h2 style={{ fontSize: '18px', fontWeight: 600, margin: 0 }}>Something went wrong</h2>
-          <p style={{ fontSize: '14px', color: '#888', maxWidth: '400px', margin: 0 }}>
+          <p style={{ fontSize: '14px', color: '#8a8275', maxWidth: '400px', margin: 0 }}>
             {error.message || 'An unexpected error occurred. Please try again.'}
           </p>
           <div style={{ display: 'flex', gap: '12px', marginTop: '8px' }}>
@@ -28,7 +28,7 @@ export default function GlobalError({
               onClick={reset}
               style={{
                 padding: '8px 16px', borderRadius: '6px', fontSize: '14px', fontWeight: 500,
-                background: '#222', color: '#e5e5e5', border: '1px solid #333', cursor: 'pointer',
+                background: '#1c1a17', color: '#e8e4dc', border: '1px solid rgba(232,228,220,0.08)', cursor: 'pointer',
               }}
             >
               Try again

package/app/app/globals.css

@@ -7,8 +7,8 @@
 @theme inline {
   --color-background: var(--background);
   --color-foreground: var(--foreground);
-  --font-sans: var(--font-sans);
-  --font-mono: var(--font-geist-mono);
+  --font-sans: var(--font-inter);
+  --font-mono: var(--font-ibm-plex-mono);
   --color-sidebar-ring: var(--sidebar-ring);
   --color-sidebar-border: var(--sidebar-border);
   --color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
@@ -52,7 +52,7 @@
 }
 
 body {
-  font-family: 'IBM Plex Sans', var(--font-geist-sans), system-ui, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Noto Color Emoji';
+  font-family: 'IBM Plex Sans', var(--font-ibm-plex-sans), system-ui, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Noto Color Emoji';
 }
 
 :root {
@@ -138,6 +138,13 @@ body {
 /* Utility: IBM Plex Mono display heading font */
 .font-display { font-family: 'IBM Plex Mono', var(--font-ibm-plex-mono), monospace; }
 
+/* Brand wordmark — premium sans with engineering precision */
+.font-brand {
+  font-family: 'IBM Plex Sans', var(--font-ibm-plex-sans), system-ui, sans-serif;
+  font-weight: 700;
+  letter-spacing: 0.03em;
+}
+
 /* Content width — controlled by Settings > Appearance */
 :root { --content-width: 780px; --toc-width: 0px; }
 .content-width { max-width: var(--content-width-override, var(--content-width)); margin-left: auto; margin-right: auto; }
@@ -332,6 +339,25 @@ body {
 @layer utilities {
   .text-2xs { font-size: 10px; line-height: 1.4; }
   .animate-spin-slow { animation: spin 3s linear infinite; }
+  /* Checkerboard background for transparent image preview */
+  .bg-checkerboard {
+    background-color: #f0f0f0;
+    background-image:
+      linear-gradient(45deg, #e0e0e0 25%, transparent 25%),
+      linear-gradient(-45deg, #e0e0e0 25%, transparent 25%),
+      linear-gradient(45deg, transparent 75%, #e0e0e0 75%),
+      linear-gradient(-45deg, transparent 75%, #e0e0e0 75%);
+    background-size: 16px 16px;
+    background-position: 0 0, 0 8px, 8px -8px, -8px 0;
+  }
+  :is(.dark) .bg-checkerboard {
+    background-color: #1a1a1a;
+    background-image:
+      linear-gradient(45deg, #252525 25%, transparent 25%),
+      linear-gradient(-45deg, #252525 25%, transparent 25%),
+      linear-gradient(45deg, transparent 75%, #252525 75%),
+      linear-gradient(-45deg, transparent 75%, #252525 75%);
+  }
 }
 
 /* Hide scrollbar but keep scroll functionality */

package/app/app/inbox/history/page.tsx

@@ -0,0 +1,250 @@
+'use client';
+
+import { useState, useMemo, useCallback } from 'react';
+import Link from 'next/link';
+import {
+  ArrowLeft,
+  Check,
+  AlertCircle,
+  Trash2,
+  ChevronDown,
+  FileText,
+  Clock,
+  Archive,
+} from 'lucide-react';
+import { useLocale } from '@/lib/stores/locale-store';
+import {
+  loadHistory,
+  clearHistory,
+  type OrganizeHistoryEntry,
+  type OrganizeSource,
+} from '@/lib/organize-history';
+
+export default function InboxHistoryPage() {
+  const { t } = useLocale();
+  const [entries, setEntries] = useState<OrganizeHistoryEntry[]>(() => loadHistory());
+
+  const handleClear = useCallback(() => {
+    if (!confirm(t.importHistory.clearConfirm)) return;
+    clearHistory();
+    setEntries([]);
+  }, [t]);
+
+  const grouped = useMemo(() => {
+    const now = new Date();
+    const todayStr = now.toDateString();
+    const yesterday = new Date(now);
+    yesterday.setDate(yesterday.getDate() - 1);
+    const yesterdayStr = yesterday.toDateString();
+
+    const groups: { label: string; entries: OrganizeHistoryEntry[] }[] = [];
+    let currentLabel = '';
+    let currentGroup: OrganizeHistoryEntry[] = [];
+
+    for (const entry of entries) {
+      const d = new Date(entry.timestamp);
+      const dateStr = d.toDateString();
+      let label: string;
+      if (dateStr === todayStr) label = t.importHistory.today;
+      else if (dateStr === yesterdayStr) label = t.importHistory.yesterday;
+      else label = d.toLocaleDateString(undefined, { month: 'short', day: 'numeric', year: 'numeric' });
+
+      if (label !== currentLabel) {
+        if (currentGroup.length > 0) groups.push({ label: currentLabel, entries: currentGroup });
+        currentLabel = label;
+        currentGroup = [entry];
+      } else {
+        currentGroup.push(entry);
+      }
+    }
+    if (currentGroup.length > 0) groups.push({ label: currentLabel, entries: currentGroup });
+    return groups;
+  }, [entries, t]);
+
+  return (
+    <div className="max-w-2xl mx-auto px-4 py-8">
+      {/* Header */}
+      <div className="flex items-center gap-3 mb-6">
+        <Link
+          href="/wiki"
+          className="p-1.5 rounded-lg text-muted-foreground hover:text-foreground hover:bg-muted transition-colors"
+        >
+          <ArrowLeft size={16} />
+        </Link>
+        <div className="flex-1">
+          <h1 className="text-lg font-semibold tracking-tight text-foreground">{t.importHistory.title}</h1>
+          <p className="text-xs text-muted-foreground/60 mt-0.5">
+            {entries.length > 0
+              ? t.importHistory.recordCount(entries.length)
+              : t.importHistory.emptyTitle}
+          </p>
+        </div>
+        {entries.length > 0 && (
+          <button
+            onClick={handleClear}
+            className="flex items-center gap-1.5 text-xs text-muted-foreground hover:text-[var(--error)] transition-colors cursor-pointer"
+          >
+            <Trash2 size={12} />
+            {t.importHistory.clearAll}
+          </button>
+        )}
+      </div>
+
+      {/* Archive notice */}
+      {entries.length > 0 && (
+        <div className="flex items-start gap-2 px-3 py-2.5 mb-6 rounded-lg bg-muted/30 border border-border/30">
+          <Archive size={13} className="text-muted-foreground/50 mt-0.5 shrink-0" />
+          <p className="text-2xs text-muted-foreground/60">
+            {t.importHistory.processedArchive}
+          </p>
+        </div>
+      )}
+
+      {/* Empty state */}
+      {entries.length === 0 && (
+        <div className="flex flex-col items-center gap-3 py-16 text-center">
+          <Clock size={32} className="text-muted-foreground/15" />
+          <p className="text-sm text-muted-foreground/60">{t.importHistory.emptyTitle}</p>
+          <p className="text-xs text-muted-foreground/40">{t.importHistory.emptyDesc}</p>
+        </div>
+      )}
+
+      {/* Grouped entries */}
+      <div className="space-y-6">
+        {grouped.map((group) => (
+          <div key={group.label}>
+            <h2 className="text-2xs font-medium text-muted-foreground/50 uppercase tracking-wider mb-2">
+              {group.label}
+            </h2>
+            <div className="space-y-2">
+              {group.entries.map((entry) => (
+                <HistoryCard key={entry.id} entry={entry} />
+              ))}
+            </div>
+          </div>
+        ))}
+      </div>
+    </div>
+  );
+}
+
+function HistoryCard({ entry }: { entry: OrganizeHistoryEntry }) {
+  const { t } = useLocale();
+  const [expanded, setExpanded] = useState(false);
+  const isUndone = entry.status === 'undone';
+  const sourceLabel = getSourceLabel(entry.source);
+  const duration = entry.durationMs ? formatDuration(entry.durationMs) : null;
+  const time = new Date(entry.timestamp).toLocaleTimeString(undefined, { hour: '2-digit', minute: '2-digit' });
+  const successCount = entry.files.filter(f => f.ok && !f.undone).length;
+  const totalCount = entry.files.length;
+
+  return (
+    <div className="rounded-xl border border-border/40 overflow-hidden hover:border-border/60 transition-colors">
+      <button
+        type="button"
+        onClick={() => setExpanded(v => !v)}
+        className="w-full flex items-start gap-3 px-4 py-3 text-left hover:bg-muted/20 transition-colors"
+      >
+        {isUndone ? (
+          <AlertCircle size={14} className="text-muted-foreground/40 mt-0.5 shrink-0" />
+        ) : (
+          <Check size={14} className="text-success/70 mt-0.5 shrink-0" />
+        )}
+
+        <div className="flex-1 min-w-0">
+          <div className={`text-sm ${isUndone ? 'text-muted-foreground/50 line-through' : 'text-foreground/90'}`}>
+            {entry.sourceFiles.length === 1
+              ? entry.sourceFiles[0]
+              : `${entry.sourceFiles.length} files`}
+          </div>
+          <div className="flex items-center gap-2 mt-1 flex-wrap">
+            {sourceLabel && (
+              <span className="text-2xs px-1.5 py-0.5 rounded bg-muted/60 text-muted-foreground/60">
+                {sourceLabel}
+              </span>
+            )}
+            {totalCount > 0 && (
+              <span className="text-2xs text-muted-foreground/40">
+                {t.importHistory.changesCount(successCount, totalCount)}
+              </span>
+            )}
+            {duration && (
+              <span className="text-2xs text-muted-foreground/40">{duration}</span>
+            )}
+          </div>
+        </div>
+
+        <div className="flex items-center gap-2 shrink-0">
+          <span className="text-2xs text-muted-foreground/40 tabular-nums">{time}</span>
+          {totalCount > 0 && (
+            <ChevronDown
+              size={12}
+              className={`text-muted-foreground/30 transition-transform duration-150 ${expanded ? 'rotate-180' : ''}`}
+            />
+          )}
+        </div>
+      </button>
+
+      {expanded && totalCount > 0 && (
+        <div className="border-t border-border/20 px-4 py-2 space-y-1">
+          {/* Source files */}
+          {entry.sourceFiles.length > 1 && (
+            <div className="mb-2">
+              <span className="text-2xs font-medium text-muted-foreground/50 uppercase tracking-wider">
+                {t.importHistory.sourceLabel}
+              </span>
+              <div className="mt-1 space-y-0.5">
+                {entry.sourceFiles.map((name, idx) => (
+                  <div key={idx} className="flex items-center gap-2 text-2xs text-foreground/60">
+                    <FileText size={10} className="text-muted-foreground/40 shrink-0" />
+                    <span className="truncate">{name}</span>
+                  </div>
+                ))}
+              </div>
+            </div>
+          )}
+
+          {/* Changes */}
+          {entry.files.map((f, idx) => {
+            const fileName = f.path.split('/').pop() ?? f.path;
+            return (
+              <div
+                key={`${f.path}-${idx}`}
+                className={`flex items-center gap-2 py-1 text-2xs ${f.undone ? 'opacity-40' : ''}`}
+              >
+                <span className={`w-1.5 h-1.5 rounded-full shrink-0 ${
+                  f.ok && !f.undone ? 'bg-success/60' : f.undone ? 'bg-muted-foreground/30' : 'bg-[var(--error)]/50'
+                }`} />
+                <span className={`truncate flex-1 ${f.undone ? 'line-through text-muted-foreground' : 'text-foreground/70'}`}>
+                  {f.path}
+                </span>
+                <span className="text-muted-foreground/40 shrink-0">
+                  {f.undone ? 'undone' : f.action === 'create' ? 'created' : f.action === 'update' ? 'updated' : f.action}
+                </span>
+              </div>
+            );
+          })}
+        </div>
+      )}
+    </div>
+  );
+}
+
+function getSourceLabel(source?: OrganizeSource): string | null {
+  switch (source) {
+    case 'drag-drop': return 'Drag & Drop';
+    case 'inbox-organize': return 'Inbox';
+    case 'import-modal': return 'Import';
+    case 'plugin': return 'Plugin';
+    case 'upload': return 'Upload';
+    default: return null;
+  }
+}
+
+function formatDuration(ms: number): string {
+  const s = Math.round(ms / 1000);
+  if (s < 60) return `${s}s`;
+  const m = Math.floor(s / 60);
+  const rem = s % 60;
+  return `${m}m${rem > 0 ? `${rem}s` : ''}`;
+}

package/app/app/layout.tsx

@@ -13,14 +13,8 @@ import { cookies } from 'next/headers';
 import type { Locale } from '@/lib/i18n';
 import '@/lib/renderers/index'; // globally register built-in renderers once
 
-const geistSans = Inter({
-  variable: '--font-geist-sans',
-  subsets: ['latin'],
-});
-
-const geistMono = IBM_Plex_Mono({
-  variable: '--font-geist-mono',
-  weight: ['400', '600'],
+const inter = Inter({
+  variable: '--font-inter',
   subsets: ['latin'],
 });
 
@@ -32,7 +26,7 @@ const ibmPlexMono = IBM_Plex_Mono({
 
 const ibmPlexSans = IBM_Plex_Sans({
   variable: '--font-ibm-plex-sans',
-  weight: ['400', '500', '600'],
+  weight: ['400', '500', '600', '700'],
   subsets: ['latin'],
 });
 
@@ -98,12 +92,12 @@ export default async function RootLayout({
         {/* Apply user appearance settings before first paint, preventing flash */}
         <script
           dangerouslySetInnerHTML={{
-            __html: `(function(){try{var s=localStorage.getItem('theme');var dark=s&&s!=='system'?s==='dark':window.matchMedia('(prefers-color-scheme: dark)').matches;document.documentElement.classList.toggle('dark',dark);var cw=localStorage.getItem('content-width');if(cw)document.documentElement.style.setProperty('--content-width-override',cw);var pf=localStorage.getItem('prose-font');var fm={lora:'"Lora", Georgia, serif','ibm-plex-sans':'"IBM Plex Sans", sans-serif',geist:'var(--font-geist-sans), sans-serif','ibm-plex-mono':'"IBM Plex Mono", monospace'};if(pf&&fm[pf])document.documentElement.style.setProperty('--prose-font-override',fm[pf]);var loc=localStorage.getItem('locale')||'system';var rl=loc==='system'?(navigator.language.startsWith('zh')?'zh':'en'):loc;document.documentElement.lang=rl==='zh'?'zh':'en';document.cookie='locale='+rl+';path=/;max-age=31536000;SameSite=Lax'}catch(e){}})();`,
+            __html: `(function(){try{var s=localStorage.getItem('theme');var dark=s&&s!=='system'?s==='dark':window.matchMedia('(prefers-color-scheme: dark)').matches;document.documentElement.classList.toggle('dark',dark);var cw=localStorage.getItem('content-width');if(cw)document.documentElement.style.setProperty('--content-width-override',cw);var pf=localStorage.getItem('prose-font');if(pf==='geist'){pf='inter';localStorage.setItem('prose-font','inter')}var fm={lora:'"Lora", Georgia, serif','ibm-plex-sans':'"IBM Plex Sans", sans-serif',inter:'var(--font-inter), sans-serif','ibm-plex-mono':'"IBM Plex Mono", monospace'};if(pf&&fm[pf])document.documentElement.style.setProperty('--prose-font-override',fm[pf]);var loc=localStorage.getItem('locale')||'system';var rl=loc==='system'?(navigator.language.startsWith('zh')?'zh':'en'):loc;document.documentElement.lang=rl==='zh'?'zh':'en';document.cookie='locale='+rl+';path=/;max-age=31536000;SameSite=Lax'}catch(e){}})();`,
           }}
         />
       </head>
       <body
-        className={`${geistSans.variable} ${geistMono.variable} ${ibmPlexMono.variable} ${ibmPlexSans.variable} ${lora.variable} antialiased bg-background text-foreground`}
+        className={`${inter.variable} ${ibmPlexMono.variable} ${ibmPlexSans.variable} ${lora.variable} antialiased bg-background text-foreground`}
         suppressHydrationWarning
       >
         <LocaleStoreInit ssrLocale={ssrLocale} />

package/app/app/login/page.tsx

@@ -65,7 +65,7 @@ function LoginForm() {
               <path d="M35,17.5 Q35,20 37.5,20 Q35,20 35,22.5 Q35,20 32.5,20 Q35,20 35,17.5 Z" fill="#FEF3C7"/>
             </g>
           </svg>
-          <h1 className="text-xl font-semibold text-foreground tracking-tight font-display">
+          <h1 className="text-2xl font-brand text-foreground">
             MindOS
           </h1>
           <p className="text-xs text-muted-foreground/70 italic">

package/app/app/view/[...path]/ViewPageClient.tsx

@@ -61,7 +61,12 @@ export default function ViewPageClient({
   // Graph mode — per-view, resets when navigating to a different file
   const [graphMode, setGraphMode] = useState(false);
   const router = useRouter();
-  const [editing, setEditing] = useState(initialEditing || content === '');
+  const isBinaryFile = [
+    'pdf', 'png', 'jpg', 'jpeg', 'gif', 'webp', 'svg', 'bmp', 'ico',
+    'mp3', 'wav', 'm4a', 'ogg', 'flac', 'aac',
+    'mp4', 'webm', 'mov', 'mkv',
+  ].includes(extension);
+  const [editing, setEditing] = useState(!isBinaryFile && (initialEditing || content === ''));
   const [editContent, setEditContent] = useState(content);
   const [savedContent, setSavedContent] = useState(content);
 
@@ -282,7 +287,7 @@ export default function ViewPageClient({
         e.preventDefault();
         setFindOpen(true);
       }
-      if (e.key === 'e' && !editing && document.activeElement?.tagName === 'BODY') {
+      if (e.key === 'e' && !editing && !isBinaryFile && document.activeElement?.tagName === 'BODY') {
         handleEdit();
       }
       if (e.key === 'Escape' && editing) handleCancel();
@@ -374,7 +379,7 @@ export default function ViewPageClient({
               </span>
             )}
             {saveSuccess && (
-              <span className="text-xs flex items-center gap-1.5 font-display" style={{ color: 'var(--success)' }}>
+              <span className="text-xs flex items-center gap-1.5" style={{ color: 'var(--success)' }}>
                 <span className="w-1.5 h-1.5 rounded-full" style={{ background: 'var(--success)' }} />
                 <span className="hidden sm:inline">saved</span>
               </span>
@@ -383,11 +388,11 @@ export default function ViewPageClient({
               <span className="text-xs text-error hidden sm:inline">{saveError}</span>
             )}
 
-            {/* Renderer toggle — only shown when a custom renderer exists (excludes graph-mode override) */}
-            {registryRenderer && !editing && !isDraft && !graphRenderer && (
+            {/* Renderer toggle — only shown when a custom renderer exists (excludes graph-mode override and binary files) */}
+            {registryRenderer && !editing && !isDraft && !graphRenderer && !isBinaryFile && (
               <button
                 onClick={handleToggleRaw}
-                className="flex items-center gap-1.5 px-3 py-1.5 rounded-md text-xs font-medium transition-colors font-display"
+                className="flex items-center gap-1.5 px-3 py-1.5 rounded-md text-xs font-medium transition-colors"
                 style={{
                   background: effectiveUseRaw ? `${'var(--amber)'}22` : 'var(--muted)',
                   color: effectiveUseRaw ? 'var(--amber)' : 'var(--muted-foreground)',
@@ -399,10 +404,10 @@ export default function ViewPageClient({
               </button>
             )}
 
-            {!editing && !showRenderer && !isDraft && (
+            {!editing && !showRenderer && !isDraft && !isBinaryFile && (
               <button
                 onClick={handleEdit}
-                className="flex items-center gap-1.5 px-3 py-1.5 rounded-md text-xs font-medium transition-colors font-display"
+                className="flex items-center gap-1.5 px-3 py-1.5 rounded-md text-xs font-medium transition-colors"
                 style={{ background: 'var(--muted)', color: 'var(--muted-foreground)' }}
                 onMouseEnter={(e) => { e.currentTarget.style.color = 'var(--foreground)'; e.currentTarget.style.background = 'var(--accent)'; }}
                 onMouseLeave={(e) => { e.currentTarget.style.color = 'var(--muted-foreground)'; e.currentTarget.style.background = 'var(--muted)'; }}
@@ -416,7 +421,7 @@ export default function ViewPageClient({
                 <button
                   onClick={handleCancel}
                   disabled={isPending}
-                  className="flex items-center gap-1.5 px-3 py-1.5 rounded-md text-xs font-medium transition-colors disabled:opacity-50 font-display"
+                  className="flex items-center gap-1.5 px-3 py-1.5 rounded-md text-xs font-medium transition-colors disabled:opacity-50"
                   style={{ background: 'var(--muted)', color: 'var(--muted-foreground)' }}
                   onMouseEnter={(e) => { e.currentTarget.style.background = 'var(--accent)'; }}
                   onMouseLeave={(e) => { e.currentTarget.style.background = 'var(--muted)'; }}
@@ -427,7 +432,7 @@ export default function ViewPageClient({
                 <button
                   onClick={isDraft && showSaveAs ? handleConfirmDraftSave : handleSave}
                   disabled={isPending}
-                  className="flex items-center gap-1.5 px-3 py-1.5 rounded-md text-xs font-medium disabled:opacity-50 font-display"
+                  className="flex items-center gap-1.5 px-3 py-1.5 rounded-md text-xs font-medium disabled:opacity-50"
                   style={{ background: 'var(--amber)', color: 'var(--amber-foreground)' }}
                 >
                   {isPending ? <Loader2 size={13} className="animate-spin" /> : <Save size={13} />}

package/app/app/view/[...path]/not-found.tsx

@@ -52,7 +52,7 @@ export default function ViewNotFound() {
         <FilePlus size={24} className="text-muted-foreground" />
       </div>
 
-      <h1 className="text-lg font-semibold text-foreground mb-2 font-display">
+      <h1 className="text-lg font-semibold tracking-tight text-foreground mb-2">
         {notFoundT?.title ?? 'File not found'}
       </h1>