@mindexec/cli 0.2.299 → 0.2.300

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindexec/cli",
-  "version": "0.2.299",
+  "version": "0.2.300",
   "description": "MindExec local runtime and bridge CLI",
   "main": "server.js",
   "type": "module",

package/server.js

@@ -7614,7 +7614,12 @@ async function proxyCompanyCoreRequest(req, res) {
                 console.warn(`[CompanyCore/Proxy] CompanyCore is not reachable at ${companyCoreBaseUrl}. Start CompanyCore or set COMPANY_CORE_URL.`);
             }
 
-            res.status(503).json({
+            const isReadProbe = ['GET', 'HEAD'].includes(String(req.method || '').toUpperCase());
+            if (isReadProbe) {
+                res.setHeader('x-mindexec-upstream-status', '503');
+            }
+
+            res.status(isReadProbe ? 200 : 503).json({
                 status: 'unavailable',
                 error: 'CompanyCore is not running',
                 target: companyCoreBaseUrl,

package/wwwroot/_content/MindExecution.Shared/js/mind-map-core.js

@@ -5,7 +5,7 @@
     const DEBUG = false;
     const FPS_DEBUG = false;
     const FRAME_PERF_DEBUG = false;
-    const MINDMAP_CORE_BUILD_ID = '20260620-css3d-single-aa-v758';
+    const MINDMAP_CORE_BUILD_ID = '20260621-external-media-cors-v759';
     const CanvasPhase = Object.freeze({
         Booting: 'booting',
         BoardFileLoading: 'board-file-loading',

package/wwwroot/_content/MindExecution.Shared/js/mind-map-css3d-manager.js

@@ -1607,6 +1607,31 @@
         return LOOPBACK_ASSET_URL_REGEX.test(String(url || '').trim());
     }
 
+    function shouldAttachCssMediaAuthorization(targetUrl, authToken) {
+        const token = typeof authToken === 'string' ? authToken.trim() : '';
+        if (!token) {
+            return false;
+        }
+
+        const normalized = normalizeCssMediaUrl(targetUrl);
+        if (!normalized || isNonRefreshableMediaUrl(normalized)) {
+            return false;
+        }
+
+        if (isLoopbackCssAssetUrl(normalized)) {
+            return true;
+        }
+
+        try {
+            const baseUrl = document?.baseURI || window?.location?.href || 'http://localhost/';
+            const target = new URL(normalized, baseUrl);
+            const currentOrigin = window?.location?.origin || new URL(baseUrl).origin;
+            return target.origin === currentOrigin;
+        } catch {
+            return !/^[a-z][a-z0-9+.-]*:/i.test(normalized);
+        }
+    }
+
     function getCssMediaCanonicalSource(mediaEl, fallback = '') {
         return normalizeCssMediaUrl(
             mediaEl?.dataset?.mediaSourceUrl
@@ -3312,7 +3337,7 @@
             ? _module.authToken.trim()
             : '';
 
-        if (token) {
+        if (shouldAttachCssMediaAuthorization(targetUrl, token)) {
             requestOptions.headers = {
                 Authorization: `Bearer ${token}`
             };

package/wwwroot/_content/MindExecution.Shared/js/mind-map-lod-renderer.js

@@ -51,7 +51,7 @@
     // ▲▲▲ [Usage] ▲▲▲
 
     // Procedural line rendering settings
-    const LOD_RENDERER_BUILD_ID = '20260620-css3d-single-aa-v758';
+    const LOD_RENDERER_BUILD_ID = '20260621-external-media-cors-v759';
     const DirtyKind = Object.freeze({
         ResidentFullRebuild: 'resident-full-rebuild',
         ResidentPatch: 'resident-patch',

package/wwwroot/_content/MindExecution.Shared/js/mind-map-texture-factory.js

@@ -91,6 +91,31 @@
             .test(String(url || '').trim());
     }
 
+    function shouldAttachImageAssetAuthorization(targetUrl, authToken) {
+        const token = typeof authToken === 'string' ? authToken.trim() : '';
+        if (!token) {
+            return false;
+        }
+
+        const normalized = normalizeImageAssetUrl(targetUrl);
+        if (!normalized || isNonRefreshableLocalUrl(normalized)) {
+            return false;
+        }
+
+        if (isLoopbackImageAssetUrl(normalized)) {
+            return true;
+        }
+
+        try {
+            const baseUrl = document?.baseURI || window?.location?.href || 'http://localhost/';
+            const target = new URL(normalized, baseUrl);
+            const currentOrigin = window?.location?.origin || new URL(baseUrl).origin;
+            return target.origin === currentOrigin;
+        } catch {
+            return !/^[a-z][a-z0-9+.-]*:/i.test(normalized);
+        }
+    }
+
     function getCanonicalImageAssetKey(url) {
         const normalized = normalizeImageAssetUrl(url);
         if (!normalized) {
@@ -1805,7 +1830,7 @@
                 requestOptions.targetAddressSpace = 'loopback';
             }
 
-            if (authToken) {
+            if (shouldAttachImageAssetAuthorization(targetUrl, authToken)) {
                 requestOptions.headers = {
                     Authorization: `Bearer ${authToken}`
                 };

package/wwwroot/_framework/blazor.boot.json

@@ -1,7 +1,7 @@
 {
   "mainAssemblyName": "MindExecution.Web",
   "resources": {
-    "hash": "sha256-FF1nAHdYmz7+B94axSY0q+4MC9oZypaC7l7e/MluIM4=",
+    "hash": "sha256-OtTww/K4VhDTgTS4mHneBJqBjhiKpOOo+MCUeq0ZDvI=",
     "fingerprinting": {
       "Google.Protobuf.9h59ukbel7.dll": "Google.Protobuf.dll",
       "Markdig.d1j7v41cl1.dll": "Markdig.dll",
@@ -127,12 +127,12 @@
       "MindExecution.Kernel.l5y3qroa7p.dll": "MindExecution.Kernel.dll",
       "MindExecution.Plugins.Admin.uuf238xa0h.dll": "MindExecution.Plugins.Admin.dll",
       "MindExecution.Plugins.Business.nyr3v25v48.dll": "MindExecution.Plugins.Business.dll",
-      "MindExecution.Plugins.Concept.xjufz6g1rt.dll": "MindExecution.Plugins.Concept.dll",
+      "MindExecution.Plugins.Concept.l9z9tx9svt.dll": "MindExecution.Plugins.Concept.dll",
       "MindExecution.Plugins.Directory.ju87t8h3zs.dll": "MindExecution.Plugins.Directory.dll",
-      "MindExecution.Plugins.PlanMaster.ypr32rpm29.dll": "MindExecution.Plugins.PlanMaster.dll",
-      "MindExecution.Plugins.YouTube.pjv8y1v7kk.dll": "MindExecution.Plugins.YouTube.dll",
-      "MindExecution.Shared.6v8p1z521c.dll": "MindExecution.Shared.dll",
-      "MindExecution.Web.df0li0jddy.dll": "MindExecution.Web.dll",
+      "MindExecution.Plugins.PlanMaster.krn3jgvjpa.dll": "MindExecution.Plugins.PlanMaster.dll",
+      "MindExecution.Plugins.YouTube.5m53srfud6.dll": "MindExecution.Plugins.YouTube.dll",
+      "MindExecution.Shared.rv3rw2h14g.dll": "MindExecution.Shared.dll",
+      "MindExecution.Web.vb3eqoz4v9.dll": "MindExecution.Web.dll",
       "dotnet.js": "dotnet.js",
       "dotnet.native.qc8g39g30v.js": "dotnet.native.js",
       "dotnet.native.boem75ye5i.wasm": "dotnet.native.wasm",
@@ -281,15 +281,15 @@
       "MindExecution.Core.y7ffihhajj.dll": "sha256-zsCKUWBWzDly1h5/vMtqVRb7PeG4lgfIZbQuJFyY1QU=",
       "MindExecution.Kernel.l5y3qroa7p.dll": "sha256-V4pQTxua0lGWpdsFpo7bHr6rPFWZeofry7e9On+OJmo=",
       "MindExecution.Plugins.Business.nyr3v25v48.dll": "sha256-T4c7+fDE4TQAXAoFmHnYM+tT7RSvAM7W0VinLPoD+6U=",
-      "MindExecution.Plugins.Concept.xjufz6g1rt.dll": "sha256-bWM6jA2lPPkHFs5Itjqjj7S9nsS+JfTBOnhDoO1aSW4=",
-      "MindExecution.Plugins.PlanMaster.ypr32rpm29.dll": "sha256-6rKiLaTNql6z8E+yhQJaIfxU9d/ed2lH0moVYDNZ5n8=",
-      "MindExecution.Shared.6v8p1z521c.dll": "sha256-3iknhbM7GDnYzPsIgCI/OOcXnwTr1ar8Eam3DBVnK1o=",
-      "MindExecution.Web.df0li0jddy.dll": "sha256-abf4IekxOERJ9QG4vtL5dVjb8BDVL65ghHy9Ff+xoCM="
+      "MindExecution.Plugins.Concept.l9z9tx9svt.dll": "sha256-N/QoILmTilvX5Zo4SCy7ENTCqMzSC6RIEQlEwtxkGPo=",
+      "MindExecution.Plugins.PlanMaster.krn3jgvjpa.dll": "sha256-8IFpm/2fpsWD3syyl58LTSWSGC8PfcrsLdmmSKR1Sq0=",
+      "MindExecution.Shared.rv3rw2h14g.dll": "sha256-ZwT/+Wjs0ZoDe3XZwwDlkPwo7xexhoK1RcyI2rEiywY=",
+      "MindExecution.Web.vb3eqoz4v9.dll": "sha256-W/K+qUiAlmIiww6SxYbWiLUOla0pMGqpAfr7q+dmBgs="
     },
     "lazyAssembly": {
       "MindExecution.Plugins.Admin.uuf238xa0h.dll": "sha256-OrCIUack8nSWBBiZK65DlJ3YGM677RAA8cX/oJjhm5c=",
       "MindExecution.Plugins.Directory.ju87t8h3zs.dll": "sha256-dapAkel5qj7fK6BiDDmvkzZL96frl8k/3yP8SDr3rMw=",
-      "MindExecution.Plugins.YouTube.pjv8y1v7kk.dll": "sha256-S/gcxDXtRDC7hHYM8Rt3018Lm0/MBdGdoAzbLnZrJj0="
+      "MindExecution.Plugins.YouTube.5m53srfud6.dll": "sha256-02hOpWFNogHEBktxD4XUnDN/oKFJnO0g8n4bYCP0tAY="
     }
   },
   "cacheBootResources": true,

package/wwwroot/index.html

@@ -7,8 +7,8 @@
     <title>MindExec | Business Execution OS for solo builders</title>
     <meta name="description" content="MindExec is an AI business execution OS for solo builders who want to turn notes, research, assets, and repeatable execution Skills into revenue-producing work." />
     <base href="/" />
-    <link rel="stylesheet" href="_content/MindExecution.Shared/css/app.css?v=20260620-css3d-single-aa-v758" />
-    <link rel="stylesheet" href="_content/MindExecution.Shared/css/mind-map-overrides.css?v=20260620-css3d-single-aa-v758" />
+    <link rel="stylesheet" href="_content/MindExecution.Shared/css/app.css?v=20260621-external-media-cors-v759" />
+    <link rel="stylesheet" href="_content/MindExecution.Shared/css/mind-map-overrides.css?v=20260621-external-media-cors-v759" />
     <!-- ?占썩뼹??Font Awesome (local) ?占썩뼹??-->
     <link rel="stylesheet" href="_content/MindExecution.Shared/lib/font-awesome/css/all.min.css" />
     <!-- ?占썩뼯??-->
@@ -579,7 +579,7 @@
             }
 
             const base = '_content/MindExecution.Shared/js/';
-        const scriptVersion = '20260620-css3d-single-aa-v758';
+        const scriptVersion = '20260621-external-media-cors-v759';
             const scriptUrl = (script) => `${base}${script}?v=${scriptVersion}`;
             console.log(`[Script Loader] Shared JS version: ${scriptVersion}`);
             const criticalScripts = [

package/wwwroot/service-worker-assets.js

@@ -1,5 +1,5 @@
 self.assetsManifest = {
-    "version":  "Lnn9EG9z",
+    "version":  "3vFdzHRr",
     "assets":  [
                    {
                        "hash":  "sha256-+CSYMcqLNTsq3VnH11jgYyOCCdxvHzL74CBmo4sCmMU=",
@@ -78,7 +78,7 @@
                        "url":  "_content/MindExecution.Shared/js/marked.min.js"
                    },
                    {
-                       "hash":  "sha256-raydXreUnr7yxmsjp+XyoxUPnVTYKhB41VU1PLq3PCE=",
+                       "hash":  "sha256-VwDE/TMkgow0Fj+7kXnMMIpEK/2bw1NHa4Ydd/2KFkk=",
                        "url":  "_content/MindExecution.Shared/js/mind-map-core.js"
                    },
                    {
@@ -86,7 +86,7 @@
                        "url":  "_content/MindExecution.Shared/js/mind-map-core.js.backup"
                    },
                    {
-                       "hash":  "sha256-3l5a2qua37GH1l1Use9Uvs+gcyAssbWa3EX3BKEATng=",
+                       "hash":  "sha256-X44C2JtSIlacgztF74ejjqSJ+jhSegt5+pdP4ypuKVs=",
                        "url":  "_content/MindExecution.Shared/js/mind-map-css3d-manager.js"
                    },
                    {
@@ -114,7 +114,7 @@
                        "url":  "_content/MindExecution.Shared/js/mind-map-lod-plan-worker.js"
                    },
                    {
-                       "hash":  "sha256-iLW9QMJ9V9dlbrTy237dLYkCEZYYNiyXIf9NNPAIElE=",
+                       "hash":  "sha256-99ihYUDUbvpmxdv3ut8ph79bRGjIVBxUySxPZTvmEi4=",
                        "url":  "_content/MindExecution.Shared/js/mind-map-lod-renderer.js"
                    },
                    {
@@ -158,7 +158,7 @@
                        "url":  "_content/MindExecution.Shared/js/mind-map-text-overlay-v2.js"
                    },
                    {
-                       "hash":  "sha256-MMfGxAaxa3MZugIcUvHMrqpLmQdEHV3mZyJFIeQ7rUY=",
+                       "hash":  "sha256-rXMMiOLaRGM1Dzp+IuVTVGJIQCVrr8apnByC4RmpbIQ=",
                        "url":  "_content/MindExecution.Shared/js/mind-map-texture-factory.js"
                    },
                    {
@@ -426,28 +426,28 @@
                        "url":  "_framework/MindExecution.Plugins.Business.nyr3v25v48.dll"
                    },
                    {
-                       "hash":  "sha256-bWM6jA2lPPkHFs5Itjqjj7S9nsS+JfTBOnhDoO1aSW4=",
-                       "url":  "_framework/MindExecution.Plugins.Concept.xjufz6g1rt.dll"
+                       "hash":  "sha256-N/QoILmTilvX5Zo4SCy7ENTCqMzSC6RIEQlEwtxkGPo=",
+                       "url":  "_framework/MindExecution.Plugins.Concept.l9z9tx9svt.dll"
                    },
                    {
                        "hash":  "sha256-dapAkel5qj7fK6BiDDmvkzZL96frl8k/3yP8SDr3rMw=",
                        "url":  "_framework/MindExecution.Plugins.Directory.ju87t8h3zs.dll"
                    },
                    {
-                       "hash":  "sha256-6rKiLaTNql6z8E+yhQJaIfxU9d/ed2lH0moVYDNZ5n8=",
-                       "url":  "_framework/MindExecution.Plugins.PlanMaster.ypr32rpm29.dll"
+                       "hash":  "sha256-8IFpm/2fpsWD3syyl58LTSWSGC8PfcrsLdmmSKR1Sq0=",
+                       "url":  "_framework/MindExecution.Plugins.PlanMaster.krn3jgvjpa.dll"
                    },
                    {
-                       "hash":  "sha256-S/gcxDXtRDC7hHYM8Rt3018Lm0/MBdGdoAzbLnZrJj0=",
-                       "url":  "_framework/MindExecution.Plugins.YouTube.pjv8y1v7kk.dll"
+                       "hash":  "sha256-02hOpWFNogHEBktxD4XUnDN/oKFJnO0g8n4bYCP0tAY=",
+                       "url":  "_framework/MindExecution.Plugins.YouTube.5m53srfud6.dll"
                    },
                    {
-                       "hash":  "sha256-3iknhbM7GDnYzPsIgCI/OOcXnwTr1ar8Eam3DBVnK1o=",
-                       "url":  "_framework/MindExecution.Shared.6v8p1z521c.dll"
+                       "hash":  "sha256-ZwT/+Wjs0ZoDe3XZwwDlkPwo7xexhoK1RcyI2rEiywY=",
+                       "url":  "_framework/MindExecution.Shared.rv3rw2h14g.dll"
                    },
                    {
-                       "hash":  "sha256-abf4IekxOERJ9QG4vtL5dVjb8BDVL65ghHy9Ff+xoCM=",
-                       "url":  "_framework/MindExecution.Web.df0li0jddy.dll"
+                       "hash":  "sha256-W/K+qUiAlmIiww6SxYbWiLUOla0pMGqpAfr7q+dmBgs=",
+                       "url":  "_framework/MindExecution.Web.vb3eqoz4v9.dll"
                    },
                    {
                        "hash":  "sha256-IsZJ91/OW+fHzNqIgEc7Y072ns8z9dGritiSyvR9Wgc=",
@@ -770,7 +770,7 @@
                        "url":  "_framework/Websocket.Client.vapounvmnl.dll"
                    },
                    {
-                       "hash":  "sha256-DCa6Ul8O+PoQtr9kl/Ks5HOAS8WrNZHoXx7wizRdu68=",
+                       "hash":  "sha256-O8em1XbCRLjEd/hcubu7Ryw+oGv+jYqaVmK41A5y5zM=",
                        "url":  "_framework/blazor.boot.json"
                    },
                    {
@@ -834,7 +834,7 @@
                        "url":  "image-manifest.json"
                    },
                    {
-                       "hash":  "sha256-aAhit/PSlXG9mUxc/uVhPIv5tlk5grTes5A5/VERvCk=",
+                       "hash":  "sha256-NVtnr6OxLupQQ9HQQzBzT/nhATEhZOBasRTakBSZcDQ=",
                        "url":  "index.html"
                    },
                    {

package/wwwroot/service-worker.js

@@ -1,4 +1,4 @@
-/* Manifest version: Lnn9EG9z */
+/* Manifest version: 3vFdzHRr */
 // Hosted deployments should prefer the network over stale offline caches.
 // This service worker immediately clears old Blazor offline caches and unregisters itself.