@mindexec/cli 0.2.87 → 0.2.89

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindexec/cli",
-  "version": "0.2.87",
+  "version": "0.2.89",
   "description": "MindExec local runtime and bridge CLI",
   "main": "server.js",
   "type": "module",
@@ -20,7 +20,8 @@
   "scripts": {
     "start": "node launch-bridge.cjs",
     "dev": "node launch-bridge.cjs --watch",
-    "test:syntax": "node --check server.js && node --check remote-hub.js && node --check codex-runtime.js && node --check launch-bridge.cjs && node --check port-guard.cjs && node --check scripts/setup-tree-sitter-grammars.mjs && node --check scripts/remote-hub-smoke.mjs && node --check scripts/remote-hub-scale-smoke.mjs && node --check scripts/remote-fleet-render-smoke.mjs && node --check scripts/remote-http-smoke.mjs",
+    "test:syntax": "node --check server.js && node --check remote-hub.js && node --check codex-runtime.js && node --check launch-bridge.cjs && node --check port-guard.cjs && node --check scripts/setup-tree-sitter-grammars.mjs && node --check scripts/auth-session-smoke.mjs && node --check scripts/remote-hub-smoke.mjs && node --check scripts/remote-hub-scale-smoke.mjs && node --check scripts/remote-fleet-render-smoke.mjs && node --check scripts/remote-http-smoke.mjs",
+    "test:auth": "node scripts/auth-session-smoke.mjs",
     "test:remote": "node scripts/remote-hub-smoke.mjs",
     "test:remote:scale": "node scripts/remote-hub-scale-smoke.mjs",
     "test:remote:render": "node scripts/remote-fleet-render-smoke.mjs",

package/scripts/auth-session-smoke.mjs

@@ -0,0 +1,218 @@
+#!/usr/bin/env node
+
+import assert from 'node:assert/strict';
+import { spawn } from 'node:child_process';
+import { mkdtemp, mkdir, rm, writeFile } from 'node:fs/promises';
+import net from 'node:net';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const BRIDGE_TOKEN = 'auth-session-smoke-token';
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const bridgeRoot = path.resolve(__dirname, '..');
+
+function wait(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+
+async function findFreePort() {
+    return await new Promise((resolve, reject) => {
+        const server = net.createServer();
+        server.unref();
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            const address = server.address();
+            const port = typeof address === 'object' && address ? address.port : 0;
+            server.close(() => resolve(port));
+        });
+    });
+}
+
+async function fetchJson(url, options = {}) {
+    const response = await fetch(url, {
+        ...options,
+        headers: {
+            ...(options.body ? { 'Content-Type': 'application/json' } : {}),
+            ...(options.token ? { 'X-Bridge-Token': options.token } : {}),
+            ...(options.headers || {})
+        }
+    });
+
+    let payload = null;
+    try {
+        payload = await response.json();
+    } catch {
+        // Ignore non-JSON responses.
+    }
+
+    return {
+        status: response.status,
+        ok: response.ok,
+        payload
+    };
+}
+
+function spawnBridge({ bridgePort, workspacePath, authDataRoot }) {
+    const child = spawn(process.execPath, ['server.js'], {
+        cwd: bridgeRoot,
+        stdio: ['ignore', 'pipe', 'pipe'],
+        windowsHide: true,
+        env: {
+            ...process.env,
+            BRIDGE_PORT: String(bridgePort),
+            BRIDGE_TOKEN,
+            BRIDGE_REQUIRE_TOKEN: '1',
+            WORKSPACE_PATH: workspacePath,
+            MINDEXEC_AUTH_DATA_ROOT: authDataRoot,
+            MINDEXEC_REMOTE_HUB: '0',
+            NO_COLOR: '1'
+        }
+    });
+
+    let stdout = '';
+    let stderr = '';
+    child.stdout.on('data', chunk => {
+        stdout += chunk.toString();
+    });
+    child.stderr.on('data', chunk => {
+        stderr += chunk.toString();
+    });
+
+    const details = () => `stdout=${stdout}\nstderr=${stderr}`;
+    const stop = async () => {
+        if (!child.killed) {
+            child.kill();
+        }
+        await Promise.race([
+            new Promise(resolve => child.once('exit', resolve)),
+            wait(3000)
+        ]);
+    };
+
+    return {
+        child,
+        details,
+        stop
+    };
+}
+
+async function waitForBridge(baseUrl, details) {
+    const startedAt = Date.now();
+    while (Date.now() - startedAt < 30000) {
+        try {
+            const response = await fetchJson(`${baseUrl}/api/status`);
+            if (response.ok && response.payload?.status) {
+                return;
+            }
+        } catch {
+            // Bridge is still starting.
+        }
+        await wait(100);
+    }
+
+    throw new Error(`Timed out waiting for LocalBridge.\n${details()}`);
+}
+
+async function withBridge({ workspacePath, authDataRoot }, action) {
+    const bridgePort = await findFreePort();
+    const bridge = spawnBridge({ bridgePort, workspacePath, authDataRoot });
+    const baseUrl = `http://127.0.0.1:${bridgePort}`;
+    try {
+        await waitForBridge(baseUrl, bridge.details);
+        await action(baseUrl);
+    } finally {
+        await bridge.stop();
+    }
+}
+
+const tempRoot = await mkdtemp(path.join(os.tmpdir(), 'mindexec-auth-session-smoke-'));
+try {
+    const authDataRoot = path.join(tempRoot, 'stable-auth');
+    const workspaceA = path.join(tempRoot, 'workspace-a');
+    const workspaceB = path.join(tempRoot, 'workspace-b');
+    await mkdir(workspaceA, { recursive: true });
+    await mkdir(workspaceB, { recursive: true });
+
+    const sessionPayload = JSON.stringify({
+        access_token: 'access-token-a',
+        refresh_token: 'refresh-token-a',
+        user: {
+            id: 'user-a',
+            email: 'auth-smoke@example.com'
+        }
+    });
+
+    await withBridge({ workspacePath: workspaceA, authDataRoot }, async (baseUrl) => {
+        const unauthorized = await fetchJson(`${baseUrl}/api/auth/session`);
+        assert.equal(unauthorized.status, 401);
+
+        const missing = await fetchJson(`${baseUrl}/api/auth/session`, { token: BRIDGE_TOKEN });
+        assert.equal(missing.status, 404);
+
+        const invalid = await fetchJson(`${baseUrl}/api/auth/session`, {
+            method: 'POST',
+            token: BRIDGE_TOKEN,
+            body: JSON.stringify({ content: 'not-json' })
+        });
+        assert.equal(invalid.status, 400);
+
+        const saved = await fetchJson(`${baseUrl}/api/auth/session`, {
+            method: 'POST',
+            token: BRIDGE_TOKEN,
+            body: JSON.stringify({ content: sessionPayload })
+        });
+        assert.equal(saved.status, 200);
+        assert.equal(saved.payload?.success, true);
+
+        const loaded = await fetchJson(`${baseUrl}/api/auth/session`, { token: BRIDGE_TOKEN });
+        assert.equal(loaded.status, 200);
+        assert.equal(loaded.payload?.content, sessionPayload);
+        assert.equal(loaded.payload?.source, 'stable');
+    });
+
+    await withBridge({ workspacePath: workspaceB, authDataRoot }, async (baseUrl) => {
+        const loaded = await fetchJson(`${baseUrl}/api/auth/session`, { token: BRIDGE_TOKEN });
+        assert.equal(loaded.status, 200);
+        assert.equal(loaded.payload?.content, sessionPayload);
+        assert.equal(loaded.payload?.source, 'stable');
+
+        const deleted = await fetchJson(`${baseUrl}/api/auth/session`, {
+            method: 'DELETE',
+            token: BRIDGE_TOKEN
+        });
+        assert.equal(deleted.status, 200);
+        assert.equal(deleted.payload?.success, true);
+    });
+
+    const legacyPayload = JSON.stringify({
+        access_token: 'legacy-access-token',
+        refresh_token: 'legacy-refresh-token',
+        user: {
+            id: 'legacy-user',
+            email: 'legacy-auth-smoke@example.com'
+        }
+    });
+    const legacyPath = path.join(workspaceB, '.mindexec', 'auth', 'supabase-session.json');
+    await mkdir(path.dirname(legacyPath), { recursive: true });
+    await writeFile(legacyPath, legacyPayload, 'utf8');
+
+    await withBridge({ workspacePath: workspaceB, authDataRoot }, async (baseUrl) => {
+        const migrated = await fetchJson(`${baseUrl}/api/auth/session`, { token: BRIDGE_TOKEN });
+        assert.equal(migrated.status, 200);
+        assert.equal(migrated.payload?.content, legacyPayload);
+        assert.equal(migrated.payload?.source, 'legacy-workspace');
+        assert.equal(migrated.payload?.migrated, true);
+    });
+
+    await withBridge({ workspacePath: workspaceA, authDataRoot }, async (baseUrl) => {
+        const loaded = await fetchJson(`${baseUrl}/api/auth/session`, { token: BRIDGE_TOKEN });
+        assert.equal(loaded.status, 200);
+        assert.equal(loaded.payload?.content, legacyPayload);
+        assert.equal(loaded.payload?.source, 'stable');
+    });
+
+    console.log('Auth session persistence smoke OK');
+} finally {
+    await rm(tempRoot, { recursive: true, force: true });
+}

package/server.js

@@ -424,10 +424,12 @@ let currentBrowserSessionId = null;
 let browserSessionSequence = 0;
 let playwrightModulePromise = null;
 let playwrightBrowserPromise = null;
-const DATA_ROOT_DIRNAME = '.mindexec';
-const LEGACY_MIGRATION_MARKER = '.legacy_migrated_v1.json';
-const DATA_GITIGNORE_FILE = '.gitignore';
-const DATA_GITIGNORE_CONTENT = [
+const DATA_ROOT_DIRNAME = '.mindexec';
+const LEGACY_MIGRATION_MARKER = '.legacy_migrated_v1.json';
+const DATA_GITIGNORE_FILE = '.gitignore';
+const AUTH_DATA_ROOT = resolveAuthDataRoot();
+const AUTH_SESSION_FILE_NAME = 'supabase-session.json';
+const DATA_GITIGNORE_CONTENT = [
     '# MindExec managed data',
     '# Keep boards/ and project.json for shared context by default.',
     '/cache/',
@@ -470,13 +472,150 @@ const PLAYWRIGHT_BROWSER_CANDIDATES = process.platform === 'win32'
             '/snap/bin/chromium'
         ];
 
-function getDataRoot(basePath = workspacePath) {
-    return path.join(basePath, DATA_ROOT_DIRNAME);
-}
-
-function getBoardsPath(basePath = workspacePath) {
-    return path.join(getDataRoot(basePath), 'boards');
-}
+function getDataRoot(basePath = workspacePath) {
+    return path.join(basePath, DATA_ROOT_DIRNAME);
+}
+
+function resolveAuthDataRoot() {
+    const configuredRoot = String(process.env.MINDEXEC_AUTH_DATA_ROOT || '').trim();
+    if (configuredRoot) {
+        return path.resolve(configuredRoot);
+    }
+
+    return path.join(os.homedir(), '.mindexec', 'auth');
+}
+
+function getStableSupabaseSessionPath() {
+    return path.join(AUTH_DATA_ROOT, AUTH_SESSION_FILE_NAME);
+}
+
+function getLegacyWorkspaceSupabaseSessionPath(basePath = workspacePath) {
+    return path.join(getDataRoot(basePath), 'auth', AUTH_SESSION_FILE_NAME);
+}
+
+function getLegacySupabaseSessionCandidatePaths() {
+    const candidates = [
+        getLegacyWorkspaceSupabaseSessionPath(workspacePath),
+        getLegacyWorkspaceSupabaseSessionPath(DEFAULT_WORKSPACE)
+    ];
+
+    return Array.from(new Set(candidates.map(candidate => path.resolve(candidate))));
+}
+
+async function tryReadTextFile(filePath) {
+    try {
+        return await fs.readFile(filePath, 'utf8');
+    } catch (err) {
+        if (err?.code === 'ENOENT') {
+            return null;
+        }
+
+        throw err;
+    }
+}
+
+async function writePrivateTextFile(fullPath, content) {
+    await writeFileAtomically(fullPath, content, 'utf8');
+    try {
+        await fs.chmod(fullPath, 0o600);
+    } catch {
+        // Best effort only. Windows ACLs do not map cleanly to chmod.
+    }
+}
+
+function validateAuthSessionPayload(content) {
+    const payload = String(content || '');
+    if (!payload.trim()) {
+        const err = new Error('Session payload is required');
+        err.statusCode = 400;
+        throw err;
+    }
+
+    if (Buffer.byteLength(payload, 'utf8') > 512 * 1024) {
+        const err = new Error('Session payload is too large');
+        err.statusCode = 413;
+        throw err;
+    }
+
+    try {
+        JSON.parse(payload);
+    } catch {
+        const err = new Error('Session payload must be valid JSON');
+        err.statusCode = 400;
+        throw err;
+    }
+
+    return payload;
+}
+
+async function readStableAuthSessionPayload() {
+    const stablePath = getStableSupabaseSessionPath();
+    const stablePayload = await tryReadTextFile(stablePath);
+    if (stablePayload && stablePayload.trim()) {
+        return {
+            found: true,
+            content: stablePayload,
+            source: 'stable',
+            path: stablePath,
+            migrated: false
+        };
+    }
+
+    for (const legacyPath of getLegacySupabaseSessionCandidatePaths()) {
+        const legacyPayload = await tryReadTextFile(legacyPath);
+        if (!legacyPayload || !legacyPayload.trim()) {
+            continue;
+        }
+
+        await writePrivateTextFile(stablePath, legacyPayload);
+        return {
+            found: true,
+            content: legacyPayload,
+            source: 'legacy-workspace',
+            path: stablePath,
+            migrated: true,
+            legacyPath
+        };
+    }
+
+    return {
+        found: false,
+        content: null,
+        source: 'none',
+        path: stablePath,
+        migrated: false
+    };
+}
+
+async function writeStableAuthSessionPayload(content) {
+    const payload = validateAuthSessionPayload(content);
+    const stablePath = getStableSupabaseSessionPath();
+    await writePrivateTextFile(stablePath, payload);
+    return stablePath;
+}
+
+async function deleteStableAuthSessionPayload() {
+    const paths = [
+        getStableSupabaseSessionPath(),
+        ...getLegacySupabaseSessionCandidatePaths()
+    ];
+
+    const deleted = [];
+    for (const sessionPath of Array.from(new Set(paths.map(candidate => path.resolve(candidate))))) {
+        try {
+            await fs.rm(sessionPath, { force: true });
+            deleted.push(sessionPath);
+        } catch {
+            // Clearing auth should be best-effort across legacy mirrors.
+        }
+    }
+
+    return deleted;
+}
+
+function getBoardsPath(basePath = workspacePath) {
+    return path.join(getDataRoot(basePath), 'boards');
+}
 
 function getAssetsPath(basePath = workspacePath) {
     return path.join(getDataRoot(basePath), 'assets');
@@ -1745,6 +1884,9 @@ const PROTECTED_BRIDGE_ROUTES = [
     { method: 'POST', exact: '/api/file/delete' },
     { method: 'POST', exact: '/api/file/copy' },
     { method: 'POST', exact: '/api/file/move' },
+    { method: 'GET', exact: '/api/auth/session' },
+    { method: 'POST', exact: '/api/auth/session' },
+    { method: 'DELETE', exact: '/api/auth/session' },
     { method: 'POST', exact: '/api/dir/create' },
     { method: 'POST', exact: '/api/dir/delete' },
     { method: 'POST', prefix: '/api/assets/' },
@@ -1869,6 +2011,66 @@ app.use((req, res, next) => {
     requireBridgeToken(req, res, next);
 });
 
+app.get('/api/auth/session', async (req, res) => {
+    try {
+        const result = await readStableAuthSessionPayload();
+        if (!result.found) {
+            return res.status(404).json({
+                success: false,
+                found: false
+            });
+        }
+
+        res.json({
+            success: true,
+            found: true,
+            content: result.content,
+            source: result.source,
+            migrated: result.migrated === true
+        });
+    } catch (err) {
+        logError('auth', 'failed to read persisted auth session.', err);
+        const statusCode = Number(err?.statusCode || 500);
+        res.status(statusCode >= 400 && statusCode < 600 ? statusCode : 500).json({
+            success: false,
+            error: err?.message || 'Failed to read auth session'
+        });
+    }
+});
+
+app.post('/api/auth/session', async (req, res) => {
+    try {
+        const content = req.body?.content;
+        await writeStableAuthSessionPayload(content);
+        res.json({
+            success: true
+        });
+    } catch (err) {
+        logError('auth', 'failed to persist auth session.', err);
+        const statusCode = Number(err?.statusCode || 500);
+        res.status(statusCode >= 400 && statusCode < 600 ? statusCode : 500).json({
+            success: false,
+            error: err?.message || 'Failed to persist auth session'
+        });
+    }
+});
+
+app.delete('/api/auth/session', async (req, res) => {
+    try {
+        await deleteStableAuthSessionPayload();
+        res.json({
+            success: true
+        });
+    } catch (err) {
+        logError('auth', 'failed to clear auth session.', err);
+        const statusCode = Number(err?.statusCode || 500);
+        res.status(statusCode >= 400 && statusCode < 600 ? statusCode : 500).json({
+            success: false,
+            error: err?.message || 'Failed to clear auth session'
+        });
+    }
+});
+
 app.post('/api/local-files/register', async (req, res) => {
     try {
         const body = req.body || {};

package/wwwroot/_content/MindExecution.Shared/js/mind-map-css3d-manager.js

@@ -12810,6 +12810,34 @@
         return button;
     }
 
+    function selectRemoteFleetMonitorNodeFromPointer(nodeId, event) {
+        const normalizedId = String(nodeId || '').trim();
+        if (!normalizedId || event?.button !== 0) {
+            return false;
+        }
+
+        if (_module?.selectedNodeIdJs === normalizedId) {
+            window.MindMapMenuManager?.showMenu?.(normalizedId);
+            return true;
+        }
+
+        const selected = window.MindMapInteractions?.selectNodeById?.(_module, normalizedId, {
+            notifyBlazor: true,
+            bringToFront: true,
+            showMenu: true
+        }) === true;
+
+        if (selected) {
+            _module._forceUpdateFrames = Math.max(Number(_module._forceUpdateFrames || 0), 2);
+            window.RuntimeTrace?.emit?.('remote.monitor.nodeSelected', {
+                nodeId: normalizedId,
+                source: 'remote-monitor-pointer'
+            });
+        }
+
+        return selected;
+    }
+
     function attachRemoteFleetTitleActions(bodyView, hostButton, hostState) {
         const container = bodyView?.closest?.('.map-node-remote-fleet');
         const header = container?.querySelector?.('.template-card__header')
@@ -15060,7 +15088,19 @@
         bodyView.dataset.src = `remote-fleet:${refreshedAt}:${devices.length}:${connected}`;
         bodyView.dataset.remoteFleetHostState = hostTargetState;
         bodyView.dataset.remoteFleetDensity = densityState;
+        bodyView.dataset.remoteFleetMonitorNodeId = nodeId;
         bodyView.classList.add('map-node-remote-fleet__body');
+        if (bodyView._remoteFleetNodeSelectionBound !== true) {
+            bodyView._remoteFleetNodeSelectionBound = true;
+            bodyView.addEventListener('mousedown', event => {
+                const controlTarget = event.target?.closest?.('button, input, textarea, select, [contenteditable="true"]');
+                if (controlTarget) {
+                    return;
+                }
+
+                selectRemoteFleetMonitorNodeFromPointer(bodyView.dataset.remoteFleetMonitorNodeId, event);
+            }, true);
+        }
         bodyView.innerHTML = '';
         bodyView.style.cssText = `
             flex: 1 1 auto;

package/wwwroot/_content/MindExecution.Shared/js/mind-map-interactions.js

@@ -7589,6 +7589,19 @@ window.MindMapInteractions = (function () {
         onResize: onResize,
         syncViewportMetrics: syncViewportMetrics,
         // ▼▼▼ [New] Expose selectNode and startEditingNode ▼▼▼
+        selectNodeById: function (module, nodeId, options = {}) {
+            const normalizedId = String(nodeId || '').trim();
+            if (!normalizedId || !module?.nodeObjectsById?.has?.(normalizedId)) {
+                return false;
+            }
+
+            finalizeSingleSelection(module, normalizedId, {
+                notifyBlazor: options?.notifyBlazor !== false,
+                bringToFront: options?.bringToFront !== false,
+                showMenu: options?.showMenu !== false
+            });
+            return true;
+        },
         selectNode: function (module, nodeObject) {
             const nodeId = nodeObject.userData?.nodeId;
             if (nodeId) {

package/wwwroot/_content/MindExecution.Shared/js/mind-map-lod-renderer.js

@@ -366,8 +366,7 @@
             contentType === 'memo' ||
             contentType === 'markdown' ||
             contentType === 'code' ||
-            isAgentLikeLodNode(model) ||
-            isTemplateLauncherLodProxyModel(model);
+            isAgentLikeLodNode(model);
     }
 
     function isTemplateLauncherModel(model) {
@@ -380,10 +379,6 @@
             semanticType === REMOTE_FLEET_DEVICE_SEMANTIC_TYPE;
     }
 
-    function isTemplateLauncherLodProxyModel(model) {
-        return isTemplateLauncherModel(model) && !isRemoteFleetNodeModel(model);
-    }
-
     function isCssMediaFallbackModel(model) {
         const contentType = getNodeContentType(model);
         return contentType === 'image' ||
@@ -940,7 +935,7 @@
             this._consoleNodeIdToIndex = new Map();
             this._lodConsoleProxyNodeIds = new Set();
             this._lodImageCssFallbackNodeIds = new Set();
-            this._lodRemoteFleetCssNodeIds = new Set();
+            this._lodTemplateCssNodeIds = new Set();
             this._lodCleanupPending = true;
             this._lodCleanupDone = false;
             this._lodVisualEpoch = 0;
@@ -4242,7 +4237,7 @@
 
                     const entry = nodeObjectsById.get(nodeId);
                     if (!entry?.cssObject || !supportsCss3dNodeModel(entry.model)) continue;
-                    if (isRemoteFleetNodeModel(entry.model)) continue;
+                    if (isTemplateLauncherModel(entry.model)) continue;
                     if (shouldShowAgentConsoleInLodBand(lodBand) && hasAgentConsoleOpenForEntry(entry)) continue;
 
                     nextWarmIds.add(nodeId);
@@ -4272,7 +4267,7 @@
                 const nodeId = warmIds[i];
                 if (keepAttachedIds?.has(nodeId)) continue;
                 const entry = nodeObjectsById.get(nodeId);
-                if (isRemoteFleetNodeModel(entry?.model)) continue;
+                if (isTemplateLauncherModel(entry?.model)) continue;
                 this._detachCss3dObject(entry);
             }
         }
@@ -4407,31 +4402,19 @@
             for (const entry of nodeObjectsById.values()) {
                 if (!entry || !isTemplateLauncherModel(entry.model)) continue;
 
-                if (isRemoteFleetNodeModel(entry.model)) {
-                    const nodeId = String(entry.model?.id || entry.model?.Id || entry.glObject?.userData?.nodeId || '').trim();
-                    if (isCss3dRendererEnabled(module)) {
-                        if (this.isInLODMode === true && nodeId) {
-                            this._lodRemoteFleetCssNodeIds.add(nodeId);
-                        } else if (nodeId) {
-                            this._lodRemoteFleetCssNodeIds.delete(nodeId);
-                        }
-                        this._showNodeCss3d(entry, module);
-                    } else {
-                        if (nodeId) {
-                            this._lodRemoteFleetCssNodeIds.delete(nodeId);
-                        }
-                        this._hideNodeCss3d(entry);
-                    }
-                    continue;
-                }
-
-                if (this.isInLODMode === true) {
-                    if (entry.cssObject) {
-                        this._hideNodeCss3d(entry);
+                const nodeId = String(entry.model?.id || entry.model?.Id || entry.glObject?.userData?.nodeId || '').trim();
+                if (isCss3dRendererEnabled(module)) {
+                    if (this.isInLODMode === true && nodeId) {
+                        this._lodTemplateCssNodeIds.add(nodeId);
+                    } else if (nodeId) {
+                        this._lodTemplateCssNodeIds.delete(nodeId);
                     }
-                    this._hideTextLodFullVisual(entry);
-                } else if (isCss3dRendererEnabled(module)) {
                     this._showNodeCss3d(entry, module);
+                } else {
+                    if (nodeId) {
+                        this._lodTemplateCssNodeIds.delete(nodeId);
+                    }
+                    this._hideNodeCss3d(entry);
                 }
             }
         }
@@ -4651,7 +4634,7 @@
             if (nodeId) {
                 this._nearCssVisibleIds.delete(nodeId);
                 this._lodImageCssFallbackNodeIds.delete(nodeId);
-                this._lodRemoteFleetCssNodeIds.delete(nodeId);
+                this._lodTemplateCssNodeIds.delete(nodeId);
             }
             if (this._module) {
                 this._module._css3dVisualChangedThisFrame = true;
@@ -4886,24 +4869,24 @@
         shouldRenderCss3dInLod() {
             return this.isInLODMode === true &&
                 (this._getActiveCssMediaLodFallbackCount(this._module) > 0 ||
-                    this._getActiveRemoteFleetCssLodCount(this._module) > 0);
+                    this._getActiveTemplateCssLodCount(this._module) > 0);
         }
 
-        _getActiveRemoteFleetCssLodCount(module = this._module) {
-            if (this.isInLODMode !== true || !this._lodRemoteFleetCssNodeIds || this._lodRemoteFleetCssNodeIds.size === 0) {
+        _getActiveTemplateCssLodCount(module = this._module) {
+            if (this.isInLODMode !== true || !this._lodTemplateCssNodeIds || this._lodTemplateCssNodeIds.size === 0) {
                 return 0;
             }
 
             const nodeObjectsById = module?.nodeObjectsById || this._module?.nodeObjectsById || null;
             if (!nodeObjectsById) {
-                return this._lodRemoteFleetCssNodeIds.size;
+                return this._lodTemplateCssNodeIds.size;
             }
 
             let count = 0;
-            for (const nodeId of Array.from(this._lodRemoteFleetCssNodeIds)) {
+            for (const nodeId of Array.from(this._lodTemplateCssNodeIds)) {
                 const entry = nodeObjectsById.get(nodeId) || null;
-                if (!entry || !isRemoteFleetNodeModel(entry.model)) {
-                    this._lodRemoteFleetCssNodeIds.delete(nodeId);
+                if (!entry || !isTemplateLauncherModel(entry.model)) {
+                    this._lodTemplateCssNodeIds.delete(nodeId);
                     continue;
                 }
 
@@ -6054,13 +6037,13 @@
                             }
                         }
                     }
-                    const shouldSyncRemoteFleetCss3d =
+                    const shouldSyncTemplateCss3d =
                         bandChangedWithoutModeSwitch === true ||
                         this._instancesDirty === true ||
                         this._isNodeArrayDirty === true ||
-                        (this._lodRemoteFleetCssNodeIds?.size > 0 &&
-                            this._getActiveRemoteFleetCssLodCount(module) <= 0);
-                    if (shouldSyncRemoteFleetCss3d) {
+                        (this._lodTemplateCssNodeIds?.size > 0 &&
+                            this._getActiveTemplateCssLodCount(module) <= 0);
+                    if (shouldSyncTemplateCss3d) {
                         this._syncTemplateLauncherCss3dForLod(nodeObjectsById, module);
                     }
                     this._setInstancedAgentBadgeVisibility(lodBand === 'MID');
@@ -9213,7 +9196,7 @@
             this._nearCssVisibleIds.clear();
             this._lodConsoleProxyNodeIds.clear();
             this._lodImageCssFallbackNodeIds.clear();
-            this._lodRemoteFleetCssNodeIds.clear();
+            this._lodTemplateCssNodeIds.clear();
             this._clearCss3dQueue();
             this._clearCss3dPrewarmQueue();
             this._css3dProcessing = false;
@@ -9413,7 +9396,7 @@
                 this._fullResImageVisualIds?.delete?.(nodeId);
                 this._lodConsoleProxyNodeIds?.delete?.(nodeId);
                 this._lodImageCssFallbackNodeIds?.delete?.(nodeId);
-                this._lodRemoteFleetCssNodeIds?.delete?.(nodeId);
+                this._lodTemplateCssNodeIds?.delete?.(nodeId);
                 removedAny = true;
             }
 

package/wwwroot/_framework/blazor.boot.json

@@ -1,7 +1,7 @@
 {
   "mainAssemblyName": "MindExecution.Web",
   "resources": {
-    "hash": "sha256-4VaftOESBnQE+Q1Rm+Hxk+BcDEAXOHXNFE6dpmlgyyg=",
+    "hash": "sha256-UYjWF1Jxof/7OQBXUWs4OE4sIOguU3A5k8CVb4Nnh/8=",
     "fingerprinting": {
       "Google.Protobuf.9h59ukbel7.dll": "Google.Protobuf.dll",
       "Markdig.d1j7v41cl1.dll": "Markdig.dll",
@@ -110,7 +110,7 @@
       "System.Security.Cryptography.qqgybpoucx.dll": "System.Security.Cryptography.dll",
       "System.Text.Encoding.Extensions.9t3hs6kyll.dll": "System.Text.Encoding.Extensions.dll",
       "System.Text.Encodings.Web.wftjfh2crk.dll": "System.Text.Encodings.Web.dll",
-      "System.Text.Json.4s25e3op6i.dll": "System.Text.Json.dll",
+      "System.Text.Json.0v0qgmri0w.dll": "System.Text.Json.dll",
       "System.Text.RegularExpressions.cvkox11l6l.dll": "System.Text.RegularExpressions.dll",
       "System.Threading.Channels.419493szqu.dll": "System.Threading.Channels.dll",
       "System.Threading.Thread.xhmys87xh5.dll": "System.Threading.Thread.dll",
@@ -123,16 +123,16 @@
       "System.brmz7yk5qh.dll": "System.dll",
       "netstandard.yvr3prsx0x.dll": "netstandard.dll",
       "System.Private.CoreLib.c1dbswx1b2.dll": "System.Private.CoreLib.dll",
-      "MindExecution.Core.csfu1xtj3l.dll": "MindExecution.Core.dll",
-      "MindExecution.Kernel.mdo1lzjvvp.dll": "MindExecution.Kernel.dll",
-      "MindExecution.Plugins.Admin.5fctwf65dx.dll": "MindExecution.Plugins.Admin.dll",
-      "MindExecution.Plugins.Business.nwivpk9djf.dll": "MindExecution.Plugins.Business.dll",
-      "MindExecution.Plugins.Concept.urf2igpscm.dll": "MindExecution.Plugins.Concept.dll",
-      "MindExecution.Plugins.Directory.jnzcrwl049.dll": "MindExecution.Plugins.Directory.dll",
-      "MindExecution.Plugins.PlanMaster.88ikwl696h.dll": "MindExecution.Plugins.PlanMaster.dll",
-      "MindExecution.Plugins.YouTube.wf48rh6hfh.dll": "MindExecution.Plugins.YouTube.dll",
-      "MindExecution.Shared.6aa15yqsqi.dll": "MindExecution.Shared.dll",
-      "MindExecution.Web.8gp839zb62.dll": "MindExecution.Web.dll",
+      "MindExecution.Core.qprj2wqc9a.dll": "MindExecution.Core.dll",
+      "MindExecution.Kernel.ksznt6ppyj.dll": "MindExecution.Kernel.dll",
+      "MindExecution.Plugins.Admin.ziclnsvcvi.dll": "MindExecution.Plugins.Admin.dll",
+      "MindExecution.Plugins.Business.q32f5kgky1.dll": "MindExecution.Plugins.Business.dll",
+      "MindExecution.Plugins.Concept.vrmey2vv08.dll": "MindExecution.Plugins.Concept.dll",
+      "MindExecution.Plugins.Directory.3pet73jp0m.dll": "MindExecution.Plugins.Directory.dll",
+      "MindExecution.Plugins.PlanMaster.0pdulhmw15.dll": "MindExecution.Plugins.PlanMaster.dll",
+      "MindExecution.Plugins.YouTube.ye6w0jn4v9.dll": "MindExecution.Plugins.YouTube.dll",
+      "MindExecution.Shared.oxf5h3gtl1.dll": "MindExecution.Shared.dll",
+      "MindExecution.Web.s43m8j3bg0.dll": "MindExecution.Web.dll",
       "dotnet.js": "dotnet.js",
       "dotnet.native.qc8g39g30v.js": "dotnet.native.js",
       "dotnet.native.boem75ye5i.wasm": "dotnet.native.wasm",
@@ -266,7 +266,7 @@
       "System.Security.Cryptography.qqgybpoucx.dll": "sha256-vofefYZi5S+7Rg61EmobeWUJQoIefwuF7PwjL7nrr+c=",
       "System.Text.Encoding.Extensions.9t3hs6kyll.dll": "sha256-c54L8A/dPQGmGXDWsmLgXCcq34jyZ/z2QWBpZogPwJs=",
       "System.Text.Encodings.Web.wftjfh2crk.dll": "sha256-NHGoSuaQLhC8vk+biDWqKZAlhpNTJdJwilcCbgbr8as=",
-      "System.Text.Json.4s25e3op6i.dll": "sha256-VBeG+FY8NhlMOdQOTUozG5Zn+jrC3jPw6TfF0idE0RA=",
+      "System.Text.Json.0v0qgmri0w.dll": "sha256-3N6tKQuQtSdGn3qtvUdWOhhUlCzccYdgA25P3NFSLKI=",
       "System.Text.RegularExpressions.cvkox11l6l.dll": "sha256-WMuhtIW2iGfPEIJN2je+ijXB+VM7uodRrUIdvsXl4Q4=",
       "System.Threading.Channels.419493szqu.dll": "sha256-uBskY7pwTdtCHuVyY04ihoSM1DZ2QXqthW9t/BCLBIk=",
       "System.Threading.Thread.xhmys87xh5.dll": "sha256-ZRIAn9jRxhpyGpYyBH+MJbsb2SxgzNESn5/JGjqIVkY=",
@@ -278,18 +278,18 @@
       "System.Xml.XDocument.sn51jas17n.dll": "sha256-GNI2kFgFmPTwzuzwUn8gxK+AzGLUWRJFdg9JzIbrybQ=",
       "System.brmz7yk5qh.dll": "sha256-CfM2miyj1KHApFmqMdLYWio3S/jrdON2pW9Xr2nTwlo=",
       "netstandard.yvr3prsx0x.dll": "sha256-EksNn8Luo4bOWqJ6X7dIe9qG9oOqwOVzjH2xYyMNi+E=",
-      "MindExecution.Core.csfu1xtj3l.dll": "sha256-lP9GUQU4xFLsUU4IOwpUjt09mQO5M/bgLAAS8UnjLMs=",
-      "MindExecution.Kernel.mdo1lzjvvp.dll": "sha256-Vj21M+Th5MKfLG5Hvg6/uwlDDdwAJwzeIxfWsK9gYhM=",
-      "MindExecution.Plugins.Concept.urf2igpscm.dll": "sha256-Wt70v+ewfVpQNKSMo/aRLfM1lB63lFl/gc8o3tJRsUE=",
-      "MindExecution.Plugins.PlanMaster.88ikwl696h.dll": "sha256-uDJJpu3uYLPDj7P/pcAZfWQcSrwlMeJTE10hFgVqNrM=",
-      "MindExecution.Shared.6aa15yqsqi.dll": "sha256-TneDrusLNLsSxPIeMiAAmkornUdHBE4lKZHTlBxG9mI=",
-      "MindExecution.Web.8gp839zb62.dll": "sha256-KDaD6cqDNMvAoTAc6wfsq27l4tV/+tP3sOYx6r//KxA="
+      "MindExecution.Core.qprj2wqc9a.dll": "sha256-DnXZk8i9ukptBPjChSubsbWJIarYNileavZA4hihKJY=",
+      "MindExecution.Kernel.ksznt6ppyj.dll": "sha256-DAZ9Pzryh17vEhPOjVeFe+eCs/lgH5S0vxP9WFiTI2U=",
+      "MindExecution.Plugins.Concept.vrmey2vv08.dll": "sha256-y8SD/3+q7/5hBWFrizZ5w5QKJP8Nfz0NpV0XrT1eXxQ=",
+      "MindExecution.Plugins.PlanMaster.0pdulhmw15.dll": "sha256-LObinwzmz1i8etnhUMWcvdn6oZ7MSGkqfZnIcyakEFk=",
+      "MindExecution.Shared.oxf5h3gtl1.dll": "sha256-7Lze2YO8XmpwxtjLCUp/J9HND7AyKJyORksP8+XAua0=",
+      "MindExecution.Web.s43m8j3bg0.dll": "sha256-pCKvIt9SzRGSvNRSw/7lk7eG3RyzGrTZNolf1tx5T6A="
     },
     "lazyAssembly": {
-      "MindExecution.Plugins.Admin.5fctwf65dx.dll": "sha256-37+Egd35menNv18hEZ64qjiu0x1r+wFOuO5zDiOGfug=",
-      "MindExecution.Plugins.Business.nwivpk9djf.dll": "sha256-iTV0NyCB7fnU+l8brClBd+KYnBDw628yHCwoRrQdTWE=",
-      "MindExecution.Plugins.Directory.jnzcrwl049.dll": "sha256-fwo2q8bt+WNuVUMnJCOcfLAy151cjLZCQa0Z+iKdsRs=",
-      "MindExecution.Plugins.YouTube.wf48rh6hfh.dll": "sha256-hLixuuQuhimSYlTFe2yf75UnrSRfFv0PrkKxMdHtN0c="
+      "MindExecution.Plugins.Admin.ziclnsvcvi.dll": "sha256-VXbkR7uhooOS62ea02JNcfj2EpKxtIF4ZYRSvdO74kM=",
+      "MindExecution.Plugins.Business.q32f5kgky1.dll": "sha256-Zq3jwQKoz28lRtaqbPJgZenoBwrknjYBccYJhLOhYd4=",
+      "MindExecution.Plugins.Directory.3pet73jp0m.dll": "sha256-p7KSnHrHR4xFgP4WwKX0edQZgAhSsWqOcNRq4/oiH1I=",
+      "MindExecution.Plugins.YouTube.ye6w0jn4v9.dll": "sha256-eoQHQy2IbcBhJtbRR5HShNdMp7DJ4xOsFdwryQNoQrI="
     }
   },
   "cacheBootResources": true,

package/wwwroot/index.html

@@ -7,8 +7,8 @@
     <title>MindExec | Run your ideas as AI task graphs</title>
     <meta name="description" content="MindExec is an AI execution canvas for solo builders, researchers, developers, and creators. Start with free browser tools, then move serious work into saved MindCanvas projects." />
     <base href="/" />
-    <link rel="stylesheet" href="_content/MindExecution.Shared/css/app.css?v=20260614-cloud-snapshot-rpc-v545" />
-    <link rel="stylesheet" href="_content/MindExecution.Shared/css/mind-map-overrides.css?v=20260614-cloud-snapshot-rpc-v545" />
+    <link rel="stylesheet" href="_content/MindExecution.Shared/css/app.css?v=20260615-auth-session-v553" />
+    <link rel="stylesheet" href="_content/MindExecution.Shared/css/mind-map-overrides.css?v=20260615-auth-session-v553" />
     <!-- ?쇄뼹??Font Awesome (local) ?쇄뼹??-->
     <link rel="stylesheet" href="_content/MindExecution.Shared/lib/font-awesome/css/all.min.css" />
     <!-- ?꿎뼯??-->
@@ -579,7 +579,7 @@
             }
 
             const base = '_content/MindExecution.Shared/js/';
-        const scriptVersion = '20260614-cloud-snapshot-rpc-v545';
+        const scriptVersion = '20260615-auth-session-v553';
             const scriptUrl = (script) => `${base}${script}?v=${scriptVersion}`;
             console.log(`[Script Loader] Shared JS version: ${scriptVersion}`);
             const criticalScripts = [

package/wwwroot/service-worker-assets.js

@@ -1,5 +1,5 @@
 self.assetsManifest = {
-    "version":  "fenz19NA",
+    "version":  "mPvmdx5y",
     "assets":  [
                    {
                        "hash":  "sha256-+CSYMcqLNTsq3VnH11jgYyOCCdxvHzL74CBmo4sCmMU=",
@@ -86,7 +86,7 @@
                        "url":  "_content/MindExecution.Shared/js/mind-map-core.js.backup"
                    },
                    {
-                       "hash":  "sha256-hzl6gNvjb9faAA2tUeCfriNvdohhGaDtasnYOCMum7E=",
+                       "hash":  "sha256-C/+w78To8XgmLIpNeOK3HtqkdKCQKklm792P0hSCaMk=",
                        "url":  "_content/MindExecution.Shared/js/mind-map-css3d-manager.js"
                    },
                    {
@@ -106,7 +106,7 @@
                        "url":  "_content/MindExecution.Shared/js/mind-map-glow-shader.js"
                    },
                    {
-                       "hash":  "sha256-nseRIuaG6io+m/7GgaLuIS4srEQZYhVv8SQB2Z9aiF4=",
+                       "hash":  "sha256-QJh7a93uHYeGLXH8R87u9/oky9uJLW2p6eSMODlGjY0=",
                        "url":  "_content/MindExecution.Shared/js/mind-map-interactions.js"
                    },
                    {
@@ -114,7 +114,7 @@
                        "url":  "_content/MindExecution.Shared/js/mind-map-lod-plan-worker.js"
                    },
                    {
-                       "hash":  "sha256-XwNOU+9TwMGIuKGjkijfVM68KlLN7k0fUYB/aInPg0k=",
+                       "hash":  "sha256-NTCDYnA/mG2tplidYmMv50OhHhdXjP985NlsjsyQ38g=",
                        "url":  "_content/MindExecution.Shared/js/mind-map-lod-renderer.js"
                    },
                    {
@@ -410,44 +410,44 @@
                        "url":  "_framework/MimeMapping.og9ys58ylm.dll"
                    },
                    {
-                       "hash":  "sha256-lP9GUQU4xFLsUU4IOwpUjt09mQO5M/bgLAAS8UnjLMs=",
-                       "url":  "_framework/MindExecution.Core.csfu1xtj3l.dll"
+                       "hash":  "sha256-DnXZk8i9ukptBPjChSubsbWJIarYNileavZA4hihKJY=",
+                       "url":  "_framework/MindExecution.Core.qprj2wqc9a.dll"
                    },
                    {
-                       "hash":  "sha256-Vj21M+Th5MKfLG5Hvg6/uwlDDdwAJwzeIxfWsK9gYhM=",
-                       "url":  "_framework/MindExecution.Kernel.mdo1lzjvvp.dll"
+                       "hash":  "sha256-DAZ9Pzryh17vEhPOjVeFe+eCs/lgH5S0vxP9WFiTI2U=",
+                       "url":  "_framework/MindExecution.Kernel.ksznt6ppyj.dll"
                    },
                    {
-                       "hash":  "sha256-37+Egd35menNv18hEZ64qjiu0x1r+wFOuO5zDiOGfug=",
-                       "url":  "_framework/MindExecution.Plugins.Admin.5fctwf65dx.dll"
+                       "hash":  "sha256-VXbkR7uhooOS62ea02JNcfj2EpKxtIF4ZYRSvdO74kM=",
+                       "url":  "_framework/MindExecution.Plugins.Admin.ziclnsvcvi.dll"
                    },
                    {
-                       "hash":  "sha256-iTV0NyCB7fnU+l8brClBd+KYnBDw628yHCwoRrQdTWE=",
-                       "url":  "_framework/MindExecution.Plugins.Business.nwivpk9djf.dll"
+                       "hash":  "sha256-Zq3jwQKoz28lRtaqbPJgZenoBwrknjYBccYJhLOhYd4=",
+                       "url":  "_framework/MindExecution.Plugins.Business.q32f5kgky1.dll"
                    },
                    {
-                       "hash":  "sha256-Wt70v+ewfVpQNKSMo/aRLfM1lB63lFl/gc8o3tJRsUE=",
-                       "url":  "_framework/MindExecution.Plugins.Concept.urf2igpscm.dll"
+                       "hash":  "sha256-y8SD/3+q7/5hBWFrizZ5w5QKJP8Nfz0NpV0XrT1eXxQ=",
+                       "url":  "_framework/MindExecution.Plugins.Concept.vrmey2vv08.dll"
                    },
                    {
-                       "hash":  "sha256-fwo2q8bt+WNuVUMnJCOcfLAy151cjLZCQa0Z+iKdsRs=",
-                       "url":  "_framework/MindExecution.Plugins.Directory.jnzcrwl049.dll"
+                       "hash":  "sha256-p7KSnHrHR4xFgP4WwKX0edQZgAhSsWqOcNRq4/oiH1I=",
+                       "url":  "_framework/MindExecution.Plugins.Directory.3pet73jp0m.dll"
                    },
                    {
-                       "hash":  "sha256-uDJJpu3uYLPDj7P/pcAZfWQcSrwlMeJTE10hFgVqNrM=",
-                       "url":  "_framework/MindExecution.Plugins.PlanMaster.88ikwl696h.dll"
+                       "hash":  "sha256-LObinwzmz1i8etnhUMWcvdn6oZ7MSGkqfZnIcyakEFk=",
+                       "url":  "_framework/MindExecution.Plugins.PlanMaster.0pdulhmw15.dll"
                    },
                    {
-                       "hash":  "sha256-hLixuuQuhimSYlTFe2yf75UnrSRfFv0PrkKxMdHtN0c=",
-                       "url":  "_framework/MindExecution.Plugins.YouTube.wf48rh6hfh.dll"
+                       "hash":  "sha256-eoQHQy2IbcBhJtbRR5HShNdMp7DJ4xOsFdwryQNoQrI=",
+                       "url":  "_framework/MindExecution.Plugins.YouTube.ye6w0jn4v9.dll"
                    },
                    {
-                       "hash":  "sha256-TneDrusLNLsSxPIeMiAAmkornUdHBE4lKZHTlBxG9mI=",
-                       "url":  "_framework/MindExecution.Shared.6aa15yqsqi.dll"
+                       "hash":  "sha256-7Lze2YO8XmpwxtjLCUp/J9HND7AyKJyORksP8+XAua0=",
+                       "url":  "_framework/MindExecution.Shared.oxf5h3gtl1.dll"
                    },
                    {
-                       "hash":  "sha256-KDaD6cqDNMvAoTAc6wfsq27l4tV/+tP3sOYx6r//KxA=",
-                       "url":  "_framework/MindExecution.Web.8gp839zb62.dll"
+                       "hash":  "sha256-pCKvIt9SzRGSvNRSw/7lk7eG3RyzGrTZNolf1tx5T6A=",
+                       "url":  "_framework/MindExecution.Web.s43m8j3bg0.dll"
                    },
                    {
                        "hash":  "sha256-IsZJ91/OW+fHzNqIgEc7Y072ns8z9dGritiSyvR9Wgc=",
@@ -722,8 +722,8 @@
                        "url":  "_framework/System.Text.Encodings.Web.wftjfh2crk.dll"
                    },
                    {
-                       "hash":  "sha256-VBeG+FY8NhlMOdQOTUozG5Zn+jrC3jPw6TfF0idE0RA=",
-                       "url":  "_framework/System.Text.Json.4s25e3op6i.dll"
+                       "hash":  "sha256-3N6tKQuQtSdGn3qtvUdWOhhUlCzccYdgA25P3NFSLKI=",
+                       "url":  "_framework/System.Text.Json.0v0qgmri0w.dll"
                    },
                    {
                        "hash":  "sha256-WMuhtIW2iGfPEIJN2je+ijXB+VM7uodRrUIdvsXl4Q4=",
@@ -770,7 +770,7 @@
                        "url":  "_framework/Websocket.Client.vapounvmnl.dll"
                    },
                    {
-                       "hash":  "sha256-wQvF4BNyeJqPVcMEHfyJfBzt/cPWl4IlZ5aq0sIaI+A=",
+                       "hash":  "sha256-nFSI4H6aGg61G8/I7AXIvRFAlfAVhpij+EjRsJ4tctg=",
                        "url":  "_framework/blazor.boot.json"
                    },
                    {
@@ -834,7 +834,7 @@
                        "url":  "image-manifest.json"
                    },
                    {
-                       "hash":  "sha256-6gWdXbSErtDsra/qSzpM3jZXQ5z+Ug6S53/VkuNS9uU=",
+                       "hash":  "sha256-voojFCn8RinDrshRS7nUvpusiYKr/QFSZS0h4auGgOM=",
                        "url":  "index.html"
                    },
                    {

package/wwwroot/service-worker.js

@@ -1,4 +1,4 @@
-/* Manifest version: fenz19NA */
+/* Manifest version: mPvmdx5y */
 // Hosted deployments should prefer the network over stale offline caches.
 // This service worker immediately clears old Blazor offline caches and unregisters itself.