brainllm 12.6.3 → 12.6.4

package/README.md

@@ -10,7 +10,7 @@ A persistent, graph-structured second brain for Claude and any MCP client — bu
 
 [**brainllm site**](https://miisodev.github.io/BrainLLM/) · [How it works](https://miisodev.github.io/BrainLLM/how-it-works.html) · [Use cases](https://miisodev.github.io/BrainLLM/use-cases.html) · [Docs](https://miisodev.github.io/BrainLLM/docs.html)
 
-[![Version](https://img.shields.io/badge/version-12.6.3-f59e0b?style=flat-square)](https://github.com/miisodev/BrainLLM/releases)
+[![Version](https://img.shields.io/badge/version-12.6.4-f59e0b?style=flat-square)](https://github.com/miisodev/BrainLLM/releases)
 [![CI](https://img.shields.io/github/actions/workflow/status/miisodev/BrainLLM/ci.yml?branch=main&style=flat-square&label=CI&color=f59e0b)](https://github.com/miisodev/BrainLLM/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/license-MIT-a1a1aa?style=flat-square)](./LICENSE)
 [![Runtime: Bun](https://img.shields.io/badge/runtime-Bun%20%E2%89%A5%201.0-a1a1aa?style=flat-square&logo=bun&logoColor=white)](https://bun.sh)

package/dist/index.js

@@ -28495,14 +28495,15 @@ var PAGE_CSS = `
     padding:11px 14px; border-radius:9px; font-size:14px; margin-bottom:18px;
   }
   .foot { margin:22px 0 0; font-size:12.5px; color:var(--text-dim,#52525b); text-align:center; }
+  .foot a { color:inherit; }
   @media (prefers-reduced-motion: reduce) { button { transition:none; } .approve:hover { transform:none; } }
 `;
 var BRAND_MARK = `<span class="brand-mark"><i></i><i class="off"></i><i></i><i></i><i></i><i class="off"></i><i class="off"></i><i></i><i></i></span>`;
-var shell = (title, body) => `<!doctype html>
+var shell = (title, body, head = "") => `<!doctype html>
 <html lang="en"><head><meta charset="utf-8">
 <meta name="viewport" content="width=device-width,initial-scale=1">
 <meta name="theme-color" content="#0a0a0f">
-<meta name="robots" content="noindex,nofollow">
+<meta name="robots" content="noindex,nofollow">${head}
 <title>${esc2(title)}</title>
 <style>${PAGE_CSS}</style></head>
 <body>${body}</body></html>`;
@@ -28517,14 +28518,8 @@ function landingPage(base, oauthOn, sseOn) {
 </div>`);
 }
 var PAGE_SECURITY_DIRECTIVES = "default-src 'none'; frame-ancestors 'none'; base-uri 'none'; img-src 'self' data:";
-function pageContentSecurityPolicy(redirectUri) {
-  let formAction = "'self'";
-  if (redirectUri) {
-    const origin = new URL(redirectUri).origin;
-    if (origin !== "null")
-      formAction += ` ${origin}`;
-  }
-  return `${PAGE_SECURITY_DIRECTIVES}; form-action ${formAction}; style-src 'unsafe-inline'`;
+function pageContentSecurityPolicy() {
+  return `${PAGE_SECURITY_DIRECTIVES}; form-action 'self'; style-src 'unsafe-inline'`;
 }
 function consentResponse(transaction, redirectUri, clientHost, verifiedHost, error, status = 200) {
   return new Response(consentPage({ transaction }, clientHost, error, verifiedHost), {
@@ -28532,7 +28527,7 @@ function consentResponse(transaction, redirectUri, clientHost, verifiedHost, err
     headers: {
       "Content-Type": "text/html; charset=utf-8",
       "Cache-Control": "no-store",
-      "Content-Security-Policy": pageContentSecurityPolicy(redirectUri)
+      "Content-Security-Policy": pageContentSecurityPolicy()
     }
   });
 }
@@ -28561,6 +28556,26 @@ var redirectWith = (uri, params) => {
     u.searchParams.set(k, v);
   return new Response(null, { status: 302, headers: { Location: u.href } });
 };
+function handoff(uri, params, heading, message) {
+  const u = new URL(uri);
+  for (const [k, v] of Object.entries(params))
+    u.searchParams.set(k, v);
+  const href = esc2(u.href);
+  return new Response(shell(heading, `<div class="card">
+  <div class="brand">${BRAND_MARK}<span class="brand-name">BrainLLM</span></div>
+  <h1>${esc2(heading)}</h1>
+  <p>${esc2(message)}</p>
+  <p class="foot"><a href="${href}">Continue</a> if this page does not move on by itself.</p>
+</div>`, `
+<meta http-equiv="refresh" content="0;url=${href}">`), {
+    status: 200,
+    headers: {
+      "Content-Type": "text/html; charset=utf-8",
+      "Cache-Control": "no-store",
+      "Content-Security-Policy": pageContentSecurityPolicy()
+    }
+  });
+}
 var htmlError = (message, status = 400) => new Response(shell("Authorization error", `<div class="card">
   <div class="brand">${BRAND_MARK}<span class="brand-name">BrainLLM</span></div>
   <h1>Authorization error</h1>
@@ -28635,7 +28650,6 @@ async function handleAuthorize(req, base) {
     transaction = issueConsentTransaction(request, base);
   }
   const { clientId, redirectUri, codeChallenge, state, resource, scope } = request;
-  const fail = (error, description) => redirectWith(redirectUri, { error, error_description: description, iss: base, ...state ? { state } : {} });
   let clientHost;
   let verifiedHost = true;
   try {
@@ -28648,7 +28662,7 @@ async function handleAuthorize(req, base) {
     return consentResponse(transaction, redirectUri, clientHost, verifiedHost);
   }
   if (form.get("decision") !== "approve") {
-    return fail("access_denied", "The owner denied the request.");
+    return handoff(redirectUri, { error: "access_denied", error_description: "The owner denied the request.", iss: base, ...state ? { state } : {} }, "Access denied", `Nothing was authorized. Returning you to ${clientHost}.`);
   }
   if (!ownerPasswordMatches(form.get("password") ?? "")) {
     return consentResponse(transaction, redirectUri, clientHost, verifiedHost, "Incorrect password.", 401);
@@ -28664,7 +28678,7 @@ async function handleAuthorize(req, base) {
     expiresAt: Date.now() + AUTH_CODE_TTL_MS
   };
   saveStore();
-  return redirectWith(redirectUri, { code, iss: base, ...state ? { state } : {} });
+  return handoff(redirectUri, { code, iss: base, ...state ? { state } : {} }, "Authorized", `Returning you to ${clientHost}. You can close this window once it confirms the connection.`);
 }
 var tokenError = (error, description, status = 400) => new Response(JSON.stringify({ error, error_description: description }), {
   status,
@@ -28829,7 +28843,7 @@ function createServer(origin = null) {
   const s = new McpServer({
     name: "BrainLLM",
     title: "BrainLLM",
-    version: "12.6.3",
+    version: "12.6.4",
     icons: brandingIcons(origin)
   });
   registerTools(s, trilium, brainRef);

package/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": "0.3",
   "name": "brainllm",
   "display_name": "BrainLLM",
-  "version": "12.6.3",
+  "version": "12.6.4",
   "description": "Turns TriliumNext Notes into a persistent, graph-structured second brain for Claude and other LLM clients.",
   "long_description": "BrainLLM is an MCP server that organises memory into five purpose-built areas (Master, LLM, Memory, Knowledge, Insights). The model supplies content while the server owns placement, format, lifecycle, dates and backups. Includes a full raw ETAPI surface for advanced use. Requires a running TriliumNext instance and the Bun runtime.",
   "author": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brainllm",
-  "version": "12.6.3",
+  "version": "12.6.4",
   "mcpName": "io.github.miisodev/brainllm",
   "description": "MCP server that turns TriliumNext Notes into a persistent, graph-structured second brain for Claude and other LLM clients.",
   "author": "Kevin Miiso Novo <miisodev@gmail.com>",

package/server.json

@@ -2,7 +2,7 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.miisodev/brainllm",
   "description": "Persistent graph-structured memory for LLMs in TriliumNext Notes — readable and editable by humans.",
-  "version": "12.6.3",
+  "version": "12.6.4",
   "websiteUrl": "https://github.com/miisodev/BrainLLM#readme",
   "repository": {
     "url": "https://github.com/miisodev/BrainLLM",
@@ -12,7 +12,7 @@
     {
       "registryType": "npm",
       "identifier": "brainllm",
-"version": "12.6.3",
+"version": "12.6.4",
       "transport": {
         "type": "stdio"
       },