ocean-brain 0.3.3 → 0.4.0

package/server/client/dist/assets/{placeholder-MNsco0AT.js → placeholder-Bmiowo28.js}

@@ -1,4 +1,4 @@
-import{j as e}from"./note-vendor-BofYbzmZ.js";import{p as Y,h as E,J as V,K as W,q as v,ar as ee,u as ae,U as M,P as te,T as s,a3 as se,as as j,at as N,B as C,w as le,M as m,_ as w,$ as b,F as ne,l as re,i as $,j as ce,ae as ie}from"./index-BglnLSet.js";import{a}from"./graph-vendor-CUxe67Lr.js";import{n as oe,M as de}from"./ModalActionRow-Hg6MY61u.js";import{S as D}from"./SurfaceCard-BV6y4bCo.js";import"./note-core-BCgMq5QA.js";const me=new Map([["bold",a.createElement(a.Fragment,null,a.createElement("path",{d:"M216.49,168.49a12,12,0,0,1-17,0L128,97,56.49,168.49a12,12,0,0,1-17-17l80-80a12,12,0,0,1,17,0l80,80A12,12,0,0,1,216.49,168.49Z"}))],["duotone",a.createElement(a.Fragment,null,a.createElement("path",{d:"M208,160H48l80-80Z",opacity:"0.2"}),a.createElement("path",{d:"M213.66,154.34l-80-80a8,8,0,0,0-11.32,0l-80,80A8,8,0,0,0,48,168H208a8,8,0,0,0,5.66-13.66ZM67.31,152,128,91.31,188.69,152Z"}))],["fill",a.createElement(a.Fragment,null,a.createElement("path",{d:"M215.39,163.06A8,8,0,0,1,208,168H48a8,8,0,0,1-5.66-13.66l80-80a8,8,0,0,1,11.32,0l80,80A8,8,0,0,1,215.39,163.06Z"}))],["light",a.createElement(a.Fragment,null,a.createElement("path",{d:"M212.24,164.24a6,6,0,0,1-8.48,0L128,88.49,52.24,164.24a6,6,0,0,1-8.48-8.48l80-80a6,6,0,0,1,8.48,0l80,80A6,6,0,0,1,212.24,164.24Z"}))],["regular",a.createElement(a.Fragment,null,a.createElement("path",{d:"M213.66,165.66a8,8,0,0,1-11.32,0L128,91.31,53.66,165.66a8,8,0,0,1-11.32-11.32l80-80a8,8,0,0,1,11.32,0l80,80A8,8,0,0,1,213.66,165.66Z"}))],["thin",a.createElement(a.Fragment,null,a.createElement("path",{d:"M210.83,162.83a4,4,0,0,1-5.66,0L128,85.66,50.83,162.83a4,4,0,0,1-5.66-5.66l80-80a4,4,0,0,1,5.66,0l80,80A4,4,0,0,1,210.83,162.83Z"}))]]),O=a.forwardRef((l,c)=>a.createElement(Y,{ref:c,...l,weights:me}));O.displayName="CaretUpIcon";const he=O,k=["id","name","template","replacement","createdAt","updatedAt"],ue=new Set(k),pe=`query FetchPlaceholders(
+import{j as e}from"./note-vendor-5N5mRkIT.js";import{p as Y,h as E,v as V,w as W,q as v,aJ as ee,u as ae,af as M,P as te,T as s,ah as se,aK as j,aL as N,B as C,a6 as le,M as m,l as w,I as b,aa as ne,$ as re,i as $,j as ce,ax as ie}from"./index-Bsx4P7EA.js";import{a}from"./graph-vendor-CUxe67Lr.js";import{n as oe,M as de}from"./ModalActionRow-DjI5b4bl.js";import{S as D}from"./SurfaceCard-Br6TjX5W.js";import"./note-core-GgFcksAF.js";const me=new Map([["bold",a.createElement(a.Fragment,null,a.createElement("path",{d:"M216.49,168.49a12,12,0,0,1-17,0L128,97,56.49,168.49a12,12,0,0,1-17-17l80-80a12,12,0,0,1,17,0l80,80A12,12,0,0,1,216.49,168.49Z"}))],["duotone",a.createElement(a.Fragment,null,a.createElement("path",{d:"M208,160H48l80-80Z",opacity:"0.2"}),a.createElement("path",{d:"M213.66,154.34l-80-80a8,8,0,0,0-11.32,0l-80,80A8,8,0,0,0,48,168H208a8,8,0,0,0,5.66-13.66ZM67.31,152,128,91.31,188.69,152Z"}))],["fill",a.createElement(a.Fragment,null,a.createElement("path",{d:"M215.39,163.06A8,8,0,0,1,208,168H48a8,8,0,0,1-5.66-13.66l80-80a8,8,0,0,1,11.32,0l80,80A8,8,0,0,1,215.39,163.06Z"}))],["light",a.createElement(a.Fragment,null,a.createElement("path",{d:"M212.24,164.24a6,6,0,0,1-8.48,0L128,88.49,52.24,164.24a6,6,0,0,1-8.48-8.48l80-80a6,6,0,0,1,8.48,0l80,80A6,6,0,0,1,212.24,164.24Z"}))],["regular",a.createElement(a.Fragment,null,a.createElement("path",{d:"M213.66,165.66a8,8,0,0,1-11.32,0L128,91.31,53.66,165.66a8,8,0,0,1-11.32-11.32l80-80a8,8,0,0,1,11.32,0l80,80A8,8,0,0,1,213.66,165.66Z"}))],["thin",a.createElement(a.Fragment,null,a.createElement("path",{d:"M210.83,162.83a4,4,0,0,1-5.66,0L128,85.66,50.83,162.83a4,4,0,0,1-5.66-5.66l80-80a4,4,0,0,1,5.66,0l80,80A4,4,0,0,1,210.83,162.83Z"}))]]),O=a.forwardRef((l,c)=>a.createElement(Y,{ref:c,...l,weights:me}));O.displayName="CaretUpIcon";const he=O,k=["id","name","template","replacement","createdAt","updatedAt"],ue=new Set(k),pe=`query FetchPlaceholders(
             $searchFilter: SearchFilterInput,
             $pagination: PaginationInput
         ) {
@@ -12,7 +12,7 @@ __PLACEHOLDER_FIELDS__                }
             }
         }`,xe=l=>{const c=l&&l.length>0?l.filter(r=>ue.has(r)):k;return Array.from(new Set(c)).map(r=>"                    "+r).join(`
 `)+`
-`},ge=async({limit:l=25,offset:c=0,query:h="",fields:r}={})=>{const g=xe(r),i=pe.replace("__PLACEHOLDER_FIELDS__",g);return E(i,{searchFilter:{query:h},pagination:{limit:l,offset:c}})},ye=l=>E(`mutation CreatePlaceholder(
+`},ge=async({limit:l=25,offset:c=0,query:h="",fields:r}={})=>{const g=xe(r),i=pe.replace("__PLACEHOLDER_FIELDS__",g);return E(i,{searchFilter:{query:h},pagination:{limit:l,offset:c}})},fe=l=>E(`mutation CreatePlaceholder(
             $name: String!,
             $template: String!,
             $replacement: String!
@@ -29,6 +29,6 @@ __PLACEHOLDER_FIELDS__                }
                 createdAt
                 updatedAt
             }
-        }`,l),fe=l=>E(`mutation DeletePlaceholder($id: ID!) {
+        }`,l),ye=l=>E(`mutation DeletePlaceholder($id: ID!) {
             deletePlaceholder(id: $id)
-        }`,{id:l}),I=ce(ie),Pe=()=>{const l=V(),c=W(),h=I.useNavigate(),{page:r}=I.useSearch(),[g,i]=a.useState(!1),[y,H]=a.useState(!0),[n,u]=a.useState({name:"",template:"",replacement:""}),o=25,T=v.placeholders.list({limit:o,offset:(r-1)*o}),[P]=a.useState(ee),{data:d,isLoading:p}=ae({queryKey:T,queryFn:async()=>{const t=await ge({offset:(r-1)*o,limit:o});if(t.type==="error")throw t;return t.allPlaceholders}}),F=M({mutationFn:ye,onSuccess:async()=>{l("Placeholder added successfully"),i(!1),u({name:"",template:"",replacement:""}),await c.invalidateQueries({queryKey:v.placeholders.listAll(),exact:!1})}}),q=M({mutationFn:fe,onSuccess:async()=>{l("Placeholder deleted successfully"),await c.invalidateQueries({queryKey:v.placeholders.listAll(),exact:!1})}}),B=P.length,x=d?.totalCount??0,Z=d?.placeholders??[],f="font-medium text-fg-tertiary",L="leading-[1.2]",A="break-all leading-[1.2]",S="leading-[1.2]",_="flex flex-col gap-px",R="space-y-px",Q="focus-ring-soft inline-flex items-center gap-2 rounded-[12px] border border-transparent px-2.5 py-1.5 text-fg-tertiary outline-none transition-colors hover:bg-hover-subtle hover:text-fg-default",K="relative",U="absolute right-2 top-2",G="focus-ring-soft surface-base group flex flex-col items-center justify-center gap-0.5 px-4 py-4 text-center text-fg-secondary outline-none transition-colors hover:bg-hover-subtle hover:text-fg-default",X="inline-flex h-[34px] w-[34px] items-center justify-center rounded-full border border-border-subtle bg-surface text-current transition-colors group-hover:border-border-secondary/70",z=x>0?`Placeholders (${x})`:void 0;return e.jsxs(te,{title:"Placeholders",variant:"default",heading:p?e.jsx($,{width:244,height:24,className:"rounded-full"}):z,description:p?e.jsx($,{width:260,height:16,className:"rounded-full"}):"Create tokens that get replaced with values when you clone a note",children:[e.jsxs("div",{className:"flex flex-col gap-5",children:[e.jsxs("section",{className:"space-y-3 border-b border-border-subtle/80 pb-5",children:[e.jsxs("div",{className:"flex flex-wrap items-start justify-between gap-3",children:[e.jsxs("div",{className:"space-y-1",children:[e.jsx(s,{as:"p",variant:"body",weight:"medium",children:"System placeholders"}),e.jsx(s,{as:"p",variant:"meta",tone:"secondary",children:"Built-in tokens for date and time that are always available when cloning notes"})]}),e.jsxs("button",{type:"button",onClick:()=>H(!y),className:Q,children:[e.jsxs(s,{as:"span",variant:"meta",weight:"medium",tone:"secondary",children:[B," items"]}),y?e.jsx(he,{className:"h-4 w-4"}):e.jsx(se,{className:"h-4 w-4"})]})]}),y&&e.jsx("div",{className:"grid-auto-cards grid gap-5",children:P.map(t=>e.jsx(D,{children:e.jsxs("div",{className:_,children:[e.jsx(s,{as:"div",variant:"body",weight:"medium",className:L,children:t.name}),e.jsxs("div",{className:R,children:[e.jsxs(s,{as:"div",variant:"meta",weight:"medium",tone:"secondary",className:A,children:[j,t.template,N]}),e.jsxs(s,{as:"div",variant:"label",weight:"medium",tone:"tertiary",className:S,children:["Current value: ",t.replacement]})]})]})},t.name))})]}),e.jsxs("section",{className:"space-y-3",children:[e.jsxs("div",{className:"flex flex-wrap items-start justify-between gap-3",children:[e.jsxs("div",{className:"space-y-1",children:[e.jsx(s,{as:"p",variant:"body",weight:"medium",children:"Custom placeholders"}),e.jsx(s,{as:"p",variant:"meta",tone:"secondary",children:"Custom tokens you define once and reuse whenever you clone a note"})]}),!p&&e.jsx(s,{as:"span",variant:"meta",weight:"medium",tone:"secondary",children:x===1?"1 item":`${x} items`})]}),!p&&e.jsxs("div",{className:"grid-auto-cards grid gap-5",children:[Z.map(t=>e.jsxs(D,{className:K,children:[e.jsx(C,{variant:"ghost",size:"icon-sm",className:U,onClick:()=>q.mutate(t.id.toString()),children:e.jsx(le,{className:"h-4 w-4"})}),e.jsxs("div",{className:_,children:[e.jsx(s,{as:"div",variant:"body",weight:"medium",className:`min-w-0 pr-8 ${L}`,children:t.name}),e.jsxs("div",{className:R,children:[e.jsxs(s,{as:"div",variant:"meta",weight:"medium",tone:"secondary",className:A,children:[j,t.template,N]}),e.jsxs(s,{as:"div",variant:"label",weight:"medium",tone:"tertiary",className:S,children:["Replaces with: ",t.replacement]})]})]})]},t.id)),e.jsxs("button",{type:"button",onClick:()=>i(!0),className:G,children:[e.jsx("span",{className:X,children:e.jsx(oe,{className:"h-4.5 w-4.5"})}),e.jsx(s,{as:"div",variant:"meta",weight:"medium",tone:"secondary",className:"text-current",children:"New custom"})]})]})]})]}),e.jsxs(m,{isOpen:g,onClose:()=>i(!1),children:[e.jsx(m.Header,{title:"Add Placeholder",onClose:()=>i(!1)}),e.jsxs(m.Body,{children:[e.jsx(m.Description,{className:"mb-4",children:"Create a token that swaps in a value when you clone a note"}),e.jsxs("div",{className:"flex flex-col gap-4",children:[e.jsxs("div",{className:"space-y-2",children:[e.jsx(w,{htmlFor:"name",className:f,children:"Name"}),e.jsx(b,{id:"name",type:"text",value:n.name,onChange:t=>u({...n,name:t.target.value}),placeholder:"Description of this placeholder"}),e.jsx(s,{as:"p",variant:"meta",tone:"secondary",children:"A readable label so you can find this placeholder later"})]}),e.jsxs("div",{className:"space-y-2",children:[e.jsx(w,{htmlFor:"template",className:f,children:"Placeholder"}),e.jsx(b,{id:"template",type:"text",value:n.template,onChange:t=>u({...n,template:t.target.value}),placeholder:"note_app"}),e.jsxs(s,{as:"p",variant:"meta",tone:"secondary",children:["Use it in a note as ",j,"your_placeholder",N]})]}),e.jsxs("div",{className:"space-y-2",children:[e.jsx(w,{htmlFor:"replacement",className:f,children:"Replacement"}),e.jsx(b,{id:"replacement",type:"text",value:n.replacement,onChange:t=>u({...n,replacement:t.target.value}),placeholder:"Ocean Brain"}),e.jsx(s,{as:"p",variant:"meta",tone:"secondary",children:"This value is inserted when the placeholder is replaced during cloning"})]})]})]}),e.jsx(m.Footer,{children:e.jsxs(de,{children:[e.jsx(C,{variant:"ghost",onClick:()=>i(!1),children:"Cancel"}),e.jsx(C,{variant:"primary",isLoading:F.isPending,onClick:()=>{if(!n.name||!n.template||!n.replacement){l("All fields are required");return}F.mutate({name:n.name,template:n.template,replacement:n.replacement})},children:"Add"})]})})]}),e.jsx(ne,{fallback:null,children:d?.totalCount&&o<d.totalCount&&e.jsx(re,{page:r,last:Math.ceil(d.totalCount/o),onChange:t=>{h({search:J=>({...J,page:t})})}})})]})};export{Pe as default};
+        }`,{id:l}),I=ce(ie),Pe=()=>{const l=V(),c=W(),h=I.useNavigate(),{page:r}=I.useSearch(),[g,i]=a.useState(!1),[f,H]=a.useState(!0),[n,u]=a.useState({name:"",template:"",replacement:""}),o=25,T=v.placeholders.list({limit:o,offset:(r-1)*o}),[P]=a.useState(ee),{data:d,isLoading:p}=ae({queryKey:T,queryFn:async()=>{const t=await ge({offset:(r-1)*o,limit:o});if(t.type==="error")throw t;return t.allPlaceholders}}),F=M({mutationFn:fe,onSuccess:async()=>{l("Placeholder added successfully"),i(!1),u({name:"",template:"",replacement:""}),await c.invalidateQueries({queryKey:v.placeholders.listAll(),exact:!1})}}),q=M({mutationFn:ye,onSuccess:async()=>{l("Placeholder deleted successfully"),await c.invalidateQueries({queryKey:v.placeholders.listAll(),exact:!1})}}),B=P.length,x=d?.totalCount??0,Z=d?.placeholders??[],y="font-medium text-fg-tertiary",L="leading-[1.2]",A="break-all leading-[1.2]",S="leading-[1.2]",_="flex flex-col gap-px",R="space-y-px",Q="focus-ring-soft inline-flex items-center gap-2 rounded-[12px] border border-transparent px-2.5 py-1.5 text-fg-tertiary outline-none transition-colors hover:bg-hover-subtle hover:text-fg-default",K="relative",U="absolute right-2 top-2",G="focus-ring-soft surface-base group flex flex-col items-center justify-center gap-0.5 px-4 py-4 text-center text-fg-secondary outline-none transition-colors hover:bg-hover-subtle hover:text-fg-default",X="inline-flex h-[34px] w-[34px] items-center justify-center rounded-full border border-border-subtle bg-surface text-current transition-colors group-hover:border-border-secondary/70",z=x>0?`Placeholders (${x})`:void 0;return e.jsxs(te,{title:"Placeholders",variant:"default",heading:p?e.jsx($,{width:244,height:24,className:"rounded-full"}):z,description:p?e.jsx($,{width:260,height:16,className:"rounded-full"}):"Create tokens that get replaced with values when you clone a note",children:[e.jsxs("div",{className:"flex flex-col gap-5",children:[e.jsxs("section",{className:"space-y-3 border-b border-border-subtle/80 pb-5",children:[e.jsxs("div",{className:"flex flex-wrap items-start justify-between gap-3",children:[e.jsxs("div",{className:"space-y-1",children:[e.jsx(s,{as:"p",variant:"body",weight:"medium",children:"System placeholders"}),e.jsx(s,{as:"p",variant:"meta",tone:"secondary",children:"Built-in tokens for date and time that are always available when cloning notes"})]}),e.jsxs("button",{type:"button",onClick:()=>H(!f),className:Q,children:[e.jsxs(s,{as:"span",variant:"meta",weight:"medium",tone:"secondary",children:[B," items"]}),f?e.jsx(he,{className:"h-4 w-4"}):e.jsx(se,{className:"h-4 w-4"})]})]}),f&&e.jsx("div",{className:"grid-auto-cards grid gap-5",children:P.map(t=>e.jsx(D,{children:e.jsxs("div",{className:_,children:[e.jsx(s,{as:"div",variant:"body",weight:"medium",className:L,children:t.name}),e.jsxs("div",{className:R,children:[e.jsxs(s,{as:"div",variant:"meta",weight:"medium",tone:"secondary",className:A,children:[j,t.template,N]}),e.jsxs(s,{as:"div",variant:"label",weight:"medium",tone:"tertiary",className:S,children:["Current value: ",t.replacement]})]})]})},t.name))})]}),e.jsxs("section",{className:"space-y-3",children:[e.jsxs("div",{className:"flex flex-wrap items-start justify-between gap-3",children:[e.jsxs("div",{className:"space-y-1",children:[e.jsx(s,{as:"p",variant:"body",weight:"medium",children:"Custom placeholders"}),e.jsx(s,{as:"p",variant:"meta",tone:"secondary",children:"Custom tokens you define once and reuse whenever you clone a note"})]}),!p&&e.jsx(s,{as:"span",variant:"meta",weight:"medium",tone:"secondary",children:x===1?"1 item":`${x} items`})]}),!p&&e.jsxs("div",{className:"grid-auto-cards grid gap-5",children:[Z.map(t=>e.jsxs(D,{className:K,children:[e.jsx(C,{variant:"ghost",size:"icon-sm",className:U,onClick:()=>q.mutate(t.id.toString()),children:e.jsx(le,{className:"h-4 w-4"})}),e.jsxs("div",{className:_,children:[e.jsx(s,{as:"div",variant:"body",weight:"medium",className:`min-w-0 pr-8 ${L}`,children:t.name}),e.jsxs("div",{className:R,children:[e.jsxs(s,{as:"div",variant:"meta",weight:"medium",tone:"secondary",className:A,children:[j,t.template,N]}),e.jsxs(s,{as:"div",variant:"label",weight:"medium",tone:"tertiary",className:S,children:["Replaces with: ",t.replacement]})]})]})]},t.id)),e.jsxs("button",{type:"button",onClick:()=>i(!0),className:G,children:[e.jsx("span",{className:X,children:e.jsx(oe,{className:"h-4.5 w-4.5"})}),e.jsx(s,{as:"div",variant:"meta",weight:"medium",tone:"secondary",className:"text-current",children:"New custom"})]})]})]})]}),e.jsxs(m,{isOpen:g,onClose:()=>i(!1),variant:"form",children:[e.jsx(m.Header,{title:"Add Placeholder",onClose:()=>i(!1)}),e.jsxs(m.Body,{children:[e.jsx(m.Description,{className:"mb-4",children:"Create a token that swaps in a value when you clone a note"}),e.jsxs("div",{className:"flex flex-col gap-4",children:[e.jsxs("div",{className:"space-y-2",children:[e.jsx(w,{htmlFor:"name",className:y,children:"Name"}),e.jsx(b,{id:"name",type:"text",value:n.name,onChange:t=>u({...n,name:t.target.value}),placeholder:"Description of this placeholder"}),e.jsx(s,{as:"p",variant:"meta",tone:"secondary",children:"A readable label so you can find this placeholder later"})]}),e.jsxs("div",{className:"space-y-2",children:[e.jsx(w,{htmlFor:"template",className:y,children:"Placeholder"}),e.jsx(b,{id:"template",type:"text",value:n.template,onChange:t=>u({...n,template:t.target.value}),placeholder:"note_app"}),e.jsxs(s,{as:"p",variant:"meta",tone:"secondary",children:["Use it in a note as ",j,"your_placeholder",N]})]}),e.jsxs("div",{className:"space-y-2",children:[e.jsx(w,{htmlFor:"replacement",className:y,children:"Replacement"}),e.jsx(b,{id:"replacement",type:"text",value:n.replacement,onChange:t=>u({...n,replacement:t.target.value}),placeholder:"Ocean Brain"}),e.jsx(s,{as:"p",variant:"meta",tone:"secondary",children:"This value is inserted when the placeholder is replaced during cloning"})]})]})]}),e.jsx(m.Footer,{children:e.jsxs(de,{children:[e.jsx(C,{variant:"ghost",onClick:()=>i(!1),children:"Cancel"}),e.jsx(C,{variant:"primary",isLoading:F.isPending,onClick:()=>{if(!n.name||!n.template||!n.replacement){l("All fields are required");return}F.mutate({name:n.name,template:n.template,replacement:n.replacement})},children:"Add"})]})})]}),e.jsx(ne,{fallback:null,children:d?.totalCount&&o<d.totalCount&&e.jsx(re,{page:r,last:Math.ceil(d.totalCount/o),onChange:t=>{h({search:J=>({...J,page:t})})}})})]})};export{Pe as default};

package/server/client/dist/assets/trash-CM7SbVtW.js

@@ -0,0 +1 @@
+import{j as e}from"./note-vendor-5N5mRkIT.js";import{_ as b,j as S,aq as C,w as E,v as q,r as P,a4 as D,aB as R,q as r,af as g,aC as A,N as K,aD as Q,P as x,F as _,T as u,ar as k,B as y,$ as F,i as t,d as M}from"./index-Bsx4P7EA.js";import"./graph-vendor-CUxe67Lr.js";import{S as N}from"./SurfaceCard-Br6TjX5W.js";import"./note-core-GgFcksAF.js";const l=25,f=S(C),v=30,j=`Deleted notes stay here for ${v} days before permanent removal`,$=s=>M(s).format("YYYY-MM-DD HH:mm"),I=()=>e.jsx(x,{title:"Trash",variant:"default",heading:e.jsx(t,{width:118,height:24,className:"rounded-full"}),description:e.jsx(t,{width:352,height:16,className:"rounded-full"}),children:e.jsx("div",{className:"grid gap-3",children:Array.from({length:3},(s,d)=>e.jsx(N,{padding:"compact",children:e.jsxs("div",{className:"flex flex-col gap-3 sm:flex-row sm:items-start sm:justify-between",children:[e.jsxs("div",{className:"min-w-0 flex-1 space-y-2",children:[e.jsx(t,{width:"40%",height:18,className:"rounded-full"}),e.jsxs("div",{className:"flex flex-wrap gap-2",children:[e.jsx(t,{width:168,height:14,className:"rounded-full"}),e.jsx(t,{width:176,height:14,className:"rounded-full"})]}),e.jsxs("div",{className:"flex flex-wrap gap-2",children:[e.jsx(t,{width:56,height:24,className:"rounded-full"}),e.jsx(t,{width:72,height:24,className:"rounded-full"})]})]}),e.jsx(t,{width:92,height:32,className:"rounded-[12px]"})]})},d))})}),O=()=>{const{page:s}=f.useSearch(),d=f.useNavigate(),i=E(),o=q(),w=P(),{data:n}=D({queryKey:r.notes.trash({limit:l,offset:(s-1)*l}),queryFn:async()=>{const a=await R({limit:l,offset:(s-1)*l});if(a.type==="error")throw a;return a.trashedNotes}}),h=g({mutationFn:A,onSuccess:async a=>{if(a.type==="error")throw a;await Promise.all([i.invalidateQueries({queryKey:r.notes.all(),exact:!1}),i.invalidateQueries({queryKey:r.tags.all(),exact:!1}),i.invalidateQueries({queryKey:r.reminders.all(),exact:!1}),i.invalidateQueries({queryKey:r.images.all(),exact:!1}),i.invalidateQueries({queryKey:r.calendar.all(),exact:!1})]),o("The note has been restored."),d({to:K,params:{id:a.restoreTrashedNote.id}})},onError:()=>{o("Failed to restore the note.")}}),m=g({mutationFn:Q,onSuccess:async a=>{if(a.type==="error")throw a;await i.invalidateQueries({queryKey:r.notes.trashAll(),exact:!1}),o("The note has been permanently deleted.")},onError:()=>{o("Failed to permanently delete the note.")}}),T=async a=>{await w("Permanently delete this note? This cannot be undone.")&&m.mutate(a)},p=n.totalCount>0?`Trash (${n.totalCount})`:void 0;return n.notes.length===0?e.jsx(x,{title:"Trash",variant:"default",heading:p,description:j,children:e.jsx(_,{title:"Trash is empty",description:`Delete a note and you can restore it here for ${v} days before permanent removal`})}):e.jsx(x,{title:"Trash",variant:"default",heading:p,description:j,children:e.jsxs("div",{className:"flex flex-col gap-4",children:[e.jsx("div",{className:"grid gap-3",children:n.notes.map(a=>e.jsx(N,{padding:"compact",children:e.jsxs("div",{className:"flex flex-col gap-3 sm:flex-row sm:items-start sm:justify-between",children:[e.jsxs("div",{className:"min-w-0 flex-1",children:[e.jsxs("div",{className:"flex min-w-0 items-start gap-1.5",children:[e.jsx(u,{as:"h2",variant:"body",weight:"medium",className:"min-w-0 flex-1 break-words leading-[1.25]",children:a.title||"Untitled note"}),a.pinned&&e.jsx("span",{title:"Pinned",className:"inline-flex h-5 w-5 shrink-0 items-center justify-center text-fg-tertiary",children:e.jsx(k,{className:"h-3.5 w-3.5"})})]}),e.jsx("div",{className:"mt-1 flex flex-wrap items-center gap-x-3 gap-y-1",children:e.jsxs(u,{as:"div",variant:"meta",weight:"medium",tone:"secondary",children:["Deleted ",$(a.deletedAt)]})}),a.tagNames.length>0&&e.jsx("div",{className:"mt-2 flex flex-wrap gap-1.5",children:a.tagNames.map(c=>e.jsx(u,{as:"span",variant:"label",weight:"medium",tone:"tertiary",className:"rounded-full border border-border-subtle bg-hover-subtle px-2 py-0.5",children:c},`${a.id}-${c}`))})]}),e.jsxs("div",{className:"flex shrink-0 flex-wrap gap-2 sm:justify-end",children:[e.jsx(y,{variant:"subtle",size:"sm",isLoading:h.isPending&&h.variables===a.id,onClick:()=>h.mutate(a.id),children:"Restore"}),e.jsx(y,{variant:"soft-danger",size:"sm",isLoading:m.isPending&&m.variables===a.id,onClick:()=>T(a.id),children:"Delete now"})]})]})},a.id))}),n.totalCount>l&&e.jsx(F,{page:s,last:Math.ceil(n.totalCount/l),onChange:a=>{d({search:c=>({...c,page:a})})}})]})})},U=()=>{const{page:s}=f.useSearch();return e.jsx(b,{fallback:e.jsx(I,{}),errorTitle:"Failed to load trash",errorDescription:"Retry loading deleted notes",resetKeys:[s],children:e.jsx(O,{})})};export{U as default};

package/server/client/dist/assets/{useReminderMutate-yJak8FzP.js → useReminderMutate-DsIvVpCQ.js}

@@ -1,4 +1,4 @@
-import{j as y}from"./note-vendor-BofYbzmZ.js";import{h as u,t as f,q as n,J as R,K as $}from"./index-BglnLSet.js";import{a as l}from"./graph-vendor-CUxe67Lr.js";const g=(e={})=>({limit:e.limit??10,offset:e.offset??0}),D=async(e,t)=>u(`
+import{j as y}from"./note-vendor-5N5mRkIT.js";import{h as u,a4 as f,q as n,v as R,w as $}from"./index-Bsx4P7EA.js";import{a as l}from"./graph-vendor-CUxe67Lr.js";const g=(e={})=>({limit:e.limit??10,offset:e.offset??0}),D=async(e,t)=>u(`
         query FetchNoteReminders($noteId: ID!, $pagination: PaginationInput) {
             noteReminders(noteId: $noteId, pagination: $pagination) {
                 totalCount
@@ -79,4 +79,4 @@ import{j as y}from"./note-vendor-BofYbzmZ.js";import{h as u,t as f,q as n,J as R
         mutation DeleteReminder($id: ID!) {
             deleteReminder(id: $id)
         }
-    `,{id:e});function P({noteId:e,searchParams:t,render:a}){const{data:o}=f({queryKey:e?n.reminders.note(e,t):n.reminders.upcoming(t),queryFn:async()=>{if(e){const r=await D(e,t);if(r.type==="error")throw r;return r.noteReminders}const i=await A(t);if(i.type==="error")throw i;return i.upcomingReminders}});return y.jsx(y.Fragment,{children:a(o)})}function w(){const e=R(),t=$(),a=l.useCallback(async(r,m,d="medium",s,c)=>{const p=await q({noteId:r,reminderDate:m,priority:d,content:c});if(p.type==="error"){e(p.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(r),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),s&&s()},[t,e]),o=l.useCallback(async(r,m,d,s)=>{const c=await I({id:r,...d});if(c.type==="error"){e(c.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(m),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),s&&s()},[t,e]),i=l.useCallback(async(r,m,d)=>{const s=await x(r);if(s.type==="error"){e(s.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(m),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),d&&d()},[t,e]);return{onCreate:a,onUpdate:o,onDelete:i}}export{P as R,w as u};
+    `,{id:e});function K({noteId:e,searchParams:t,render:a}){const{data:o}=f({queryKey:e?n.reminders.note(e,t):n.reminders.upcoming(t),queryFn:async()=>{if(e){const r=await D(e,t);if(r.type==="error")throw r;return r.noteReminders}const i=await A(t);if(i.type==="error")throw i;return i.upcomingReminders}});return y.jsx(y.Fragment,{children:a(o)})}function P(){const e=R(),t=$(),a=l.useCallback(async(r,m,d="medium",s,c)=>{const p=await q({noteId:r,reminderDate:m,priority:d,content:c});if(p.type==="error"){e(p.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(r),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),s&&s()},[t,e]),o=l.useCallback(async(r,m,d,s)=>{const c=await I({id:r,...d});if(c.type==="error"){e(c.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(m),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),s&&s()},[t,e]),i=l.useCallback(async(r,m,d)=>{const s=await x(r);if(s.type==="error"){e(s.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(m),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),d&&d()},[t,e]);return{onCreate:a,onUpdate:o,onDelete:i}}export{K as R,P as u};

package/server/client/dist/assets/view-dashboard-CP8nhfxQ.js

@@ -0,0 +1,90 @@
+import{h as n}from"./index-Bsx4P7EA.js";function b(){return n(`query FetchViewWorkspace {
+        viewWorkspace {
+            activeTabId
+            tabs {
+                id
+                title
+                order
+                sections {
+                    id
+                    tabId
+                    title
+                    tagNames
+                    mode
+                    limit
+                    order
+                }
+            }
+        }
+    }`)}function V(e){return n(`query FetchViewSection($id: ID!) {
+            viewSection(id: $id) {
+                id
+                tabId
+                title
+                tagNames
+                mode
+                limit
+                order
+            }
+        }`,{id:e})}function I(e,{limit:t=25,offset:i=0}={}){return n(`query FetchViewSectionNotes($id: ID!, $pagination: PaginationInput) {
+            viewSectionNotes(id: $id, pagination: $pagination) {
+                totalCount
+                notes {
+                    id
+                    title
+                    pinned
+                    tags {
+                        id
+                        name
+                    }
+                    createdAt
+                    updatedAt
+                }
+            }
+        }`,{id:e,pagination:{limit:t,offset:i}})}function w(e){return n(`mutation CreateViewTab($title: String!) {
+            createViewTab(title: $title) {
+                id
+            }
+        }`,{title:e})}function m(e,t){return n(`mutation UpdateViewTab($id: ID!, $title: String!) {
+            updateViewTab(id: $id, title: $title) {
+                id
+            }
+        }`,{id:e,title:t})}function $(e){return n(`mutation DeleteViewTab($id: ID!) {
+            deleteViewTab(id: $id)
+        }`,{id:e})}function f(e){return n(`mutation SetActiveViewTab($id: ID!) {
+            setActiveViewTab(id: $id) {
+                activeTabId
+                tabs {
+                    id
+                    title
+                    order
+                    sections {
+                        id
+                        tabId
+                        title
+                        tagNames
+                        mode
+                        limit
+                        order
+                    }
+                }
+            }
+        }`,{id:e})}function T(e){return n(`mutation ReorderViewTabs($tabIds: [ID!]!) {
+            reorderViewTabs(tabIds: $tabIds) {
+                id
+            }
+        }`,{tabIds:e})}function p(e,t){return n(`mutation CreateViewSection($tabId: ID!, $input: ViewSectionInput!) {
+            createViewSection(tabId: $tabId, input: $input) {
+                id
+            }
+        }`,{tabId:e,input:t})}function S(e,t){return n(`mutation UpdateViewSection($id: ID!, $input: ViewSectionInput!) {
+            updateViewSection(id: $id, input: $input) {
+                id
+            }
+        }`,{id:e,input:t})}function g(e){return n(`mutation DeleteViewSection($id: ID!) {
+            deleteViewSection(id: $id)
+        }`,{id:e})}function h(e,t){return n(`mutation ReorderViewSections($tabId: ID!, $sectionIds: [ID!]!) {
+            reorderViewSections(tabId: $tabId, sectionIds: $sectionIds) {
+                id
+            }
+        }`,{tabId:e,sectionIds:t})}const D={activeTabId:null,tabs:[]},u=e=>{const t=e.trim();return t?t.startsWith("@")?t:t.startsWith("#")?`@${t.slice(1)}`:`@${t}`:""},s=(e,t,i)=>{if(t===i)return e;const r=e.findIndex(d=>d.id===t),a=e.findIndex(d=>d.id===i);if(r<0||a<0)return e;const o=[...e],[c]=o.splice(r,1);return o.splice(a,0,c),o},v=e=>{const t=e.flatMap(i=>typeof i=="string"?i.split(","):[]);return Array.from(new Set(t.map(u).filter(Boolean)))},A=e=>e.tabs.length===0?null:e.activeTabId?e.tabs.find(t=>t.id===e.activeTabId)??e.tabs[0]??null:e.tabs[0]??null,N=(e,t)=>e.tabs.some(i=>i.id===t)?{...e,activeTabId:t}:e,W=(e,t,i)=>({...e,tabs:s(e.tabs,t,i)}),y=(e,t,i,r)=>({...e,tabs:e.tabs.map(a=>a.id===t?{...a,sections:s(a.sections,i,r)}:a)}),x=e=>e==="or"?"Matches any selected tag":"Matches all selected tags",M=e=>e==="or"?"OR":"AND",q=e=>({page:1,sectionId:e.id});export{D as E,x as a,q as b,b as c,A as d,f as e,I as f,M as g,T as h,y as i,h as j,w as k,$ as l,p as m,v as n,S as o,g as p,V as q,W as r,N as s,m as u};

package/server/client/dist/index.html

@@ -6,11 +6,11 @@
     <link rel="icon" type="image/png" href="/icon.png" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>Ocean Brain</title>
-  <script type="module" crossorigin src="/assets/index-BglnLSet.js"></script>
+  <script type="module" crossorigin src="/assets/index-Bsx4P7EA.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/graph-vendor-CUxe67Lr.js">
-  <link rel="modulepreload" crossorigin href="/assets/note-core-BCgMq5QA.js">
-  <link rel="modulepreload" crossorigin href="/assets/note-vendor-BofYbzmZ.js">
-  <link rel="stylesheet" crossorigin href="/assets/index-CD2bFEqK.css">
+  <link rel="modulepreload" crossorigin href="/assets/note-core-GgFcksAF.js">
+  <link rel="modulepreload" crossorigin href="/assets/note-vendor-5N5mRkIT.js">
+  <link rel="stylesheet" crossorigin href="/assets/index-Bm9l_L20.css">
 </head>
 
 <body>

package/server/dist/app.js

@@ -1,40 +1,11 @@
 import express from "express";
-import path from "path";
-import { createHandler } from "graphql-http/lib/use/express";
-import logger from "./modules/logger.js";
-import { paths } from "./paths.js";
-import schema from "./schema/index.js";
-import { createApiRouter } from "./urls.js";
-import { createSessionMiddleware, isAuthenticatedRequest, requireSessionForGraphql } from "./modules/auth-guard.js";
-import {
-  createMcpAuthMiddleware,
-  createReadOnlyMcpValidationRule
-} from "./modules/mcp-auth.js";
-import { createMcpAdminService } from "./modules/mcp-admin.js";
-import {
-  createLoginPageHandler,
-  createLoginPageSubmitHandler,
-  createLogoutPageHandler
-} from "./views/auth.js";
-import useAsync from "./modules/use-async.js";
+import { createMcpAdminService } from "./features/mcp-admin/service.js";
+import { purgeExpiredNoteSnapshots } from "./features/note/services/snapshot.js";
+import { purgeExpiredTrashedNotes } from "./features/note/services/trash.js";
+import { createSessionMiddleware } from "./modules/auth-guard.js";
 import { createErrorHandler } from "./modules/error-handler.js";
-import {
-  createMcpCreateNoteHandler,
-  createMcpDeleteNoteHandler,
-  createMcpUpdateNoteHandler
-} from "./views/note.js";
-import { createMcpCreateTagHandler } from "./views/tag.js";
-import { purgeExpiredNoteSnapshots } from "./modules/note-snapshot.js";
-import { purgeExpiredTrashedNotes } from "./modules/note-trash.js";
-const shouldBlockClientRoute = (authConfig, requestPath, authenticated) => {
-  if (authConfig.mode !== "password" || authenticated) {
-    return false;
-  }
-  if (requestPath.startsWith("/api") || requestPath.startsWith("/graphql") || requestPath.startsWith("/auth")) {
-    return false;
-  }
-  return path.extname(requestPath) === "";
-};
+import logger from "./modules/logger.js";
+import { createApiRouter, createAuthPagesRouter, createClientRouter, createGraphqlRouter } from "./routes/index.js";
 const createApp = (authConfig) => {
   const mcpAdminService = createMcpAdminService();
   return createAppWithMcpAuth(authConfig, mcpAdminService);
@@ -42,59 +13,12 @@ const createApp = (authConfig) => {
 const createAppWithMcpAuth = (authConfig, mcpAdminService) => {
   const app = express();
   app.locals.authConfig = authConfig;
-  void Promise.all([
-    purgeExpiredNoteSnapshots(),
-    purgeExpiredTrashedNotes()
-  ]).catch((error) => {
+  void Promise.all([purgeExpiredNoteSnapshots(), purgeExpiredTrashedNotes()]).catch((error) => {
     const message = error instanceof Error ? error.message : "Unknown recovery cleanup error";
     process.stderr.write(`[recovery] Startup cleanup failed: ${message}
 `);
   });
-  app.use(logger).use(createSessionMiddleware(authConfig)).use(express.urlencoded({ extended: false })).use(express.json({ limit: "50mb" })).use("/assets/images/", express.static(paths.imageDir)).post(
-    "/api/mcp/notes/create",
-    createMcpAuthMiddleware(authConfig, mcpAdminService),
-    useAsync(createMcpCreateNoteHandler())
-  ).post(
-    "/api/mcp/notes/update",
-    createMcpAuthMiddleware(authConfig, mcpAdminService),
-    useAsync(createMcpUpdateNoteHandler())
-  ).post(
-    "/api/mcp/tags/create",
-    createMcpAuthMiddleware(authConfig, mcpAdminService),
-    useAsync(createMcpCreateTagHandler())
-  ).post(
-    "/api/mcp/notes/delete",
-    createMcpAuthMiddleware(authConfig, mcpAdminService),
-    useAsync(createMcpDeleteNoteHandler())
-  ).use("/api", createApiRouter(authConfig, mcpAdminService)).get("/auth/login", createLoginPageHandler(authConfig)).post("/auth/login", createLoginPageSubmitHandler(authConfig)).post("/auth/logout", createLogoutPageHandler(authConfig)).use("/graphql/mcp", createMcpAuthMiddleware(authConfig, mcpAdminService), createHandler({
-    schema,
-    context: (req) => ({
-      authMode: authConfig.mode,
-      isAuthenticated: isAuthenticatedRequest(req.raw),
-      req: req.raw,
-      res: req.context.res
-    }),
-    validationRules: (_req, _args, specifiedRules) => {
-      return [...specifiedRules, createReadOnlyMcpValidationRule()];
-    }
-  })).use("/graphql", requireSessionForGraphql(authConfig), createHandler({
-    schema,
-    context: (req) => ({
-      authMode: authConfig.mode,
-      isAuthenticated: isAuthenticatedRequest(req.raw),
-      req: req.raw,
-      res: req.context.res
-    })
-  })).use((req, res, next) => {
-    if (shouldBlockClientRoute(authConfig, req.path, isAuthenticatedRequest(req))) {
-      const redirectPath = encodeURIComponent(req.originalUrl || "/");
-      res.redirect(303, `/auth/login?next=${redirectPath}`);
-      return;
-    }
-    next();
-  }).use(express.static(paths.clientDist, { extensions: ["html"] })).get(/.*/, (_req, res) => {
-    res.sendFile(paths.clientIndex);
-  }).use(createErrorHandler());
+  app.use(logger).use(createSessionMiddleware(authConfig)).use(express.urlencoded({ extended: false })).use(express.json({ limit: "50mb" })).use("/api", createApiRouter(authConfig, mcpAdminService)).use("/auth", createAuthPagesRouter(authConfig)).use("/graphql", createGraphqlRouter(authConfig, mcpAdminService)).use(createClientRouter(authConfig)).use(createErrorHandler());
   return app;
 };
 var app_default = createApp;

package/server/dist/app.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/app.ts"],"sourcesContent":["import express from 'express';\nimport path from 'path';\nimport { createHandler } from 'graphql-http/lib/use/express';\n\nimport logger from './modules/logger.js';\nimport { paths } from './paths.js';\nimport schema from './schema/index.js';\nimport { createApiRouter } from './urls.js';\nimport { createSessionMiddleware, isAuthenticatedRequest, requireSessionForGraphql } from './modules/auth-guard.js';\nimport type { AuthConfig } from './modules/auth-mode.js';\nimport {\n    createMcpAuthMiddleware,\n    createReadOnlyMcpValidationRule\n} from './modules/mcp-auth.js';\nimport { createMcpAdminService, type McpAdminService } from './modules/mcp-admin.js';\nimport {\n    createLoginPageHandler,\n    createLoginPageSubmitHandler,\n    createLogoutPageHandler\n} from './views/auth.js';\nimport useAsync from './modules/use-async.js';\nimport { createErrorHandler } from './modules/error-handler.js';\nimport {\n    createMcpCreateNoteHandler,\n    createMcpDeleteNoteHandler,\n    createMcpUpdateNoteHandler\n} from './views/note.js';\nimport { createMcpCreateTagHandler } from './views/tag.js';\nimport { purgeExpiredNoteSnapshots } from './modules/note-snapshot.js';\nimport { purgeExpiredTrashedNotes } from './modules/note-trash.js';\n\nconst shouldBlockClientRoute = (authConfig: AuthConfig, requestPath: string, authenticated: boolean) => {\n    if (authConfig.mode !== 'password' || authenticated) {\n        return false;\n    }\n\n    if (requestPath.startsWith('/api') || requestPath.startsWith('/graphql') || requestPath.startsWith('/auth')) {\n        return false;\n    }\n\n    return path.extname(requestPath) === '';\n};\n\nexport const createApp = (authConfig: AuthConfig) => {\n    const mcpAdminService = createMcpAdminService();\n    return createAppWithMcpAuth(authConfig, mcpAdminService);\n};\n\nexport const createAppWithMcpAuth = (authConfig: AuthConfig, mcpAdminService: McpAdminService) => {\n    const app = express();\n    app.locals.authConfig = authConfig;\n\n    void Promise.all([\n        purgeExpiredNoteSnapshots(),\n        purgeExpiredTrashedNotes()\n    ]).catch((error) => {\n        const message = error instanceof Error ? error.message : 'Unknown recovery cleanup error';\n        process.stderr.write(`[recovery] Startup cleanup failed: ${message}\\n`);\n    });\n\n    app.use(logger)\n        .use(createSessionMiddleware(authConfig))\n        .use(express.urlencoded({ extended: false }))\n        .use(express.json({ limit: '50mb' }))\n        .use('/assets/images/', express.static(paths.imageDir))\n        .post(\n            '/api/mcp/notes/create',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpCreateNoteHandler())\n        )\n        .post(\n            '/api/mcp/notes/update',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpUpdateNoteHandler())\n        )\n        .post(\n            '/api/mcp/tags/create',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpCreateTagHandler())\n        )\n        .post(\n            '/api/mcp/notes/delete',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpDeleteNoteHandler())\n        )\n        .use('/api', createApiRouter(authConfig, mcpAdminService))\n        .get('/auth/login', createLoginPageHandler(authConfig))\n        .post('/auth/login', createLoginPageSubmitHandler(authConfig))\n        .post('/auth/logout', createLogoutPageHandler(authConfig))\n        .use('/graphql/mcp', createMcpAuthMiddleware(authConfig, mcpAdminService), createHandler({\n            schema,\n            context: (req) => ({\n                authMode: authConfig.mode,\n                isAuthenticated: isAuthenticatedRequest(req.raw),\n                req: req.raw,\n                res: req.context.res\n            }),\n            validationRules: (_req, _args, specifiedRules) => {\n                return [...specifiedRules, createReadOnlyMcpValidationRule()];\n            }\n        }))\n        .use('/graphql', requireSessionForGraphql(authConfig), createHandler({\n            schema,\n            context: (req) => ({\n                authMode: authConfig.mode,\n                isAuthenticated: isAuthenticatedRequest(req.raw),\n                req: req.raw,\n                res: req.context.res\n            })\n        }))\n        .use((req, res, next) => {\n            if (shouldBlockClientRoute(authConfig, req.path, isAuthenticatedRequest(req))) {\n                const redirectPath = encodeURIComponent(req.originalUrl || '/');\n                res.redirect(303, `/auth/login?next=${redirectPath}`);\n                return;\n            }\n\n            next();\n        })\n        .use(express.static(paths.clientDist, { extensions: ['html'] }))\n        .get(/.*/, (_req, res) => {\n            res.sendFile(paths.clientIndex);\n        })\n        .use(createErrorHandler());\n\n    return app;\n};\n\nexport default createApp;\n"],"mappings":"AAAA,OAAO,aAAa;AACpB,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAE9B,OAAO,YAAY;AACnB,SAAS,aAAa;AACtB,OAAO,YAAY;AACnB,SAAS,uBAAuB;AAChC,SAAS,yBAAyB,wBAAwB,gCAAgC;AAE1F;AAAA,EACI;AAAA,EACA;AAAA,OACG;AACP,SAAS,6BAAmD;AAC5D;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,OACG;AACP,OAAO,cAAc;AACrB,SAAS,0BAA0B;AACnC;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,OACG;AACP,SAAS,iCAAiC;AAC1C,SAAS,iCAAiC;AAC1C,SAAS,gCAAgC;AAEzC,MAAM,yBAAyB,CAAC,YAAwB,aAAqB,kBAA2B;AACpG,MAAI,WAAW,SAAS,cAAc,eAAe;AACjD,WAAO;AAAA,EACX;AAEA,MAAI,YAAY,WAAW,MAAM,KAAK,YAAY,WAAW,UAAU,KAAK,YAAY,WAAW,OAAO,GAAG;AACzG,WAAO;AAAA,EACX;AAEA,SAAO,KAAK,QAAQ,WAAW,MAAM;AACzC;AAEO,MAAM,YAAY,CAAC,eAA2B;AACjD,QAAM,kBAAkB,sBAAsB;AAC9C,SAAO,qBAAqB,YAAY,eAAe;AAC3D;AAEO,MAAM,uBAAuB,CAAC,YAAwB,oBAAqC;AAC9F,QAAM,MAAM,QAAQ;AACpB,MAAI,OAAO,aAAa;AAExB,OAAK,QAAQ,IAAI;AAAA,IACb,0BAA0B;AAAA,IAC1B,yBAAyB;AAAA,EAC7B,CAAC,EAAE,MAAM,CAAC,UAAU;AAChB,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,YAAQ,OAAO,MAAM,sCAAsC,OAAO;AAAA,CAAI;AAAA,EAC1E,CAAC;AAED,MAAI,IAAI,MAAM,EACT,IAAI,wBAAwB,UAAU,CAAC,EACvC,IAAI,QAAQ,WAAW,EAAE,UAAU,MAAM,CAAC,CAAC,EAC3C,IAAI,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,CAAC,EACnC,IAAI,mBAAmB,QAAQ,OAAO,MAAM,QAAQ,CAAC,EACrD;AAAA,IACG;AAAA,IACA,wBAAwB,YAAY,eAAe;AAAA,IACnD,SAAS,2BAA2B,CAAC;AAAA,EACzC,EACC;AAAA,IACG;AAAA,IACA,wBAAwB,YAAY,eAAe;AAAA,IACnD,SAAS,2BAA2B,CAAC;AAAA,EACzC,EACC;AAAA,IACG;AAAA,IACA,wBAAwB,YAAY,eAAe;AAAA,IACnD,SAAS,0BAA0B,CAAC;AAAA,EACxC,EACC;AAAA,IACG;AAAA,IACA,wBAAwB,YAAY,eAAe;AAAA,IACnD,SAAS,2BAA2B,CAAC;AAAA,EACzC,EACC,IAAI,QAAQ,gBAAgB,YAAY,eAAe,CAAC,EACxD,IAAI,eAAe,uBAAuB,UAAU,CAAC,EACrD,KAAK,eAAe,6BAA6B,UAAU,CAAC,EAC5D,KAAK,gBAAgB,wBAAwB,UAAU,CAAC,EACxD,IAAI,gBAAgB,wBAAwB,YAAY,eAAe,GAAG,cAAc;AAAA,IACrF;AAAA,IACA,SAAS,CAAC,SAAS;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,iBAAiB,uBAAuB,IAAI,GAAG;AAAA,MAC/C,KAAK,IAAI;AAAA,MACT,KAAK,IAAI,QAAQ;AAAA,IACrB;AAAA,IACA,iBAAiB,CAAC,MAAM,OAAO,mBAAmB;AAC9C,aAAO,CAAC,GAAG,gBAAgB,gCAAgC,CAAC;AAAA,IAChE;AAAA,EACJ,CAAC,CAAC,EACD,IAAI,YAAY,yBAAyB,UAAU,GAAG,cAAc;AAAA,IACjE;AAAA,IACA,SAAS,CAAC,SAAS;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,iBAAiB,uBAAuB,IAAI,GAAG;AAAA,MAC/C,KAAK,IAAI;AAAA,MACT,KAAK,IAAI,QAAQ;AAAA,IACrB;AAAA,EACJ,CAAC,CAAC,EACD,IAAI,CAAC,KAAK,KAAK,SAAS;AACrB,QAAI,uBAAuB,YAAY,IAAI,MAAM,uBAAuB,GAAG,CAAC,GAAG;AAC3E,YAAM,eAAe,mBAAmB,IAAI,eAAe,GAAG;AAC9D,UAAI,SAAS,KAAK,oBAAoB,YAAY,EAAE;AACpD;AAAA,IACJ;AAEA,SAAK;AAAA,EACT,CAAC,EACA,IAAI,QAAQ,OAAO,MAAM,YAAY,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,EAC9D,IAAI,MAAM,CAAC,MAAM,QAAQ;AACtB,QAAI,SAAS,MAAM,WAAW;AAAA,EAClC,CAAC,EACA,IAAI,mBAAmB,CAAC;AAE7B,SAAO;AACX;AAEA,IAAO,cAAQ;","names":[]}
+{"version":3,"sources":["../src/app.ts"],"sourcesContent":["import express from 'express';\nimport { createMcpAdminService, type McpAdminService } from './features/mcp-admin/service.js';\nimport { purgeExpiredNoteSnapshots } from './features/note/services/snapshot.js';\nimport { purgeExpiredTrashedNotes } from './features/note/services/trash.js';\nimport { createSessionMiddleware } from './modules/auth-guard.js';\nimport type { AuthConfig } from './modules/auth-mode.js';\nimport { createErrorHandler } from './modules/error-handler.js';\nimport logger from './modules/logger.js';\nimport { createApiRouter, createAuthPagesRouter, createClientRouter, createGraphqlRouter } from './routes/index.js';\n\nexport const createApp = (authConfig: AuthConfig) => {\n    const mcpAdminService = createMcpAdminService();\n    return createAppWithMcpAuth(authConfig, mcpAdminService);\n};\n\nexport const createAppWithMcpAuth = (authConfig: AuthConfig, mcpAdminService: McpAdminService) => {\n    const app = express();\n    app.locals.authConfig = authConfig;\n\n    void Promise.all([purgeExpiredNoteSnapshots(), purgeExpiredTrashedNotes()]).catch((error) => {\n        const message = error instanceof Error ? error.message : 'Unknown recovery cleanup error';\n        process.stderr.write(`[recovery] Startup cleanup failed: ${message}\\n`);\n    });\n\n    app.use(logger)\n        .use(createSessionMiddleware(authConfig))\n        .use(express.urlencoded({ extended: false }))\n        .use(express.json({ limit: '50mb' }))\n        .use('/api', createApiRouter(authConfig, mcpAdminService))\n        .use('/auth', createAuthPagesRouter(authConfig))\n        .use('/graphql', createGraphqlRouter(authConfig, mcpAdminService))\n        .use(createClientRouter(authConfig))\n        .use(createErrorHandler());\n\n    return app;\n};\n\nexport default createApp;\n"],"mappings":"AAAA,OAAO,aAAa;AACpB,SAAS,6BAAmD;AAC5D,SAAS,iCAAiC;AAC1C,SAAS,gCAAgC;AACzC,SAAS,+BAA+B;AAExC,SAAS,0BAA0B;AACnC,OAAO,YAAY;AACnB,SAAS,iBAAiB,uBAAuB,oBAAoB,2BAA2B;AAEzF,MAAM,YAAY,CAAC,eAA2B;AACjD,QAAM,kBAAkB,sBAAsB;AAC9C,SAAO,qBAAqB,YAAY,eAAe;AAC3D;AAEO,MAAM,uBAAuB,CAAC,YAAwB,oBAAqC;AAC9F,QAAM,MAAM,QAAQ;AACpB,MAAI,OAAO,aAAa;AAExB,OAAK,QAAQ,IAAI,CAAC,0BAA0B,GAAG,yBAAyB,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU;AACzF,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,YAAQ,OAAO,MAAM,sCAAsC,OAAO;AAAA,CAAI;AAAA,EAC1E,CAAC;AAED,MAAI,IAAI,MAAM,EACT,IAAI,wBAAwB,UAAU,CAAC,EACvC,IAAI,QAAQ,WAAW,EAAE,UAAU,MAAM,CAAC,CAAC,EAC3C,IAAI,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,CAAC,EACnC,IAAI,QAAQ,gBAAgB,YAAY,eAAe,CAAC,EACxD,IAAI,SAAS,sBAAsB,UAAU,CAAC,EAC9C,IAAI,YAAY,oBAAoB,YAAY,eAAe,CAAC,EAChE,IAAI,mBAAmB,UAAU,CAAC,EAClC,IAAI,mBAAmB,CAAC;AAE7B,SAAO;AACX;AAEA,IAAO,cAAQ;","names":[]}

package/server/dist/features/auth/http/api.js

@@ -0,0 +1,43 @@
+import { createAppError } from "../../../modules/error-handler.js";
+import {
+  assertPasswordLoginAvailable,
+  buildSessionResponse,
+  compareSharedSecret,
+  destroySession,
+  regenerateSession
+} from "../service.js";
+const createLoginHandler = (authConfig) => {
+  return async (req, res) => {
+    const expectedPassword = assertPasswordLoginAvailable(authConfig);
+    const password = typeof req.body?.password === "string" ? req.body.password : "";
+    if (!password || !compareSharedSecret(expectedPassword, password)) {
+      throw createAppError(401, "UNAUTHORIZED", "Invalid password");
+    }
+    await regenerateSession(req);
+    req.session.authenticated = true;
+    res.status(200).json(buildSessionResponse(authConfig, req)).end();
+  };
+};
+const createLogoutHandler = (authConfig) => {
+  return async (req, res) => {
+    if (authConfig.mode === "password") {
+      await destroySession(req);
+    }
+    res.status(200).json({
+      mode: authConfig.mode,
+      authRequired: authConfig.mode === "password",
+      authenticated: false
+    }).end();
+  };
+};
+const createSessionStatusHandler = (authConfig) => {
+  return async (req, res) => {
+    res.status(200).json(buildSessionResponse(authConfig, req)).end();
+  };
+};
+export {
+  createLoginHandler,
+  createLogoutHandler,
+  createSessionStatusHandler
+};
+//# sourceMappingURL=api.js.map

package/server/dist/features/auth/http/api.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/features/auth/http/api.ts"],"sourcesContent":["import type { AuthConfig } from '~/modules/auth-mode.js';\nimport { createAppError } from '~/modules/error-handler.js';\nimport type { Controller } from '~/types/index.js';\nimport {\n    assertPasswordLoginAvailable,\n    buildSessionResponse,\n    compareSharedSecret,\n    destroySession,\n    regenerateSession,\n} from '../service.js';\n\nexport const createLoginHandler = (authConfig: AuthConfig): Controller => {\n    return async (req, res) => {\n        const expectedPassword = assertPasswordLoginAvailable(authConfig);\n        const password = typeof req.body?.password === 'string' ? req.body.password : '';\n\n        if (!password || !compareSharedSecret(expectedPassword, password)) {\n            throw createAppError(401, 'UNAUTHORIZED', 'Invalid password');\n        }\n\n        await regenerateSession(req);\n        req.session.authenticated = true;\n\n        res.status(200).json(buildSessionResponse(authConfig, req)).end();\n    };\n};\n\nexport const createLogoutHandler = (authConfig: AuthConfig): Controller => {\n    return async (req, res) => {\n        if (authConfig.mode === 'password') {\n            await destroySession(req);\n        }\n\n        res.status(200)\n            .json({\n                mode: authConfig.mode,\n                authRequired: authConfig.mode === 'password',\n                authenticated: false,\n            })\n            .end();\n    };\n};\n\nexport const createSessionStatusHandler = (authConfig: AuthConfig): Controller => {\n    return async (req, res) => {\n        res.status(200).json(buildSessionResponse(authConfig, req)).end();\n    };\n};\n"],"mappings":"AACA,SAAS,sBAAsB;AAE/B;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AAEA,MAAM,qBAAqB,CAAC,eAAuC;AACtE,SAAO,OAAO,KAAK,QAAQ;AACvB,UAAM,mBAAmB,6BAA6B,UAAU;AAChE,UAAM,WAAW,OAAO,IAAI,MAAM,aAAa,WAAW,IAAI,KAAK,WAAW;AAE9E,QAAI,CAAC,YAAY,CAAC,oBAAoB,kBAAkB,QAAQ,GAAG;AAC/D,YAAM,eAAe,KAAK,gBAAgB,kBAAkB;AAAA,IAChE;AAEA,UAAM,kBAAkB,GAAG;AAC3B,QAAI,QAAQ,gBAAgB;AAE5B,QAAI,OAAO,GAAG,EAAE,KAAK,qBAAqB,YAAY,GAAG,CAAC,EAAE,IAAI;AAAA,EACpE;AACJ;AAEO,MAAM,sBAAsB,CAAC,eAAuC;AACvE,SAAO,OAAO,KAAK,QAAQ;AACvB,QAAI,WAAW,SAAS,YAAY;AAChC,YAAM,eAAe,GAAG;AAAA,IAC5B;AAEA,QAAI,OAAO,GAAG,EACT,KAAK;AAAA,MACF,MAAM,WAAW;AAAA,MACjB,cAAc,WAAW,SAAS;AAAA,MAClC,eAAe;AAAA,IACnB,CAAC,EACA,IAAI;AAAA,EACb;AACJ;AAEO,MAAM,6BAA6B,CAAC,eAAuC;AAC9E,SAAO,OAAO,KAAK,QAAQ;AACvB,QAAI,OAAO,GAAG,EAAE,KAAK,qBAAqB,YAAY,GAAG,CAAC,EAAE,IAAI;AAAA,EACpE;AACJ;","names":[]}

package/server/dist/features/auth/http/login-page.js

@@ -0,0 +1,28 @@
+import { readFileSync } from "node:fs";
+const LOGIN_ERROR_TOKEN = "<!-- OCEAN_BRAIN_LOGIN_ERROR -->";
+const NEXT_PATH_TOKEN = "OCEAN_BRAIN_NEXT_PATH";
+const readLoginPageTemplate = () => {
+  if (true) {
+    return '<!doctype html>\n<html lang="en">\n<head>\n    <meta charset="utf-8" />\n    <meta name="viewport" content="width=device-width, initial-scale=1" />\n    <title>Ocean Brain Sign In</title>\n    <style>\n        :root {\n            color-scheme: light dark;\n            --surface: #f7f8fa;\n            --elevated: #fbfcfd;\n            --fg-default: #202631;\n            --fg-secondary: #626d7c;\n            --fg-tertiary: #8993a2;\n            --fg-placeholder: #98a2b0;\n            --fg-error: #a24545;\n            --fg-on-filled: #f6f8fb;\n            --border-subtle: #e5e9ee;\n            --border-focus: #757f8d;\n            --border-error: #d47777;\n            --accent-soft-danger: rgba(214, 141, 135, 0.18);\n            --accent-soft-primary: rgba(93, 102, 114, 0.12);\n            --cta: #23272d;\n            --cta-hover: #171a1f;\n            --page-bg: #f2f5f8;\n            font-family: "Pretendard Variable", "Pretendard", -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;\n            background: var(--page-bg);\n            color: var(--fg-default);\n        }\n        @media (prefers-color-scheme: dark) {\n            :root {\n                --surface: #16191e;\n                --elevated: #1d2229;\n                --fg-default: #e6ebf2;\n                --fg-secondary: #a9b3c2;\n                --fg-tertiary: #7f8998;\n                --fg-placeholder: #717b88;\n                --fg-error: #efaaaa;\n                --fg-on-filled: #12161c;\n                --border-subtle: #29303a;\n                --border-focus: #b4c0cf;\n                --border-error: #efaaaa;\n                --accent-soft-danger: rgba(215, 146, 139, 0.14);\n                --accent-soft-primary: rgba(184, 192, 202, 0.12);\n                --cta: #edf1f5;\n                --cta-hover: #f8fafc;\n                --page-bg: #101318;\n            }\n        }\n        * {\n            box-sizing: border-box;\n        }\n        body {\n            margin: 0;\n            min-height: 100vh;\n            display: grid;\n            place-items: center;\n            background: var(--page-bg);\n            padding: 24px;\n        }\n        .shell {\n            width: min(392px, 100%);\n        }\n        .brand {\n            margin-bottom: 14px;\n            color: var(--fg-tertiary);\n            font-size: 12px;\n            font-weight: 700;\n            line-height: 1.4;\n        }\n        .panel {\n            padding: 24px;\n            border: 1px solid var(--border-subtle);\n            border-radius: 16px;\n            background: var(--surface);\n            box-shadow:\n                inset 0 1px 0 rgba(255, 255, 255, 0.1),\n                0 1px 4px -2px rgba(23, 29, 38, 0.04);\n        }\n        h1 {\n            margin: 0;\n            color: var(--fg-default);\n            font-size: 1.375rem;\n            line-height: 1.3;\n            font-weight: 700;\n        }\n        .lead {\n            margin: 6px 0 22px;\n            color: var(--fg-tertiary);\n            font-size: 0.875rem;\n            line-height: 1.5;\n            font-weight: 500;\n        }\n        label {\n            display: block;\n            margin-bottom: 8px;\n            color: var(--fg-secondary);\n            font-size: 0.75rem;\n            line-height: 1.4;\n            font-weight: 600;\n        }\n        form {\n            display: grid;\n            gap: 16px;\n        }\n        .field {\n            display: grid;\n        }\n        input {\n            width: 100%;\n            box-sizing: border-box;\n            padding: 14px 16px;\n            border: 1px solid var(--border-subtle);\n            border-radius: 16px;\n            background: var(--elevated);\n            font-size: 16px;\n            color: var(--fg-default);\n            transition: border-color 0.18s ease, box-shadow 0.18s ease, background-color 0.18s ease;\n        }\n        input::placeholder {\n            color: var(--fg-placeholder);\n        }\n        input:focus {\n            outline: none;\n            border-color: var(--border-focus);\n            box-shadow: 0 0 0 4px var(--accent-soft-primary);\n        }\n        .hint {\n            margin-top: 10px;\n            color: var(--fg-tertiary);\n            font-size: 0.75rem;\n            line-height: 1.4;\n        }\n        button {\n            width: 100%;\n            border: 1px solid transparent;\n            border-radius: 14px;\n            background: var(--cta);\n            color: var(--fg-on-filled);\n            padding: 14px 18px;\n            font-size: 16px;\n            font-weight: 600;\n            cursor: pointer;\n            transition: transform 0.18s ease, box-shadow 0.18s ease, background-color 0.18s ease;\n        }\n        button:hover {\n            background: var(--cta-hover);\n        }\n        button:active {\n            transform: translateY(1px);\n        }\n        button:focus-visible {\n            outline: none;\n            box-shadow: 0 0 0 4px var(--accent-soft-primary);\n        }\n        .error {\n            margin-bottom: 18px;\n            padding: 13px 14px;\n            border: 1px solid var(--border-error);\n            border-radius: 14px;\n            background: var(--accent-soft-danger);\n            color: var(--fg-error);\n            font-size: 14px;\n            font-weight: 600;\n        }\n        @media (prefers-color-scheme: dark) {\n            .panel {\n                box-shadow:\n                    inset 0 1px 0 rgba(255, 255, 255, 0.03),\n                    0 1px 4px -2px rgba(0, 0, 0, 0.18);\n            }\n        }\n        @media (max-width: 640px) {\n            body {\n                place-items: stretch;\n                padding: 18px;\n            }\n            .shell {\n                width: 100%;\n                margin: auto 0;\n            }\n            .panel {\n                padding: 22px;\n            }\n        }\n    </style>\n</head>\n<body>\n    <main class="shell">\n        <div class="brand">Ocean Brain</div>\n        <section class="panel" aria-labelledby="login-title">\n            <h1 id="login-title">Sign in</h1>\n            <p class="lead">Enter the workspace password to continue.</p>\n            <!-- OCEAN_BRAIN_LOGIN_ERROR -->\n            <form method="post" action="/auth/login">\n                <input type="hidden" name="next" value="OCEAN_BRAIN_NEXT_PATH" />\n                <div class="field">\n                    <label for="password">Password</label>\n                    <input id="password" name="password" type="password" autocomplete="current-password" required autofocus />\n                </div>\n                <button type="submit">Sign in</button>\n            </form>\n            <div class="hint">This session must be authenticated before the workspace loads.</div>\n        </section>\n    </main>\n</body>\n</html>\n';
+  }
+  return readFileSync(new URL("./login-page.html", import.meta.url), "utf8");
+};
+const LOGIN_PAGE_TEMPLATE = readLoginPageTemplate();
+const escapeHtml = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
+const renderLoginError = (errorMessage) => {
+  if (!errorMessage) {
+    return "";
+  }
+  return `<div class="error" role="alert">${escapeHtml(errorMessage)}</div>`;
+};
+const renderLoginTemplate = (values) => {
+  return LOGIN_PAGE_TEMPLATE.replace(LOGIN_ERROR_TOKEN, values.errorBlock).replace(NEXT_PATH_TOKEN, values.nextPath);
+};
+const renderLoginPage = ({ nextPath, errorMessage }) => renderLoginTemplate({
+  errorBlock: renderLoginError(errorMessage),
+  nextPath: escapeHtml(nextPath)
+});
+export {
+  renderLoginPage
+};
+//# sourceMappingURL=login-page.js.map

package/server/dist/features/auth/http/login-page.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/features/auth/http/login-page.ts"],"sourcesContent":["import { readFileSync } from 'node:fs';\n\ndeclare const __LOGIN_PAGE_TEMPLATE__: string | undefined;\n\nconst LOGIN_ERROR_TOKEN = '<!-- OCEAN_BRAIN_LOGIN_ERROR -->';\nconst NEXT_PATH_TOKEN = 'OCEAN_BRAIN_NEXT_PATH';\n\nconst readLoginPageTemplate = () => {\n    if (typeof __LOGIN_PAGE_TEMPLATE__ === 'string') {\n        return __LOGIN_PAGE_TEMPLATE__;\n    }\n\n    return readFileSync(new URL('./login-page.html', import.meta.url), 'utf8');\n};\n\nconst LOGIN_PAGE_TEMPLATE = readLoginPageTemplate();\n\nconst escapeHtml = (value: string) =>\n    value\n        .replaceAll('&', '&amp;')\n        .replaceAll('<', '&lt;')\n        .replaceAll('>', '&gt;')\n        .replaceAll('\"', '&quot;')\n        .replaceAll(\"'\", '&#39;');\n\ninterface LoginPageParams {\n    nextPath: string;\n    errorMessage?: string;\n}\n\nconst renderLoginError = (errorMessage?: string) => {\n    if (!errorMessage) {\n        return '';\n    }\n\n    return `<div class=\"error\" role=\"alert\">${escapeHtml(errorMessage)}</div>`;\n};\n\nconst renderLoginTemplate = (values: { errorBlock: string; nextPath: string }) => {\n    return LOGIN_PAGE_TEMPLATE.replace(LOGIN_ERROR_TOKEN, values.errorBlock).replace(NEXT_PATH_TOKEN, values.nextPath);\n};\n\nexport const renderLoginPage = ({ nextPath, errorMessage }: LoginPageParams) =>\n    renderLoginTemplate({\n        errorBlock: renderLoginError(errorMessage),\n        nextPath: escapeHtml(nextPath),\n    });\n"],"mappings":"AAAA,SAAS,oBAAoB;AAI7B,MAAM,oBAAoB;AAC1B,MAAM,kBAAkB;AAExB,MAAM,wBAAwB,MAAM;AAChC,MAAI,MAA6C;AAC7C,WAAO;AAAA,EACX;AAEA,SAAO,aAAa,IAAI,IAAI,qBAAqB,YAAY,GAAG,GAAG,MAAM;AAC7E;AAEA,MAAM,sBAAsB,sBAAsB;AAElD,MAAM,aAAa,CAAC,UAChB,MACK,WAAW,KAAK,OAAO,EACvB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,QAAQ,EACxB,WAAW,KAAK,OAAO;AAOhC,MAAM,mBAAmB,CAAC,iBAA0B;AAChD,MAAI,CAAC,cAAc;AACf,WAAO;AAAA,EACX;AAEA,SAAO,mCAAmC,WAAW,YAAY,CAAC;AACtE;AAEA,MAAM,sBAAsB,CAAC,WAAqD;AAC9E,SAAO,oBAAoB,QAAQ,mBAAmB,OAAO,UAAU,EAAE,QAAQ,iBAAiB,OAAO,QAAQ;AACrH;AAEO,MAAM,kBAAkB,CAAC,EAAE,UAAU,aAAa,MACrD,oBAAoB;AAAA,EAChB,YAAY,iBAAiB,YAAY;AAAA,EACzC,UAAU,WAAW,QAAQ;AACjC,CAAC;","names":[]}

package/server/dist/features/auth/http/pages.js

@@ -0,0 +1,50 @@
+import { compareSharedSecret, destroySession, regenerateSession, sanitizeRedirectPath } from "../service.js";
+import { renderLoginPage } from "./login-page.js";
+const createLoginPageHandler = (authConfig) => {
+  return async (req, res) => {
+    if (authConfig.mode !== "password" || req.session?.authenticated) {
+      res.redirect(303, sanitizeRedirectPath(req.query.next));
+      return;
+    }
+    const nextPath = sanitizeRedirectPath(req.query.next);
+    res.status(200).type("html").send(renderLoginPage({ nextPath })).end();
+  };
+};
+const createLoginPageSubmitHandler = (authConfig) => {
+  return async (req, res) => {
+    const nextPath = sanitizeRedirectPath(req.body?.next);
+    if (authConfig.mode !== "password" || !authConfig.password) {
+      res.redirect(303, nextPath);
+      return;
+    }
+    const password = typeof req.body?.password === "string" ? req.body.password : "";
+    if (!password || !compareSharedSecret(authConfig.password, password)) {
+      res.status(401).type("html").send(
+        renderLoginPage({
+          nextPath,
+          errorMessage: "Invalid password"
+        })
+      ).end();
+      return;
+    }
+    await regenerateSession(req);
+    req.session.authenticated = true;
+    res.redirect(303, nextPath);
+  };
+};
+const createLogoutPageHandler = (authConfig) => {
+  return async (req, res) => {
+    if (authConfig.mode === "password") {
+      await destroySession(req);
+      res.redirect(303, "/auth/login");
+      return;
+    }
+    res.redirect(303, "/");
+  };
+};
+export {
+  createLoginPageHandler,
+  createLoginPageSubmitHandler,
+  createLogoutPageHandler
+};
+//# sourceMappingURL=pages.js.map

package/server/dist/features/auth/http/pages.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/features/auth/http/pages.ts"],"sourcesContent":["import type { AuthConfig } from '~/modules/auth-mode.js';\nimport type { Controller } from '~/types/index.js';\nimport { compareSharedSecret, destroySession, regenerateSession, sanitizeRedirectPath } from '../service.js';\nimport { renderLoginPage } from './login-page.js';\n\nexport const createLoginPageHandler = (authConfig: AuthConfig): Controller => {\n    return async (req, res) => {\n        if (authConfig.mode !== 'password' || req.session?.authenticated) {\n            res.redirect(303, sanitizeRedirectPath(req.query.next));\n            return;\n        }\n\n        const nextPath = sanitizeRedirectPath(req.query.next);\n        res.status(200).type('html').send(renderLoginPage({ nextPath })).end();\n    };\n};\n\nexport const createLoginPageSubmitHandler = (authConfig: AuthConfig): Controller => {\n    return async (req, res) => {\n        const nextPath = sanitizeRedirectPath(req.body?.next);\n\n        if (authConfig.mode !== 'password' || !authConfig.password) {\n            res.redirect(303, nextPath);\n            return;\n        }\n\n        const password = typeof req.body?.password === 'string' ? req.body.password : '';\n\n        if (!password || !compareSharedSecret(authConfig.password, password)) {\n            res.status(401)\n                .type('html')\n                .send(\n                    renderLoginPage({\n                        nextPath,\n                        errorMessage: 'Invalid password',\n                    }),\n                )\n                .end();\n            return;\n        }\n\n        await regenerateSession(req);\n        req.session.authenticated = true;\n\n        res.redirect(303, nextPath);\n    };\n};\n\nexport const createLogoutPageHandler = (authConfig: AuthConfig): Controller => {\n    return async (req, res) => {\n        if (authConfig.mode === 'password') {\n            await destroySession(req);\n            res.redirect(303, '/auth/login');\n            return;\n        }\n\n        res.redirect(303, '/');\n    };\n};\n"],"mappings":"AAEA,SAAS,qBAAqB,gBAAgB,mBAAmB,4BAA4B;AAC7F,SAAS,uBAAuB;AAEzB,MAAM,yBAAyB,CAAC,eAAuC;AAC1E,SAAO,OAAO,KAAK,QAAQ;AACvB,QAAI,WAAW,SAAS,cAAc,IAAI,SAAS,eAAe;AAC9D,UAAI,SAAS,KAAK,qBAAqB,IAAI,MAAM,IAAI,CAAC;AACtD;AAAA,IACJ;AAEA,UAAM,WAAW,qBAAqB,IAAI,MAAM,IAAI;AACpD,QAAI,OAAO,GAAG,EAAE,KAAK,MAAM,EAAE,KAAK,gBAAgB,EAAE,SAAS,CAAC,CAAC,EAAE,IAAI;AAAA,EACzE;AACJ;AAEO,MAAM,+BAA+B,CAAC,eAAuC;AAChF,SAAO,OAAO,KAAK,QAAQ;AACvB,UAAM,WAAW,qBAAqB,IAAI,MAAM,IAAI;AAEpD,QAAI,WAAW,SAAS,cAAc,CAAC,WAAW,UAAU;AACxD,UAAI,SAAS,KAAK,QAAQ;AAC1B;AAAA,IACJ;AAEA,UAAM,WAAW,OAAO,IAAI,MAAM,aAAa,WAAW,IAAI,KAAK,WAAW;AAE9E,QAAI,CAAC,YAAY,CAAC,oBAAoB,WAAW,UAAU,QAAQ,GAAG;AAClE,UAAI,OAAO,GAAG,EACT,KAAK,MAAM,EACX;AAAA,QACG,gBAAgB;AAAA,UACZ;AAAA,UACA,cAAc;AAAA,QAClB,CAAC;AAAA,MACL,EACC,IAAI;AACT;AAAA,IACJ;AAEA,UAAM,kBAAkB,GAAG;AAC3B,QAAI,QAAQ,gBAAgB;AAE5B,QAAI,SAAS,KAAK,QAAQ;AAAA,EAC9B;AACJ;AAEO,MAAM,0BAA0B,CAAC,eAAuC;AAC3E,SAAO,OAAO,KAAK,QAAQ;AACvB,QAAI,WAAW,SAAS,YAAY;AAChC,YAAM,eAAe,GAAG;AACxB,UAAI,SAAS,KAAK,aAAa;AAC/B;AAAA,IACJ;AAEA,QAAI,SAAS,KAAK,GAAG;AAAA,EACzB;AACJ;","names":[]}

package/server/dist/features/auth/service.js

@@ -0,0 +1,94 @@
+import crypto from "crypto";
+import { createAppError } from "../../modules/error-handler.js";
+const createPasswordHash = async (password) => {
+  const salt = crypto.randomBytes(16).toString("hex");
+  const hash = crypto.pbkdf2Sync(password, salt, 1e3, 64, "sha512").toString("hex");
+  return `${salt}:${hash}`;
+};
+const comparePassword = async (password, storedHash) => {
+  const [salt, hash] = storedHash.split(":");
+  const newHash = crypto.pbkdf2Sync(password, salt, 1e3, 64, "sha512").toString("hex");
+  return hash === newHash;
+};
+const compareSharedSecret = (expected, received) => {
+  const expectedBuffer = Buffer.from(expected, "utf8");
+  const receivedBuffer = Buffer.from(received, "utf8");
+  if (expectedBuffer.length !== receivedBuffer.length) {
+    return false;
+  }
+  return crypto.timingSafeEqual(expectedBuffer, receivedBuffer);
+};
+const buildSessionResponse = (authConfig, req) => ({
+  mode: authConfig.mode,
+  authRequired: authConfig.mode === "password",
+  authenticated: authConfig.mode === "password" ? Boolean(req.session?.authenticated) : false
+});
+const assertPasswordLoginAvailable = (authConfig) => {
+  if (authConfig.mode !== "password" || !authConfig.password) {
+    throw createAppError(409, "AUTH_DISABLED", "Login is unavailable while auth mode is disabled.");
+  }
+  return authConfig.password;
+};
+const regenerateSession = async (req) => {
+  await new Promise((resolve, reject) => {
+    req.session.regenerate((error) => {
+      if (error) {
+        reject(error);
+        return;
+      }
+      resolve();
+    });
+  });
+};
+const destroySession = async (req) => {
+  if (!req.session) {
+    return;
+  }
+  await new Promise((resolve, reject) => {
+    req.session.destroy((error) => {
+      if (error) {
+        reject(error);
+        return;
+      }
+      resolve();
+    });
+  });
+};
+const sanitizeRedirectPath = (value) => {
+  if (typeof value !== "string" || value.length === 0) {
+    return "/";
+  }
+  if (value.startsWith("/")) {
+    if (value.startsWith("//") || value.startsWith("/auth/login")) {
+      return "/";
+    }
+    return value;
+  }
+  try {
+    const redirectUrl = new URL(value);
+    const hostname = redirectUrl.hostname.toLowerCase();
+    if (!["http:", "https:"].includes(redirectUrl.protocol)) {
+      return "/";
+    }
+    if (!["localhost", "127.0.0.1", "::1", "[::1]"].includes(hostname)) {
+      return "/";
+    }
+    if (redirectUrl.pathname.startsWith("/auth/login")) {
+      return "/";
+    }
+    return `${redirectUrl.origin}${redirectUrl.pathname}${redirectUrl.search}${redirectUrl.hash}`;
+  } catch {
+    return "/";
+  }
+};
+export {
+  assertPasswordLoginAvailable,
+  buildSessionResponse,
+  comparePassword,
+  compareSharedSecret,
+  createPasswordHash,
+  destroySession,
+  regenerateSession,
+  sanitizeRedirectPath
+};
+//# sourceMappingURL=service.js.map

package/server/dist/features/auth/service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/features/auth/service.ts"],"sourcesContent":["import crypto from 'crypto';\nimport type { Request } from 'express';\nimport type { AuthConfig } from '~/modules/auth-mode.js';\nimport { createAppError } from '~/modules/error-handler.js';\n\nexport const createPasswordHash = async (password: string) => {\n    const salt = crypto.randomBytes(16).toString('hex');\n    const hash = crypto.pbkdf2Sync(password, salt, 1000, 64, 'sha512').toString('hex');\n    return `${salt}:${hash}`;\n};\n\nexport const comparePassword = async (password: string, storedHash: string) => {\n    const [salt, hash] = storedHash.split(':');\n    const newHash = crypto.pbkdf2Sync(password, salt, 1000, 64, 'sha512').toString('hex');\n    return hash === newHash;\n};\n\nexport const compareSharedSecret = (expected: string, received: string) => {\n    const expectedBuffer = Buffer.from(expected, 'utf8');\n    const receivedBuffer = Buffer.from(received, 'utf8');\n\n    if (expectedBuffer.length !== receivedBuffer.length) {\n        return false;\n    }\n\n    return crypto.timingSafeEqual(expectedBuffer, receivedBuffer);\n};\n\nexport const buildSessionResponse = (authConfig: AuthConfig, req: Request) => ({\n    mode: authConfig.mode,\n    authRequired: authConfig.mode === 'password',\n    authenticated: authConfig.mode === 'password' ? Boolean(req.session?.authenticated) : false,\n});\n\nexport const assertPasswordLoginAvailable = (authConfig: AuthConfig) => {\n    if (authConfig.mode !== 'password' || !authConfig.password) {\n        throw createAppError(409, 'AUTH_DISABLED', 'Login is unavailable while auth mode is disabled.');\n    }\n\n    return authConfig.password;\n};\n\nexport const regenerateSession = async (req: Request) => {\n    await new Promise<void>((resolve, reject) => {\n        req.session.regenerate((error) => {\n            if (error) {\n                reject(error);\n                return;\n            }\n\n            resolve();\n        });\n    });\n};\n\nexport const destroySession = async (req: Request) => {\n    if (!req.session) {\n        return;\n    }\n\n    await new Promise<void>((resolve, reject) => {\n        req.session.destroy((error) => {\n            if (error) {\n                reject(error);\n                return;\n            }\n\n            resolve();\n        });\n    });\n};\n\nexport const sanitizeRedirectPath = (value: unknown) => {\n    if (typeof value !== 'string' || value.length === 0) {\n        return '/';\n    }\n\n    if (value.startsWith('/')) {\n        if (value.startsWith('//') || value.startsWith('/auth/login')) {\n            return '/';\n        }\n\n        return value;\n    }\n\n    try {\n        const redirectUrl = new URL(value);\n        const hostname = redirectUrl.hostname.toLowerCase();\n\n        if (!['http:', 'https:'].includes(redirectUrl.protocol)) {\n            return '/';\n        }\n\n        if (!['localhost', '127.0.0.1', '::1', '[::1]'].includes(hostname)) {\n            return '/';\n        }\n\n        if (redirectUrl.pathname.startsWith('/auth/login')) {\n            return '/';\n        }\n\n        return `${redirectUrl.origin}${redirectUrl.pathname}${redirectUrl.search}${redirectUrl.hash}`;\n    } catch {\n        return '/';\n    }\n};\n"],"mappings":"AAAA,OAAO,YAAY;AAGnB,SAAS,sBAAsB;AAExB,MAAM,qBAAqB,OAAO,aAAqB;AAC1D,QAAM,OAAO,OAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AAClD,QAAM,OAAO,OAAO,WAAW,UAAU,MAAM,KAAM,IAAI,QAAQ,EAAE,SAAS,KAAK;AACjF,SAAO,GAAG,IAAI,IAAI,IAAI;AAC1B;AAEO,MAAM,kBAAkB,OAAO,UAAkB,eAAuB;AAC3E,QAAM,CAAC,MAAM,IAAI,IAAI,WAAW,MAAM,GAAG;AACzC,QAAM,UAAU,OAAO,WAAW,UAAU,MAAM,KAAM,IAAI,QAAQ,EAAE,SAAS,KAAK;AACpF,SAAO,SAAS;AACpB;AAEO,MAAM,sBAAsB,CAAC,UAAkB,aAAqB;AACvE,QAAM,iBAAiB,OAAO,KAAK,UAAU,MAAM;AACnD,QAAM,iBAAiB,OAAO,KAAK,UAAU,MAAM;AAEnD,MAAI,eAAe,WAAW,eAAe,QAAQ;AACjD,WAAO;AAAA,EACX;AAEA,SAAO,OAAO,gBAAgB,gBAAgB,cAAc;AAChE;AAEO,MAAM,uBAAuB,CAAC,YAAwB,SAAkB;AAAA,EAC3E,MAAM,WAAW;AAAA,EACjB,cAAc,WAAW,SAAS;AAAA,EAClC,eAAe,WAAW,SAAS,aAAa,QAAQ,IAAI,SAAS,aAAa,IAAI;AAC1F;AAEO,MAAM,+BAA+B,CAAC,eAA2B;AACpE,MAAI,WAAW,SAAS,cAAc,CAAC,WAAW,UAAU;AACxD,UAAM,eAAe,KAAK,iBAAiB,mDAAmD;AAAA,EAClG;AAEA,SAAO,WAAW;AACtB;AAEO,MAAM,oBAAoB,OAAO,QAAiB;AACrD,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AACzC,QAAI,QAAQ,WAAW,CAAC,UAAU;AAC9B,UAAI,OAAO;AACP,eAAO,KAAK;AACZ;AAAA,MACJ;AAEA,cAAQ;AAAA,IACZ,CAAC;AAAA,EACL,CAAC;AACL;AAEO,MAAM,iBAAiB,OAAO,QAAiB;AAClD,MAAI,CAAC,IAAI,SAAS;AACd;AAAA,EACJ;AAEA,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AACzC,QAAI,QAAQ,QAAQ,CAAC,UAAU;AAC3B,UAAI,OAAO;AACP,eAAO,KAAK;AACZ;AAAA,MACJ;AAEA,cAAQ;AAAA,IACZ,CAAC;AAAA,EACL,CAAC;AACL;AAEO,MAAM,uBAAuB,CAAC,UAAmB;AACpD,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACjD,WAAO;AAAA,EACX;AAEA,MAAI,MAAM,WAAW,GAAG,GAAG;AACvB,QAAI,MAAM,WAAW,IAAI,KAAK,MAAM,WAAW,aAAa,GAAG;AAC3D,aAAO;AAAA,IACX;AAEA,WAAO;AAAA,EACX;AAEA,MAAI;AACA,UAAM,cAAc,IAAI,IAAI,KAAK;AACjC,UAAM,WAAW,YAAY,SAAS,YAAY;AAElD,QAAI,CAAC,CAAC,SAAS,QAAQ,EAAE,SAAS,YAAY,QAAQ,GAAG;AACrD,aAAO;AAAA,IACX;AAEA,QAAI,CAAC,CAAC,aAAa,aAAa,OAAO,OAAO,EAAE,SAAS,QAAQ,GAAG;AAChE,aAAO;AAAA,IACX;AAEA,QAAI,YAAY,SAAS,WAAW,aAAa,GAAG;AAChD,aAAO;AAAA,IACX;AAEA,WAAO,GAAG,YAAY,MAAM,GAAG,YAAY,QAAQ,GAAG,YAAY,MAAM,GAAG,YAAY,IAAI;AAAA,EAC/F,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;","names":[]}