ocean-brain 0.7.5 → 0.8.1

package/server/dist/features/auth/service.js

@@ -5,6 +5,7 @@ import { sanitizeRedirectPath } from "../../modules/auth-redirect.js";
 import { createAppError } from "../../modules/error-handler.js";
 const AUTH_SESSION_GENERATION_HEADER = "X-Ocean-Brain-Session-Generation";
 const AUTH_SESSION_GENERATION = crypto.randomUUID();
+const getSessionGeneration = () => AUTH_SESSION_GENERATION;
 const createPasswordHash = async (password) => {
   const salt = crypto.randomBytes(16).toString("hex");
   const hash = crypto.pbkdf2Sync(password, salt, 1e3, 64, "sha512").toString("hex");
@@ -18,7 +19,7 @@ const comparePassword = async (password, storedHash) => {
 const compareSharedSecret = compareCommonSharedSecret;
 const buildSessionResponse = (authConfig, req) => buildAuthSessionResponse(authConfig, Boolean(req.session?.authenticated));
 const setSessionStatusHeaders = (res) => {
-  res.set(AUTH_SESSION_GENERATION_HEADER, AUTH_SESSION_GENERATION);
+  res.set(AUTH_SESSION_GENERATION_HEADER, getSessionGeneration());
   res.set("Cache-Control", "no-store");
 };
 const refreshCsrfToken = (req) => {
@@ -64,9 +65,9 @@ export {
   compareSharedSecret,
   createPasswordHash,
   destroySession,
+  getSessionGeneration,
   refreshCsrfToken,
   regenerateSession,
   sanitizeRedirectPath,
   setSessionStatusHeaders
 };
-//# sourceMappingURL=service.js.map

package/server/dist/features/cache/graphql/cache.field.resolver.js

@@ -2,4 +2,3 @@ const cacheFieldResolvers = {};
 export {
   cacheFieldResolvers
 };
-//# sourceMappingURL=cache.field.resolver.js.map

package/server/dist/features/cache/graphql/cache.mutation.resolver.js

@@ -46,4 +46,3 @@ export {
   createDeleteCacheMutationResolver,
   createSetCacheMutationResolver
 };
-//# sourceMappingURL=cache.mutation.resolver.js.map

package/server/dist/features/cache/graphql/cache.query.resolver.js

@@ -18,4 +18,3 @@ export {
   createAllCachesQueryResolver,
   createCacheQueryResolver
 };
-//# sourceMappingURL=cache.query.resolver.js.map

package/server/dist/features/cache/graphql/cache.resolver.js

@@ -9,4 +9,3 @@ const cacheResolvers = {
 export {
   cacheResolvers
 };
-//# sourceMappingURL=cache.resolver.js.map

package/server/dist/features/cache/graphql/cache.type-defs.js

@@ -29,4 +29,3 @@ export {
   cacheType,
   cacheTypeDefs
 };
-//# sourceMappingURL=cache.type-defs.js.map

package/server/dist/features/cache/graphql/index.js

@@ -18,4 +18,3 @@ export {
   createDeleteCacheMutationResolver,
   createSetCacheMutationResolver
 };
-//# sourceMappingURL=index.js.map

package/server/dist/features/image/graphql/image.field.resolver.js

@@ -11,4 +11,3 @@ export {
   createImageReferenceCountFieldResolver,
   imageFieldResolvers
 };
-//# sourceMappingURL=image.field.resolver.js.map

package/server/dist/features/image/graphql/image.mutation.resolver.js

@@ -18,4 +18,3 @@ export {
   createDeleteImageMutationResolver,
   imageMutationResolvers
 };
-//# sourceMappingURL=image.mutation.resolver.js.map

package/server/dist/features/image/graphql/image.query.resolver.js

@@ -37,4 +37,3 @@ export {
   createImageQueryResolver,
   imageQueryResolvers
 };
-//# sourceMappingURL=image.query.resolver.js.map

package/server/dist/features/image/graphql/image.resolver.js

@@ -9,4 +9,3 @@ const imageResolvers = {
 export {
   imageResolvers
 };
-//# sourceMappingURL=image.resolver.js.map

package/server/dist/features/image/graphql/image.type-defs.js

@@ -28,4 +28,3 @@ const imageTypeDefs = gql`
 export {
   imageTypeDefs
 };
-//# sourceMappingURL=image.type-defs.js.map

package/server/dist/features/image/graphql/index.js

@@ -13,4 +13,3 @@ export {
   imageResolvers,
   imageTypeDefs
 };
-//# sourceMappingURL=index.js.map

package/server/dist/features/image/http/upload.js

@@ -1,48 +1,58 @@
 import { createAppError } from "../../../modules/error-handler.js";
-import { fetchRemoteImage, RemoteImageFetchError } from "../services/remote-fetch.js";
 import { persistUploadedImage } from "../services/upload.js";
+import { ImageValidationError, normalizeImageContentType, validateImagePayload } from "../services/validation.js";
+const IMAGE_DATA_URL_PATTERN = /^data:(image\/[a-z0-9.+-]+);base64,([A-Za-z0-9+/]+={0,2})$/i;
 const createUploadResponse = (image) => {
   return {
     id: image.id,
     url: image.url
   };
 };
+const parseImageDataUrl = (image) => {
+  const match = IMAGE_DATA_URL_PATTERN.exec(image);
+  if (!match || !match[2] || match[2].length % 4 !== 0) {
+    return null;
+  }
+  return {
+    base64: match[2],
+    contentType: normalizeImageContentType(match[1])
+  };
+};
+const createUploadValidationError = (error) => {
+  if (error.code === "IMAGE_UNSUPPORTED_CONTENT_TYPE") {
+    return createAppError(415, "IMAGE_UPLOAD_UNSUPPORTED_TYPE", "Uploaded image content type is not supported.");
+  }
+  return createAppError(400, "INVALID_IMAGE_UPLOAD", "Uploaded image content is invalid.");
+};
 const createUploadImageHandler = (persistImage = persistUploadedImage) => {
   return async (req, res) => {
     const { image } = req.body ?? {};
-    if (typeof image !== "string" || !image.match(/data:image\/\s*(\w+);base64,/)) {
+    if (typeof image !== "string") {
       throw createAppError(400, "INVALID_IMAGE_UPLOAD", "No image uploaded");
     }
-    const [info, data] = image.split(",");
-    const buffer = Buffer.from(data, "base64");
-    const extension = info.split(";")[0]?.split("/")[1] ?? "";
-    const uploadedImage = await persistImage({
-      buffer,
-      extension
-    });
-    res.status(200).json(createUploadResponse(uploadedImage)).end();
-  };
-};
-const createUploadImageFromSrcHandler = (fetchImage = fetchRemoteImage, persistImage = persistUploadedImage) => {
-  return async (req, res) => {
-    const src = String(req.body?.src ?? "");
+    const parsedImage = parseImageDataUrl(image);
+    if (!parsedImage) {
+      throw createAppError(400, "INVALID_IMAGE_UPLOAD", "No image uploaded");
+    }
+    let validatedImage;
     try {
-      const remoteImage = await fetchImage(src);
-      const uploadedImage = await persistImage({
-        buffer: remoteImage.buffer,
-        extension: remoteImage.extension
+      validatedImage = validateImagePayload({
+        buffer: Buffer.from(parsedImage.base64, "base64"),
+        contentType: parsedImage.contentType
       });
-      res.status(200).json(createUploadResponse(uploadedImage)).end();
     } catch (error) {
-      if (error instanceof RemoteImageFetchError) {
-        throw createAppError(error.status, error.code, error.message);
+      if (error instanceof ImageValidationError) {
+        throw createUploadValidationError(error);
       }
       throw error;
     }
+    const uploadedImage = await persistImage({
+      buffer: validatedImage.buffer,
+      extension: validatedImage.extension
+    });
+    res.status(200).json(createUploadResponse(uploadedImage)).end();
   };
 };
 export {
-  createUploadImageFromSrcHandler,
   createUploadImageHandler
 };
-//# sourceMappingURL=upload.js.map

package/server/dist/features/image/services/delete.js

@@ -49,4 +49,3 @@ export {
   deleteImageById,
   resolveStoredImagePath
 };
-//# sourceMappingURL=delete.js.map

package/server/dist/features/image/services/upload.js

@@ -107,4 +107,3 @@ export {
   hashImageBuffer,
   persistUploadedImage
 };
-//# sourceMappingURL=upload.js.map

package/server/dist/features/image/services/validation.js

@@ -0,0 +1,110 @@
+class ImageValidationError extends Error {
+  code;
+  status;
+  constructor(code, status, message) {
+    super(message);
+    this.name = "ImageValidationError";
+    this.code = code;
+    this.status = status;
+  }
+}
+const SUPPORTED_IMAGE_TYPES = /* @__PURE__ */ new Map([
+  ["image/png", "png"],
+  ["image/jpeg", "jpg"],
+  ["image/gif", "gif"],
+  ["image/webp", "webp"],
+  ["image/bmp", "bmp"],
+  ["image/avif", "avif"]
+]);
+const startsWithBytes = (buffer, bytes) => {
+  return bytes.every((byte, index) => buffer[index] === byte);
+};
+const readAscii = (buffer, start, end) => {
+  return buffer.subarray(start, end).toString("ascii");
+};
+const hasPngSignature = (buffer) => {
+  return buffer.length >= 8 && startsWithBytes(buffer, [137, 80, 78, 71, 13, 10, 26, 10]);
+};
+const hasJpegSignature = (buffer) => {
+  return buffer.length >= 3 && startsWithBytes(buffer, [255, 216, 255]);
+};
+const hasGifSignature = (buffer) => {
+  return buffer.length >= 6 && ["GIF87a", "GIF89a"].includes(readAscii(buffer, 0, 6));
+};
+const hasWebpSignature = (buffer) => {
+  return buffer.length >= 12 && readAscii(buffer, 0, 4) === "RIFF" && readAscii(buffer, 8, 12) === "WEBP";
+};
+const hasBmpSignature = (buffer) => {
+  return buffer.length >= 2 && readAscii(buffer, 0, 2) === "BM";
+};
+const hasAvifSignature = (buffer) => {
+  if (buffer.length < 16 || readAscii(buffer, 4, 8) !== "ftyp") {
+    return false;
+  }
+  const ftypBoxSize = buffer.readUInt32BE(0);
+  if (ftypBoxSize !== 0 && (ftypBoxSize < 16 || ftypBoxSize > buffer.length)) {
+    return false;
+  }
+  const isAvifBrand = (brand) => brand === "avif" || brand === "avis";
+  const majorBrand = readAscii(buffer, 8, 12);
+  if (isAvifBrand(majorBrand)) {
+    return true;
+  }
+  const boxEnd = ftypBoxSize === 0 ? buffer.length : ftypBoxSize;
+  for (let offset = 16; offset + 4 <= boxEnd; offset += 4) {
+    const brand = readAscii(buffer, offset, offset + 4);
+    if (isAvifBrand(brand)) {
+      return true;
+    }
+  }
+  return false;
+};
+const hasExpectedImageSignature = (contentType, buffer) => {
+  switch (contentType) {
+    case "image/png":
+      return hasPngSignature(buffer);
+    case "image/jpeg":
+      return hasJpegSignature(buffer);
+    case "image/gif":
+      return hasGifSignature(buffer);
+    case "image/webp":
+      return hasWebpSignature(buffer);
+    case "image/bmp":
+      return hasBmpSignature(buffer);
+    case "image/avif":
+      return hasAvifSignature(buffer);
+    default:
+      return false;
+  }
+};
+const normalizeImageContentType = (contentType) => {
+  return contentType?.split(";")[0]?.trim().toLowerCase() ?? "";
+};
+const getSupportedImageExtension = (contentType) => {
+  return SUPPORTED_IMAGE_TYPES.get(normalizeImageContentType(contentType));
+};
+const validateImagePayload = ({
+  buffer,
+  contentType: rawContentType
+}) => {
+  const contentType = normalizeImageContentType(rawContentType);
+  const extension = SUPPORTED_IMAGE_TYPES.get(contentType);
+  if (!extension) {
+    throw new ImageValidationError("IMAGE_UNSUPPORTED_CONTENT_TYPE", 415, "Image content type is not supported.");
+  }
+  const hasExpectedSignature = hasExpectedImageSignature(contentType, buffer);
+  if (!hasExpectedSignature) {
+    throw new ImageValidationError("IMAGE_INVALID_CONTENT", 415, "Image content does not match the declared type.");
+  }
+  return {
+    buffer,
+    contentType,
+    extension
+  };
+};
+export {
+  ImageValidationError,
+  getSupportedImageExtension,
+  normalizeImageContentType,
+  validateImagePayload
+};

package/server/dist/features/mcp-admin/http/handlers.js

@@ -1,8 +1,16 @@
+import { getOceanBrainVersionInfo } from "../../../modules/app-version.js";
 import { createAppError } from "../../../modules/error-handler.js";
 import { createMcpAdminService } from "../service.js";
+const createMcpAdminStatusResponse = async (service) => {
+  const status = await service.getStatus();
+  return {
+    ...status,
+    server: getOceanBrainVersionInfo()
+  };
+};
 const createMcpAdminStatusHandler = (service = createMcpAdminService()) => {
   return async (_req, res) => {
-    const status = await service.getStatus();
+    const status = await createMcpAdminStatusResponse(service);
     res.status(200).json(status).end();
   };
 };
@@ -13,7 +21,7 @@ const createMcpAdminSetEnabledHandler = (service = createMcpAdminService()) => {
       throw createAppError(400, "INVALID_MCP_ENABLED", "enabled must be a boolean.");
     }
     await service.setEnabled(enabled);
-    const status = await service.getStatus();
+    const status = await createMcpAdminStatusResponse(service);
     res.status(200).json(status).end();
   };
 };
@@ -29,7 +37,7 @@ const createMcpAdminRotateTokenHandler = (service = createMcpAdminService()) =>
 const createMcpAdminRevokeTokenHandler = (service = createMcpAdminService()) => {
   return async (_req, res) => {
     await service.revokeActiveToken();
-    const status = await service.getStatus();
+    const status = await createMcpAdminStatusResponse(service);
     res.status(200).json(status).end();
   };
 };
@@ -39,4 +47,3 @@ export {
   createMcpAdminSetEnabledHandler,
   createMcpAdminStatusHandler
 };
-//# sourceMappingURL=handlers.js.map

package/server/dist/features/mcp-admin/service.js

@@ -85,4 +85,3 @@ const createMcpAdminService = (db = models) => {
 export {
   createMcpAdminService
 };
-//# sourceMappingURL=service.js.map

package/server/dist/features/note/graphql/index.js

@@ -5,4 +5,3 @@ export {
   noteResolvers,
   noteTypeDefs
 };
-//# sourceMappingURL=index.js.map

package/server/dist/features/note/graphql/note.field.resolver.js

@@ -24,4 +24,3 @@ export {
   noteFieldResolvers,
   noteSnapshotFieldResolvers
 };
-//# sourceMappingURL=note.field.resolver.js.map

package/server/dist/features/note/graphql/note.mutation.resolver.js

@@ -293,4 +293,3 @@ const noteMutationResolvers = {
 export {
   noteMutationResolvers
 };
-//# sourceMappingURL=note.mutation.resolver.js.map

package/server/dist/features/note/graphql/note.query.resolver.js

@@ -435,4 +435,3 @@ export {
   createNoteQueryResolver,
   noteQueryResolvers
 };
-//# sourceMappingURL=note.query.resolver.js.map

package/server/dist/features/note/graphql/note.resolver.js

@@ -12,4 +12,3 @@ export {
   createAllNotesQueryResolver2 as createAllNotesQueryResolver,
   noteResolvers
 };
-//# sourceMappingURL=note.resolver.js.map

package/server/dist/features/note/graphql/note.type-defs.js

@@ -319,4 +319,3 @@ export {
   noteType,
   noteTypeDefs
 };
-//# sourceMappingURL=note.type-defs.js.map

package/server/dist/features/note/http/mcp.js

@@ -38,15 +38,6 @@ const resolveOptionalString = (value, code, message) => {
   }
   throw createAppError(400, code, message);
 };
-const resolveOptionalBoolean = (value, code, message) => {
-  if (value === void 0) {
-    return void 0;
-  }
-  if (typeof value === "boolean") {
-    return value;
-  }
-  throw createAppError(400, code, message);
-};
 const resolveMetadataPropertyPatch = (value) => {
   if (value === void 0) {
     return void 0;
@@ -117,24 +108,6 @@ const resolveMarkdownWritePolicy = (value) => {
     }
     policy.allowNoop = value.allowNoop;
   }
-  if (value.maxChangedChars !== void 0) {
-    if (!isNonNegativeInteger(value.maxChangedChars)) {
-      throw createAppError(400, "INVALID_MARKDOWN_POLICY", "maxChangedChars must be a non-negative integer.");
-    }
-    policy.maxChangedChars = value.maxChangedChars;
-  }
-  if (value.maxChangedLines !== void 0) {
-    if (!isNonNegativeInteger(value.maxChangedLines)) {
-      throw createAppError(400, "INVALID_MARKDOWN_POLICY", "maxChangedLines must be a non-negative integer.");
-    }
-    policy.maxChangedLines = value.maxChangedLines;
-  }
-  if (value.diffPreviewMaxChars !== void 0) {
-    if (!isNonNegativeInteger(value.diffPreviewMaxChars)) {
-      throw createAppError(400, "INVALID_MARKDOWN_POLICY", "diffPreviewMaxChars must be a non-negative integer.");
-    }
-    policy.diffPreviewMaxChars = value.diffPreviewMaxChars;
-  }
   if (value.preserveTags !== void 0) {
     if (!PRESERVATION_POLICIES.has(value.preserveTags)) {
       throw createAppError(400, "INVALID_MARKDOWN_POLICY", "preserveTags must be boolean or warn.");
@@ -368,7 +341,7 @@ const createMcpNoteWriteBaselineHandler = (findNoteBaseline = async (id) => mode
 };
 const createMcpPatchNoteMarkdownHandler = (patchMarkdown = patchNoteMarkdown, emitEvent = emitServerEvent) => {
   return async (req, res) => {
-    const { id, expectedUpdatedAt, baseMarkdownSha256, intent, selector, operation, policy, dryRun } = req.body ?? {};
+    const { id, expectedUpdatedAt, baseMarkdownSha256, intent, selector, operation, policy } = req.body ?? {};
     const noteId = resolvePositiveNoteId(id);
     const resolvedExpectedUpdatedAt = resolveOptionalString(
       expectedUpdatedAt,
@@ -380,7 +353,6 @@ const createMcpPatchNoteMarkdownHandler = (patchMarkdown = patchNoteMarkdown, em
       "INVALID_MARKDOWN_HASH",
       "baseMarkdownSha256 must be a string."
     );
-    const resolvedDryRun = resolveOptionalBoolean(dryRun, "INVALID_DRY_RUN", "dryRun must be a boolean.");
     if (typeof intent !== "string") {
       throw createAppError(400, "INVALID_PATCH_INTENT", "Patch intent must be a string.");
     }
@@ -391,8 +363,7 @@ const createMcpPatchNoteMarkdownHandler = (patchMarkdown = patchNoteMarkdown, em
       intent,
       selector: resolvePatchSelector(selector),
       operation: resolvePatchOperation(operation),
-      policy: resolveMarkdownWritePolicy(policy),
-      dryRun: resolvedDryRun
+      policy: resolveMarkdownWritePolicy(policy)
     });
     if (result.status === "applied") {
       emitEvent({
@@ -407,7 +378,7 @@ const createMcpPatchNoteMarkdownHandler = (patchMarkdown = patchNoteMarkdown, em
 };
 const createMcpAppendNoteMarkdownHandler = (appendMarkdown = appendNoteMarkdown, emitEvent = emitServerEvent) => {
   return async (req, res) => {
-    const { id, expectedUpdatedAt, baseMarkdownSha256, intent, insertion, placement, separator, policy, dryRun } = req.body ?? {};
+    const { id, expectedUpdatedAt, baseMarkdownSha256, intent, insertion, placement, separator, policy } = req.body ?? {};
     const noteId = resolvePositiveNoteId(id);
     const resolvedExpectedUpdatedAt = resolveOptionalString(
       expectedUpdatedAt,
@@ -419,7 +390,6 @@ const createMcpAppendNoteMarkdownHandler = (appendMarkdown = appendNoteMarkdown,
       "INVALID_MARKDOWN_HASH",
       "baseMarkdownSha256 must be a string."
     );
-    const resolvedDryRun = resolveOptionalBoolean(dryRun, "INVALID_DRY_RUN", "dryRun must be a boolean.");
     if (typeof intent !== "string") {
       throw createAppError(400, "INVALID_APPEND_INTENT", "Append intent must be a string.");
     }
@@ -434,8 +404,7 @@ const createMcpAppendNoteMarkdownHandler = (appendMarkdown = appendNoteMarkdown,
       insertion,
       placement: resolveAppendPlacement(placement),
       separator: resolveSeparator(separator),
-      policy: resolveMarkdownWritePolicy(policy),
-      dryRun: resolvedDryRun
+      policy: resolveMarkdownWritePolicy(policy)
     });
     if (result.status === "applied") {
       emitEvent({
@@ -450,7 +419,7 @@ const createMcpAppendNoteMarkdownHandler = (appendMarkdown = appendNoteMarkdown,
 };
 const createMcpReplaceNoteMarkdownHandler = (replaceMarkdown = replaceNoteMarkdown, emitEvent = emitServerEvent) => {
   return async (req, res) => {
-    const { id, expectedUpdatedAt, baseMarkdownSha256, intent, replacement, policy, dryRun } = req.body ?? {};
+    const { id, expectedUpdatedAt, baseMarkdownSha256, intent, replacement, policy } = req.body ?? {};
     const noteId = resolvePositiveNoteId(id);
     const resolvedExpectedUpdatedAt = resolveOptionalString(
       expectedUpdatedAt,
@@ -462,7 +431,6 @@ const createMcpReplaceNoteMarkdownHandler = (replaceMarkdown = replaceNoteMarkdo
       "INVALID_MARKDOWN_HASH",
       "baseMarkdownSha256 must be a string."
     );
-    const resolvedDryRun = resolveOptionalBoolean(dryRun, "INVALID_DRY_RUN", "dryRun must be a boolean.");
     if (typeof intent !== "string") {
       throw createAppError(400, "INVALID_REPLACE_INTENT", "Replace intent must be a string.");
     }
@@ -475,8 +443,7 @@ const createMcpReplaceNoteMarkdownHandler = (replaceMarkdown = replaceNoteMarkdo
       baseMarkdownSha256: resolvedBaseMarkdownSha256,
       intent,
       replacement,
-      policy: resolveMarkdownWritePolicy(policy),
-      dryRun: resolvedDryRun
+      policy: resolveMarkdownWritePolicy(policy)
     });
     if (result.status === "applied") {
       emitEvent({
@@ -491,11 +458,10 @@ const createMcpReplaceNoteMarkdownHandler = (replaceMarkdown = replaceNoteMarkdo
 };
 const createMcpUpdateNoteMetadataHandler = (updateMetadata = updateNoteMetadata, emitEvent = emitServerEvent) => {
   return async (req, res) => {
-    const { id, expectedUpdatedAt, title, layout, properties, dryRun } = req.body ?? {};
+    const { id, expectedUpdatedAt, title, layout, properties } = req.body ?? {};
     const noteId = resolvePositiveNoteId(id);
     const resolvedLayout = resolveNoteLayout(layout);
     const resolvedProperties = resolveMetadataPropertyPatch(properties);
-    const resolvedDryRun = resolveOptionalBoolean(dryRun, "INVALID_DRY_RUN", "dryRun must be a boolean.");
     if (typeof expectedUpdatedAt !== "string") {
       throw createAppError(400, "INVALID_NOTE_VERSION", "expectedUpdatedAt must be a string.");
     }
@@ -513,8 +479,7 @@ const createMcpUpdateNoteMetadataHandler = (updateMetadata = updateNoteMetadata,
       expectedUpdatedAt,
       ...title !== void 0 ? { title } : {},
       ...resolvedLayout ? { layout: resolvedLayout } : {},
-      ...resolvedProperties !== void 0 ? { properties: resolvedProperties } : {},
-      dryRun: resolvedDryRun
+      ...resolvedProperties !== void 0 ? { properties: resolvedProperties } : {}
     });
     if (result.status === "applied") {
       emitEvent({
@@ -558,4 +523,3 @@ export {
   createMcpUpdateNoteHandler,
   createMcpUpdateNoteMetadataHandler
 };
-//# sourceMappingURL=mcp.js.map

package/server/dist/features/note/services/authoring.js

@@ -168,4 +168,3 @@ export {
   createNoteFromMarkdown,
   updateNoteFromMarkdown
 };
-//# sourceMappingURL=authoring.js.map

package/server/dist/features/note/services/cleanup.js

@@ -76,8 +76,8 @@ const createNoteCleanupService = (deps) => {
       })),
       orphanedTagNames: orphanedTags.map((tag) => tag.name),
       orphanedTagIds: orphanedTags.map((tag) => tag.id),
-      requiresForce: candidate.requiresForce || orphanedTags.length > 0,
-      forceReasons: [...candidate.forceReasons, ...orphanedTags.length > 0 ? ["orphan_tags"] : []]
+      requiresForce: candidate.requiresForce,
+      forceReasons: candidate.forceReasons
     };
   };
   const getDeletePreview = async (id) => {
@@ -196,4 +196,3 @@ export {
   listNoteCleanupCandidates,
   normalizeCleanupKeywords
 };
-//# sourceMappingURL=cleanup.js.map

package/server/dist/features/note/services/content-blocks.js

@@ -110,4 +110,3 @@ export {
   parseNoteContent,
   syncReferenceTitlesInContent
 };
-//# sourceMappingURL=content-blocks.js.map