ocean-brain 0.8.0 → 0.8.1

package/server/dist/modules/graphql.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/modules/graphql.ts"],"sourcesContent":["export function gql(texts: TemplateStringsArray, ...values: unknown[]) {\n    return texts.map((text, i) => text + (values[i] || '')).join('');\n}\n"],"mappings":"AAAO,SAAS,IAAI,UAAgC,QAAmB;AACnE,SAAO,MAAM,IAAI,CAAC,MAAM,MAAM,QAAQ,OAAO,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE;AACnE;","names":[]}

package/server/dist/modules/logger.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/modules/logger.ts"],"sourcesContent":["import type { LoggerOptions } from 'express-winston';\nimport expressWinston from 'express-winston';\nimport type { TransformableInfo } from 'logform';\nimport winston from 'winston';\n\nexport const loggerOptions: LoggerOptions = {\n    transports: [new winston.transports.Console()],\n    meta: true,\n    requestWhitelist: ['httpVersion', 'method', 'originalUrl', 'url', 'query', 'params', 'ip', 'headers'],\n    responseWhitelist: ['statusCode'],\n    headerBlacklist: ['authorization', 'cookie', 'set-cookie', 'x-api-key'],\n    requestFilter: (\n        req: { headers?: Record<string, string | string[] | undefined> } & Record<string, unknown>,\n        propName: string,\n    ): unknown => {\n        if (propName === 'headers') {\n            const h = req.headers || {};\n            return {\n                'user-agent': h['user-agent'],\n                'content-type': h['content-type'],\n                accept: h['accept'],\n                'x-forwarded-for': h['x-forwarded-for'],\n                'x-real-ip': h['x-real-ip'],\n            };\n        }\n        return (req as Record<string, unknown>)[propName];\n    },\n    responseFilter: (res: Record<string, unknown>, propName: string): unknown => {\n        return res[propName];\n    },\n    format: winston.format.combine(\n        winston.format.colorize({ all: true }),\n        winston.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }),\n        winston.format.printf((info: TransformableInfo) => {\n            const meta = (info as unknown as { meta?: Record<string, unknown> }).meta || {};\n            const req = (meta.req as Record<string, unknown>) || {};\n            const res = (meta.res as Record<string, unknown>) || {};\n            const rt = (meta as Record<string, unknown>).responseTime as number | undefined;\n            const method = req.method as string | undefined;\n            const url = (req.originalUrl as string | undefined) || (req.url as string | undefined);\n            const status = res.statusCode as number | undefined;\n            const headers = (req.headers as Record<string, string> | undefined) || {};\n            const ua = headers['user-agent'];\n            const fwd = headers['x-forwarded-for'];\n            const fwdFirst = typeof fwd === 'string' ? fwd.split(',')[0].trim() : undefined;\n            const realIp = fwdFirst || headers['x-real-ip'];\n            const socketIp =\n                (req as unknown as { ip?: string; socket?: { remoteAddress?: string } }).ip ||\n                (req as unknown as { socket?: { remoteAddress?: string } }).socket?.remoteAddress;\n            const clientIp = fwdFirst || realIp || socketIp || '';\n            return `${info.timestamp as string} ${info.level as string}: [${status ?? ''}] ${method || ''} ${url || ''} ${rt ?? ''}ms ip=\"${clientIp}\" ua=\"${ua || ''}\"`;\n        }),\n    ),\n    colorize: true,\n    expressFormat: false,\n};\n\nexport default expressWinston.logger(loggerOptions);\n"],"mappings":"AACA,OAAO,oBAAoB;AAE3B,OAAO,aAAa;AAEb,MAAM,gBAA+B;AAAA,EACxC,YAAY,CAAC,IAAI,QAAQ,WAAW,QAAQ,CAAC;AAAA,EAC7C,MAAM;AAAA,EACN,kBAAkB,CAAC,eAAe,UAAU,eAAe,OAAO,SAAS,UAAU,MAAM,SAAS;AAAA,EACpG,mBAAmB,CAAC,YAAY;AAAA,EAChC,iBAAiB,CAAC,iBAAiB,UAAU,cAAc,WAAW;AAAA,EACtE,eAAe,CACX,KACA,aACU;AACV,QAAI,aAAa,WAAW;AACxB,YAAM,IAAI,IAAI,WAAW,CAAC;AAC1B,aAAO;AAAA,QACH,cAAc,EAAE,YAAY;AAAA,QAC5B,gBAAgB,EAAE,cAAc;AAAA,QAChC,QAAQ,EAAE,QAAQ;AAAA,QAClB,mBAAmB,EAAE,iBAAiB;AAAA,QACtC,aAAa,EAAE,WAAW;AAAA,MAC9B;AAAA,IACJ;AACA,WAAQ,IAAgC,QAAQ;AAAA,EACpD;AAAA,EACA,gBAAgB,CAAC,KAA8B,aAA8B;AACzE,WAAO,IAAI,QAAQ;AAAA,EACvB;AAAA,EACA,QAAQ,QAAQ,OAAO;AAAA,IACnB,QAAQ,OAAO,SAAS,EAAE,KAAK,KAAK,CAAC;AAAA,IACrC,QAAQ,OAAO,UAAU,EAAE,QAAQ,sBAAsB,CAAC;AAAA,IAC1D,QAAQ,OAAO,OAAO,CAAC,SAA4B;AAC/C,YAAM,OAAQ,KAAuD,QAAQ,CAAC;AAC9E,YAAM,MAAO,KAAK,OAAmC,CAAC;AACtD,YAAM,MAAO,KAAK,OAAmC,CAAC;AACtD,YAAM,KAAM,KAAiC;AAC7C,YAAM,SAAS,IAAI;AACnB,YAAM,MAAO,IAAI,eAAuC,IAAI;AAC5D,YAAM,SAAS,IAAI;AACnB,YAAM,UAAW,IAAI,WAAkD,CAAC;AACxE,YAAM,KAAK,QAAQ,YAAY;AAC/B,YAAM,MAAM,QAAQ,iBAAiB;AACrC,YAAM,WAAW,OAAO,QAAQ,WAAW,IAAI,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,IAAI;AACtE,YAAM,SAAS,YAAY,QAAQ,WAAW;AAC9C,YAAM,WACD,IAAwE,MACxE,IAA2D,QAAQ;AACxE,YAAM,WAAW,YAAY,UAAU,YAAY;AACnD,aAAO,GAAG,KAAK,SAAmB,IAAI,KAAK,KAAe,MAAM,UAAU,EAAE,KAAK,UAAU,EAAE,IAAI,OAAO,EAAE,IAAI,MAAM,EAAE,UAAU,QAAQ,SAAS,MAAM,EAAE;AAAA,IAC7J,CAAC;AAAA,EACL;AAAA,EACA,UAAU;AAAA,EACV,eAAe;AACnB;AAEA,IAAO,iBAAQ,eAAe,OAAO,aAAa;","names":[]}

package/server/dist/modules/mcp-auth.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/modules/mcp-auth.ts"],"sourcesContent":["import type { NextFunction, Request, RequestHandler, Response } from 'express';\nimport type { ValidationRule } from 'graphql';\nimport { GraphQLError } from 'graphql';\n\nimport {\n    getOceanBrainVersionInfo,\n    OCEAN_BRAIN_MCP_CLIENT_VERSION_HEADER,\n    OCEAN_BRAIN_MCP_COMPATIBILITY_VERSION_HEADER,\n    parseMajorMinorVersion,\n} from './app-version.js';\nimport type { AuthConfig } from './auth-mode.js';\n\nexport interface McpTokenValidationResult {\n    ok: boolean;\n    reason?: 'not_configured' | 'forbidden';\n}\n\nexport interface McpAdminAuthPort {\n    getStatus: () => Promise<{ enabled: boolean }>;\n    validatePresentedToken: (token: string) => Promise<McpTokenValidationResult>;\n}\n\nconst JSON_HEADERS = { 'Content-Type': 'application/json' };\nexport const OCEAN_BRAIN_MCP_VERSION_HEADER = 'X-Ocean-Brain-MCP-Version';\n\nconst readHeaderValue = (req: Request, headerName: string) => {\n    const value = req.headers[headerName.toLowerCase()];\n    return Array.isArray(value) ? value[0] : value;\n};\n\nconst readMcpCompatibilityVersion = (req: Request) =>\n    readHeaderValue(req, OCEAN_BRAIN_MCP_COMPATIBILITY_VERSION_HEADER) ??\n    readHeaderValue(req, OCEAN_BRAIN_MCP_VERSION_HEADER);\n\nconst readMcpClientVersion = (req: Request) =>\n    readHeaderValue(req, OCEAN_BRAIN_MCP_CLIENT_VERSION_HEADER) ?? readHeaderValue(req, OCEAN_BRAIN_MCP_VERSION_HEADER);\n\nexport const isMcpVersionCompatible = (requiredMcpCompatibilityVersion: string, mcpCompatibilityVersion: string) => {\n    const required = parseMajorMinorVersion(requiredMcpCompatibilityVersion);\n    const mcp = parseMajorMinorVersion(mcpCompatibilityVersion);\n\n    return Boolean(required && mcp && required.major === mcp.major && required.minor === mcp.minor);\n};\n\nconst createMcpVersionCompatibilityMessage = ({\n    mcpClientVersion,\n    mcpCompatibilityVersion,\n    requiredMcpCompatibilityVersion,\n    serverVersion,\n}: {\n    mcpClientVersion?: string;\n    mcpCompatibilityVersion?: string;\n    requiredMcpCompatibilityVersion: string;\n    serverVersion: string;\n}) => {\n    const mcpCompatibilityVersionText = mcpCompatibilityVersion ? `v${mcpCompatibilityVersion}` : 'not provided';\n    const mcpClientVersionText = mcpClientVersion ? `v${mcpClientVersion}` : 'not provided';\n\n    return [\n        'Ocean Brain MCP compatibility versions are incompatible.',\n        `Server: v${serverVersion}`,\n        `Required MCP compatibility: ${requiredMcpCompatibilityVersion}`,\n        `MCP compatibility: ${mcpCompatibilityVersionText}`,\n        `MCP client: ${mcpClientVersionText}`,\n        '',\n        'Please update Ocean Brain MCP to a compatible release.',\n        getOceanBrainVersionInfo().releaseUrl,\n    ].join('\\n');\n};\n\nconst readBearerToken = (authorizationHeader?: string) => {\n    if (!authorizationHeader?.startsWith('Bearer ')) {\n        return undefined;\n    }\n\n    return authorizationHeader.slice('Bearer '.length).trim() || undefined;\n};\n\nexport const createMcpAuthMiddleware = (_authConfig: AuthConfig, mcpAdminAuth: McpAdminAuthPort): RequestHandler => {\n    return async (req: Request, res: Response, next: NextFunction) => {\n        try {\n            const status = await mcpAdminAuth.getStatus();\n            if (!status.enabled) {\n                res.status(403)\n                    .set(JSON_HEADERS)\n                    .json({\n                        code: 'MCP_DISABLED',\n                        message: 'MCP access is disabled by admin.',\n                    })\n                    .end();\n                return;\n            }\n\n            const bearerToken = readBearerToken(req.headers.authorization);\n\n            if (!bearerToken) {\n                res.status(401)\n                    .set(JSON_HEADERS)\n                    .json({\n                        code: 'UNAUTHORIZED',\n                        message: 'A valid MCP bearer token is required.',\n                    })\n                    .end();\n                return;\n            }\n\n            const validation = await mcpAdminAuth.validatePresentedToken(bearerToken);\n\n            if (!validation.ok && validation.reason === 'not_configured') {\n                res.status(503)\n                    .set(JSON_HEADERS)\n                    .json({\n                        code: 'MCP_AUTH_NOT_CONFIGURED',\n                        message: 'MCP bearer auth is not configured.',\n                    })\n                    .end();\n                return;\n            }\n\n            if (!validation.ok) {\n                res.status(403)\n                    .set(JSON_HEADERS)\n                    .json({\n                        code: 'FORBIDDEN',\n                        message: 'Invalid MCP bearer token.',\n                    })\n                    .end();\n                return;\n            }\n\n            const versionInfo = getOceanBrainVersionInfo();\n            const mcpCompatibilityVersion = readMcpCompatibilityVersion(req);\n            const mcpClientVersion = readMcpClientVersion(req);\n\n            if (\n                !mcpCompatibilityVersion ||\n                !isMcpVersionCompatible(versionInfo.mcp.compatibilityVersion, mcpCompatibilityVersion)\n            ) {\n                res.status(426)\n                    .set(JSON_HEADERS)\n                    .json({\n                        code: 'MCP_VERSION_INCOMPATIBLE',\n                        message: createMcpVersionCompatibilityMessage({\n                            serverVersion: versionInfo.version,\n                            requiredMcpCompatibilityVersion: versionInfo.mcp.compatibilityRequirement,\n                            mcpCompatibilityVersion,\n                            mcpClientVersion,\n                        }),\n                        serverVersion: versionInfo.version,\n                        mcpVersion: mcpClientVersion ?? mcpCompatibilityVersion ?? null,\n                        mcpClientVersion: mcpClientVersion ?? null,\n                        mcpCompatibilityVersion: mcpCompatibilityVersion ?? null,\n                        requiredMcpVersion: versionInfo.mcpVersionRequirement,\n                        requiredMcpCompatibilityVersion: versionInfo.mcp.compatibilityRequirement,\n                        releaseUrl: versionInfo.releaseUrl,\n                    })\n                    .end();\n                return;\n            }\n\n            next();\n        } catch (error) {\n            next(error);\n        }\n    };\n};\n\nexport const createReadOnlyMcpValidationRule = (): ValidationRule => {\n    return (context) => {\n        return {\n            OperationDefinition(node) {\n                if (node.operation === 'query') {\n                    return;\n                }\n\n                context.reportError(\n                    new GraphQLError('MCP endpoint is read-only', {\n                        nodes: [node],\n                        extensions: { code: 'FORBIDDEN' },\n                    }),\n                );\n            },\n        };\n    };\n};\n"],"mappings":"AAEA,SAAS,oBAAoB;AAE7B;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AAaP,MAAM,eAAe,EAAE,gBAAgB,mBAAmB;AACnD,MAAM,iCAAiC;AAE9C,MAAM,kBAAkB,CAAC,KAAc,eAAuB;AAC1D,QAAM,QAAQ,IAAI,QAAQ,WAAW,YAAY,CAAC;AAClD,SAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC7C;AAEA,MAAM,8BAA8B,CAAC,QACjC,gBAAgB,KAAK,4CAA4C,KACjE,gBAAgB,KAAK,8BAA8B;AAEvD,MAAM,uBAAuB,CAAC,QAC1B,gBAAgB,KAAK,qCAAqC,KAAK,gBAAgB,KAAK,8BAA8B;AAE/G,MAAM,yBAAyB,CAAC,iCAAyC,4BAAoC;AAChH,QAAM,WAAW,uBAAuB,+BAA+B;AACvE,QAAM,MAAM,uBAAuB,uBAAuB;AAE1D,SAAO,QAAQ,YAAY,OAAO,SAAS,UAAU,IAAI,SAAS,SAAS,UAAU,IAAI,KAAK;AAClG;AAEA,MAAM,uCAAuC,CAAC;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,MAKM;AACF,QAAM,8BAA8B,0BAA0B,IAAI,uBAAuB,KAAK;AAC9F,QAAM,uBAAuB,mBAAmB,IAAI,gBAAgB,KAAK;AAEzE,SAAO;AAAA,IACH;AAAA,IACA,YAAY,aAAa;AAAA,IACzB,+BAA+B,+BAA+B;AAAA,IAC9D,sBAAsB,2BAA2B;AAAA,IACjD,eAAe,oBAAoB;AAAA,IACnC;AAAA,IACA;AAAA,IACA,yBAAyB,EAAE;AAAA,EAC/B,EAAE,KAAK,IAAI;AACf;AAEA,MAAM,kBAAkB,CAAC,wBAAiC;AACtD,MAAI,CAAC,qBAAqB,WAAW,SAAS,GAAG;AAC7C,WAAO;AAAA,EACX;AAEA,SAAO,oBAAoB,MAAM,UAAU,MAAM,EAAE,KAAK,KAAK;AACjE;AAEO,MAAM,0BAA0B,CAAC,aAAyB,iBAAmD;AAChH,SAAO,OAAO,KAAc,KAAe,SAAuB;AAC9D,QAAI;AACA,YAAM,SAAS,MAAM,aAAa,UAAU;AAC5C,UAAI,CAAC,OAAO,SAAS;AACjB,YAAI,OAAO,GAAG,EACT,IAAI,YAAY,EAChB,KAAK;AAAA,UACF,MAAM;AAAA,UACN,SAAS;AAAA,QACb,CAAC,EACA,IAAI;AACT;AAAA,MACJ;AAEA,YAAM,cAAc,gBAAgB,IAAI,QAAQ,aAAa;AAE7D,UAAI,CAAC,aAAa;AACd,YAAI,OAAO,GAAG,EACT,IAAI,YAAY,EAChB,KAAK;AAAA,UACF,MAAM;AAAA,UACN,SAAS;AAAA,QACb,CAAC,EACA,IAAI;AACT;AAAA,MACJ;AAEA,YAAM,aAAa,MAAM,aAAa,uBAAuB,WAAW;AAExE,UAAI,CAAC,WAAW,MAAM,WAAW,WAAW,kBAAkB;AAC1D,YAAI,OAAO,GAAG,EACT,IAAI,YAAY,EAChB,KAAK;AAAA,UACF,MAAM;AAAA,UACN,SAAS;AAAA,QACb,CAAC,EACA,IAAI;AACT;AAAA,MACJ;AAEA,UAAI,CAAC,WAAW,IAAI;AAChB,YAAI,OAAO,GAAG,EACT,IAAI,YAAY,EAChB,KAAK;AAAA,UACF,MAAM;AAAA,UACN,SAAS;AAAA,QACb,CAAC,EACA,IAAI;AACT;AAAA,MACJ;AAEA,YAAM,cAAc,yBAAyB;AAC7C,YAAM,0BAA0B,4BAA4B,GAAG;AAC/D,YAAM,mBAAmB,qBAAqB,GAAG;AAEjD,UACI,CAAC,2BACD,CAAC,uBAAuB,YAAY,IAAI,sBAAsB,uBAAuB,GACvF;AACE,YAAI,OAAO,GAAG,EACT,IAAI,YAAY,EAChB,KAAK;AAAA,UACF,MAAM;AAAA,UACN,SAAS,qCAAqC;AAAA,YAC1C,eAAe,YAAY;AAAA,YAC3B,iCAAiC,YAAY,IAAI;AAAA,YACjD;AAAA,YACA;AAAA,UACJ,CAAC;AAAA,UACD,eAAe,YAAY;AAAA,UAC3B,YAAY,oBAAoB,2BAA2B;AAAA,UAC3D,kBAAkB,oBAAoB;AAAA,UACtC,yBAAyB,2BAA2B;AAAA,UACpD,oBAAoB,YAAY;AAAA,UAChC,iCAAiC,YAAY,IAAI;AAAA,UACjD,YAAY,YAAY;AAAA,QAC5B,CAAC,EACA,IAAI;AACT;AAAA,MACJ;AAEA,WAAK;AAAA,IACT,SAAS,OAAO;AACZ,WAAK,KAAK;AAAA,IACd;AAAA,EACJ;AACJ;AAEO,MAAM,kCAAkC,MAAsB;AACjE,SAAO,CAAC,YAAY;AAChB,WAAO;AAAA,MACH,oBAAoB,MAAM;AACtB,YAAI,KAAK,cAAc,SAAS;AAC5B;AAAA,QACJ;AAEA,gBAAQ;AAAA,UACJ,IAAI,aAAa,6BAA6B;AAAA,YAC1C,OAAO,CAAC,IAAI;AAAA,YACZ,YAAY,EAAE,MAAM,YAAY;AAAA,UACpC,CAAC;AAAA,QACL;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AACJ;","names":[]}

package/server/dist/modules/mcp-token.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/modules/mcp-token.ts"],"sourcesContent":["import crypto from 'crypto';\n\nconst TOKEN_BYTE_LENGTH = 32;\nconst HASH_ALGORITHM = 'sha256';\n\nexport interface IssuedMcpToken {\n    plaintext: string;\n    hash: string;\n}\n\nconst toTokenHash = (token: string) => {\n    return crypto.createHash(HASH_ALGORITHM).update(token, 'utf8').digest('hex');\n};\n\nexport const issueMcpToken = (): IssuedMcpToken => {\n    const plaintext = crypto.randomBytes(TOKEN_BYTE_LENGTH).toString('base64url');\n    const hash = toTokenHash(plaintext);\n\n    return {\n        plaintext,\n        hash,\n    };\n};\n\nexport const verifyMcpToken = (storedHash: string, presentedToken: string) => {\n    const presentedHash = toTokenHash(presentedToken);\n    const storedBuffer = Buffer.from(storedHash, 'utf8');\n    const presentedBuffer = Buffer.from(presentedHash, 'utf8');\n\n    if (storedBuffer.length !== presentedBuffer.length) {\n        return false;\n    }\n\n    return crypto.timingSafeEqual(storedBuffer, presentedBuffer);\n};\n"],"mappings":"AAAA,OAAO,YAAY;AAEnB,MAAM,oBAAoB;AAC1B,MAAM,iBAAiB;AAOvB,MAAM,cAAc,CAAC,UAAkB;AACnC,SAAO,OAAO,WAAW,cAAc,EAAE,OAAO,OAAO,MAAM,EAAE,OAAO,KAAK;AAC/E;AAEO,MAAM,gBAAgB,MAAsB;AAC/C,QAAM,YAAY,OAAO,YAAY,iBAAiB,EAAE,SAAS,WAAW;AAC5E,QAAM,OAAO,YAAY,SAAS;AAElC,SAAO;AAAA,IACH;AAAA,IACA;AAAA,EACJ;AACJ;AAEO,MAAM,iBAAiB,CAAC,YAAoB,mBAA2B;AAC1E,QAAM,gBAAgB,YAAY,cAAc;AAChD,QAAM,eAAe,OAAO,KAAK,YAAY,MAAM;AACnD,QAAM,kBAAkB,OAAO,KAAK,eAAe,MAAM;AAEzD,MAAI,aAAa,WAAW,gBAAgB,QAAQ;AAChD,WAAO;AAAA,EACX;AAEA,SAAO,OAAO,gBAAgB,cAAc,eAAe;AAC/D;","names":[]}

package/server/dist/modules/prisma-runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/modules/prisma-runtime.ts"],"sourcesContent":["import { execFileSync } from 'child_process';\nimport { createRequire } from 'module';\nimport path from 'path';\nimport { fileURLToPath } from 'url';\n\ninterface PrismaRuntimeDeps {\n    execFileSync: (\n        file: string,\n        args: string[],\n        options: {\n            env: NodeJS.ProcessEnv;\n            stdio: 'inherit';\n        },\n    ) => void;\n    resolvePrismaCliEntry: () => string;\n}\n\nconst resolveServerRoot = () => {\n    const __dirname = path.dirname(fileURLToPath(import.meta.url));\n    return process.env.OCEAN_BRAIN_PACKAGE_ROOT || path.resolve(__dirname, '../..');\n};\n\nexport const resolvePrismaSchemaPath = () => {\n    return path.resolve(resolveServerRoot(), 'prisma/schema.prisma');\n};\n\nexport const resolvePrismaCliEntry = () => {\n    const require = createRequire(import.meta.url);\n    return require.resolve('prisma/build/index.js');\n};\n\nexport const createPrismaRuntime = (deps: PrismaRuntimeDeps) => ({\n    runMigrateDeploy: () => {\n        deps.execFileSync(\n            process.execPath,\n            [deps.resolvePrismaCliEntry(), 'migrate', 'deploy', `--schema=${resolvePrismaSchemaPath()}`],\n            {\n                stdio: 'inherit',\n                env: { ...process.env },\n            },\n        );\n    },\n});\n\nconst defaultPrismaRuntime = createPrismaRuntime({\n    execFileSync,\n    resolvePrismaCliEntry,\n});\n\nexport const runPrismaMigrateDeploy = () => {\n    defaultPrismaRuntime.runMigrateDeploy();\n};\n"],"mappings":"AAAA,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAc9B,MAAM,oBAAoB,MAAM;AAC5B,QAAM,YAAY,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC;AAC7D,SAAO,QAAQ,IAAI,4BAA4B,KAAK,QAAQ,WAAW,OAAO;AAClF;AAEO,MAAM,0BAA0B,MAAM;AACzC,SAAO,KAAK,QAAQ,kBAAkB,GAAG,sBAAsB;AACnE;AAEO,MAAM,wBAAwB,MAAM;AACvC,QAAMA,WAAU,cAAc,YAAY,GAAG;AAC7C,SAAOA,SAAQ,QAAQ,uBAAuB;AAClD;AAEO,MAAM,sBAAsB,CAAC,UAA6B;AAAA,EAC7D,kBAAkB,MAAM;AACpB,SAAK;AAAA,MACD,QAAQ;AAAA,MACR,CAAC,KAAK,sBAAsB,GAAG,WAAW,UAAU,YAAY,wBAAwB,CAAC,EAAE;AAAA,MAC3F;AAAA,QACI,OAAO;AAAA,QACP,KAAK,EAAE,GAAG,QAAQ,IAAI;AAAA,MAC1B;AAAA,IACJ;AAAA,EACJ;AACJ;AAEA,MAAM,uBAAuB,oBAAoB;AAAA,EAC7C;AAAA,EACA;AACJ,CAAC;AAEM,MAAM,yBAAyB,MAAM;AACxC,uBAAqB,iBAAiB;AAC1C;","names":["require"]}

package/server/dist/modules/rate-limit.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/modules/rate-limit.ts"],"sourcesContent":["import { rateLimit } from 'express-rate-limit';\n\nconst AUTH_RATE_LIMIT_MESSAGE = 'Too many authentication attempts. Please try again later.';\nconst SESSION_ACCESS_RATE_LIMIT_MESSAGE = 'Too many authenticated requests. Please try again later.';\n\nexport const createAuthAttemptRateLimit = () =>\n    rateLimit({\n        windowMs: 15 * 60 * 1000,\n        limit: 10,\n        standardHeaders: true,\n        legacyHeaders: false,\n        handler: (_req, res) => {\n            res.status(429).json({\n                code: 'AUTH_RATE_LIMITED',\n                message: AUTH_RATE_LIMIT_MESSAGE,\n            });\n        },\n    });\n\nexport const createSessionAccessRateLimit = () =>\n    rateLimit({\n        windowMs: 60 * 1000,\n        limit: 300,\n        standardHeaders: true,\n        legacyHeaders: false,\n        handler: (_req, res) => {\n            res.status(429).json({\n                code: 'SESSION_RATE_LIMITED',\n                message: SESSION_ACCESS_RATE_LIMIT_MESSAGE,\n            });\n        },\n    });\n"],"mappings":"AAAA,SAAS,iBAAiB;AAE1B,MAAM,0BAA0B;AAChC,MAAM,oCAAoC;AAEnC,MAAM,6BAA6B,MACtC,UAAU;AAAA,EACN,UAAU,KAAK,KAAK;AAAA,EACpB,OAAO;AAAA,EACP,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,SAAS,CAAC,MAAM,QAAQ;AACpB,QAAI,OAAO,GAAG,EAAE,KAAK;AAAA,MACjB,MAAM;AAAA,MACN,SAAS;AAAA,IACb,CAAC;AAAA,EACL;AACJ,CAAC;AAEE,MAAM,+BAA+B,MACxC,UAAU;AAAA,EACN,UAAU,KAAK;AAAA,EACf,OAAO;AAAA,EACP,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,SAAS,CAAC,MAAM,QAAQ;AACpB,QAAI,OAAO,GAAG,EAAE,KAAK;AAAA,MACjB,MAAM;AAAA,MACN,SAAS;AAAA,IACb,CAAC;AAAA,EACL;AACJ,CAAC;","names":[]}

package/server/dist/modules/recovery-retention.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/modules/recovery-retention.ts"],"sourcesContent":["export const NOTE_SNAPSHOT_RETENTION_DAYS = 7;\nexport const NOTE_SNAPSHOT_MAX_PER_NOTE = 10;\nexport const NOTE_TRASH_RETENTION_DAYS = 30;\nexport const RECOVERY_RETENTION_BATCH_LIMIT = 100;\n\nexport const SNAPSHOT_RETENTION_DAYS = NOTE_SNAPSHOT_RETENTION_DAYS;\nexport const SNAPSHOT_MAX_PER_NOTE = NOTE_SNAPSHOT_MAX_PER_NOTE;\nexport const TRASH_RETENTION_DAYS = NOTE_TRASH_RETENTION_DAYS;\nexport const RECOVERY_CLEANUP_BATCH_LIMIT = RECOVERY_RETENTION_BATCH_LIMIT;\n\nconst DAY_IN_MS = 24 * 60 * 60 * 1000;\n\nexport const resolveRetentionCutoff = (retentionDays: number, now = new Date()) => {\n    return new Date(now.getTime() - retentionDays * DAY_IN_MS);\n};\n\nexport const createRetentionCutoff = resolveRetentionCutoff;\n"],"mappings":"AAAO,MAAM,+BAA+B;AACrC,MAAM,6BAA6B;AACnC,MAAM,4BAA4B;AAClC,MAAM,iCAAiC;AAEvC,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAC9B,MAAM,uBAAuB;AAC7B,MAAM,+BAA+B;AAE5C,MAAM,YAAY,KAAK,KAAK,KAAK;AAE1B,MAAM,yBAAyB,CAAC,eAAuB,MAAM,oBAAI,KAAK,MAAM;AAC/E,SAAO,IAAI,KAAK,IAAI,QAAQ,IAAI,gBAAgB,SAAS;AAC7D;AAEO,MAAM,wBAAwB;","names":[]}

package/server/dist/modules/server-events-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/modules/server-events-handler.ts"],"sourcesContent":["import type { Controller } from '~/types/index.js';\nimport { serializeServerEvent, subscribeServerEvents } from './server-events.js';\nimport { AUTH_SESSION_IDLE_TIMEOUT_MS } from './session-store.js';\n\nconst KEEP_ALIVE_INTERVAL_MS = 30_000;\n\nconst getEventStreamLifetimeMs = (expires?: Date | string | null) => {\n    if (!expires) {\n        return AUTH_SESSION_IDLE_TIMEOUT_MS;\n    }\n\n    const expiresAt = expires instanceof Date ? expires : new Date(expires);\n\n    if (Number.isNaN(expiresAt.getTime())) {\n        return AUTH_SESSION_IDLE_TIMEOUT_MS;\n    }\n\n    return Math.max(0, Math.min(expiresAt.getTime() - Date.now(), AUTH_SESSION_IDLE_TIMEOUT_MS));\n};\n\nexport const createServerEventsHandler = (): Controller => {\n    return async (req, res) => {\n        res.status(200);\n        res.setHeader('Content-Type', 'text/event-stream; charset=utf-8');\n        res.setHeader('Cache-Control', 'no-cache, no-transform');\n        res.setHeader('Connection', 'keep-alive');\n        res.setHeader('X-Accel-Buffering', 'no');\n        res.flushHeaders?.();\n        res.write(': connected\\n\\n');\n\n        const unsubscribe = subscribeServerEvents((event) => {\n            res.write(serializeServerEvent(event));\n        });\n\n        const keepAliveTimer = setInterval(() => {\n            res.write(': keepalive\\n\\n');\n        }, KEEP_ALIVE_INTERVAL_MS);\n        keepAliveTimer.unref?.();\n\n        const sessionExpiryTimer = setTimeout(() => {\n            res.end();\n        }, getEventStreamLifetimeMs(req.session?.cookie.expires));\n        sessionExpiryTimer.unref?.();\n\n        let cleanedUp = false;\n\n        const cleanup = () => {\n            if (cleanedUp) {\n                return;\n            }\n\n            cleanedUp = true;\n            clearInterval(keepAliveTimer);\n            clearTimeout(sessionExpiryTimer);\n            unsubscribe();\n        };\n\n        req.on('close', cleanup);\n        res.on('close', cleanup);\n    };\n};\n"],"mappings":"AACA,SAAS,sBAAsB,6BAA6B;AAC5D,SAAS,oCAAoC;AAE7C,MAAM,yBAAyB;AAE/B,MAAM,2BAA2B,CAAC,YAAmC;AACjE,MAAI,CAAC,SAAS;AACV,WAAO;AAAA,EACX;AAEA,QAAM,YAAY,mBAAmB,OAAO,UAAU,IAAI,KAAK,OAAO;AAEtE,MAAI,OAAO,MAAM,UAAU,QAAQ,CAAC,GAAG;AACnC,WAAO;AAAA,EACX;AAEA,SAAO,KAAK,IAAI,GAAG,KAAK,IAAI,UAAU,QAAQ,IAAI,KAAK,IAAI,GAAG,4BAA4B,CAAC;AAC/F;AAEO,MAAM,4BAA4B,MAAkB;AACvD,SAAO,OAAO,KAAK,QAAQ;AACvB,QAAI,OAAO,GAAG;AACd,QAAI,UAAU,gBAAgB,kCAAkC;AAChE,QAAI,UAAU,iBAAiB,wBAAwB;AACvD,QAAI,UAAU,cAAc,YAAY;AACxC,QAAI,UAAU,qBAAqB,IAAI;AACvC,QAAI,eAAe;AACnB,QAAI,MAAM,iBAAiB;AAE3B,UAAM,cAAc,sBAAsB,CAAC,UAAU;AACjD,UAAI,MAAM,qBAAqB,KAAK,CAAC;AAAA,IACzC,CAAC;AAED,UAAM,iBAAiB,YAAY,MAAM;AACrC,UAAI,MAAM,iBAAiB;AAAA,IAC/B,GAAG,sBAAsB;AACzB,mBAAe,QAAQ;AAEvB,UAAM,qBAAqB,WAAW,MAAM;AACxC,UAAI,IAAI;AAAA,IACZ,GAAG,yBAAyB,IAAI,SAAS,OAAO,OAAO,CAAC;AACxD,uBAAmB,QAAQ;AAE3B,QAAI,YAAY;AAEhB,UAAM,UAAU,MAAM;AAClB,UAAI,WAAW;AACX;AAAA,MACJ;AAEA,kBAAY;AACZ,oBAAc,cAAc;AAC5B,mBAAa,kBAAkB;AAC/B,kBAAY;AAAA,IAChB;AAEA,QAAI,GAAG,SAAS,OAAO;AACvB,QAAI,GAAG,SAAS,OAAO;AAAA,EAC3B;AACJ;","names":[]}

package/server/dist/modules/server-events.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/modules/server-events.ts"],"sourcesContent":["import { EventEmitter } from 'node:events';\n\nexport type McpNoteServerEventType = 'mcp.note.created' | 'mcp.note.updated' | 'mcp.note.deleted';\n\ninterface BaseMcpNoteServerEvent {\n    id: string;\n    noteId: string;\n    source: 'mcp';\n}\n\nexport interface McpNoteCreatedServerEvent extends BaseMcpNoteServerEvent {\n    type: 'mcp.note.created';\n    updatedAt: string;\n}\n\nexport interface McpNoteUpdatedServerEvent extends BaseMcpNoteServerEvent {\n    type: 'mcp.note.updated';\n    updatedAt: string;\n}\n\nexport interface McpNoteDeletedServerEvent extends BaseMcpNoteServerEvent {\n    type: 'mcp.note.deleted';\n}\n\nexport type ServerEvent = McpNoteCreatedServerEvent | McpNoteUpdatedServerEvent | McpNoteDeletedServerEvent;\n\nexport type ServerEventInput =\n    | Omit<McpNoteCreatedServerEvent, 'id'>\n    | Omit<McpNoteUpdatedServerEvent, 'id'>\n    | Omit<McpNoteDeletedServerEvent, 'id'>;\n\ntype ServerEventListener = (event: ServerEvent) => void;\n\nconst SERVER_EVENT_CHANNEL = 'server-event';\n\nconst serverEventEmitter = new EventEmitter();\n\nserverEventEmitter.setMaxListeners(0);\n\nlet nextServerEventId = 1;\n\nexport const emitServerEvent = (event: ServerEventInput) => {\n    const nextEvent = {\n        id: String(nextServerEventId++),\n        ...event,\n    } as ServerEvent;\n\n    serverEventEmitter.emit(SERVER_EVENT_CHANNEL, nextEvent);\n\n    return nextEvent;\n};\n\nexport const subscribeServerEvents = (listener: ServerEventListener) => {\n    serverEventEmitter.on(SERVER_EVENT_CHANNEL, listener);\n\n    return () => {\n        serverEventEmitter.off(SERVER_EVENT_CHANNEL, listener);\n    };\n};\n\nexport const serializeServerEvent = (event: ServerEvent) => {\n    return `id: ${event.id}\\nevent: ${event.type}\\ndata: ${JSON.stringify(event)}\\n\\n`;\n};\n"],"mappings":"AAAA,SAAS,oBAAoB;AAiC7B,MAAM,uBAAuB;AAE7B,MAAM,qBAAqB,IAAI,aAAa;AAE5C,mBAAmB,gBAAgB,CAAC;AAEpC,IAAI,oBAAoB;AAEjB,MAAM,kBAAkB,CAAC,UAA4B;AACxD,QAAM,YAAY;AAAA,IACd,IAAI,OAAO,mBAAmB;AAAA,IAC9B,GAAG;AAAA,EACP;AAEA,qBAAmB,KAAK,sBAAsB,SAAS;AAEvD,SAAO;AACX;AAEO,MAAM,wBAAwB,CAAC,aAAkC;AACpE,qBAAmB,GAAG,sBAAsB,QAAQ;AAEpD,SAAO,MAAM;AACT,uBAAmB,IAAI,sBAAsB,QAAQ;AAAA,EACzD;AACJ;AAEO,MAAM,uBAAuB,CAAC,UAAuB;AACxD,SAAO,OAAO,MAAM,EAAE;AAAA,SAAY,MAAM,IAAI;AAAA,QAAW,KAAK,UAAU,KAAK,CAAC;AAAA;AAAA;AAChF;","names":[]}

package/server/dist/modules/session-store.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/modules/session-store.ts"],"sourcesContent":["import session, { type SessionData } from 'express-session';\n\nexport const AUTH_SESSION_IDLE_TIMEOUT_MS = 7 * 24 * 60 * 60 * 1000;\nexport const ANONYMOUS_SESSION_IDLE_TIMEOUT_MS = 30 * 60 * 1000;\nconst AUTH_SESSION_PRUNE_INTERVAL_MS = 60 * 60 * 1000;\nconst DEFAULT_MAX_SESSIONS = 1000;\n\ntype StoredSession = {\n    data: string;\n    expiresAt: number;\n    authenticated: boolean;\n    updatedAt: number;\n};\n\ntype AuthSessionData = SessionData & {\n    authenticated?: boolean;\n};\n\nconst serializeSession = (data: SessionData) => JSON.stringify(data);\n\nconst deserializeSession = (data: string): SessionData => {\n    const parsed = JSON.parse(data) as SessionData;\n    const expires = parsed.cookie?.expires;\n\n    if (typeof expires === 'string') {\n        parsed.cookie.expires = new Date(expires);\n    }\n\n    return parsed;\n};\n\nconst isAuthenticatedSession = (data: SessionData) => Boolean((data as AuthSessionData).authenticated);\n\nconst getSessionExpiry = (data: SessionData, now = Date.now()) => {\n    const expires = data.cookie?.expires;\n    const ttlMs = isAuthenticatedSession(data) ? AUTH_SESSION_IDLE_TIMEOUT_MS : ANONYMOUS_SESSION_IDLE_TIMEOUT_MS;\n    const fallbackExpiresAt = now + ttlMs;\n\n    if (expires) {\n        const expiresAt = expires instanceof Date ? expires : new Date(expires);\n\n        if (!Number.isNaN(expiresAt.getTime())) {\n            return Math.min(expiresAt.getTime(), fallbackExpiresAt);\n        }\n    }\n\n    return fallbackExpiresAt;\n};\n\nexport class TtlMemorySessionStore extends session.Store {\n    private readonly sessions = new Map<string, StoredSession>();\n    private readonly pruneTimer: NodeJS.Timeout;\n\n    constructor(private readonly options: { maxSessions?: number; pruneIntervalMs?: number } = {}) {\n        super();\n\n        this.pruneTimer = setInterval(() => {\n            this.pruneExpiredSessions();\n        }, options.pruneIntervalMs ?? AUTH_SESSION_PRUNE_INTERVAL_MS);\n        this.pruneTimer.unref?.();\n    }\n\n    get(sid: string, callback: (error: unknown, session?: SessionData | null) => void) {\n        try {\n            const entry = this.sessions.get(sid);\n\n            if (!entry) {\n                callback(null, null);\n                return;\n            }\n\n            if (entry.expiresAt <= Date.now()) {\n                this.sessions.delete(sid);\n                callback(null, null);\n                return;\n            }\n\n            callback(null, deserializeSession(entry.data));\n        } catch (error) {\n            callback(error);\n        }\n    }\n\n    set(sid: string, data: SessionData, callback?: (error?: unknown) => void) {\n        try {\n            const now = Date.now();\n\n            this.sessions.set(sid, {\n                data: serializeSession(data),\n                expiresAt: getSessionExpiry(data, now),\n                authenticated: isAuthenticatedSession(data),\n                updatedAt: now,\n            });\n            this.pruneExpiredSessions();\n            this.evictOldestSessions();\n            callback?.();\n        } catch (error) {\n            callback?.(error);\n        }\n    }\n\n    destroy(sid: string, callback?: (error?: unknown) => void) {\n        this.sessions.delete(sid);\n        callback?.();\n    }\n\n    touch(sid: string, data: SessionData, callback?: () => void) {\n        const entry = this.sessions.get(sid);\n\n        if (entry) {\n            const now = Date.now();\n\n            this.sessions.set(sid, {\n                data: serializeSession(data),\n                expiresAt: getSessionExpiry(data, now),\n                authenticated: isAuthenticatedSession(data),\n                updatedAt: now,\n            });\n        }\n\n        callback?.();\n    }\n\n    all(callback: (error: unknown, sessions?: SessionData[] | { [sid: string]: SessionData } | null) => void) {\n        try {\n            this.pruneExpiredSessions();\n\n            const sessions: Record<string, SessionData> = {};\n            for (const [sid, entry] of this.sessions) {\n                sessions[sid] = deserializeSession(entry.data);\n            }\n\n            callback(null, sessions);\n        } catch (error) {\n            callback(error);\n        }\n    }\n\n    length(callback: (error: unknown, length?: number) => void) {\n        this.pruneExpiredSessions();\n        callback(null, this.sessions.size);\n    }\n\n    clear(callback?: (error?: unknown) => void) {\n        this.sessions.clear();\n        callback?.();\n    }\n\n    pruneExpiredSessions(now = Date.now()) {\n        for (const [sid, entry] of this.sessions) {\n            if (entry.expiresAt <= now) {\n                this.sessions.delete(sid);\n            }\n        }\n    }\n\n    stopPruning() {\n        clearInterval(this.pruneTimer);\n    }\n\n    private evictOldestSessions() {\n        const maxSessions = this.options.maxSessions ?? DEFAULT_MAX_SESSIONS;\n\n        while (this.sessions.size > maxSessions) {\n            const oldestSid = this.findOldestSessionId((entry) => !entry.authenticated) ?? this.findOldestSessionId();\n\n            if (!oldestSid) {\n                return;\n            }\n\n            this.sessions.delete(oldestSid);\n        }\n    }\n\n    private findOldestSessionId(filter: (entry: StoredSession) => boolean = () => true) {\n        let oldestSid: string | undefined;\n        let oldestUpdatedAt = Number.POSITIVE_INFINITY;\n\n        for (const [sid, entry] of this.sessions) {\n            if (filter(entry) && entry.updatedAt < oldestUpdatedAt) {\n                oldestSid = sid;\n                oldestUpdatedAt = entry.updatedAt;\n            }\n        }\n\n        return oldestSid;\n    }\n}\n\nexport const createSessionStore = (): session.Store => new TtlMemorySessionStore();\n"],"mappings":"AAAA,OAAO,aAAmC;AAEnC,MAAM,+BAA+B,IAAI,KAAK,KAAK,KAAK;AACxD,MAAM,oCAAoC,KAAK,KAAK;AAC3D,MAAM,iCAAiC,KAAK,KAAK;AACjD,MAAM,uBAAuB;AAa7B,MAAM,mBAAmB,CAAC,SAAsB,KAAK,UAAU,IAAI;AAEnE,MAAM,qBAAqB,CAAC,SAA8B;AACtD,QAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAM,UAAU,OAAO,QAAQ;AAE/B,MAAI,OAAO,YAAY,UAAU;AAC7B,WAAO,OAAO,UAAU,IAAI,KAAK,OAAO;AAAA,EAC5C;AAEA,SAAO;AACX;AAEA,MAAM,yBAAyB,CAAC,SAAsB,QAAS,KAAyB,aAAa;AAErG,MAAM,mBAAmB,CAAC,MAAmB,MAAM,KAAK,IAAI,MAAM;AAC9D,QAAM,UAAU,KAAK,QAAQ;AAC7B,QAAM,QAAQ,uBAAuB,IAAI,IAAI,+BAA+B;AAC5E,QAAM,oBAAoB,MAAM;AAEhC,MAAI,SAAS;AACT,UAAM,YAAY,mBAAmB,OAAO,UAAU,IAAI,KAAK,OAAO;AAEtE,QAAI,CAAC,OAAO,MAAM,UAAU,QAAQ,CAAC,GAAG;AACpC,aAAO,KAAK,IAAI,UAAU,QAAQ,GAAG,iBAAiB;AAAA,IAC1D;AAAA,EACJ;AAEA,SAAO;AACX;AAEO,MAAM,8BAA8B,QAAQ,MAAM;AAAA,EAIrD,YAA6B,UAA8D,CAAC,GAAG;AAC3F,UAAM;AADmB;AAGzB,SAAK,aAAa,YAAY,MAAM;AAChC,WAAK,qBAAqB;AAAA,IAC9B,GAAG,QAAQ,mBAAmB,8BAA8B;AAC5D,SAAK,WAAW,QAAQ;AAAA,EAC5B;AAAA,EAP6B;AAAA,EAHZ,WAAW,oBAAI,IAA2B;AAAA,EAC1C;AAAA,EAWjB,IAAI,KAAa,UAAkE;AAC/E,QAAI;AACA,YAAM,QAAQ,KAAK,SAAS,IAAI,GAAG;AAEnC,UAAI,CAAC,OAAO;AACR,iBAAS,MAAM,IAAI;AACnB;AAAA,MACJ;AAEA,UAAI,MAAM,aAAa,KAAK,IAAI,GAAG;AAC/B,aAAK,SAAS,OAAO,GAAG;AACxB,iBAAS,MAAM,IAAI;AACnB;AAAA,MACJ;AAEA,eAAS,MAAM,mBAAmB,MAAM,IAAI,CAAC;AAAA,IACjD,SAAS,OAAO;AACZ,eAAS,KAAK;AAAA,IAClB;AAAA,EACJ;AAAA,EAEA,IAAI,KAAa,MAAmB,UAAsC;AACtE,QAAI;AACA,YAAM,MAAM,KAAK,IAAI;AAErB,WAAK,SAAS,IAAI,KAAK;AAAA,QACnB,MAAM,iBAAiB,IAAI;AAAA,QAC3B,WAAW,iBAAiB,MAAM,GAAG;AAAA,QACrC,eAAe,uBAAuB,IAAI;AAAA,QAC1C,WAAW;AAAA,MACf,CAAC;AACD,WAAK,qBAAqB;AAC1B,WAAK,oBAAoB;AACzB,iBAAW;AAAA,IACf,SAAS,OAAO;AACZ,iBAAW,KAAK;AAAA,IACpB;AAAA,EACJ;AAAA,EAEA,QAAQ,KAAa,UAAsC;AACvD,SAAK,SAAS,OAAO,GAAG;AACxB,eAAW;AAAA,EACf;AAAA,EAEA,MAAM,KAAa,MAAmB,UAAuB;AACzD,UAAM,QAAQ,KAAK,SAAS,IAAI,GAAG;AAEnC,QAAI,OAAO;AACP,YAAM,MAAM,KAAK,IAAI;AAErB,WAAK,SAAS,IAAI,KAAK;AAAA,QACnB,MAAM,iBAAiB,IAAI;AAAA,QAC3B,WAAW,iBAAiB,MAAM,GAAG;AAAA,QACrC,eAAe,uBAAuB,IAAI;AAAA,QAC1C,WAAW;AAAA,MACf,CAAC;AAAA,IACL;AAEA,eAAW;AAAA,EACf;AAAA,EAEA,IAAI,UAAsG;AACtG,QAAI;AACA,WAAK,qBAAqB;AAE1B,YAAM,WAAwC,CAAC;AAC/C,iBAAW,CAAC,KAAK,KAAK,KAAK,KAAK,UAAU;AACtC,iBAAS,GAAG,IAAI,mBAAmB,MAAM,IAAI;AAAA,MACjD;AAEA,eAAS,MAAM,QAAQ;AAAA,IAC3B,SAAS,OAAO;AACZ,eAAS,KAAK;AAAA,IAClB;AAAA,EACJ;AAAA,EAEA,OAAO,UAAqD;AACxD,SAAK,qBAAqB;AAC1B,aAAS,MAAM,KAAK,SAAS,IAAI;AAAA,EACrC;AAAA,EAEA,MAAM,UAAsC;AACxC,SAAK,SAAS,MAAM;AACpB,eAAW;AAAA,EACf;AAAA,EAEA,qBAAqB,MAAM,KAAK,IAAI,GAAG;AACnC,eAAW,CAAC,KAAK,KAAK,KAAK,KAAK,UAAU;AACtC,UAAI,MAAM,aAAa,KAAK;AACxB,aAAK,SAAS,OAAO,GAAG;AAAA,MAC5B;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,cAAc;AACV,kBAAc,KAAK,UAAU;AAAA,EACjC;AAAA,EAEQ,sBAAsB;AAC1B,UAAM,cAAc,KAAK,QAAQ,eAAe;AAEhD,WAAO,KAAK,SAAS,OAAO,aAAa;AACrC,YAAM,YAAY,KAAK,oBAAoB,CAAC,UAAU,CAAC,MAAM,aAAa,KAAK,KAAK,oBAAoB;AAExG,UAAI,CAAC,WAAW;AACZ;AAAA,MACJ;AAEA,WAAK,SAAS,OAAO,SAAS;AAAA,IAClC;AAAA,EACJ;AAAA,EAEQ,oBAAoB,SAA4C,MAAM,MAAM;AAChF,QAAI;AACJ,QAAI,kBAAkB,OAAO;AAE7B,eAAW,CAAC,KAAK,KAAK,KAAK,KAAK,UAAU;AACtC,UAAI,OAAO,KAAK,KAAK,MAAM,YAAY,iBAAiB;AACpD,oBAAY;AACZ,0BAAkB,MAAM;AAAA,MAC5B;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AACJ;AAEO,MAAM,qBAAqB,MAAqB,IAAI,sBAAsB;","names":[]}

package/server/dist/modules/use-async.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/modules/use-async.ts"],"sourcesContent":["import type { NextFunction, Request, Response } from 'express';\nimport type { Controller } from '~/types/index.js';\n\nexport default function useAsync(callback: Controller) {\n    return function (req: Request, res: Response, next: NextFunction) {\n        void Promise.resolve()\n            .then(() => callback(req, res, next))\n            .catch((error: unknown) => {\n                next(error);\n            });\n    };\n}\n"],"mappings":"AAGe,SAAR,SAA0B,UAAsB;AACnD,SAAO,SAAU,KAAc,KAAe,MAAoB;AAC9D,SAAK,QAAQ,QAAQ,EAChB,KAAK,MAAM,SAAS,KAAK,KAAK,IAAI,CAAC,EACnC,MAAM,CAAC,UAAmB;AACvB,WAAK,KAAK;AAAA,IACd,CAAC;AAAA,EACT;AACJ;","names":[]}

package/server/dist/paths.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/paths.ts"],"sourcesContent":["import path from 'path';\nimport { fileURLToPath } from 'url';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\n\n// 패키지 루트 (dist/paths.js 기준 상위)\nconst PACKAGE_ROOT = process.env.OCEAN_BRAIN_PACKAGE_ROOT || path.resolve(__dirname, '..');\n\n// 이미지 디렉토리 (별도 지정 가능, Docker에서 분리 볼륨용)\nconst IMAGE_DIR =\n    process.env.OCEAN_BRAIN_IMAGE_DIR || path.resolve(process.env.OCEAN_BRAIN_DATA_DIR || '.', 'assets/images');\n\nexport const paths = {\n    packageRoot: path.resolve(PACKAGE_ROOT),\n    clientDist: path.resolve(PACKAGE_ROOT, 'client/dist'),\n    clientIndex: path.resolve(PACKAGE_ROOT, 'client/dist/index.html'),\n    imageDir: path.resolve(IMAGE_DIR),\n};\n"],"mappings":"AAAA,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAE9B,MAAM,YAAY,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC;AAG7D,MAAM,eAAe,QAAQ,IAAI,4BAA4B,KAAK,QAAQ,WAAW,IAAI;AAGzF,MAAM,YACF,QAAQ,IAAI,yBAAyB,KAAK,QAAQ,QAAQ,IAAI,wBAAwB,KAAK,eAAe;AAEvG,MAAM,QAAQ;AAAA,EACjB,aAAa,KAAK,QAAQ,YAAY;AAAA,EACtC,YAAY,KAAK,QAAQ,cAAc,aAAa;AAAA,EACpD,aAAa,KAAK,QAAQ,cAAc,wBAAwB;AAAA,EAChE,UAAU,KAAK,QAAQ,SAAS;AACpC;","names":[]}

package/server/dist/routes/api.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/routes/api.ts"],"sourcesContent":["import { Router } from 'express';\nimport { createLoginHandler, createLogoutHandler, createSessionStatusHandler } from '../features/auth/http/api.js';\nimport { createUploadImageHandler } from '../features/image/http/upload.js';\nimport {\n    createMcpAdminRevokeTokenHandler,\n    createMcpAdminRotateTokenHandler,\n    createMcpAdminSetEnabledHandler,\n    createMcpAdminStatusHandler,\n} from '../features/mcp-admin/http/handlers.js';\nimport type { McpAdminService } from '../features/mcp-admin/service.js';\nimport { createCsrfProtection, requireSessionForWrite } from '../modules/auth-guard.js';\nimport type { AuthConfig } from '../modules/auth-mode.js';\nimport { createAuthAttemptRateLimit, createSessionAccessRateLimit } from '../modules/rate-limit.js';\nimport { createServerEventsHandler } from '../modules/server-events-handler.js';\nimport useAsync from '../modules/use-async.js';\nimport { createMcpRouter } from './mcp.js';\n\ntype McpAdminApiService = Pick<\n    McpAdminService,\n    'getStatus' | 'setEnabled' | 'rotateToken' | 'revokeActiveToken' | 'validatePresentedToken'\n>;\n\nexport const createApiRouter = (authConfig: AuthConfig, mcpAdminService: McpAdminApiService) => {\n    const csrfProtection = createCsrfProtection(authConfig);\n    const requireSession = requireSessionForWrite(authConfig);\n    const sessionAccessRateLimit = createSessionAccessRateLimit();\n\n    return Router()\n        .use('/mcp', createMcpRouter(authConfig, mcpAdminService))\n        .get('/auth/session', csrfProtection, useAsync(createSessionStatusHandler(authConfig)))\n        .post('/auth/login', csrfProtection, createAuthAttemptRateLimit(), useAsync(createLoginHandler(authConfig)))\n        .post(\n            '/auth/logout',\n            sessionAccessRateLimit,\n            requireSession,\n            csrfProtection,\n            useAsync(createLogoutHandler(authConfig)),\n        )\n        .get(\n            '/mcp-admin/status',\n            sessionAccessRateLimit,\n            requireSession,\n            csrfProtection,\n            useAsync(createMcpAdminStatusHandler(mcpAdminService)),\n        )\n        .post(\n            '/mcp-admin/enabled',\n            sessionAccessRateLimit,\n            requireSession,\n            csrfProtection,\n            useAsync(createMcpAdminSetEnabledHandler(mcpAdminService)),\n        )\n        .post(\n            '/mcp-admin/token/rotate',\n            sessionAccessRateLimit,\n            requireSession,\n            csrfProtection,\n            useAsync(createMcpAdminRotateTokenHandler(mcpAdminService)),\n        )\n        .post(\n            '/mcp-admin/token/revoke',\n            sessionAccessRateLimit,\n            requireSession,\n            csrfProtection,\n            useAsync(createMcpAdminRevokeTokenHandler(mcpAdminService)),\n        )\n        .post('/image', sessionAccessRateLimit, requireSession, csrfProtection, useAsync(createUploadImageHandler()))\n        .get('/events', sessionAccessRateLimit, requireSession, csrfProtection, createServerEventsHandler());\n};\n"],"mappings":"AAAA,SAAS,cAAc;AACvB,SAAS,oBAAoB,qBAAqB,kCAAkC;AACpF,SAAS,gCAAgC;AACzC;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AAEP,SAAS,sBAAsB,8BAA8B;AAE7D,SAAS,4BAA4B,oCAAoC;AACzE,SAAS,iCAAiC;AAC1C,OAAO,cAAc;AACrB,SAAS,uBAAuB;AAOzB,MAAM,kBAAkB,CAAC,YAAwB,oBAAwC;AAC5F,QAAM,iBAAiB,qBAAqB,UAAU;AACtD,QAAM,iBAAiB,uBAAuB,UAAU;AACxD,QAAM,yBAAyB,6BAA6B;AAE5D,SAAO,OAAO,EACT,IAAI,QAAQ,gBAAgB,YAAY,eAAe,CAAC,EACxD,IAAI,iBAAiB,gBAAgB,SAAS,2BAA2B,UAAU,CAAC,CAAC,EACrF,KAAK,eAAe,gBAAgB,2BAA2B,GAAG,SAAS,mBAAmB,UAAU,CAAC,CAAC,EAC1G;AAAA,IACG;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,oBAAoB,UAAU,CAAC;AAAA,EAC5C,EACC;AAAA,IACG;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,4BAA4B,eAAe,CAAC;AAAA,EACzD,EACC;AAAA,IACG;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,gCAAgC,eAAe,CAAC;AAAA,EAC7D,EACC;AAAA,IACG;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,iCAAiC,eAAe,CAAC;AAAA,EAC9D,EACC;AAAA,IACG;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,iCAAiC,eAAe,CAAC;AAAA,EAC9D,EACC,KAAK,UAAU,wBAAwB,gBAAgB,gBAAgB,SAAS,yBAAyB,CAAC,CAAC,EAC3G,IAAI,WAAW,wBAAwB,gBAAgB,gBAAgB,0BAA0B,CAAC;AAC3G;","names":[]}

package/server/dist/routes/auth-pages.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/routes/auth-pages.ts"],"sourcesContent":["import { Router } from 'express';\nimport {\n    createLoginPageHandler,\n    createLoginPageSubmitHandler,\n    createLogoutPageHandler,\n} from '../features/auth/http/pages.js';\nimport { createCsrfProtection, createLoginCsrfFailureHandler, requireSessionForWrite } from '../modules/auth-guard.js';\nimport type { AuthConfig } from '../modules/auth-mode.js';\nimport { createAuthAttemptRateLimit, createSessionAccessRateLimit } from '../modules/rate-limit.js';\n\nexport const createAuthPagesRouter = (authConfig: AuthConfig) => {\n    const csrfProtection = createCsrfProtection(authConfig);\n    const sessionAccessRateLimit = createSessionAccessRateLimit();\n\n    return Router()\n        .get('/login', csrfProtection, createLoginPageHandler(authConfig))\n        .post('/login', csrfProtection, createAuthAttemptRateLimit(), createLoginPageSubmitHandler(authConfig))\n        .post(\n            '/logout',\n            sessionAccessRateLimit,\n            requireSessionForWrite(authConfig),\n            csrfProtection,\n            createLogoutPageHandler(authConfig),\n        )\n        .use(createLoginCsrfFailureHandler(authConfig));\n};\n"],"mappings":"AAAA,SAAS,cAAc;AACvB;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,OACG;AACP,SAAS,sBAAsB,+BAA+B,8BAA8B;AAE5F,SAAS,4BAA4B,oCAAoC;AAElE,MAAM,wBAAwB,CAAC,eAA2B;AAC7D,QAAM,iBAAiB,qBAAqB,UAAU;AACtD,QAAM,yBAAyB,6BAA6B;AAE5D,SAAO,OAAO,EACT,IAAI,UAAU,gBAAgB,uBAAuB,UAAU,CAAC,EAChE,KAAK,UAAU,gBAAgB,2BAA2B,GAAG,6BAA6B,UAAU,CAAC,EACrG;AAAA,IACG;AAAA,IACA;AAAA,IACA,uBAAuB,UAAU;AAAA,IACjC;AAAA,IACA,wBAAwB,UAAU;AAAA,EACtC,EACC,IAAI,8BAA8B,UAAU,CAAC;AACtD;","names":[]}

package/server/dist/routes/client.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/routes/client.ts"],"sourcesContent":["import express, { type RequestHandler, Router } from 'express';\nimport { rateLimit } from 'express-rate-limit';\nimport path from 'path';\nimport { createCsrfProtection, isAuthenticatedRequest } from '../modules/auth-guard.js';\nimport type { AuthConfig } from '../modules/auth-mode.js';\nimport { paths } from '../paths.js';\n\nconst IMAGE_ASSET_RATE_LIMIT_MESSAGE = 'Too many image asset requests. Please try again later.';\n\nconst shouldBlockClientRoute = (authConfig: AuthConfig, requestPath: string, authenticated: boolean) => {\n    if (authConfig.mode !== 'password' || authenticated) {\n        return false;\n    }\n\n    if (\n        requestPath.startsWith('/api') ||\n        requestPath.startsWith('/graphql') ||\n        requestPath === '/login' ||\n        requestPath === '/logout'\n    ) {\n        return false;\n    }\n\n    return path.extname(requestPath) === '';\n};\n\nconst createImageAssetAuthRateLimit = (authConfig: AuthConfig) =>\n    rateLimit({\n        windowMs: 15 * 60 * 1000,\n        limit: 10,\n        standardHeaders: true,\n        legacyHeaders: false,\n        skip: (req) => authConfig.mode !== 'password' || isAuthenticatedRequest(req),\n        handler: (_req, res) => {\n            res.setHeader('Cache-Control', 'no-store');\n            res.status(429).json({\n                code: 'IMAGE_ASSET_RATE_LIMITED',\n                message: IMAGE_ASSET_RATE_LIMIT_MESSAGE,\n            });\n        },\n    });\n\nconst createProtectedImageAssetsMiddleware = (authConfig: AuthConfig): RequestHandler => {\n    return (req, res, next) => {\n        if (authConfig.mode !== 'password' || isAuthenticatedRequest(req)) {\n            next();\n            return;\n        }\n\n        res.setHeader('Cache-Control', 'no-store');\n\n        if (req.headers.accept?.includes('text/html')) {\n            const redirectPath = encodeURIComponent(req.originalUrl || req.url || '/');\n            res.redirect(303, `/login?next=${redirectPath}`);\n            return;\n        }\n\n        res.status(401).end();\n    };\n};\n\nconst createClientRouteCsrfTokenMiddleware = (authConfig: AuthConfig) => {\n    const csrfProtection = createCsrfProtection(authConfig);\n\n    return (req: express.Request, res: express.Response, next: express.NextFunction) => {\n        if (path.extname(req.path) !== '') {\n            next();\n            return;\n        }\n\n        csrfProtection(req, res, next);\n    };\n};\n\nexport const createClientRouter = (authConfig: AuthConfig) =>\n    Router()\n        .use(\n            '/assets/images',\n            createImageAssetAuthRateLimit(authConfig),\n            createProtectedImageAssetsMiddleware(authConfig),\n            express.static(paths.imageDir, {\n                setHeaders: (res) => {\n                    res.setHeader('X-Content-Type-Options', 'nosniff');\n\n                    if (authConfig.mode === 'password') {\n                        res.setHeader('Cache-Control', 'no-store');\n                    }\n                },\n            }),\n            (_req, res) => {\n                res.setHeader('X-Content-Type-Options', 'nosniff');\n\n                if (authConfig.mode === 'password') {\n                    res.setHeader('Cache-Control', 'no-store');\n                }\n\n                res.status(404).end();\n            },\n        )\n        .use((req, res, next) => {\n            if (shouldBlockClientRoute(authConfig, req.path, isAuthenticatedRequest(req))) {\n                const redirectPath = encodeURIComponent(req.originalUrl || '/');\n                res.redirect(303, `/login?next=${redirectPath}`);\n                return;\n            }\n\n            next();\n        })\n        .use(createClientRouteCsrfTokenMiddleware(authConfig))\n        .use(express.static(paths.clientDist, { extensions: ['html'] }))\n        .get(/.*/, (_req, res) => {\n            res.sendFile(paths.clientIndex);\n        });\n"],"mappings":"AAAA,OAAO,WAAgC,cAAc;AACrD,SAAS,iBAAiB;AAC1B,OAAO,UAAU;AACjB,SAAS,sBAAsB,8BAA8B;AAE7D,SAAS,aAAa;AAEtB,MAAM,iCAAiC;AAEvC,MAAM,yBAAyB,CAAC,YAAwB,aAAqB,kBAA2B;AACpG,MAAI,WAAW,SAAS,cAAc,eAAe;AACjD,WAAO;AAAA,EACX;AAEA,MACI,YAAY,WAAW,MAAM,KAC7B,YAAY,WAAW,UAAU,KACjC,gBAAgB,YAChB,gBAAgB,WAClB;AACE,WAAO;AAAA,EACX;AAEA,SAAO,KAAK,QAAQ,WAAW,MAAM;AACzC;AAEA,MAAM,gCAAgC,CAAC,eACnC,UAAU;AAAA,EACN,UAAU,KAAK,KAAK;AAAA,EACpB,OAAO;AAAA,EACP,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,MAAM,CAAC,QAAQ,WAAW,SAAS,cAAc,uBAAuB,GAAG;AAAA,EAC3E,SAAS,CAAC,MAAM,QAAQ;AACpB,QAAI,UAAU,iBAAiB,UAAU;AACzC,QAAI,OAAO,GAAG,EAAE,KAAK;AAAA,MACjB,MAAM;AAAA,MACN,SAAS;AAAA,IACb,CAAC;AAAA,EACL;AACJ,CAAC;AAEL,MAAM,uCAAuC,CAAC,eAA2C;AACrF,SAAO,CAAC,KAAK,KAAK,SAAS;AACvB,QAAI,WAAW,SAAS,cAAc,uBAAuB,GAAG,GAAG;AAC/D,WAAK;AACL;AAAA,IACJ;AAEA,QAAI,UAAU,iBAAiB,UAAU;AAEzC,QAAI,IAAI,QAAQ,QAAQ,SAAS,WAAW,GAAG;AAC3C,YAAM,eAAe,mBAAmB,IAAI,eAAe,IAAI,OAAO,GAAG;AACzE,UAAI,SAAS,KAAK,eAAe,YAAY,EAAE;AAC/C;AAAA,IACJ;AAEA,QAAI,OAAO,GAAG,EAAE,IAAI;AAAA,EACxB;AACJ;AAEA,MAAM,uCAAuC,CAAC,eAA2B;AACrE,QAAM,iBAAiB,qBAAqB,UAAU;AAEtD,SAAO,CAAC,KAAsB,KAAuB,SAA+B;AAChF,QAAI,KAAK,QAAQ,IAAI,IAAI,MAAM,IAAI;AAC/B,WAAK;AACL;AAAA,IACJ;AAEA,mBAAe,KAAK,KAAK,IAAI;AAAA,EACjC;AACJ;AAEO,MAAM,qBAAqB,CAAC,eAC/B,OAAO,EACF;AAAA,EACG;AAAA,EACA,8BAA8B,UAAU;AAAA,EACxC,qCAAqC,UAAU;AAAA,EAC/C,QAAQ,OAAO,MAAM,UAAU;AAAA,IAC3B,YAAY,CAAC,QAAQ;AACjB,UAAI,UAAU,0BAA0B,SAAS;AAEjD,UAAI,WAAW,SAAS,YAAY;AAChC,YAAI,UAAU,iBAAiB,UAAU;AAAA,MAC7C;AAAA,IACJ;AAAA,EACJ,CAAC;AAAA,EACD,CAAC,MAAM,QAAQ;AACX,QAAI,UAAU,0BAA0B,SAAS;AAEjD,QAAI,WAAW,SAAS,YAAY;AAChC,UAAI,UAAU,iBAAiB,UAAU;AAAA,IAC7C;AAEA,QAAI,OAAO,GAAG,EAAE,IAAI;AAAA,EACxB;AACJ,EACC,IAAI,CAAC,KAAK,KAAK,SAAS;AACrB,MAAI,uBAAuB,YAAY,IAAI,MAAM,uBAAuB,GAAG,CAAC,GAAG;AAC3E,UAAM,eAAe,mBAAmB,IAAI,eAAe,GAAG;AAC9D,QAAI,SAAS,KAAK,eAAe,YAAY,EAAE;AAC/C;AAAA,EACJ;AAEA,OAAK;AACT,CAAC,EACA,IAAI,qCAAqC,UAAU,CAAC,EACpD,IAAI,QAAQ,OAAO,MAAM,YAAY,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,EAC9D,IAAI,MAAM,CAAC,MAAM,QAAQ;AACtB,MAAI,SAAS,MAAM,WAAW;AAClC,CAAC;","names":[]}

package/server/dist/routes/graphql.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/routes/graphql.ts"],"sourcesContent":["import { type Request, type Response, Router } from 'express';\nimport { createHandler } from 'graphql-http/lib/use/express';\nimport type { McpAdminService } from '../features/mcp-admin/service.js';\nimport { createCsrfProtection, isAuthenticatedRequest, requireSessionForGraphql } from '../modules/auth-guard.js';\nimport type { AuthConfig } from '../modules/auth-mode.js';\nimport { createMcpAuthMiddleware, createReadOnlyMcpValidationRule } from '../modules/mcp-auth.js';\nimport schema from '../schema/index.js';\n\ntype McpGraphqlService = Pick<McpAdminService, 'getStatus' | 'validatePresentedToken'>;\ntype GraphqlRequestContext = { raw: Request; context: { res: Response } };\n\nconst createGraphqlContext = (authConfig: AuthConfig) => (req: GraphqlRequestContext) => ({\n    authMode: authConfig.mode,\n    isAuthenticated: isAuthenticatedRequest(req.raw),\n    req: req.raw,\n    res: req.context.res,\n});\n\nexport const createGraphqlRouter = (authConfig: AuthConfig, mcpAdminService: McpGraphqlService) => {\n    const csrfProtection = createCsrfProtection(authConfig);\n\n    return Router()\n        .use(\n            '/mcp',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            createHandler({\n                schema,\n                context: createGraphqlContext(authConfig),\n                validationRules: (_req, _args, specifiedRules) => {\n                    return [...specifiedRules, createReadOnlyMcpValidationRule()];\n                },\n            }),\n        )\n        .use(\n            '/',\n            requireSessionForGraphql(authConfig),\n            csrfProtection,\n            createHandler({\n                schema,\n                context: createGraphqlContext(authConfig),\n            }),\n        );\n};\n"],"mappings":"AAAA,SAAsC,cAAc;AACpD,SAAS,qBAAqB;AAE9B,SAAS,sBAAsB,wBAAwB,gCAAgC;AAEvF,SAAS,yBAAyB,uCAAuC;AACzE,OAAO,YAAY;AAKnB,MAAM,uBAAuB,CAAC,eAA2B,CAAC,SAAgC;AAAA,EACtF,UAAU,WAAW;AAAA,EACrB,iBAAiB,uBAAuB,IAAI,GAAG;AAAA,EAC/C,KAAK,IAAI;AAAA,EACT,KAAK,IAAI,QAAQ;AACrB;AAEO,MAAM,sBAAsB,CAAC,YAAwB,oBAAuC;AAC/F,QAAM,iBAAiB,qBAAqB,UAAU;AAEtD,SAAO,OAAO,EACT;AAAA,IACG;AAAA,IACA,wBAAwB,YAAY,eAAe;AAAA,IACnD,cAAc;AAAA,MACV;AAAA,MACA,SAAS,qBAAqB,UAAU;AAAA,MACxC,iBAAiB,CAAC,MAAM,OAAO,mBAAmB;AAC9C,eAAO,CAAC,GAAG,gBAAgB,gCAAgC,CAAC;AAAA,MAChE;AAAA,IACJ,CAAC;AAAA,EACL,EACC;AAAA,IACG;AAAA,IACA,yBAAyB,UAAU;AAAA,IACnC;AAAA,IACA,cAAc;AAAA,MACV;AAAA,MACA,SAAS,qBAAqB,UAAU;AAAA,IAC5C,CAAC;AAAA,EACL;AACR;","names":[]}

package/server/dist/routes/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/routes/index.ts"],"sourcesContent":["export { createApiRouter } from './api.js';\nexport { createAuthPagesRouter } from './auth-pages.js';\nexport { createClientRouter } from './client.js';\nexport { createGraphqlRouter } from './graphql.js';\n"],"mappings":"AAAA,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;","names":[]}

package/server/dist/routes/mcp.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/routes/mcp.ts"],"sourcesContent":["import { Router } from 'express';\nimport type { McpAdminService } from '../features/mcp-admin/service.js';\nimport {\n    createMcpAppendNoteMarkdownHandler,\n    createMcpCreateNoteHandler,\n    createMcpDeleteNoteHandler,\n    createMcpNoteWriteBaselineHandler,\n    createMcpPatchNoteMarkdownHandler,\n    createMcpReplaceNoteMarkdownHandler,\n    createMcpUpdateNoteHandler,\n    createMcpUpdateNoteMetadataHandler,\n} from '../features/note/http/mcp.js';\nimport { createMcpCreateTagHandler } from '../features/tag/http/mcp.js';\nimport type { AuthConfig } from '../modules/auth-mode.js';\nimport { createMcpAuthMiddleware } from '../modules/mcp-auth.js';\nimport useAsync from '../modules/use-async.js';\n\ntype McpRouteService = Pick<McpAdminService, 'getStatus' | 'validatePresentedToken'>;\n\nexport const createMcpRouter = (authConfig: AuthConfig, mcpAdminService: McpRouteService) =>\n    Router()\n        .post(\n            '/notes/create',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpCreateNoteHandler()),\n        )\n        .post(\n            '/notes/update',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpUpdateNoteHandler()),\n        )\n        .post(\n            '/notes/baseline',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpNoteWriteBaselineHandler()),\n        )\n        .post(\n            '/notes/patch-markdown',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpPatchNoteMarkdownHandler()),\n        )\n        .post(\n            '/notes/append-markdown',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpAppendNoteMarkdownHandler()),\n        )\n        .post(\n            '/notes/metadata',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpUpdateNoteMetadataHandler()),\n        )\n        .post(\n            '/notes/replace-markdown',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpReplaceNoteMarkdownHandler()),\n        )\n        .post(\n            '/notes/delete',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpDeleteNoteHandler()),\n        )\n        .post(\n            '/tags/create',\n            createMcpAuthMiddleware(authConfig, mcpAdminService),\n            useAsync(createMcpCreateTagHandler()),\n        );\n"],"mappings":"AAAA,SAAS,cAAc;AAEvB;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AACP,SAAS,iCAAiC;AAE1C,SAAS,+BAA+B;AACxC,OAAO,cAAc;AAId,MAAM,kBAAkB,CAAC,YAAwB,oBACpD,OAAO,EACF;AAAA,EACG;AAAA,EACA,wBAAwB,YAAY,eAAe;AAAA,EACnD,SAAS,2BAA2B,CAAC;AACzC,EACC;AAAA,EACG;AAAA,EACA,wBAAwB,YAAY,eAAe;AAAA,EACnD,SAAS,2BAA2B,CAAC;AACzC,EACC;AAAA,EACG;AAAA,EACA,wBAAwB,YAAY,eAAe;AAAA,EACnD,SAAS,kCAAkC,CAAC;AAChD,EACC;AAAA,EACG;AAAA,EACA,wBAAwB,YAAY,eAAe;AAAA,EACnD,SAAS,kCAAkC,CAAC;AAChD,EACC;AAAA,EACG;AAAA,EACA,wBAAwB,YAAY,eAAe;AAAA,EACnD,SAAS,mCAAmC,CAAC;AACjD,EACC;AAAA,EACG;AAAA,EACA,wBAAwB,YAAY,eAAe;AAAA,EACnD,SAAS,mCAAmC,CAAC;AACjD,EACC;AAAA,EACG;AAAA,EACA,wBAAwB,YAAY,eAAe;AAAA,EACnD,SAAS,oCAAoC,CAAC;AAClD,EACC;AAAA,EACG;AAAA,EACA,wBAAwB,YAAY,eAAe;AAAA,EACnD,SAAS,2BAA2B,CAAC;AACzC,EACC;AAAA,EACG;AAAA,EACA,wBAAwB,YAAY,eAAe;AAAA,EACnD,SAAS,0BAA0B,CAAC;AACxC;","names":[]}

package/server/dist/schema/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/schema/index.ts"],"sourcesContent":["import { makeExecutableSchema } from '@graphql-tools/schema';\nimport { cacheResolvers, cacheTypeDefs } from '../features/cache/graphql/index.js';\nimport { imageResolvers, imageTypeDefs } from '../features/image/graphql/index.js';\nimport { noteResolvers, noteTypeDefs } from '../features/note/graphql/index.js';\nimport { placeholderResolvers, placeholderTypeDefs } from '../features/placeholder/graphql/index.js';\nimport { reminderResolvers, reminderTypeDefs } from '../features/reminder/graphql/index.js';\nimport { tagResolvers, tagTypeDefs } from '../features/tag/graphql/index.js';\nimport { viewResolvers, viewTypeDefs } from '../features/view/graphql/index.js';\n\nconst schema = makeExecutableSchema({\n    typeDefs: [\n        cacheTypeDefs,\n        noteTypeDefs,\n        imageTypeDefs,\n        tagTypeDefs,\n        placeholderTypeDefs,\n        reminderTypeDefs,\n        viewTypeDefs,\n    ],\n    resolvers: [\n        cacheResolvers,\n        noteResolvers,\n        imageResolvers,\n        tagResolvers,\n        placeholderResolvers,\n        reminderResolvers,\n        viewResolvers,\n    ],\n});\n\nexport default schema;\n"],"mappings":"AAAA,SAAS,4BAA4B;AACrC,SAAS,gBAAgB,qBAAqB;AAC9C,SAAS,gBAAgB,qBAAqB;AAC9C,SAAS,eAAe,oBAAoB;AAC5C,SAAS,sBAAsB,2BAA2B;AAC1D,SAAS,mBAAmB,wBAAwB;AACpD,SAAS,cAAc,mBAAmB;AAC1C,SAAS,eAAe,oBAAoB;AAE5C,MAAM,SAAS,qBAAqB;AAAA,EAChC,UAAU;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AAAA,EACA,WAAW;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACJ,CAAC;AAED,IAAO,iBAAQ;","names":[]}

package/server/dist/start.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/start.ts"],"sourcesContent":["import { runPrismaMigrateDeploy } from './modules/prisma-runtime.js';\n\ntry {\n    runPrismaMigrateDeploy();\n    await import('./main.js');\n} catch (error) {\n    const message = error instanceof Error ? error.message : 'Unknown Prisma startup error';\n    process.stderr.write(`[prisma] Startup failed: ${message}\\n`);\n    process.exit(1);\n}\n"],"mappings":"AAAA,SAAS,8BAA8B;AAEvC,IAAI;AACA,yBAAuB;AACvB,QAAM,OAAO,WAAW;AAC5B,SAAS,OAAO;AACZ,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,UAAQ,OAAO,MAAM,4BAA4B,OAAO;AAAA,CAAI;AAC5D,UAAQ,KAAK,CAAC;AAClB;","names":[]}

package/server/dist/types/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/types/index.ts"],"sourcesContent":["import type { NextFunction, Request, Response } from 'express';\n\ndeclare module 'express-session' {\n    interface SessionData {\n        authenticated?: boolean;\n    }\n}\n\nexport type Controller = (req: Request, res: Response, next?: NextFunction) => Promise<void>;\n\nexport * from './input.js';\n"],"mappings":"AAUA,cAAc;","names":[]}

package/server/dist/types/input.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}