ocean-brain 0.8.0 → 0.8.2

package/server/client/dist/assets/trash-8sH7EZgc.js

@@ -0,0 +1 @@
+import{j as e,r as E}from"./floating-ui.react-dom-wWLZ1CdM.js";import{u as Q,e as k,m as F,q as L,i as M,d as _}from"./time-B3pt8vt4.js";import{aa as I,ai as K,U as O,a9 as B,b1 as H,T as i,b2 as U,b3 as W,aj as w,al as Y,Z as d,au as b,ak as $,ac as l,a8 as z,aA as G,b4 as V,at as y}from"./note.api-D_00ZzJC.js";import{S as C}from"./SurfaceCard-BZm73nyS.js";import{e as Z,N as J}from"./url-BSnWpmJx.js";import"./NotePropertiesPanel-2DgXEM4B.js";import"./Plus.es-CQ8wn2is.js";const m=25,v=K(Z),S=30,R=`Deleted notes stay here for ${S} days before permanent removal`,g={title:"Permanently delete note?",description:"This note is referenced by the notes below. If you permanently delete it, those links will stay broken. Other notes will not be edited automatically.",confirmLabel:"Delete now",confirmVariant:"danger"},P=a=>M(a).format("YYYY-MM-DD HH:mm"),X=({note:a,onClose:o})=>{const s=a?.id??"",c=a?.title||"Untitled note",r=_({queryKey:i.notes.trashDetail(s),enabled:!!a,queryFn:async()=>{const h=await V(s);if(h.type==="error")throw h;if(!h.trashedNote)throw new Error("Trashed note not found");return h.trashedNote}}),f=r.data?.contentAsMarkdown.trim()??"";return e.jsxs(y,{isOpen:!!a,onClose:o,variant:"inspect",children:[e.jsx(y.Header,{title:c,onClose:o}),e.jsx(y.Body,{children:e.jsxs("div",{className:"flex flex-col gap-3",children:[a&&e.jsxs(d,{as:"p",variant:"meta",tone:"secondary",children:["Deleted ",P(a.deletedAt)]}),r.isLoading&&e.jsx(d,{as:"p",variant:"meta",tone:"secondary",children:"Loading deleted note content..."}),r.isError&&e.jsx(d,{as:"p",variant:"meta",tone:"error",children:"Failed to load deleted note content."}),!r.isLoading&&!r.isError&&f&&e.jsx("pre",{className:"max-h-[60vh] overflow-auto whitespace-pre-wrap break-words rounded-[14px] border border-border-subtle bg-hover-subtle/50 px-4 py-3 text-sm leading-6 text-fg-secondary",children:f}),!r.isLoading&&!r.isError&&!f&&e.jsx(d,{as:"p",variant:"meta",tone:"secondary",className:"rounded-[14px] border border-border-subtle bg-hover-subtle/50 px-4 py-3",children:"No readable content was found for this deleted note."})]})}),e.jsx(y.Footer,{children:e.jsx(b,{variant:"ghost",size:"sm",onClick:o,children:"Close"})})]})},ee=()=>e.jsx(w,{title:"Trash",variant:"default",heading:e.jsx(l,{width:118,height:24,className:"rounded-full"}),description:e.jsx(l,{width:352,height:16,className:"rounded-full"}),children:e.jsx("div",{className:"grid gap-3",children:Array.from({length:3},(a,o)=>e.jsx(C,{padding:"compact",children:e.jsxs("div",{className:"flex flex-col gap-3 sm:flex-row sm:items-start sm:justify-between",children:[e.jsxs("div",{className:"min-w-0 flex-1 space-y-2",children:[e.jsx(l,{width:"40%",height:18,className:"rounded-full"}),e.jsxs("div",{className:"flex flex-wrap gap-2",children:[e.jsx(l,{width:168,height:14,className:"rounded-full"}),e.jsx(l,{width:176,height:14,className:"rounded-full"})]}),e.jsxs("div",{className:"flex flex-wrap gap-2",children:[e.jsx(l,{width:56,height:24,className:"rounded-full"}),e.jsx(l,{width:72,height:24,className:"rounded-full"})]})]}),e.jsx(l,{width:92,height:32,className:"rounded-[12px]"})]})},o))})}),te=()=>{const{page:a}=v.useSearch(),o=v.useNavigate(),s=O(),c=z(),r=Q(),[f,h]=E.useState(null),[x,j]=E.useState(null),{data:u}=B({queryKey:i.notes.trash({limit:m,offset:(a-1)*m}),queryFn:async()=>{const t=await H({limit:m,offset:(a-1)*m});if(t.type==="error")throw t;return t.trashedNotes}}),N=k({mutationFn:U,onSuccess:async t=>{if(t.type==="error")throw t;await Promise.all([s.invalidateQueries({queryKey:i.notes.all(),exact:!1}),s.invalidateQueries({queryKey:i.tags.all(),exact:!1}),s.invalidateQueries({queryKey:i.reminders.all(),exact:!1}),s.invalidateQueries({queryKey:i.images.all(),exact:!1}),s.invalidateQueries({queryKey:i.calendar.all(),exact:!1})]),c("The note has been restored."),o({to:J,params:{id:t.restoreTrashedNote.id}})},onError:()=>{c("Failed to restore the note.")}}),p=k({mutationFn:W,onSuccess:async t=>{if(t.type==="error")throw t;await s.invalidateQueries({queryKey:i.notes.trashAll(),exact:!1}),c("The note has been permanently deleted.")},onError:()=>{c("Failed to permanently delete the note.")}}),D=()=>{if(!x)return;const{id:t}=x;j(null),p.mutate(t)},A=async t=>{const n=await G(t);if(n.type==="error"){c("Failed to check linked notes before permanently deleting this note.");return}if(s.setQueryData(i.notes.backReferences(t),n.backReferences),n.backReferences.length>0){j({id:t,backReferences:n.backReferences});return}await r("Permanently delete this note? This cannot be undone.")&&p.mutate(t)},T=u.totalCount>0?`Trash (${u.totalCount})`:void 0,q=u.notes.find(t=>t.id===f)??null;return u.notes.length===0?e.jsx(w,{title:"Trash",variant:"default",heading:T,description:R,children:e.jsx(Y,{title:"Trash is empty",description:`Delete a note and you can restore it here for ${S} days before permanent removal`})}):e.jsxs(w,{title:"Trash",variant:"default",heading:T,description:R,children:[e.jsxs("div",{className:"flex flex-col gap-4",children:[e.jsx("div",{className:"grid gap-3",children:u.notes.map(t=>e.jsx(C,{padding:"compact",children:e.jsxs("div",{className:"flex flex-col gap-3 sm:flex-row sm:items-start sm:justify-between",children:[e.jsxs("div",{className:"min-w-0 flex-1",children:[e.jsxs("div",{className:"flex min-w-0 items-start gap-1.5",children:[e.jsx(d,{as:"h2",variant:"body",weight:"medium",className:"min-w-0 flex-1 break-words leading-[1.25]",children:t.title||"Untitled note"}),t.pinned&&e.jsx("span",{title:"Pinned",className:"inline-flex h-5 w-5 shrink-0 items-center justify-center text-fg-tertiary",children:e.jsx(F,{className:"h-3.5 w-3.5"})})]}),e.jsx("div",{className:"mt-1 flex flex-wrap items-center gap-x-3 gap-y-1",children:e.jsxs(d,{as:"div",variant:"meta",weight:"medium",tone:"secondary",children:["Deleted ",P(t.deletedAt)]})}),t.tagNames.length>0&&e.jsx("div",{className:"mt-2 flex flex-wrap gap-1.5",children:t.tagNames.map(n=>e.jsx(d,{as:"span",variant:"label",weight:"medium",tone:"tertiary",className:"rounded-full border border-border-subtle bg-hover-subtle px-2 py-0.5",children:n},`${t.id}-${n}`))}),t.contentPreview&&e.jsx("div",{className:"mt-3 rounded-[14px] border border-border-subtle bg-hover-subtle/50 px-3 py-2",children:e.jsx(d,{as:"p",variant:"meta",tone:"secondary",className:"line-clamp-3 whitespace-pre-wrap break-words",children:t.contentPreview})})]}),e.jsxs("div",{className:"flex shrink-0 flex-wrap gap-2 sm:justify-end",children:[e.jsx(b,{variant:"subtle",size:"sm",onClick:()=>h(t.id),children:"View content"}),e.jsx(b,{variant:"subtle",size:"sm",isLoading:N.isPending&&N.variables===t.id,onClick:()=>N.mutate(t.id),children:"Restore"}),e.jsx(b,{variant:"soft-danger",size:"sm",isLoading:p.isPending&&p.variables===t.id,onClick:()=>A(t.id),children:"Delete now"})]})]})},t.id))}),u.totalCount>m&&e.jsx($,{page:a,last:Math.ceil(u.totalCount/m),onChange:t=>{o({search:n=>({...n,page:t})})}})]}),e.jsx(X,{note:q,onClose:()=>h(null)}),e.jsx(L,{isOpen:!!x,title:g.title,description:g.description,references:x?.backReferences??[],confirmLabel:g.confirmLabel,confirmVariant:g.confirmVariant,onClose:()=>j(null),onConfirm:D})]})},de=()=>{const{page:a}=v.useSearch();return e.jsx(I,{fallback:e.jsx(ee,{}),errorTitle:"Failed to load trash",errorDescription:"Retry loading deleted notes",resetKeys:[a],children:e.jsx(te,{})})};export{de as default};

package/server/client/dist/assets/url-BSnWpmJx.js

@@ -0,0 +1 @@
+const E={HOME_ROUTE:"/",VIEWS_ROUTE:"/views",VIEW_NOTES_ROUTE:"/views/notes",CALENDAR_ROUTE:"/calendar",REMINDERS_ROUTE:"/reminders",GRAPH_ROUTE:"/graph",SEARCH_ROUTE:"/search",TAG_ROUTE:"/tag",NOTE_ROUTE:"/$id",TAG_NOTES_ROUTE:"/tag/$id",SETTINGS_ROUTE:"/setting",SETTINGS_MCP_ROUTE:"/setting/mcp",SETTINGS_TRASH_ROUTE:"/setting/trash",SETTINGS_MANAGE_IMAGE_ROUTE:"/setting/manage-image",SETTINGS_MANAGE_IMAGE_DETAIL_ROUTE:"/setting/manage-image/$id",SETTINGS_PLACEHOLDER_ROUTE:"/setting/placeholder",SETTINGS_PROPERTIES_ROUTE:"/setting/properties"},{HOME_ROUTE:T,VIEWS_ROUTE:_,VIEW_NOTES_ROUTE:R,CALENDAR_ROUTE:O,REMINDERS_ROUTE:S,GRAPH_ROUTE:U,SEARCH_ROUTE:s,TAG_ROUTE:a,NOTE_ROUTE:A,TAG_NOTES_ROUTE:G,SETTINGS_ROUTE:N,SETTINGS_MCP_ROUTE:I,SETTINGS_TRASH_ROUTE:e,SETTINGS_MANAGE_IMAGE_ROUTE:t,SETTINGS_MANAGE_IMAGE_DETAIL_ROUTE:i,SETTINGS_PLACEHOLDER_ROUTE:g,SETTINGS_PROPERTIES_ROUTE:n}=E;export{E as A,O as C,U as G,T as H,A as N,S as R,s as S,a as T,_ as V,N as a,G as b,R as c,I as d,e,t as f,i as g,g as h,n as i};

package/server/client/dist/assets/{useReminderMutate-CoXXqJY2.js → useReminderMutate-CLK1tHvT.js}

@@ -1,4 +1,4 @@
-import{j as y}from"./note-vendor-DkYKUmLo.js";import{h as u,a5 as f,q as n,k as R,m as $}from"./index-VHp17GQX.js";import{a as l}from"./graph-vendor-UTvF2NS_.js";const g=(e={})=>({limit:e.limit??10,offset:e.offset??0}),D=async(e,t)=>u(`
+import{j as y,r as l}from"./floating-ui.react-dom-wWLZ1CdM.js";import{a6 as u,a9 as f,T as n,U as R,a8 as $}from"./note.api-D_00ZzJC.js";const g=(e={})=>({limit:e.limit??10,offset:e.offset??0}),D=async(e,t)=>u(`
         query FetchNoteReminders($noteId: ID!, $pagination: PaginationInput) {
             noteReminders(noteId: $noteId, pagination: $pagination) {
                 totalCount
@@ -34,7 +34,7 @@ import{j as y}from"./note-vendor-DkYKUmLo.js";import{h as u,a5 as f,q as n,k as
                 }
             }
         }
-    `,{pagination:g(e)}),q=async e=>{const{noteId:t,reminderDate:a,priority:o="medium",content:i}=e;return u(`
+    `,{pagination:g(e)}),I=async e=>{const{noteId:t,reminderDate:a,priority:o="medium",content:i}=e;return u(`
         mutation CreateReminder($noteId: ID!, $reminderDate: String!, $priority: ReminderPriority, $content: String) {
             createReminder(
                 noteId: $noteId,
@@ -51,7 +51,7 @@ import{j as y}from"./note-vendor-DkYKUmLo.js";import{h as u,a5 as f,q as n,k as
                 updatedAt
             }
         }
-    `,{noteId:t,reminderDate:a.toISOString(),priority:o,content:i})},I=async({id:e,reminderDate:t,completed:a,priority:o,content:i})=>{const r={id:e};return t&&(r.reminderDate=t.toISOString()),a!==void 0&&(r.completed=a),o&&(r.priority=o),i!==void 0&&(r.content=i),u(`
+    `,{noteId:t,reminderDate:a.toISOString(),priority:o,content:i})},q=async({id:e,reminderDate:t,completed:a,priority:o,content:i})=>{const r={id:e};return t&&(r.reminderDate=t.toISOString()),a!==void 0&&(r.completed=a),o&&(r.priority=o),i!==void 0&&(r.content=i),u(`
         mutation UpdateReminder(
             $id: ID!, 
             $reminderDate: String, 
@@ -79,4 +79,4 @@ import{j as y}from"./note-vendor-DkYKUmLo.js";import{h as u,a5 as f,q as n,k as
         mutation DeleteReminder($id: ID!) {
             deleteReminder(id: $id)
         }
-    `,{id:e});function P({noteId:e,searchParams:t,render:a}){const{data:o}=f({queryKey:e?n.reminders.note(e,t):n.reminders.upcoming(t),queryFn:async()=>{if(e){const r=await D(e,t);if(r.type==="error")throw r;return r.noteReminders}const i=await A(t);if(i.type==="error")throw i;return i.upcomingReminders}});return y.jsx(y.Fragment,{children:a(o)})}function w(){const e=$(),t=R(),a=l.useCallback(async(r,m,d="medium",s,c)=>{const p=await q({noteId:r,reminderDate:m,priority:d,content:c});if(p.type==="error"){e(p.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(r),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),s&&s()},[t,e]),o=l.useCallback(async(r,m,d,s)=>{const c=await I({id:r,...d});if(c.type==="error"){e(c.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(m),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),s&&s()},[t,e]),i=l.useCallback(async(r,m,d)=>{const s=await x(r);if(s.type==="error"){e(s.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(m),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),d&&d()},[t,e]);return{onCreate:a,onUpdate:o,onDelete:i}}export{P as R,w as u};
+    `,{id:e});function K({noteId:e,searchParams:t,render:a}){const{data:o}=f({queryKey:e?n.reminders.note(e,t):n.reminders.upcoming(t),queryFn:async()=>{if(e){const r=await D(e,t);if(r.type==="error")throw r;return r.noteReminders}const i=await A(t);if(i.type==="error")throw i;return i.upcomingReminders}});return y.jsx(y.Fragment,{children:a(o)})}function P(){const e=$(),t=R(),a=l.useCallback(async(r,m,d="medium",s,c)=>{const p=await I({noteId:r,reminderDate:m,priority:d,content:c});if(p.type==="error"){e(p.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(r),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),s&&s()},[t,e]),o=l.useCallback(async(r,m,d,s)=>{const c=await q({id:r,...d});if(c.type==="error"){e(c.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(m),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),s&&s()},[t,e]),i=l.useCallback(async(r,m,d)=>{const s=await x(r);if(s.type==="error"){e(s.errors[0].message);return}await Promise.all([t.invalidateQueries({queryKey:n.reminders.noteAllPages(m),exact:!1}),t.invalidateQueries({queryKey:n.reminders.upcomingAllPages(),exact:!1}),t.invalidateQueries({queryKey:n.reminders.inDateRangeAll(),exact:!1})]),d&&d()},[t,e]);return{onCreate:a,onUpdate:o,onDelete:i}}export{K as R,P as u};

package/server/client/dist/index.html

@@ -2,15 +2,20 @@
 <html lang="en">
 
 <head>
+  <script type="module" src="/assets/route-preload.js"></script>
+
     <meta charset="UTF-8" />
     <link rel="icon" type="image/png" href="/icon.png" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>Ocean Brain</title>
-  <script type="module" crossorigin src="/assets/index-VHp17GQX.js"></script>
-  <link rel="modulepreload" crossorigin href="/assets/graph-vendor-UTvF2NS_.js">
-  <link rel="modulepreload" crossorigin href="/assets/note-core-BklwyZHk.js">
-  <link rel="modulepreload" crossorigin href="/assets/note-vendor-DkYKUmLo.js">
-  <link rel="stylesheet" crossorigin href="/assets/index-BEUqDuAZ.css">
+  <script type="module" crossorigin src="/assets/app-cTRcKMGc.js"></script>
+  <link rel="modulepreload" crossorigin href="/assets/floating-ui.react-dom-wWLZ1CdM.js">
+  <link rel="modulepreload" crossorigin href="/assets/url-BSnWpmJx.js">
+  <link rel="modulepreload" crossorigin href="/assets/note.api-D_00ZzJC.js">
+  <link rel="modulepreload" crossorigin href="/assets/time-B3pt8vt4.js">
+  <link rel="modulepreload" crossorigin href="/assets/preload-helper-BXl3LOEh.js">
+  <link rel="modulepreload" crossorigin href="/assets/Graph-D9GeO71k.js">
+  <link rel="stylesheet" crossorigin href="/assets/app-DmqIOMWF.css">
 </head>
 
 <body>

package/server/dist/app.js

@@ -18,7 +18,7 @@ const createAppWithMcpAuth = (authConfig, mcpAdminService) => {
     process.stderr.write(`[recovery] Startup cleanup failed: ${message}
 `);
   });
-  app.use(logger).use(createSessionMiddleware(authConfig)).use(express.urlencoded({ extended: false })).use(express.json({ limit: "50mb" })).use("/api", createApiRouter(authConfig, mcpAdminService)).use(createAuthPagesRouter(authConfig)).use("/graphql", createGraphqlRouter(authConfig, mcpAdminService)).use(createClientRouter(authConfig)).use(createErrorHandler());
+  app.use(logger).use(createSessionMiddleware(authConfig)).use(express.urlencoded({ extended: false, inflate: false })).use(express.json({ limit: "50mb", inflate: false })).use("/api", createApiRouter(authConfig, mcpAdminService)).use(createAuthPagesRouter(authConfig)).use("/graphql", createGraphqlRouter(authConfig, mcpAdminService)).use(createClientRouter(authConfig)).use(createErrorHandler());
   return app;
 };
 var app_default = createApp;
@@ -27,4 +27,3 @@ export {
   createAppWithMcpAuth,
   app_default as default
 };
-//# sourceMappingURL=app.js.map

package/server/dist/features/auth/http/api.js

@@ -41,4 +41,3 @@ export {
   createLogoutHandler,
   createSessionStatusHandler
 };
-//# sourceMappingURL=api.js.map

package/server/dist/features/auth/http/login-page.js

@@ -1,9 +1,276 @@
 import { readFileSync } from "node:fs";
 const LOGIN_ERROR_TOKEN = "<!-- OCEAN_BRAIN_LOGIN_ERROR -->";
 const NEXT_PATH_TOKEN = "OCEAN_BRAIN_NEXT_PATH";
+const SESSION_GENERATION_TOKEN = "OCEAN_BRAIN_SESSION_GENERATION";
 const readLoginPageTemplate = () => {
   if (true) {
-    return '<!doctype html>\n<html lang="en">\n<head>\n    <meta charset="utf-8" />\n    <meta name="viewport" content="width=device-width, initial-scale=1" />\n    <title>Ocean Brain Sign In</title>\n    <style>\n        :root {\n            color-scheme: light dark;\n            --surface: #f7f8fa;\n            --elevated: #fbfcfd;\n            --fg-default: #202631;\n            --fg-secondary: #626d7c;\n            --fg-tertiary: #8993a2;\n            --fg-placeholder: #98a2b0;\n            --fg-error: #a24545;\n            --fg-on-filled: #f6f8fb;\n            --border-subtle: #e5e9ee;\n            --border-focus: #757f8d;\n            --border-error: #d47777;\n            --accent-soft-danger: rgba(214, 141, 135, 0.18);\n            --accent-soft-primary: rgba(93, 102, 114, 0.12);\n            --cta: #23272d;\n            --cta-hover: #171a1f;\n            --page-bg: #f2f5f8;\n            font-family: "Pretendard Variable", "Pretendard", -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;\n            background: var(--page-bg);\n            color: var(--fg-default);\n        }\n        @media (prefers-color-scheme: dark) {\n            :root {\n                --surface: #16191e;\n                --elevated: #1d2229;\n                --fg-default: #e6ebf2;\n                --fg-secondary: #a9b3c2;\n                --fg-tertiary: #7f8998;\n                --fg-placeholder: #717b88;\n                --fg-error: #efaaaa;\n                --fg-on-filled: #12161c;\n                --border-subtle: #29303a;\n                --border-focus: #b4c0cf;\n                --border-error: #efaaaa;\n                --accent-soft-danger: rgba(215, 146, 139, 0.14);\n                --accent-soft-primary: rgba(184, 192, 202, 0.12);\n                --cta: #edf1f5;\n                --cta-hover: #f8fafc;\n                --page-bg: #101318;\n            }\n        }\n        * {\n            box-sizing: border-box;\n        }\n        body {\n            margin: 0;\n            min-height: 100vh;\n            display: grid;\n            place-items: center;\n            background: var(--page-bg);\n            padding: 24px;\n        }\n        .shell {\n            width: min(392px, 100%);\n        }\n        .brand {\n            display: flex;\n            align-items: center;\n            gap: 10px;\n            margin-bottom: 14px;\n            color: var(--fg-tertiary);\n            font-size: 12px;\n            font-weight: 700;\n            line-height: 1.4;\n        }\n        .brand img {\n            width: 28px;\n            height: 28px;\n            border-radius: 8px;\n        }\n        .panel {\n            padding: 24px;\n            border: 1px solid var(--border-subtle);\n            border-radius: 16px;\n            background: var(--surface);\n            box-shadow:\n                inset 0 1px 0 rgba(255, 255, 255, 0.1),\n                0 1px 4px -2px rgba(23, 29, 38, 0.04);\n        }\n        .sr-only {\n            position: absolute;\n            width: 1px;\n            height: 1px;\n            padding: 0;\n            margin: -1px;\n            overflow: hidden;\n            clip: rect(0, 0, 0, 0);\n            white-space: nowrap;\n            border: 0;\n        }\n        label {\n            display: block;\n            margin-bottom: 8px;\n            color: var(--fg-secondary);\n            font-size: 0.75rem;\n            line-height: 1.4;\n            font-weight: 600;\n        }\n        form {\n            display: grid;\n            gap: 16px;\n        }\n        .field {\n            display: grid;\n        }\n        input {\n            width: 100%;\n            box-sizing: border-box;\n            padding: 14px 16px;\n            border: 1px solid var(--border-subtle);\n            border-radius: 16px;\n            background: var(--elevated);\n            font-size: 16px;\n            color: var(--fg-default);\n            transition: border-color 0.18s ease, box-shadow 0.18s ease, background-color 0.18s ease;\n        }\n        input::placeholder {\n            color: var(--fg-placeholder);\n        }\n        input:focus {\n            outline: none;\n            border-color: var(--border-focus);\n            box-shadow: 0 0 0 4px var(--accent-soft-primary);\n        }\n        button {\n            width: 100%;\n            border: 1px solid transparent;\n            border-radius: 14px;\n            background: var(--cta);\n            color: var(--fg-on-filled);\n            padding: 14px 18px;\n            font-size: 16px;\n            font-weight: 600;\n            cursor: pointer;\n            transition: transform 0.18s ease, box-shadow 0.18s ease, background-color 0.18s ease;\n        }\n        button:hover {\n            background: var(--cta-hover);\n        }\n        button:active {\n            transform: translateY(1px);\n        }\n        button:focus-visible {\n            outline: none;\n            box-shadow: 0 0 0 4px var(--accent-soft-primary);\n        }\n        .error {\n            margin-bottom: 18px;\n            padding: 13px 14px;\n            border: 1px solid var(--border-error);\n            border-radius: 14px;\n            background: var(--accent-soft-danger);\n            color: var(--fg-error);\n            font-size: 14px;\n            font-weight: 600;\n        }\n        @media (prefers-color-scheme: dark) {\n            .panel {\n                box-shadow:\n                    inset 0 1px 0 rgba(255, 255, 255, 0.03),\n                    0 1px 4px -2px rgba(0, 0, 0, 0.18);\n            }\n        }\n        @media (max-width: 640px) {\n            body {\n                place-items: stretch;\n                padding: 18px;\n            }\n            .shell {\n                width: 100%;\n                margin: auto 0;\n            }\n            .panel {\n                padding: 22px;\n            }\n        }\n    </style>\n</head>\n<body>\n    <main class="shell">\n        <div class="brand"><img src="/icon.png" alt="" aria-hidden="true" />Ocean Brain</div>\n        <section class="panel" aria-labelledby="login-title">\n            <h1 id="login-title" class="sr-only">Sign in</h1>\n            <!-- OCEAN_BRAIN_LOGIN_ERROR -->\n            <form method="post" action="/login">\n                <!-- OCEAN_BRAIN_CSRF_INPUT -->\n                <input type="hidden" name="next" value="OCEAN_BRAIN_NEXT_PATH" />\n                <div class="field">\n                    <label for="password">Password</label>\n                    <input id="password" name="password" type="password" autocomplete="current-password" required autofocus />\n                </div>\n                <button type="submit">Sign in</button>\n            </form>\n        </section>\n    </main>\n</body>\n</html>\n';
+    return `<!doctype html>
+<html lang="en">
+<head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="ocean-brain-session-generation" content="OCEAN_BRAIN_SESSION_GENERATION" />
+    <title>Ocean Brain Sign In</title>
+    <style>
+        :root {
+            color-scheme: light dark;
+            --surface: #f7f8fa;
+            --elevated: #fbfcfd;
+            --fg-default: #202631;
+            --fg-secondary: #626d7c;
+            --fg-tertiary: #8993a2;
+            --fg-placeholder: #98a2b0;
+            --fg-error: #a24545;
+            --fg-on-filled: #f6f8fb;
+            --border-subtle: #e5e9ee;
+            --border-focus: #757f8d;
+            --border-error: #d47777;
+            --accent-soft-danger: rgba(214, 141, 135, 0.18);
+            --accent-soft-primary: rgba(93, 102, 114, 0.12);
+            --cta: #23272d;
+            --cta-hover: #171a1f;
+            --page-bg: #f2f5f8;
+            font-family: "Pretendard Variable", "Pretendard", -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+            background: var(--page-bg);
+            color: var(--fg-default);
+        }
+        @media (prefers-color-scheme: dark) {
+            :root {
+                --surface: #16191e;
+                --elevated: #1d2229;
+                --fg-default: #e6ebf2;
+                --fg-secondary: #a9b3c2;
+                --fg-tertiary: #7f8998;
+                --fg-placeholder: #717b88;
+                --fg-error: #efaaaa;
+                --fg-on-filled: #12161c;
+                --border-subtle: #29303a;
+                --border-focus: #b4c0cf;
+                --border-error: #efaaaa;
+                --accent-soft-danger: rgba(215, 146, 139, 0.14);
+                --accent-soft-primary: rgba(184, 192, 202, 0.12);
+                --cta: #edf1f5;
+                --cta-hover: #f8fafc;
+                --page-bg: #101318;
+            }
+        }
+        * {
+            box-sizing: border-box;
+        }
+        body {
+            margin: 0;
+            min-height: 100vh;
+            display: grid;
+            place-items: center;
+            background: var(--page-bg);
+            padding: 24px;
+        }
+        .shell {
+            width: min(392px, 100%);
+        }
+        .brand {
+            display: flex;
+            align-items: center;
+            gap: 10px;
+            margin-bottom: 14px;
+            color: var(--fg-tertiary);
+            font-size: 12px;
+            font-weight: 700;
+            line-height: 1.4;
+        }
+        .brand img {
+            width: 28px;
+            height: 28px;
+            border-radius: 8px;
+        }
+        .panel {
+            padding: 24px;
+            border: 1px solid var(--border-subtle);
+            border-radius: 16px;
+            background: var(--surface);
+            box-shadow:
+                inset 0 1px 0 rgba(255, 255, 255, 0.1),
+                0 1px 4px -2px rgba(23, 29, 38, 0.04);
+        }
+        .sr-only {
+            position: absolute;
+            width: 1px;
+            height: 1px;
+            padding: 0;
+            margin: -1px;
+            overflow: hidden;
+            clip: rect(0, 0, 0, 0);
+            white-space: nowrap;
+            border: 0;
+        }
+        label {
+            display: block;
+            margin-bottom: 8px;
+            color: var(--fg-secondary);
+            font-size: 0.75rem;
+            line-height: 1.4;
+            font-weight: 600;
+        }
+        form {
+            display: grid;
+            gap: 16px;
+        }
+        .field {
+            display: grid;
+        }
+        input {
+            width: 100%;
+            box-sizing: border-box;
+            padding: 14px 16px;
+            border: 1px solid var(--border-subtle);
+            border-radius: 16px;
+            background: var(--elevated);
+            font-size: 16px;
+            color: var(--fg-default);
+            transition: border-color 0.18s ease, box-shadow 0.18s ease, background-color 0.18s ease;
+        }
+        input::placeholder {
+            color: var(--fg-placeholder);
+        }
+        input:focus {
+            outline: none;
+            border-color: var(--border-focus);
+            box-shadow: 0 0 0 4px var(--accent-soft-primary);
+        }
+        button {
+            width: 100%;
+            border: 1px solid transparent;
+            border-radius: 14px;
+            background: var(--cta);
+            color: var(--fg-on-filled);
+            padding: 14px 18px;
+            font-size: 16px;
+            font-weight: 600;
+            cursor: pointer;
+            transition: transform 0.18s ease, box-shadow 0.18s ease, background-color 0.18s ease;
+        }
+        button:hover {
+            background: var(--cta-hover);
+        }
+        button:active {
+            transform: translateY(1px);
+        }
+        button:focus-visible {
+            outline: none;
+            box-shadow: 0 0 0 4px var(--accent-soft-primary);
+        }
+        .error {
+            margin-bottom: 18px;
+            padding: 13px 14px;
+            border: 1px solid var(--border-error);
+            border-radius: 14px;
+            background: var(--accent-soft-danger);
+            color: var(--fg-error);
+            font-size: 14px;
+            font-weight: 600;
+        }
+        @media (prefers-color-scheme: dark) {
+            .panel {
+                box-shadow:
+                    inset 0 1px 0 rgba(255, 255, 255, 0.03),
+                    0 1px 4px -2px rgba(0, 0, 0, 0.18);
+            }
+        }
+        @media (max-width: 640px) {
+            body {
+                place-items: stretch;
+                padding: 18px;
+            }
+            .shell {
+                width: 100%;
+                margin: auto 0;
+            }
+            .panel {
+                padding: 22px;
+            }
+        }
+    </style>
+</head>
+<body>
+    <main class="shell">
+        <div class="brand"><img src="/icon.png" alt="" aria-hidden="true" />Ocean Brain</div>
+        <section class="panel" aria-labelledby="login-title">
+            <h1 id="login-title" class="sr-only">Sign in</h1>
+            <!-- OCEAN_BRAIN_LOGIN_ERROR -->
+            <form method="post" action="/login">
+                <!-- OCEAN_BRAIN_CSRF_INPUT -->
+                <input type="hidden" name="next" value="OCEAN_BRAIN_NEXT_PATH" />
+                <div class="field">
+                    <label for="password">Password</label>
+                    <input id="password" name="password" type="password" autocomplete="current-password" required autofocus />
+                </div>
+                <button type="submit">Sign in</button>
+            </form>
+        </section>
+    </main>
+    <script>
+        (() => {
+            const generationMeta = document.querySelector('meta[name="ocean-brain-session-generation"]');
+            const pageGeneration = generationMeta?.getAttribute('content');
+            const generationHeader = 'X-Ocean-Brain-Session-Generation';
+            const sessionEndpoint = '/api/auth/session';
+            const form = document.querySelector('form');
+            let checkPromise;
+            let submitting = false;
+
+            const checkForStaleLoginPage = async () => {
+                if (!pageGeneration) {
+                    return false;
+                }
+
+                checkPromise ??= fetch(sessionEndpoint, {
+                    cache: 'no-store',
+                    credentials: 'same-origin',
+                })
+                    .then((response) => {
+                        const currentGeneration = response.headers.get(generationHeader);
+                        const isStale = Boolean(currentGeneration && currentGeneration !== pageGeneration);
+
+                        if (isStale) {
+                            window.location.reload();
+                        }
+
+                        return isStale;
+                    })
+                    .catch(() => false)
+                    .finally(() => {
+                        checkPromise = undefined;
+                    });
+
+                return checkPromise;
+            };
+
+            void checkForStaleLoginPage();
+            window.addEventListener('pageshow', () => {
+                void checkForStaleLoginPage();
+            });
+
+            form?.addEventListener('submit', async (event) => {
+                event.preventDefault();
+
+                if (submitting) {
+                    return;
+                }
+
+                submitting = true;
+
+                const isStale = await checkForStaleLoginPage();
+                if (isStale) {
+                    return;
+                }
+
+                form.submit();
+            });
+        })();
+    </script>
+</body>
+</html>
+`;
   }
   return readFileSync(new URL("./login-page.html", import.meta.url), "utf8");
 };
@@ -22,14 +289,14 @@ const renderCsrfInput = (csrfToken) => {
   return `<input type="hidden" name="_csrf" value="${escapeHtml(csrfToken)}" />`;
 };
 const renderLoginTemplate = (values) => {
-  return LOGIN_PAGE_TEMPLATE.replace(LOGIN_ERROR_TOKEN, values.errorBlock).replace(NEXT_PATH_TOKEN, values.nextPath).replace("<!-- OCEAN_BRAIN_CSRF_INPUT -->", values.csrfInput);
+  return LOGIN_PAGE_TEMPLATE.replace(LOGIN_ERROR_TOKEN, values.errorBlock).replace(SESSION_GENERATION_TOKEN, values.sessionGeneration).replace(NEXT_PATH_TOKEN, values.nextPath).replace("<!-- OCEAN_BRAIN_CSRF_INPUT -->", values.csrfInput);
 };
-const renderLoginPage = ({ nextPath, errorMessage, csrfToken }) => renderLoginTemplate({
+const renderLoginPage = ({ nextPath, errorMessage, csrfToken, sessionGeneration }) => renderLoginTemplate({
   errorBlock: renderLoginError(errorMessage),
   nextPath: escapeHtml(nextPath),
-  csrfInput: renderCsrfInput(csrfToken)
+  csrfInput: renderCsrfInput(csrfToken),
+  sessionGeneration: escapeHtml(sessionGeneration ?? "")
 });
 export {
   renderLoginPage
 };
-//# sourceMappingURL=login-page.js.map

package/server/dist/features/auth/http/pages.js

@@ -1,35 +1,50 @@
 import {
   compareSharedSecret,
   destroySession,
+  getSessionGeneration,
   refreshCsrfToken,
   regenerateSession,
   sanitizeRedirectPath
 } from "../service.js";
 import { renderLoginPage } from "./login-page.js";
+const setLoginPageHeaders = (res) => {
+  res.set("Cache-Control", "no-store");
+};
 const createLoginPageHandler = (authConfig) => {
   return async (req, res) => {
     if (authConfig.mode !== "password" || req.session?.authenticated) {
+      setLoginPageHeaders(res);
       res.redirect(303, sanitizeRedirectPath(req.query.next));
       return;
     }
     const nextPath = sanitizeRedirectPath(req.query.next);
-    res.status(200).type("html").send(renderLoginPage({ nextPath, csrfToken: res.locals._csrf })).end();
+    setLoginPageHeaders(res);
+    res.status(200).type("html").send(
+      renderLoginPage({
+        nextPath,
+        csrfToken: res.locals._csrf,
+        sessionGeneration: getSessionGeneration()
+      })
+    ).end();
   };
 };
 const createLoginPageSubmitHandler = (authConfig) => {
   return async (req, res) => {
     const nextPath = sanitizeRedirectPath(req.body?.next);
     if (authConfig.mode !== "password" || !authConfig.password) {
+      setLoginPageHeaders(res);
       res.redirect(303, nextPath);
       return;
     }
     const password = typeof req.body?.password === "string" ? req.body.password : "";
     if (!password || !compareSharedSecret(authConfig.password, password)) {
+      setLoginPageHeaders(res);
       res.status(401).type("html").send(
         renderLoginPage({
           nextPath,
           errorMessage: "Invalid password",
-          csrfToken: res.locals._csrf
+          csrfToken: res.locals._csrf,
+          sessionGeneration: getSessionGeneration()
         })
       ).end();
       return;
@@ -37,6 +52,7 @@ const createLoginPageSubmitHandler = (authConfig) => {
     await regenerateSession(req);
     req.session.authenticated = true;
     refreshCsrfToken(req);
+    setLoginPageHeaders(res);
     res.redirect(303, nextPath);
   };
 };
@@ -44,9 +60,11 @@ const createLogoutPageHandler = (authConfig) => {
   return async (req, res) => {
     if (authConfig.mode === "password") {
       await destroySession(req);
+      setLoginPageHeaders(res);
       res.redirect(303, "/login");
       return;
     }
+    setLoginPageHeaders(res);
     res.redirect(303, "/");
   };
 };
@@ -55,4 +73,3 @@ export {
   createLoginPageSubmitHandler,
   createLogoutPageHandler
 };
-//# sourceMappingURL=pages.js.map

package/server/dist/features/auth/service.js

@@ -5,6 +5,7 @@ import { sanitizeRedirectPath } from "../../modules/auth-redirect.js";
 import { createAppError } from "../../modules/error-handler.js";
 const AUTH_SESSION_GENERATION_HEADER = "X-Ocean-Brain-Session-Generation";
 const AUTH_SESSION_GENERATION = crypto.randomUUID();
+const getSessionGeneration = () => AUTH_SESSION_GENERATION;
 const createPasswordHash = async (password) => {
   const salt = crypto.randomBytes(16).toString("hex");
   const hash = crypto.pbkdf2Sync(password, salt, 1e3, 64, "sha512").toString("hex");
@@ -18,7 +19,7 @@ const comparePassword = async (password, storedHash) => {
 const compareSharedSecret = compareCommonSharedSecret;
 const buildSessionResponse = (authConfig, req) => buildAuthSessionResponse(authConfig, Boolean(req.session?.authenticated));
 const setSessionStatusHeaders = (res) => {
-  res.set(AUTH_SESSION_GENERATION_HEADER, AUTH_SESSION_GENERATION);
+  res.set(AUTH_SESSION_GENERATION_HEADER, getSessionGeneration());
   res.set("Cache-Control", "no-store");
 };
 const refreshCsrfToken = (req) => {
@@ -64,9 +65,9 @@ export {
   compareSharedSecret,
   createPasswordHash,
   destroySession,
+  getSessionGeneration,
   refreshCsrfToken,
   regenerateSession,
   sanitizeRedirectPath,
   setSessionStatusHeaders
 };
-//# sourceMappingURL=service.js.map

package/server/dist/features/cache/graphql/cache.field.resolver.js

@@ -2,4 +2,3 @@ const cacheFieldResolvers = {};
 export {
   cacheFieldResolvers
 };
-//# sourceMappingURL=cache.field.resolver.js.map

package/server/dist/features/cache/graphql/cache.mutation.resolver.js

@@ -46,4 +46,3 @@ export {
   createDeleteCacheMutationResolver,
   createSetCacheMutationResolver
 };
-//# sourceMappingURL=cache.mutation.resolver.js.map

package/server/dist/features/cache/graphql/cache.query.resolver.js

@@ -18,4 +18,3 @@ export {
   createAllCachesQueryResolver,
   createCacheQueryResolver
 };
-//# sourceMappingURL=cache.query.resolver.js.map

package/server/dist/features/cache/graphql/cache.resolver.js

@@ -9,4 +9,3 @@ const cacheResolvers = {
 export {
   cacheResolvers
 };
-//# sourceMappingURL=cache.resolver.js.map

package/server/dist/features/cache/graphql/cache.type-defs.js

@@ -29,4 +29,3 @@ export {
   cacheType,
   cacheTypeDefs
 };
-//# sourceMappingURL=cache.type-defs.js.map

package/server/dist/features/cache/graphql/index.js

@@ -18,4 +18,3 @@ export {
   createDeleteCacheMutationResolver,
   createSetCacheMutationResolver
 };
-//# sourceMappingURL=index.js.map

package/server/dist/features/image/graphql/image.field.resolver.js

@@ -11,4 +11,3 @@ export {
   createImageReferenceCountFieldResolver,
   imageFieldResolvers
 };
-//# sourceMappingURL=image.field.resolver.js.map

package/server/dist/features/image/graphql/image.mutation.resolver.js

@@ -18,4 +18,3 @@ export {
   createDeleteImageMutationResolver,
   imageMutationResolvers
 };
-//# sourceMappingURL=image.mutation.resolver.js.map

package/server/dist/features/image/graphql/image.query.resolver.js

@@ -37,4 +37,3 @@ export {
   createImageQueryResolver,
   imageQueryResolvers
 };
-//# sourceMappingURL=image.query.resolver.js.map

package/server/dist/features/image/graphql/image.resolver.js

@@ -9,4 +9,3 @@ const imageResolvers = {
 export {
   imageResolvers
 };
-//# sourceMappingURL=image.resolver.js.map

package/server/dist/features/image/graphql/image.type-defs.js

@@ -28,4 +28,3 @@ const imageTypeDefs = gql`
 export {
   imageTypeDefs
 };
-//# sourceMappingURL=image.type-defs.js.map

package/server/dist/features/image/graphql/index.js

@@ -13,4 +13,3 @@ export {
   imageResolvers,
   imageTypeDefs
 };
-//# sourceMappingURL=index.js.map

package/server/dist/features/image/http/upload.js

@@ -56,4 +56,3 @@ const createUploadImageHandler = (persistImage = persistUploadedImage) => {
 export {
   createUploadImageHandler
 };
-//# sourceMappingURL=upload.js.map

package/server/dist/features/image/services/delete.js

@@ -49,4 +49,3 @@ export {
   deleteImageById,
   resolveStoredImagePath
 };
-//# sourceMappingURL=delete.js.map

package/server/dist/features/image/services/upload.js

@@ -107,4 +107,3 @@ export {
   hashImageBuffer,
   persistUploadedImage
 };
-//# sourceMappingURL=upload.js.map

package/server/dist/features/image/services/validation.js

@@ -108,4 +108,3 @@ export {
   normalizeImageContentType,
   validateImagePayload
 };
-//# sourceMappingURL=validation.js.map

package/server/dist/features/mcp-admin/http/handlers.js

@@ -47,4 +47,3 @@ export {
   createMcpAdminSetEnabledHandler,
   createMcpAdminStatusHandler
 };
-//# sourceMappingURL=handlers.js.map

package/server/dist/features/mcp-admin/service.js

@@ -85,4 +85,3 @@ const createMcpAdminService = (db = models) => {
 export {
   createMcpAdminService
 };
-//# sourceMappingURL=service.js.map

package/server/dist/features/note/graphql/index.js

@@ -5,4 +5,3 @@ export {
   noteResolvers,
   noteTypeDefs
 };
-//# sourceMappingURL=index.js.map

package/server/dist/features/note/graphql/note.field.resolver.js

@@ -24,4 +24,3 @@ export {
   noteFieldResolvers,
   noteSnapshotFieldResolvers
 };
-//# sourceMappingURL=note.field.resolver.js.map