@deveye/types 0.15.1 → 0.16.0

package/src/domain/mail.ts

@@ -1,394 +0,0 @@
-import { z } from 'zod';
-
-/**
- * Mail: user-configured IMAP/SMTP mailboxes, read and sent through DevEye.
- *
- * Storage split (see `Docs/SECURITY_MODEL.md`): `securityTier`/`authMethod` and
- * everything the server needs to *plan* a sync or pick a cipher (enabled,
- * timestamps) live in clear columns. Everything identifying — display name,
- * address, credentials, message envelopes — is encrypted, but **which** cipher
- * (`ctx.secure` vs `ctx.secure.open`) is chosen per account by `securityTier`,
- * not fixed per feature like Uptime/Password are. An "open" account can be
- * synced/sent in the background (e.g. wired to Uptime alerts); a "guarded" one
- * only ever decrypts during a live, unlocked session. Message **bodies and
- * attachments are never persisted** — only envelopes (subject/from/date/flags)
- * are cached for fast listing; the body is fetched live from IMAP on open.
- */
-
-export const MAIL_DISPLAY_NAME_MAX_LENGTH = 80;
-export const MAIL_EMAIL_MAX_LENGTH = 320;
-export const MAIL_HOST_MAX_LENGTH = 255;
-export const MAIL_SUBJECT_MAX_LENGTH = 998; // RFC 5322 line-length ceiling
-export const MAIL_SNIPPET_MAX_LENGTH = 280;
-
-/** Upper bound on a `mail.messageSearch` query — a needle, not a document. */
-export const MAIL_SEARCH_QUERY_MAX_LENGTH = 128;
-
-export const MAIL_SYNC_INTERVAL_MIN_MINUTES = 1;
-export const MAIL_SYNC_INTERVAL_MAX_MINUTES = 180;
-export const MAIL_SYNC_INTERVAL_DEFAULT_MINUTES = 10;
-
-/**
- * Taille d'une page de messages — et, par voie de conséquence, de la fenêtre que
- * la synchro relit à chaque passage pour y réconcilier drapeaux et disparus.
- *
- * Les deux sont le même nombre à dessein : la relève de fond n'avance pas
- * seulement le haut de la boîte, elle garde honnête exactement ce que l'écran
- * affiche sans défiler. Au-delà, la dérive existe toujours mais ne se voit
- * qu'après un défilement, et se répare au changement de dossier.
- */
-export const MAIL_MESSAGE_PAGE_SIZE = 50;
-
-export const mailSecurityTierSchema = z.enum(['open', 'guarded']);
-export type MailSecurityTier = z.infer<typeof mailSecurityTierSchema>;
-
-/**
- * État de la dernière opération tentée sur une boîte, quelle qu'en soit
- * l'origine — relève de fond ou commande de l'utilisateur.
- *
- * Trois familles d'échec plutôt qu'un booléen, parce qu'elles n'appellent pas la
- * même chose : `auth` se répare en reconnectant le compte, `unreachable` se
- * répare tout seul quand le réseau revient, `error` demande de lire le message.
- * Le libellé exact reste dans `lastSyncError` — chiffré, lui, car il peut citer
- * un hôte ou une adresse.
- */
-export const mailAccountStatusSchema = z.enum(['ok', 'auth', 'unreachable', 'error']);
-export type MailAccountStatus = z.infer<typeof mailAccountStatusSchema>;
-
-export const mailAuthMethodSchema = z.enum(['password', 'oauth_google', 'oauth_microsoft']);
-export type MailAuthMethod = z.infer<typeof mailAuthMethodSchema>;
-
-export const mailOAuthProviderSchema = z.enum(['google', 'microsoft']);
-export type MailOAuthProvider = z.infer<typeof mailOAuthProviderSchema>;
-
-export const mailFolderSpecialUseSchema = z.enum([
-    'inbox',
-    'sent',
-    'drafts',
-    'trash',
-    'junk',
-    'archive',
-    'other'
-]);
-export type MailFolderSpecialUse = z.infer<typeof mailFolderSpecialUseSchema>;
-
-export const mailProxyKindSchema = z.enum(['socks5', 'http']);
-export type MailProxyKind = z.infer<typeof mailProxyKindSchema>;
-
-/** Optional manual proxy for a single account — DevEye never provides one itself. */
-export const mailProxySchema = z.object({
-    kind: mailProxyKindSchema,
-    host: z.string().min(1).max(MAIL_HOST_MAX_LENGTH),
-    port: z.number().int().min(1).max(65535),
-    username: z.string().max(255).nullable(),
-    password: z.string().max(255).nullable()
-});
-export type MailProxy = z.infer<typeof mailProxySchema>;
-
-const serverEndpointSchema = z.object({
-    host: z.string().min(1).max(MAIL_HOST_MAX_LENGTH),
-    port: z.number().int().min(1).max(65535),
-    username: z.string().min(1).max(MAIL_EMAIL_MAX_LENGTH),
-    password: z.string().min(1)
-});
-
-/**
- * What the user submits to create/edit a **password**-auth account. OAuth
- * accounts are never drafted this way — they're created by the
- * `mail.oauthStart` → provider redirect → callback flow, which never puts a
- * secret through this schema.
- */
-export const mailAccountDraftSchema = z.object({
-    displayName: z.string().min(1).max(MAIL_DISPLAY_NAME_MAX_LENGTH),
-    emailAddress: z.string().email().max(MAIL_EMAIL_MAX_LENGTH),
-    securityTier: mailSecurityTierSchema,
-    imap: serverEndpointSchema,
-    smtp: serverEndpointSchema,
-    proxy: mailProxySchema.nullable()
-});
-export type MailAccountDraft = z.infer<typeof mailAccountDraftSchema>;
-
-/**
- * Editing an existing password account, as opposed to creating one. Same shape
- * as a draft with two "leave it alone" affordances the add form has no use for:
- * a blank username/password keeps the stored one, and an omitted `proxy` keeps
- * the stored proxy. Both exist because the account DTO deliberately never
- * echoes a secret back, so the form has nothing to prefill — without them,
- * renaming a mailbox would mean retyping both sets of server credentials, and
- * saving anything at all would silently drop a configured proxy.
- */
-export const mailAccountEditSchema = mailAccountDraftSchema.extend({
-    imap: serverEndpointSchema.extend({
-        username: z.string().max(MAIL_EMAIL_MAX_LENGTH),
-        password: z.string()
-    }),
-    smtp: serverEndpointSchema.extend({
-        username: z.string().max(MAIL_EMAIL_MAX_LENGTH),
-        password: z.string()
-    }),
-    proxy: mailProxySchema.nullable().optional()
-});
-export type MailAccountEdit = z.infer<typeof mailAccountEditSchema>;
-
-/**
- * Client-facing account DTO. Never carries a secret — not the IMAP/SMTP
- * password, not the OAuth tokens, not the proxy credentials. Editing a
- * password-auth account re-submits a full new `MailAccountDraft`; there is no
- * "reveal secret" endpoint, matching Password's discipline of never re-serving
- * a stored secret except through the one gated read path it actually needs.
- */
-export const mailAccountSchema = z.object({
-    id: z.number().int().positive(),
-    sortOrder: z.number().int().nonnegative(),
-    displayName: z.string(),
-    emailAddress: z.string(),
-    securityTier: mailSecurityTierSchema,
-    authMethod: mailAuthMethodSchema,
-    imapHost: z.string(),
-    imapPort: z.number().int(),
-    smtpHost: z.string(),
-    smtpPort: z.number().int(),
-    proxyConfigured: z.boolean(),
-    enabled: z.boolean(),
-    lastSyncAt: z.number().int().nonnegative().nullable(),
-    lastSyncError: z.string().nullable(),
-    /**
-     * État de la dernière opération, persistant jusqu'à ce qu'une réussite le
-     * lève. C'est ce qui permet d'annoncer une boîte en panne dès l'ouverture,
-     * sans attendre qu'un geste de l'utilisateur reproduise l'échec.
-     */
-    status: mailAccountStatusSchema,
-    /** Quand l'échec courant a été constaté. `null` tant que tout va bien. */
-    lastErrorAt: z.number().int().nonnegative().nullable(),
-    /** True when an OAuth refresh failed and the user must reconnect. */
-    needsReauth: z.boolean(),
-    /**
-     * How often the background loop re-checks this mailbox. Per account, not
-     * per user: an archive box has no reason to be polled as hard as a work
-     * one. Ignored for "guarded" accounts, which are never background-synced.
-     * Real precision is floored by the server's own tick
-     * (`MAIL_SYNC_TICK_SECONDS`), so a value below that just means "every tick".
-     */
-    syncIntervalMinutes: z
-        .number()
-        .int()
-        .min(MAIL_SYNC_INTERVAL_MIN_MINUTES)
-        .max(MAIL_SYNC_INTERVAL_MAX_MINUTES),
-    /** A background sync tick is currently running for this account (in-memory, never persisted). */
-    syncing: z.boolean(),
-    /**
-     * Folder-level fraction (0-1) of the in-progress sync — the finest
-     * granularity available without instrumenting the IMAP fetch itself.
-     * `null` while `syncing` means "just started, folder count not known yet";
-     * always `null` when not syncing.
-     */
-    syncProgress: z.number().min(0).max(1).nullable(),
-    created: z.number().int().nonnegative()
-});
-export type MailAccount = z.infer<typeof mailAccountSchema>;
-
-export const mailFolderSchema = z.object({
-    id: z.number().int().positive(),
-    accountId: z.number().int().positive(),
-    name: z.string(),
-    specialUse: mailFolderSpecialUseSchema,
-    sortOrder: z.number().int().nonnegative(),
-    unreadCount: z.number().int().nonnegative(),
-    totalCount: z.number().int().nonnegative()
-});
-export type MailFolder = z.infer<typeof mailFolderSchema>;
-
-export const mailAddressSchema = z.object({
-    name: z.string().nullable(),
-    address: z.string()
-});
-export type MailAddress = z.infer<typeof mailAddressSchema>;
-
-export const mailFlagsSchema = z.object({
-    seen: z.boolean(),
-    flagged: z.boolean(),
-    answered: z.boolean(),
-    draft: z.boolean()
-});
-export type MailFlags = z.infer<typeof mailFlagsSchema>;
-
-export const mailAttachmentSchema = z.object({
-    id: z.string(),
-    filename: z.string(),
-    mimeType: z.string(),
-    size: z.number().int().nonnegative()
-});
-export type MailAttachment = z.infer<typeof mailAttachmentSchema>;
-
-/** Why a link was flagged — shown as a warning chip, never blocks the click. */
-export const mailLinkWarningReasonSchema = z.enum([
-    'text-href-mismatch',
-    'lookalike-domain',
-    'unsafe-scheme'
-]);
-export type MailLinkWarningReason = z.infer<typeof mailLinkWarningReasonSchema>;
-
-export const mailSuspiciousLinkSchema = z.object({
-    text: z.string(),
-    href: z.string(),
-    reason: mailLinkWarningReasonSchema
-});
-export type MailSuspiciousLink = z.infer<typeof mailSuspiciousLinkSchema>;
-
-/**
- * One header line as the server sent it, in receipt order. Kept raw and
- * unabridged — a `Received:` chain, an SPF/DKIM/DMARC verdict or a mailing-list
- * id is exactly the sort of thing you need when tracing a message, and any
- * summary would be the wrong one for some question.
- */
-export const mailHeaderSchema = z.object({ name: z.string(), value: z.string() });
-export type MailHeader = z.infer<typeof mailHeaderSchema>;
-
-/**
- * Page cursor for `mail.messageList`. Opaque to the client: hand back the one
- * from the previous page.
- *
- * A composite of `(date, id)` rather than a bare row id, because the list is
- * ordered by date and row ids are *insertion* order — which is not the same
- * thing. Backfill and remote search both write older messages into the cache
- * after newer ones, so an id-ordered list put freshly-fetched old mail at the
- * top of the mailbox. `id` is only the tiebreak between two identical dates,
- * so a page boundary can never repeat or skip a row.
- */
-export const mailMessageCursorSchema = z.object({
-    date: z.number().int().nonnegative(),
-    id: z.number().int().positive()
-});
-export type MailMessageCursor = z.infer<typeof mailMessageCursorSchema>;
-
-/** List-row shape: the cached envelope, nothing that requires a live IMAP fetch. */
-export const mailMessageSummarySchema = z.object({
-    id: z.number().int().positive(),
-    accountId: z.number().int().positive(),
-    folderId: z.number().int().positive(),
-    uid: z.number().int().positive(),
-    subject: z.string(),
-    from: mailAddressSchema.nullable(),
-    to: z.array(mailAddressSchema),
-    date: z.number().int().nonnegative(),
-    flags: mailFlagsSchema,
-    hasAttachments: z.boolean(),
-    snippet: z.string()
-});
-export type MailMessageSummary = z.infer<typeof mailMessageSummarySchema>;
-
-/**
- * Full message. Fetched live from IMAP on `mail.messageGet` — never cached —
- * with `bodyHtml` already sanitized server-side (scripts/handlers/tracking CSS
- * stripped, remote images blocked unless `allowRemoteImages` was requested).
- */
-export const mailMessageSchema = mailMessageSummarySchema.extend({
-    bodyHtml: z.string().nullable(),
-    bodyText: z.string().nullable(),
-    attachments: z.array(mailAttachmentSchema),
-    remoteImagesBlocked: z.boolean(),
-    /** Distinct hostnames of the remote images that were blocked, for a "trust these" picker. */
-    blockedImageSources: z.array(z.string()),
-    suspiciousLinks: z.array(mailSuspiciousLinkSchema),
-    /** Every header line as received, in order. Never persisted — read live with the body. */
-    headers: z.array(mailHeaderSchema),
-    /** Size of the raw RFC822 source, in bytes. */
-    sizeBytes: z.number().int().nonnegative(),
-    /** IMAP path of the containing mailbox, which with `uid` identifies the message server-side. */
-    folderPath: z.string()
-});
-export type MailMessage = z.infer<typeof mailMessageSchema>;
-
-export const mailBodyRenderModeSchema = z.enum(['embedded', 'raw']);
-export type MailBodyRenderMode = z.infer<typeof mailBodyRenderModeSchema>;
-
-export const mailSettingsSchema = z.object({
-    /** Off by default everywhere — opt-in per scope decision, never pushed on the user. */
-    externalScanEnabledDefault: z.boolean(),
-    /** Hostnames whose remote images auto-load without a per-message prompt. */
-    trustedImageDomains: z.array(z.string()),
-    /**
-     * `embedded` (default): the sanitized body renders inline, styled by DevEye
-     * (no `<style>`/inline styles — see `src/mail/sanitize.ts`). `raw`: rendered
-     * in an isolated sandboxed iframe on a white background with the message's
-     * own styling preserved, for when the embedded look mangles a message.
-     */
-    bodyRenderMode: mailBodyRenderModeSchema
-});
-export type MailSettings = z.infer<typeof mailSettingsSchema>;
-
-/** Database row shapes (server-only). Mirror the columns exactly. */
-export interface MailAccountRow {
-    id: number;
-    user_id: number;
-    workspace_id: number;
-    sort_order: number;
-    /** Encrypted (tier-dependent). */
-    display_name_enc: string;
-    /** Encrypted (tier-dependent). */
-    email_address_enc: string;
-    security_tier: MailSecurityTier;
-    auth_method: MailAuthMethod;
-    enabled: number;
-    /** Background-sync cadence for this mailbox alone. */
-    sync_interval_seconds: number;
-    last_sync_at: number | null;
-    /** Encrypted (tier-dependent), or null after a clean sync. */
-    last_sync_error_enc: string | null;
-    /**
-     * En clair, à côté de `enabled` et `security_tier` : l'état doit être
-     * lisible sans clé — par un ordonnanceur qui trie, par une requête de
-     * diagnostic, et par l'interface d'un compte dont le message d'erreur,
-     * lui, ne se déchiffre pas.
-     */
-    last_sync_status: MailAccountStatus;
-    last_error_at: number | null;
-    /**
-     * Encrypted (tier-dependent) JSON blob — the only place secrets live:
-     * `{ imap: {host,port,username,password}, smtp: {...}, proxy? }` for
-     * `password` auth, or `{ provider, accessToken, refreshToken, expiresAt,
-     * scope }` for OAuth. Never decrypted into the client-facing DTO.
-     */
-    credentials_enc: string;
-    created: number;
-}
-
-export interface MailFolderRow {
-    id: number;
-    account_id: number;
-    /** Clear: the IMAP mailbox path, required to address the mailbox during sync. */
-    imap_path: string;
-    /** Encrypted (account's tier) display name. */
-    name_enc: string;
-    special_use: MailFolderSpecialUse;
-    sort_order: number;
-    /** IMAP UIDVALIDITY — a change invalidates every cached message in this folder. */
-    uid_validity: number | null;
-    /** High-water mark: forward (incremental) sync fetches strictly after this. */
-    last_seen_uid: number | null;
-    /** Low-water mark: backward (backfill) sync fetches strictly before this. NULL until the first sync/backfill sets it. */
-    first_seen_uid: number | null;
-    unread_count: number;
-    total_count: number;
-}
-
-export interface MailMessageRow {
-    id: number;
-    folder_id: number;
-    uid: number;
-    /** Encrypted (account's tier) `{ subject, from, to, snippet }`. Body is never stored. */
-    envelope_enc: string;
-    date: number;
-    seen: number;
-    flagged: number;
-    answered: number;
-    has_attachments: number;
-}
-
-export interface MailSettingsRow {
-    workspace_id: number;
-    external_scan_enabled_default: number;
-    /** JSON-encoded string array, or null when empty. Not encrypted — hostnames, not secrets. */
-    trusted_image_domains: string | null;
-    body_render_mode: MailBodyRenderMode;
-}

package/src/domain/note.ts

@@ -1,202 +0,0 @@
-import { z } from 'zod';
-
-/**
- * A note's body is a modular list of typed blocks rather than free text. This
- * keeps the editor "à la Apple" (one clean surface) while still supporting
- * paragraphs and checklists in any order:
- *  - `text`  → a paragraph.
- *  - `check` → a checklist item, with its own `done` state.
- *
- *  - `bullet` → a bulleted (unordered) list item.
- *  - `number` → a numbered (ordered) list item; its visible index is derived
- *    from its position in the run of consecutive `number` blocks (not stored).
- *  - `heading` → a section title, `level` 1 (largest) to 5 (smallest).
- *  - `divider` → a horizontal separator; carries no text.
- *
- * Inline emphasis (bold `**`, italic `*`, underline `__`, strikethrough `~~`)
- * is kept as markdown markers inside a block's `text`, not as separate blocks.
- *
- * The shape is intentionally small and forward-compatible: adding a new block
- * kind later (heading, divider, …) only widens this union.
- */
-/**
- * Named colour palette shared by the two colouring features:
- *  - inline text colour, carried as `{c:name}…{/c}` markers inside a block's
- *    `text` (so it lives in the freeform string, not the schema);
- *  - the block-level `color` below, which tints a marker (bullet dot, ordinal,
- *    checkbox, divider rule).
- *
- * A *named* palette (not a free hex) keeps the stored value tied to a theme
- * token (`--note-<name>`), so colours stay coherent with the app's design and
- * adapt if the palette is retuned. Widen this enum to add a colour.
- */
-export const noteColorSchema = z.enum(['red', 'orange', 'yellow', 'green', 'blue', 'purple']);
-
-export type NoteColor = z.infer<typeof noteColorSchema>;
-
-export const noteTextBlockSchema = z.object({
-    type: z.literal('text'),
-    text: z.string()
-});
-
-export const noteCheckBlockSchema = z.object({
-    type: z.literal('check'),
-    text: z.string(),
-    done: z.boolean(),
-    /** Optional tint for the checkbox marker (theme token `--note-<color>`). */
-    color: noteColorSchema.optional()
-});
-
-export const noteBulletBlockSchema = z.object({
-    type: z.literal('bullet'),
-    text: z.string(),
-    /** Optional tint for the bullet dot (theme token `--note-<color>`). */
-    color: noteColorSchema.optional()
-});
-
-export const noteNumberBlockSchema = z.object({
-    type: z.literal('number'),
-    text: z.string(),
-    /** Optional tint for the ordinal marker (theme token `--note-<color>`). */
-    color: noteColorSchema.optional()
-});
-
-export const noteHeadingBlockSchema = z.object({
-    type: z.literal('heading'),
-    text: z.string(),
-    /** Heading level, 1 (largest) to 5 (smallest). */
-    level: z.number().int().min(1).max(5)
-});
-
-export const noteDividerBlockSchema = z.object({
-    type: z.literal('divider'),
-    /** Optional tint for the horizontal rule (theme token `--note-<color>`). */
-    color: noteColorSchema.optional()
-});
-
-export const noteBlockSchema = z.discriminatedUnion('type', [
-    noteTextBlockSchema,
-    noteCheckBlockSchema,
-    noteBulletBlockSchema,
-    noteNumberBlockSchema,
-    noteHeadingBlockSchema,
-    noteDividerBlockSchema
-]);
-
-export type NoteTextBlock = z.infer<typeof noteTextBlockSchema>;
-export type NoteCheckBlock = z.infer<typeof noteCheckBlockSchema>;
-export type NoteBulletBlock = z.infer<typeof noteBulletBlockSchema>;
-export type NoteNumberBlock = z.infer<typeof noteNumberBlockSchema>;
-export type NoteHeadingBlock = z.infer<typeof noteHeadingBlockSchema>;
-export type NoteDividerBlock = z.infer<typeof noteDividerBlockSchema>;
-export type NoteBlock = z.infer<typeof noteBlockSchema>;
-
-/** Upper bounds, enforced both client- and server-side, to keep rows sane. */
-export const NOTE_TITLE_MAX_LENGTH = 200;
-export const NOTE_FOLDER_MAX_LENGTH = 80;
-export const NOTE_BLOCK_TEXT_MAX_LENGTH = 5_000;
-export const NOTE_MAX_BLOCKS = 500;
-
-/**
- * A folder is a first-class, server-persisted bucket. Its `name` is stored
- * encrypted server-side (with the open key, so the folder tree is readable
- * without a password); only the linkage (`folderId` on notes) is kept in clear.
- * `id` is stable across renames, so notes reference it directly.
- */
-export const noteFolderSchema = z.object({
-    id: z.number().int().positive(),
-    name: z.string().max(NOTE_FOLDER_MAX_LENGTH),
-    /** Rank within the user's folders; lower comes first. Manually reorderable. */
-    sortOrder: z.number().int().nonnegative()
-});
-
-export type NoteFolder = z.infer<typeof noteFolderSchema>;
-
-/**
- * A full note as exchanged with the client. `folderId` references a
- * {@link noteFolderSchema}; `null` means "no folder" (Sans dossier).
- *
- * A **private** note is encrypted with the password-wrapped DEK, so reading or
- * writing it requires the session to be unlocked; a regular note is encrypted
- * with the user's open key, which the server can always resolve — that's what
- * lets the feature open without any prompt.
- */
-export const noteSchema = z.object({
-    id: z.number().int().nonnegative(),
-    title: z.string().max(NOTE_TITLE_MAX_LENGTH),
-    folderId: z.number().int().positive().nullable(),
-    blocks: z.array(noteBlockSchema).max(NOTE_MAX_BLOCKS),
-    /** Rank within its folder; lower comes first. Only drag & drop changes it. */
-    sortOrder: z.number().int().nonnegative(),
-    /** True when the note is encrypted with the password-protected key. */
-    private: z.boolean(),
-    /** Epoch seconds; set by the server, surfaced for sorting/display. */
-    updated: z.number().int().nonnegative(),
-    /** Epoch seconds the note was first created. */
-    created: z.number().int().nonnegative()
-});
-
-export type Note = z.infer<typeof noteSchema>;
-
-/**
- * Lightweight list variant. A private note listed while the session is locked
- * comes back **masked** — metadata only, no `title`/`preview` — so the UI can
- * render a padlock placeholder without the body ever being decrypted.
- */
-export const noteSummarySchema = z.object({
-    id: z.number().int().nonnegative(),
-    title: z.string(),
-    folderId: z.number().int().positive().nullable(),
-    /** Rank within its folder; lower comes first. Only drag & drop changes it. */
-    sortOrder: z.number().int().nonnegative(),
-    /** Present only when the body is readable; absent for masked notes. */
-    preview: z.string().optional(),
-    /** Total checklist items / how many are done — for an at-a-glance summary. */
-    checkTotal: z.number().int().nonnegative(),
-    checkDone: z.number().int().nonnegative(),
-    /** True when the note is encrypted with the password-protected key. */
-    private: z.boolean(),
-    /** True when the body stayed encrypted for this response (private + locked). */
-    masked: z.boolean(),
-    /** Epoch seconds the note was archived, or `null` while it is active. */
-    archivedAt: z.number().int().nonnegative().nullable(),
-    updated: z.number().int().nonnegative(),
-    /** Epoch seconds the note was first created. */
-    created: z.number().int().nonnegative()
-});
-
-export type NoteSummary = z.infer<typeof noteSummarySchema>;
-
-export interface NoteRow {
-    id: number;
-    user_id: number;
-    workspace_id: number | null;
-    folder_id: number | null;
-    /**
-     * Encrypted JSON payload (title + blocks), keyed by the private DEK when
-     * `is_private`, by the user's open DEK otherwise.
-     */
-    content: string;
-    /** Manual rank within its folder; lower comes first. */
-    sort_order: number;
-    /** 1 when the body is encrypted with the password-protected key. */
-    is_private: number;
-    /**
-     * Epoch seconds the note was archived; `NULL` while active. Deleting a note
-     * archives it — only an already-archived note can be destroyed for good.
-     */
-    archived_at: number | null;
-    updated: number;
-    created: number;
-}
-
-export interface NoteFolderRow {
-    id: number;
-    user_id: number;
-    workspace_id: number | null;
-    /** Encrypted JSON payload (`{ name }`). */
-    content: string;
-    /** Manual rank within the user's folders; lower comes first. */
-    sort_order: number;
-    created: number;
-}

package/src/domain/password.ts

@@ -1,36 +0,0 @@
-import { z } from 'zod';
-
-export const passwordStatusSchema = z.enum(['active', 'inactive', 'none']);
-export type PasswordStatus = z.infer<typeof passwordStatusSchema>;
-
-export const passwordEntrySchema = z.object({
-    id: z.number().int().nonnegative(),
-    category: z.string(),
-    service: z.string(),
-    email: z.string(),
-    password: z.string(),
-    status: passwordStatusSchema
-});
-
-export type PasswordEntry = z.infer<typeof passwordEntrySchema>;
-
-/**
- * Variant without the secret payload, used when listing entries before unlock.
- * `hasPassword` tells the UI whether a (still hidden) secret actually exists, so
- * a genuinely empty password renders as a blank cell instead of fake dots with
- * reveal/copy controls that would yield nothing.
- */
-export const passwordEntryMaskedSchema = passwordEntrySchema.extend({
-    password: z.literal(''),
-    hasPassword: z.boolean()
-});
-
-export type PasswordEntryMasked = z.infer<typeof passwordEntryMaskedSchema>;
-
-export interface PasswordRow {
-    id: number;
-    user_id: number;
-    workspace_id: number | null;
-    content: string;
-    date: number;
-}