@knotpad/app 0.1.0 → 0.1.2

package/app/(app)/settings/layout.test.tsx

@@ -1,39 +0,0 @@
-// @vitest-environment jsdom
-import { cleanup, render, screen } from "@testing-library/react";
-import userEvent from "@testing-library/user-event";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import SettingsLayout from "@/app/(app)/settings/layout";
-
-const { mockUsePathname } = vi.hoisted(() => ({
-  mockUsePathname: vi.fn(),
-}));
-
-vi.mock("next/navigation", () => ({
-  usePathname: mockUsePathname,
-}));
-
-describe("SettingsLayout", () => {
-  beforeEach(() => {
-    mockUsePathname.mockReset();
-    mockUsePathname.mockReturnValue("/settings/workspace");
-  });
-
-  afterEach(() => {
-    cleanup();
-  });
-
-  it("filters visible settings tabs from the search field", async () => {
-    const user = userEvent.setup();
-
-    render(
-      <SettingsLayout>
-        <div>Body</div>
-      </SettingsLayout>
-    );
-
-    await user.type(screen.getByPlaceholderText("Search settings"), "agent");
-
-    expect(screen.getByText("Agent Token")).toBeInTheDocument();
-    expect(screen.queryByText("Workspace")).not.toBeInTheDocument();
-  });
-});

package/app/(app)/settings/layout.tsx

@@ -1,71 +0,0 @@
-"use client";
-
-import Link from "next/link";
-import { usePathname } from "next/navigation";
-import { useState } from "react";
-
-const tabs = [
-  { href: "/settings/workspace", label: "Workspace" },
-  { href: "/settings/team", label: "Team" },
-  { href: "/settings/billing", label: "Billing" },
-  { href: "/settings/security", label: "Security" },
-  { href: "/settings/backup", label: "Backup & Restore" },
-  { href: "/settings/calendar", label: "Calendars" },
-  { href: "/settings/agent-token", label: "Agent Token" },
-];
-
-const descriptions: Record<string, string> = {
-  "/settings/workspace": "Rename the workspace, adjust defaults, and manage shared workspace behavior.",
-  "/settings/team": "Invite people, manage access, and keep ownership clear.",
-  "/settings/billing": "Review plan status, limits, and billing controls.",
-  "/settings/security": "Manage authentication and account security settings.",
-  "/settings/backup": "Export, restore, and protect your workspace data.",
-  "/settings/calendar": "Control calendars, feeds, and scheduling defaults.",
-  "/settings/agent-token": "Create and revoke agent access with clear operational consequences.",
-};
-
-export default function SettingsLayout({ children }: { children: React.ReactNode }) {
-  const pathname = usePathname();
-  const [query, setQuery] = useState("");
-  const normalizedQuery = query.trim().toLowerCase();
-  const visibleTabs = tabs.filter((tab) => tab.label.toLowerCase().includes(normalizedQuery));
-
-  return (
-    <div className="flex flex-1 flex-col overflow-hidden">
-      <div className="border-b border-zinc-800 px-4 py-3 md:px-6">
-        <h1 className="text-sm font-semibold text-zinc-300">Settings</h1>
-        <p className="mt-1 max-w-2xl text-xs text-zinc-500">
-          {descriptions[pathname] ?? "Manage your workspace configuration."}
-        </p>
-      </div>
-      <div className="flex flex-1 flex-col overflow-hidden md:flex-row">
-        <nav className="min-w-0 shrink-0 border-b border-zinc-800 py-2 md:w-52 md:border-b-0 md:border-r md:py-3">
-          <div className="px-2 pb-2">
-            <input
-              value={query}
-              onChange={(event) => setQuery(event.target.value)}
-              placeholder="Search settings"
-              className="w-full rounded-md border border-zinc-800 bg-zinc-950 px-3 py-2 text-sm text-zinc-300 outline-none placeholder:text-zinc-500"
-            />
-          </div>
-          <div className="flex gap-1 overflow-x-auto px-2 [&::-webkit-scrollbar]:hidden md:flex-col md:space-y-0.5">
-            {visibleTabs.map((t) => (
-            <Link
-              key={t.href}
-              href={t.href}
-              className={`flex shrink-0 items-center whitespace-nowrap rounded-md px-3 py-2 text-sm transition-colors ${
-                pathname === t.href
-                  ? "bg-zinc-800 text-zinc-200"
-                  : "text-zinc-400 hover:bg-zinc-800 hover:text-zinc-200"
-              }`}
-            >
-              {t.label}
-            </Link>
-            ))}
-          </div>
-        </nav>
-        <div className="min-w-0 flex-1 overflow-y-auto px-4 py-5 md:px-8 md:py-6">{children}</div>
-      </div>
-    </div>
-  );
-}

package/app/(app)/settings/page.tsx

@@ -1,4 +0,0 @@
-import { redirect } from "next/navigation";
-export default function SettingsRoot() {
-  redirect("/settings/workspace");
-}

package/app/(app)/settings/security/page.tsx

@@ -1,43 +0,0 @@
-import { auth } from "@/auth";
-import { redirect } from "next/navigation";
-import { prisma } from "@/lib/prisma";
-import { SecuritySettings } from "@/components/settings/security-settings";
-
-export default async function SecurityPage() {
-  const session = await auth();
-  if (!session) redirect("/login");
-
-  const member = await prisma.workspaceMember.findFirst({
-    where: { userId: session.user.id },
-    include: { workspace: true, user: { select: { passwordHash: true, twoFactorEnabled: true } } },
-  });
-  if (!member) redirect("/login");
-
-  const devices = await prisma.deviceSession.findMany({
-    where: { userId: session.user.id, revokedAt: null },
-    orderBy: { lastActive: "desc" },
-  });
-
-  return (
-    <div className="max-w-lg space-y-6">
-      <div>
-        <h2 className="text-base font-semibold text-zinc-200">Security</h2>
-        <p className="text-sm text-zinc-500 mt-1">
-          Manage connected devices, change your password, and restore from cloud.
-        </p>
-      </div>
-      <SecuritySettings
-        isPro={member.workspace.isPro}
-        isOwner={member.role === "OWNER"}
-        devices={devices.map((d) => ({
-          id: d.id,
-          deviceName: d.deviceName,
-          deviceId: d.deviceId,
-          lastActive: d.lastActive.toISOString(),
-        }))}
-        hasPassword={!!member.user.passwordHash}
-        twoFactorEnabled={member.user.twoFactorEnabled}
-      />
-    </div>
-  );
-}

package/app/(app)/settings/team/page.tsx

@@ -1,74 +0,0 @@
-import { auth } from "@/auth";
-import { redirect } from "next/navigation";
-import { prisma } from "@/lib/prisma";
-import { TeamSettings } from "@/components/settings/team-settings";
-
-export default async function TeamSettingsPage() {
-  const session = await auth();
-  if (!session) redirect("/login");
-
-  const member = await prisma.workspaceMember.findFirst({
-    where: { userId: session.user.id, revokedAt: null },
-    include: {
-      workspace: {
-        include: {
-          members: { where: { revokedAt: null }, include: { user: true } },
-          invites: { where: { acceptedAt: null, expiresAt: { gt: new Date() } } },
-          mcpTokens: {
-            where: { revokedAt: null },
-            include: { user: { select: { id: true, name: true, email: true } } },
-            orderBy: { createdAt: "desc" },
-          },
-        },
-      },
-    },
-  });
-  if (!member) redirect("/login");
-
-  const members = member.workspace.members.map((m) => ({
-    id: m.id,
-    userId: m.userId,
-    name: m.user.name ?? m.user.email ?? "Unknown",
-    email: m.user.email ?? "",
-    role: m.role,
-    joinedAt: m.joinedAt.toISOString(),
-    isCurrentUser: m.userId === session.user.id,
-  }));
-
-  const pendingInvites = member.workspace.invites.map((inv) => ({
-    id: inv.id,
-    email: inv.email,
-    role: inv.role,
-    token: inv.token,
-    expiresAt: inv.expiresAt.toISOString(),
-  }));
-
-  const canManage = member.role === "OWNER" || member.role === "ADMIN";
-
-  const mcpTokens = member.workspace.mcpTokens.map((t) => ({
-    id: t.id,
-    alias: t.alias,
-    userName: t.user.name ?? t.user.email ?? "Unknown",
-    userId: t.userId,
-    lastUsed: t.lastUsed?.toISOString() ?? null,
-  }));
-
-  return (
-    <div className="max-w-2xl space-y-8">
-      <div>
-        <h2 className="text-base font-semibold text-zinc-200">Team</h2>
-        <p className="text-sm text-zinc-500 mt-1">
-          Invite people and manage workspace access.
-        </p>
-      </div>
-      <TeamSettings
-        members={members}
-        pendingInvites={pendingInvites}
-        canManage={canManage}
-        currentUserId={session.user.id}
-        workspaceId={member.workspaceId}
-        mcpTokens={mcpTokens}
-      />
-    </div>
-  );
-}

package/app/(app)/settings/workspace/page.tsx

@@ -1,27 +0,0 @@
-import { auth } from "@/auth";
-import { redirect } from "next/navigation";
-import { prisma } from "@/lib/prisma";
-import { WorkspaceSettingsClient } from "@/components/settings/workspace-settings-client";
-import { getKanbanStatuses } from "@/lib/kanban-status";
-
-export default async function WorkspaceSettingsPage() {
-  const session = await auth();
-  if (!session) redirect("/login");
-
-  const member = await prisma.workspaceMember.findFirst({
-    where: { userId: session.user.id, revokedAt: null },
-    include: { workspace: true },
-  });
-  if (!member) redirect("/login");
-
-  const isOwnerOrAdmin = member.role === "OWNER" || member.role === "ADMIN";
-  const kanbanStatuses = await getKanbanStatuses(member.workspace.id);
-
-  return (
-    <WorkspaceSettingsClient
-      workspace={member.workspace}
-      kanbanStatuses={kanbanStatuses}
-      canEdit={isOwnerOrAdmin}
-    />
-  );
-}

package/app/(app)/tasks/[taskId]/page.tsx

@@ -1,79 +0,0 @@
-import { auth } from "@/auth";
-import { redirect, notFound } from "next/navigation";
-import { prisma } from "@/lib/prisma";
-import { decryptContent } from "@/lib/note-crypto";
-import { getActiveWorkspaceId } from "@/lib/workspace";
-import { extractSnippet } from "@/lib/extract-snippet";
-import { TaskDetail } from "@/components/tasks/task-detail";
-
-export default async function TaskDetailPage({
-  params,
-  searchParams,
-}: {
-  params: Promise<{ taskId: string }>;
-  searchParams: Promise<{ from?: string }>;
-}) {
-  const session = await auth();
-  if (!session) redirect("/login");
-
-  const { taskId } = await params;
-  const { from } = await searchParams;
-  const backHref = from ?? "/list";
-
-  const workspaceId = await getActiveWorkspaceId(session.user.id);
-  if (!workspaceId) redirect("/login");
-
-  const task = await prisma.task.findFirst({
-    where: { id: taskId, workspaceId },
-    include: {
-      note: { select: { id: true, title: true, content: true } },
-      assignee: { select: { id: true, name: true, email: true, image: true } },
-      auditLogs: {
-        orderBy: { createdAt: "desc" },
-        take: 20,
-        include: { user: { select: { id: true, name: true } } },
-      },
-      references: {
-        include: { note: { select: { id: true, title: true, content: true } } },
-      },
-    },
-  });
-
-  if (!task) notFound();
-
-  const noteContent = await decryptContent(task.note.content, workspaceId);
-  const snippet = extractSnippet(noteContent, task.title);
-  const refNotes = await Promise.all(
-    task.references
-      .filter((r) => r.noteId !== task.noteId)
-      .map(async (r) => {
-        const refContent = await decryptContent(r.note.content, workspaceId);
-        return {
-          noteId: r.noteId,
-          noteTitle: r.note.title,
-          snippet: r.snippet || extractSnippet(refContent, task.title),
-        };
-      })
-  );
-  const references = [
-    { noteId: task.note.id, noteTitle: task.note.title, snippet },
-    ...refNotes,
-  ];
-
-  const taskData = {
-    ...task,
-    priority: task.priority.toLowerCase(),
-    note: { id: task.note.id, title: task.note.title },
-    startDate: task.startDate?.toISOString() ?? null,
-    dueDate: task.dueDate?.toISOString() ?? null,
-    createdAt: task.createdAt.toISOString(),
-    updatedAt: task.updatedAt.toISOString(),
-    auditLogs: task.auditLogs.map((l) => ({
-      ...l,
-      createdAt: l.createdAt.toISOString(),
-    })),
-    references,
-  };
-
-  return <TaskDetail task={taskData} backHref={backHref} />;
-}

package/app/(auth)/forgot-password/page.tsx

@@ -1,106 +0,0 @@
-"use client";
-
-import { useState } from "react";
-import Link from "next/link";
-
-export default function ForgotPasswordPage() {
-  const [email, setEmail] = useState("");
-  const [loading, setLoading] = useState(false);
-  const [sent, setSent] = useState(false);
-  const [resetUrl, setResetUrl] = useState(""); // dev/local mode only
-  const [error, setError] = useState("");
-
-  async function handleSubmit(e: React.FormEvent) {
-    e.preventDefault();
-    setLoading(true);
-    setError("");
-    try {
-      const res = await fetch("/api/auth/forgot-password", {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ email }),
-      });
-      if (res.ok) {
-        const data = await res.json();
-        setSent(true);
-        // In local/dev mode the API returns the URL directly (no email configured).
-        if (data.resetUrl) setResetUrl(data.resetUrl);
-      } else {
-        const d = await res.json();
-        setError(d.error ?? "Something went wrong");
-      }
-    } catch {
-      setError("Something went wrong. Please try again.");
-    } finally {
-      setLoading(false);
-    }
-  }
-
-  if (sent) {
-    return (
-      <div className="w-full max-w-sm space-y-4 text-center">
-        <h1 className="text-2xl font-semibold tracking-tight">Check your email</h1>
-        <p className="text-sm text-zinc-400">
-          If an account exists for <span className="text-zinc-300">{email}</span>, we've sent a
-          reset link. It expires in 1 hour.
-        </p>
-        {resetUrl && (
-          <div className="rounded-md border border-amber-800/40 bg-amber-950/20 px-4 py-3 text-left space-y-1">
-            <p className="text-xs text-amber-400 font-medium">Dev mode — no email configured</p>
-            <p className="text-xs text-zinc-400 break-all">
-              <a href={resetUrl} className="underline hover:text-zinc-200">{resetUrl}</a>
-            </p>
-          </div>
-        )}
-        <Link href="/login" className="block text-sm text-zinc-500 hover:text-zinc-300 transition-colors">
-          Back to sign in
-        </Link>
-      </div>
-    );
-  }
-
-  return (
-    <div className="w-full max-w-sm space-y-6">
-      <div>
-        <h1 className="text-2xl font-semibold tracking-tight">Forgot password?</h1>
-        <p className="mt-1 text-sm text-zinc-400">
-          Enter your email and we'll send you a reset link.
-        </p>
-      </div>
-
-      <form onSubmit={handleSubmit} className="space-y-4">
-        <div className="space-y-1">
-          <label htmlFor="email" className="text-sm font-medium text-zinc-300">
-            Email
-          </label>
-          <input
-            id="email"
-            type="email"
-            required
-            value={email}
-            onChange={(e) => setEmail(e.target.value)}
-            autoComplete="email"
-            className="w-full rounded-md border border-zinc-700 bg-zinc-900 px-3 py-2 text-sm text-zinc-100 placeholder-zinc-500 focus:border-zinc-500 focus:outline-none"
-            placeholder="you@example.com"
-          />
-        </div>
-
-        {error && <p className="text-sm text-red-400">{error}</p>}
-
-        <button
-          type="submit"
-          disabled={loading}
-          className="w-full rounded-md bg-zinc-100 px-4 py-2 text-sm font-medium text-zinc-900 hover:bg-zinc-200 disabled:opacity-50"
-        >
-          {loading ? "Sending…" : "Send reset link"}
-        </button>
-      </form>
-
-      <p className="text-center text-sm text-zinc-500">
-        <Link href="/login" className="text-zinc-300 underline underline-offset-2 hover:text-white">
-          Back to sign in
-        </Link>
-      </p>
-    </div>
-  );
-}

package/app/(auth)/guest/page.tsx

@@ -1,56 +0,0 @@
-"use client";
-
-import { useEffect, useRef, useState } from "react";
-import { signIn } from "next-auth/react";
-import { useRouter } from "next/navigation";
-
-export default function GuestPage() {
-  const router = useRouter();
-  const [status, setStatus] = useState<"creating" | "error">("creating");
-  // Guard against React Strict Mode double-invocation — only create one guest account.
-  const started = useRef(false);
-
-  useEffect(() => {
-    if (started.current) return;
-    started.current = true;
-
-    async function createGuest() {
-      try {
-        const res = await fetch("/api/guest", { method: "POST" });
-        if (!res.ok) throw new Error("Failed to create guest");
-        const { email } = await res.json();
-
-        const result = await signIn("credentials", {
-          email,
-          password: "", // guest: no password
-          redirect: false,
-        });
-
-        if (result?.error) throw new Error(result.error);
-        router.push("/notes");
-        router.refresh();
-      } catch {
-        setStatus("error");
-      }
-    }
-    createGuest();
-  }, [router]);
-
-  if (status === "error") {
-    return (
-      <div className="text-center space-y-3">
-        <p className="text-zinc-300">Something went wrong starting guest mode.</p>
-        <a href="/login" className="text-sm text-zinc-500 underline">
-          Back to sign in
-        </a>
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col items-center gap-3 text-center">
-      <div className="h-6 w-6 rounded-full border-2 border-zinc-600 border-t-zinc-300 animate-spin" />
-      <p className="text-sm text-zinc-500">Setting up your local workspace…</p>
-    </div>
-  );
-}

package/app/(auth)/layout.tsx

@@ -1,13 +0,0 @@
-import type { Metadata } from "next";
-
-export const metadata: Metadata = {
-  robots: "noindex, nofollow",
-};
-
-export default function AuthLayout({ children }: { children: React.ReactNode }) {
-  return (
-    <div className="flex min-h-full items-center justify-center">
-      {children}
-    </div>
-  );
-}

package/app/(auth)/login/page.tsx

@@ -1,14 +0,0 @@
-import type { Metadata } from "next";
-import { LoginForm } from "@/components/auth/login-form";
-
-export const metadata: Metadata = {
-  title: "Sign In",
-  robots: "noindex, nofollow",
-};
-
-// Server component so it can read the runtime IS_CLOUD flag (set per-runtime by
-// the desktop/NPX launcher vs the cloud deploy) and pass it to the client form.
-export default function LoginPage() {
-  const isCloud = process.env.IS_CLOUD === "true";
-  return <LoginForm isCloud={isCloud} />;
-}