@knotpad/app 0.1.0

package/app/generated/prisma/schema.prisma

@@ -0,0 +1,456 @@
+generator client {
+  provider = "prisma-client-js"
+  output   = "../app/generated/prisma"
+}
+
+datasource db {
+  provider = "postgresql"
+}
+
+enum Role {
+  OWNER
+  ADMIN
+  MEMBER
+}
+
+enum TaskStatus {
+  OPEN
+  CLAIMED
+  IN_PROGRESS
+  REVIEW
+  DONE
+}
+
+enum AssigneeType {
+  HUMAN
+  AGENT
+}
+
+enum Priority {
+  CRITICAL
+  HIGH
+  MEDIUM
+  LOW
+}
+
+enum WorkspaceType {
+  PERSONAL
+  TEAM
+}
+
+enum PlanType {
+  FREE
+  PERSONAL_PRO
+  TEAM_PRO
+}
+
+enum LicenseType {
+  STANDARD
+  COMPLIMENTARY
+}
+
+enum BackupCadence {
+  DAILY
+  WEEKLY
+  MONTHLY
+}
+
+model User {
+  id                  String               @id @default(cuid())
+  email               String?              @unique
+  name                String?
+  passwordHash        String?
+  image               String?
+  isPro               Boolean              @default(false)
+  role                Role                 @default(MEMBER)
+  createdAt           DateTime             @default(now())
+  workspaces          WorkspaceMember[]
+  mcpTokens           McpToken[]
+  tasksAssigned       Task[]               @relation("AssignedTo")
+  auditLogs           AuditLog[]
+  deviceSessions      DeviceSession[]
+  accounts            Account[]
+  sessions            Session[]
+  invitesSent         InviteToken[]        @relation("InvitedBy")
+  notifications       Notification[]
+  passwordResetTokens PasswordResetToken[]
+  calendarFeeds       CalendarFeed[]
+  feedback            Feedback[]
+  twoFactorSecret     String?
+  twoFactorEnabled    Boolean              @default(false)
+  twoFactorVerified   Boolean              @default(false)
+}
+
+model Workspace {
+  id             String                   @id @default(cuid())
+  name           String
+  slug           String                   @unique
+  type           WorkspaceType            @default(PERSONAL)
+  planType       PlanType                 @default(FREE)
+  licenseType    LicenseType              @default(STANDARD)
+  isCloud        Boolean                  @default(false) // derived: planType != FREE || licenseType == COMPLIMENTARY
+  isPro          Boolean                  @default(false) // derived: planType != FREE || licenseType == COMPLIMENTARY
+  seatCount      Int                      @default(1) // mirrors Stripe subscription quantity
+  stripeId       String? // Stripe customer ID
+  stripeSubId    String? // Stripe subscription ID
+  encryptionSalt String? // per-workspace salt for at-rest note encryption (non-sensitive)
+  createdAt      DateTime                 @default(now())
+  members        WorkspaceMember[]
+  notes          Note[]
+  folders        Folder[]
+  tasks          Task[]
+  mcpTokens      McpToken[]
+  syncState      SyncState?
+  conflictLogs   ConflictLog[]
+  tombstones     Tombstone[]
+  invites        InviteToken[]
+  kanbanStatuses KanbanStatus[]
+  backupSettings WorkspaceBackupSettings?
+}
+
+model WorkspaceBackupSettings {
+  id                 String        @id @default(cuid())
+  workspaceId        String        @unique
+  scheduleEnabled    Boolean       @default(false)
+  scheduleCadence    BackupCadence @default(WEEKLY)
+  destinationPath    String?
+  includeMarkdownZip Boolean       @default(false)
+  lastBackupAt       DateTime?
+  lastBackupStatus   String        @default("idle")
+  lastBackupError    String?
+  createdAt          DateTime      @default(now())
+  updatedAt          DateTime      @updatedAt
+  workspace          Workspace     @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+}
+
+model KanbanStatus {
+  id          String    @id @default(cuid())
+  workspaceId String
+  key         String // e.g. OPEN, CLAIMED, IN_PROGRESS, REVIEW, DONE
+  label       String
+  color       String // Tailwind border class, e.g. border-zinc-700
+  order       Int       @default(0)
+  isVisible   Boolean   @default(true)
+  createdAt   DateTime  @default(now())
+  updatedAt   DateTime  @updatedAt
+  workspace   Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+
+  @@unique([workspaceId, key])
+  @@index([workspaceId])
+}
+
+model WorkspaceMember {
+  id          String    @id @default(cuid())
+  userId      String
+  workspaceId String
+  role        Role      @default(MEMBER)
+  mcpAlias    String?
+  joinedAt    DateTime  @default(now())
+  revokedAt   DateTime?
+  user        User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  workspace   Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+
+  @@unique([userId, workspaceId])
+  @@index([userId])
+  @@index([workspaceId])
+}
+
+model Note {
+  id          String          @id @default(cuid())
+  title       String
+  content     String          @db.Text
+  workspaceId String
+  folderId    String?
+  isLocked    Boolean         @default(false)
+  cloudOnly   Boolean         @default(false)
+  pendingSync Boolean         @default(false)
+  version     Int             @default(0)
+  deviceId    String?
+  createdAt   DateTime        @default(now())
+  updatedAt   DateTime        @updatedAt
+  workspace   Workspace       @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+  folder      Folder?         @relation(fields: [folderId], references: [id], onDelete: SetNull)
+  tasks       Task[]
+  references  TaskReference[]
+
+  @@index([workspaceId])
+  @@index([workspaceId, updatedAt])
+  @@index([folderId])
+}
+
+model Folder {
+  id          String    @id @default(cuid())
+  name        String
+  workspaceId String
+  createdAt   DateTime  @default(now())
+  workspace   Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+  notes       Note[]
+
+  @@index([workspaceId])
+}
+
+model Task {
+  id             String          @id @default(cuid())
+  title          String
+  status         TaskStatus      @default(OPEN)
+  priority       Priority        @default(MEDIUM)
+  noteId         String
+  workspaceId    String
+  assigneeId     String?
+  assigneeType   AssigneeType    @default(HUMAN)
+  claimedBy      String?
+  claimedByAlias String?
+  claimedAt      DateTime?
+  lastHeartbeat  DateTime?
+  fileRefs       String[]
+  startDate      DateTime?
+  dueDate        DateTime?
+  syncLocal      Boolean         @default(true) // false = cloud-only, won't be pulled to local
+  pendingSync    Boolean         @default(false)
+  version        Int             @default(0)
+  deviceId       String?
+  createdAt      DateTime        @default(now())
+  updatedAt      DateTime        @updatedAt
+  note           Note            @relation(fields: [noteId], references: [id], onDelete: Cascade)
+  workspace      Workspace       @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+  assignee       User?           @relation("AssignedTo", fields: [assigneeId], references: [id])
+  auditLogs      AuditLog[]
+  references     TaskReference[]
+
+  @@index([workspaceId])
+  @@index([noteId])
+  @@index([workspaceId, status])
+  @@index([workspaceId, assigneeType, status])
+  @@index([workspaceId, priority])
+  @@index([claimedBy])
+}
+
+model TaskReference {
+  id      String @id @default(cuid())
+  taskId  String
+  noteId  String
+  snippet String @db.Text
+  task    Task   @relation(fields: [taskId], references: [id], onDelete: Cascade)
+  note    Note   @relation(fields: [noteId], references: [id], onDelete: Cascade)
+
+  @@index([taskId])
+  @@index([noteId])
+}
+
+model McpToken {
+  id          String    @id @default(cuid())
+  token       String    @unique
+  userId      String
+  workspaceId String
+  alias       String?
+  lastUsed    DateTime?
+  revokedAt   DateTime?
+  createdAt   DateTime  @default(now())
+  user        User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  workspace   Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@index([workspaceId])
+}
+
+model DeviceSession {
+  id         String    @id @default(cuid())
+  userId     String
+  deviceName String
+  deviceId   String    @unique
+  lastActive DateTime  @default(now())
+  revokedAt  DateTime?
+  createdAt  DateTime  @default(now())
+  user       User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+}
+
+model AuditLog {
+  id        String   @id @default(cuid())
+  taskId    String
+  userId    String?
+  action    String
+  detail    String?
+  deviceId  String?
+  createdAt DateTime @default(now())
+  task      Task     @relation(fields: [taskId], references: [id], onDelete: Cascade)
+  user      User?    @relation(fields: [userId], references: [id])
+
+  @@index([taskId])
+}
+
+model SyncState {
+  id              String    @id @default(cuid())
+  workspaceId     String    @unique
+  lastSyncedAt    DateTime?
+  localVersion    Int       @default(0)
+  cloudVersion    Int       @default(0)
+  noteSnapshots   String?   @db.Text
+  snapshotVersion Int       @default(0)
+  /// Distributed sync lock. Set to now() when a flush starts; cleared when done.
+  /// Any instance that finds a lock < 120s old will skip the flush to avoid races.
+  syncLockedAt    DateTime?
+  workspace       Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+}
+
+model ConflictLog {
+  id          String    @id @default(cuid())
+  workspaceId String
+  entityType  String
+  entityId    String
+  localValue  String    @db.Text
+  cloudValue  String    @db.Text
+  resolvedBy  String?
+  resolvedAt  DateTime?
+  createdAt   DateTime  @default(now())
+  workspace   Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+
+  @@unique([workspaceId, entityType, entityId])
+  @@index([workspaceId, resolvedAt])
+}
+
+model Tombstone {
+  id          String    @id @default(cuid())
+  workspaceId String
+  entityType  String
+  entityId    String
+  deletedAt   DateTime  @default(now())
+  workspace   Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+
+  @@index([workspaceId, entityType, entityId])
+}
+
+model Account {
+  id                String  @id @default(cuid())
+  userId            String
+  type              String
+  provider          String
+  providerAccountId String
+  refresh_token     String? @db.Text
+  access_token      String? @db.Text
+  expires_at        Int?
+  token_type        String?
+  scope             String?
+  id_token          String? @db.Text
+  session_state     String?
+  user              User    @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@unique([provider, providerAccountId])
+}
+
+model Session {
+  id           String   @id @default(cuid())
+  sessionToken String   @unique
+  userId       String
+  expires      DateTime
+  user         User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+}
+
+model VerificationToken {
+  identifier String
+  token      String   @unique
+  expires    DateTime
+
+  @@unique([identifier, token])
+}
+
+model PasswordResetToken {
+  id        String    @id @default(cuid())
+  token     String    @unique @default(cuid())
+  userId    String
+  expiresAt DateTime
+  usedAt    DateTime?
+  createdAt DateTime  @default(now())
+  user      User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+}
+
+model InviteToken {
+  id          String    @id @default(cuid())
+  token       String    @unique @default(cuid())
+  email       String
+  workspaceId String
+  role        Role      @default(MEMBER)
+  invitedById String
+  expiresAt   DateTime
+  acceptedAt  DateTime?
+  createdAt   DateTime  @default(now())
+  workspace   Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+  invitedBy   User      @relation("InvitedBy", fields: [invitedById], references: [id])
+}
+
+model Notification {
+  id        String   @id @default(cuid())
+  userId    String
+  type      String
+  title     String
+  body      String?
+  read      Boolean  @default(false)
+  taskId    String?
+  noteId    String?
+  createdAt DateTime @default(now())
+  user      User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@index([userId, read])
+}
+
+/// A user's personal read-only calendar subscription (Google/Apple "secret
+/// address in iCal format"). The URL is a credential — anyone with it can read
+/// the calendar — so it's encrypted at rest with a per-row salt.
+model CalendarFeed {
+  id            String              @id @default(cuid())
+  userId        String
+  label         String
+  encryptedUrl  String              @db.Text
+  urlSalt       String
+  color         String              @default("sky")
+  enabled       Boolean             @default(true)
+  lastFetchedAt DateTime?
+  lastError     String?
+  createdAt     DateTime            @default(now())
+  updatedAt     DateTime            @updatedAt
+  user          User                @relation(fields: [userId], references: [id], onDelete: Cascade)
+  events        CalendarFeedEvent[]
+
+  @@index([userId])
+}
+
+/// Cached events parsed from a CalendarFeed's .ics source, including expanded
+/// recurring-event occurrences within the sync window.
+model CalendarFeedEvent {
+  id     String       @id @default(cuid())
+  feedId String
+  uid    String
+  title  String
+  start  DateTime
+  end    DateTime
+  allDay Boolean      @default(false)
+  feed   CalendarFeed @relation(fields: [feedId], references: [id], onDelete: Cascade)
+
+  @@unique([feedId, uid])
+  @@index([feedId, start])
+}
+
+/// Idempotency log for Stripe webhook events.
+/// Stripe retries events on non-2xx responses for up to 3 days; storing the
+/// event ID here ensures each event is processed exactly once.
+model StripeWebhookEvent {
+  id          String   @id // Stripe event ID (evt_...)
+  type        String // e.g. "checkout.session.completed"
+  processedAt DateTime @default(now())
+
+  @@index([processedAt])
+}
+
+/// User feedback and issue reports
+model Feedback {
+  id        String   @id @default(cuid())
+  userId    String
+  type      String // "feedback", "bug", "feature_request"
+  subject   String
+  message   String   @db.Text
+  createdAt DateTime @default(now())
+  user      User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@index([createdAt])
+}

package/app/generated/prisma/wasm-edge-light-loader.mjs

@@ -0,0 +1,5 @@
+
+/* !!! This is code generated by Prisma. Do not edit directly. !!!
+/* eslint-disable */
+// biome-ignore-all lint: generated file
+export default import('./query_compiler_fast_bg.wasm?module')

package/app/generated/prisma/wasm-worker-loader.mjs

@@ -0,0 +1,5 @@
+
+/* !!! This is code generated by Prisma. Do not edit directly. !!!
+/* eslint-disable */
+// biome-ignore-all lint: generated file
+export default import('./query_compiler_fast_bg.wasm')

package/app/globals.css

@@ -0,0 +1,54 @@
+@import "tailwindcss";
+
+:root {
+  --background: #09090b;
+  --foreground: #fafafa;
+}
+
+@theme inline {
+  --color-background: var(--background);
+  --color-foreground: var(--foreground);
+  --font-sans: var(--font-geist-sans);
+  --font-mono: var(--font-geist-mono);
+}
+
+body {
+  background: var(--background);
+  color: var(--foreground);
+}
+
+* {
+  scrollbar-width: thin;
+  scrollbar-color: #3f3f46 transparent;
+}
+
+/* Shared accessible focus ring. Apply to interactive inputs/buttons that
+   otherwise strip their outline. Uses :focus-visible so it only shows for
+   keyboard users, not on mouse click. */
+/* Prevent outer scroll on mobile when editor is focused */
+@media (max-width: 767.98px) {
+  html, body {
+    overflow: hidden;
+    overscroll-behavior: none;
+    position: fixed;
+    width: 100%;
+    height: 100%;
+  }
+}
+
+/* Kanban cards: prevent iOS Safari touch interference during drag */
+[data-kanban-card] {
+  touch-action: none;
+  -webkit-touch-callout: none;
+  -webkit-user-select: none;
+  user-select: none;
+}
+
+@utility ring-focus {
+  &:focus-visible {
+    outline: 2px solid transparent;
+    outline-offset: 2px;
+    box-shadow: 0 0 0 2px rgba(59, 130, 246, 0.6);
+  }
+}
+

package/app/invite/[token]/page.tsx

@@ -0,0 +1,52 @@
+import { auth } from "@/auth";
+import { redirect } from "next/navigation";
+import { prisma } from "@/lib/prisma";
+import { AcceptInvite } from "@/components/settings/accept-invite";
+
+export default async function InvitePage({
+  params,
+}: {
+  params: Promise<{ token: string }>;
+}) {
+  const { token } = await params;
+  const session = await auth();
+
+  const invite = await prisma.inviteToken.findUnique({
+    where: { token },
+    include: {
+      workspace: { select: { name: true } },
+      invitedBy: { select: { name: true, email: true } },
+    },
+  });
+
+  if (!invite || invite.acceptedAt || invite.expiresAt < new Date()) {
+    return (
+      <div className="flex min-h-full items-center justify-center">
+        <div className="text-center space-y-2">
+          <h1 className="text-xl font-semibold text-zinc-300">Invite not valid</h1>
+          <p className="text-sm text-zinc-500">
+            This invite link has expired or already been used.
+          </p>
+        </div>
+      </div>
+    );
+  }
+
+  // If the current user matches the invite email, auto-accept is possible
+  const isLoggedInAsInvitee =
+    session?.user?.email?.toLowerCase() === invite.email.toLowerCase();
+
+  return (
+    <div className="flex min-h-full items-center justify-center">
+      <AcceptInvite
+        token={token}
+        email={invite.email}
+        workspaceName={invite.workspace.name}
+        invitedBy={invite.invitedBy.name ?? invite.invitedBy.email ?? "Someone"}
+        role={invite.role}
+        isLoggedIn={!!session}
+        isLoggedInAsInvitee={isLoggedInAsInvitee}
+      />
+    </div>
+  );
+}

package/app/layout.tsx

@@ -0,0 +1,90 @@
+import type { Metadata, Viewport } from "next";
+import { Geist, Geist_Mono } from "next/font/google";
+import { WEB_ICON_PATH } from "@/lib/brand-icons";
+import { SwRegister } from "@/components/layout/sw-register";
+import { ToastProvider } from "@/components/ui/toast";
+import "./globals.css";
+
+const geistSans = Geist({
+  variable: "--font-geist-sans",
+  subsets: ["latin"],
+});
+
+const geistMono = Geist_Mono({
+  variable: "--font-geist-mono",
+  subsets: ["latin"],
+});
+
+const SITE_URL = "https://knotpad.app";
+const SITE_DESCRIPTION =
+  "Note-first project management with AI agent task routing. Write the note — the tasks come with it.";
+
+export const metadata: Metadata = {
+  metadataBase: new URL(SITE_URL),
+  title: {
+    default: "Knotpad — Write the note. The tasks come with it.",
+    template: "%s | Knotpad",
+  },
+  description: SITE_DESCRIPTION,
+  keywords: [
+    "project management",
+    "note-taking",
+    "kanban",
+    "AI tasks",
+    "MCP",
+    "local-first",
+    "task management",
+    "team collaboration",
+  ],
+  authors: [{ name: "Knotpad", url: SITE_URL }],
+  creator: "Knotpad",
+  publisher: "Nexstrive Services",
+  category: "productivity",
+  robots: "index, follow",
+  manifest: "/manifest.json",
+  icons: {
+    icon: WEB_ICON_PATH,
+    shortcut: WEB_ICON_PATH,
+  },
+  alternates: {
+    canonical: SITE_URL,
+  },
+  openGraph: {
+    title: "Knotpad — Write the note. The tasks come with it.",
+    description: SITE_DESCRIPTION,
+    url: SITE_URL,
+    siteName: "Knotpad",
+    locale: "en_US",
+    type: "website",
+  },
+  twitter: {
+    card: "summary_large_image",
+    title: "Knotpad — Write the note. The tasks come with it.",
+    description: SITE_DESCRIPTION,
+  },
+};
+
+export const viewport: Viewport = {
+  width: "device-width",
+  initialScale: 1,
+  maximumScale: 1,
+  themeColor: "#09090b",
+  colorScheme: "dark",
+  viewportFit: "cover",
+  interactiveWidget: "resizes-content",
+};
+
+export default function RootLayout({
+  children,
+}: Readonly<{
+  children: React.ReactNode;
+}>) {
+  return (
+    <html lang="en" className={`${geistSans.variable} ${geistMono.variable} h-full`}>
+      <body className="h-full bg-zinc-950 text-zinc-100 antialiased">
+        <SwRegister />
+        <ToastProvider>{children}</ToastProvider>
+      </body>
+    </html>
+  );
+}