@knotpad/app 0.1.0

package/lib/validation/note.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+import { MAX_CONTENT_LEN, MAX_TITLE_LEN } from "@/lib/limits";
+
+export const createNoteSchema = z.object({
+  title: z
+    .string()
+    .max(MAX_TITLE_LEN, `title must be ≤ ${MAX_TITLE_LEN} chars`)
+    .optional(),
+  content: z
+    .string()
+    .max(MAX_CONTENT_LEN, `content exceeds ${MAX_CONTENT_LEN} char limit`)
+    .nullish(),
+  folderId: z.string().nullish(),
+});
+
+export const updateNoteSchema = z.object({
+  title: z
+    .string()
+    .max(MAX_TITLE_LEN, `title must be ≤ ${MAX_TITLE_LEN} chars`)
+    .optional(),
+  content: z
+    .string()
+    .max(MAX_CONTENT_LEN, `content exceeds ${MAX_CONTENT_LEN} char limit`)
+    .optional(),
+  baseVersion: z.number().int().optional(),
+  folderId: z.string().nullable().optional(),
+});

package/lib/validation/task.ts

@@ -0,0 +1,26 @@
+import { z } from "zod";
+
+// ISO date string, or null to clear, or omitted to leave unchanged.
+const dateField = z.string().nullable().optional();
+
+export const updateTaskSchema = z
+  .object({
+    // Status keys are workspace-specific (custom kanban columns), so the exact
+    // allowed set is validated in the handler against getKanbanStatuses().
+    status: z.string().optional(),
+    priority: z.enum(["LOW", "MEDIUM", "HIGH", "CRITICAL"]).optional(),
+    startDate: dateField,
+    dueDate: dateField,
+    assigneeType: z.enum(["HUMAN", "AGENT"]).optional(),
+    assigneeId: z.string().nullable().optional(),
+  })
+  .refine(
+    (d) =>
+      d.status !== undefined ||
+      d.priority !== undefined ||
+      d.startDate !== undefined ||
+      d.dueDate !== undefined ||
+      d.assigneeType !== undefined ||
+      d.assigneeId !== undefined,
+    { message: "status, priority, startDate, dueDate, assigneeType, or assigneeId required" }
+  );

package/lib/view-preferences.test.ts

@@ -0,0 +1,54 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { loadPreference, savePreference } from "@/lib/view-preferences";
+
+describe("view preferences", () => {
+  beforeEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it("reads a saved boolean preference", () => {
+    const getItem = vi.fn().mockReturnValue("true");
+
+    vi.stubGlobal("window", {
+      localStorage: {
+        getItem,
+        setItem: vi.fn(),
+      },
+    });
+
+    expect(loadPreference("brief:test", false)).toBe(true);
+    expect(getItem).toHaveBeenCalledWith("brief:test");
+  });
+
+  it("falls back when storage contains invalid JSON", () => {
+    vi.stubGlobal("window", {
+      localStorage: {
+        getItem: vi.fn().mockReturnValue("{"),
+        setItem: vi.fn(),
+      },
+    });
+
+    expect(loadPreference("brief:test", "fallback")).toBe("fallback");
+  });
+
+  it("falls back when storage is unavailable", () => {
+    vi.stubGlobal("window", undefined);
+
+    expect(loadPreference("brief:test", "fallback")).toBe("fallback");
+  });
+
+  it("saves a serialized preference", () => {
+    const setItem = vi.fn();
+
+    vi.stubGlobal("window", {
+      localStorage: {
+        getItem: vi.fn(),
+        setItem,
+      },
+    });
+
+    savePreference("brief:test", { open: true });
+
+    expect(setItem).toHaveBeenCalledWith("brief:test", JSON.stringify({ open: true }));
+  });
+});

package/lib/view-preferences.ts

@@ -0,0 +1,28 @@
+export function loadPreference<T>(key: string, fallback: T): T {
+  if (typeof window === "undefined") {
+    return fallback;
+  }
+
+  try {
+    const raw = window.localStorage.getItem(key);
+    if (raw === null) {
+      return fallback;
+    }
+
+    return JSON.parse(raw) as T;
+  } catch {
+    return fallback;
+  }
+}
+
+export function savePreference<T>(key: string, value: T): void {
+  if (typeof window === "undefined") {
+    return;
+  }
+
+  try {
+    window.localStorage.setItem(key, JSON.stringify(value));
+  } catch {
+    // Preferences should never block the UI.
+  }
+}

package/lib/workspace.ts

@@ -0,0 +1,66 @@
+/**
+ * Active-workspace resolution.
+ *
+ * A user can belong to multiple workspaces (a Personal one + Team ones). The
+ * "active" workspace is remembered in the `brief_ws` cookie; everything in the
+ * main app (notes, the board/list/calendar/graph views, and the tasks reached
+ * from notes) resolves through here so switching is consistent.
+ *
+ * Falls back to the user's first workspace when the cookie is absent or points
+ * at a workspace they're no longer a member of.
+ */
+
+import { cookies } from "next/headers";
+import { prisma } from "@/lib/prisma";
+import { isWorkspacePro } from "@/lib/license";
+
+export const ACTIVE_WS_COOKIE = "brief_ws";
+
+const IS_CLOUD = process.env.IS_CLOUD === "true";
+
+/**
+ * On IS_CLOUD=true, only workspaces where isWorkspacePro() is true may be
+ * resolved as "active" — a FREE Personal workspace must never be selectable
+ * on web/PWA, even if it's the user's only or first-joined workspace.
+ */
+export async function getActiveWorkspaceId(userId: string): Promise<string | null> {
+  const store = await cookies();
+  const preferred = store.get(ACTIVE_WS_COOKIE)?.value;
+  if (preferred) {
+    const m = await prisma.workspaceMember.findFirst({
+      where: { userId, workspaceId: preferred, revokedAt: null },
+      select: { workspaceId: true, workspace: { select: { planType: true, licenseType: true } } },
+    });
+    if (m && (!IS_CLOUD || isWorkspacePro(m.workspace))) return m.workspaceId;
+  }
+  const members = await prisma.workspaceMember.findMany({
+    where: { userId, revokedAt: null },
+    orderBy: { joinedAt: "asc" },
+    select: { workspaceId: true, workspace: { select: { planType: true, licenseType: true } } },
+  });
+  const first = IS_CLOUD ? members.find((m) => isWorkspacePro(m.workspace)) : members[0];
+  return first?.workspaceId ?? null;
+}
+
+export type UserWorkspace = {
+  id: string;
+  name: string;
+  type: "PERSONAL" | "TEAM";
+  role: "OWNER" | "ADMIN" | "MEMBER";
+  isPro: boolean;
+};
+
+export async function listUserWorkspaces(userId: string): Promise<UserWorkspace[]> {
+  const members = await prisma.workspaceMember.findMany({
+    where: { userId, revokedAt: null },
+    include: { workspace: { select: { id: true, name: true, type: true, planType: true, licenseType: true } } },
+    orderBy: { joinedAt: "asc" },
+  });
+  return members.map((m) => ({
+    id: m.workspace.id,
+    name: m.workspace.name,
+    type: m.workspace.type as "PERSONAL" | "TEAM",
+    role: m.role as "OWNER" | "ADMIN" | "MEMBER",
+    isPro: isWorkspacePro(m.workspace),
+  }));
+}

package/next.config.ts

@@ -0,0 +1,21 @@
+import type { NextConfig } from "next";
+import path from "path";
+
+const nextConfig: NextConfig = {
+  // Remove .ts from pageExtensions so that middleware.ts and proxy.ts are not
+  // auto-detected as middleware/proxy files by Next.js 16. Route handlers use
+  // .tsx (copied from .ts) to remain detectable.
+  pageExtensions: ["tsx", "jsx", "js"],
+  // PGlite and its adapter use WASM and native bindings — Turbopack cannot
+  // bundle them. Marking them external emits runtime require() calls instead,
+  // which are only reached inside initLocalPrisma() (guarded by IS_CLOUD check)
+  // so they're never executed in cloud mode even if the packages aren't installed.
+  serverExternalPackages: ["@electric-sql/pglite", "pglite-prisma-adapter", "node-ical"],
+  turbopack: {
+    // Fix for git worktree: point to this project's directory as the turbopack root
+    // so it doesn't infer the parent repo as the workspace root.
+    root: path.resolve(__dirname),
+  },
+};
+
+export default nextConfig;

package/package.json

@@ -0,0 +1,99 @@
+{
+  "name": "@knotpad/app",
+  "version": "0.1.0",
+  "description": "Note-first project management with AI agent task routing",
+  "bin": {
+    "knotpad": "./bin/brief.js"
+  },
+  "main": "dist-electron/main.js",
+  "files": [
+    "package.json",
+    "next.config.ts",
+    "app",
+    "components",
+    "lib",
+    "prisma",
+    "public",
+    "bin",
+    "electron",
+    "auth.ts",
+    "auth.config.ts",
+    "middleware.ts",
+    "tailwind.config.ts",
+    "tsconfig.json",
+    "postcss.config.mjs",
+    "instrumentation.tsx"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "dev": "next dev",
+    "build": "prisma generate && next build",
+    "start": "next start",
+    "lint": "eslint",
+    "test": "vitest run",
+    "postinstall": "prisma generate",
+    "electron:dev": "rimraf dist-electron && tsc --project tsconfig.electron.json && electron . --dev",
+    "electron:build": "rimraf dist && rimraf dist-electron && tsc --project tsconfig.electron.json && electron-builder",
+    "electron:build:win": "rimraf dist && rimraf dist-electron && tsc --project tsconfig.electron.json && electron-builder --win",
+    "electron:build:linux": "rimraf dist && rimraf dist-electron && tsc --project tsconfig.electron.json && electron-builder --linux",
+    "electron:build:mac": "rimraf dist && rimraf dist-electron && tsc --project tsconfig.electron.json && electron-builder --mac"
+  },
+  "dependencies": {
+    "@auth/prisma-adapter": "^2.11.2",
+    "@dnd-kit/core": "^6.3.1",
+    "@dnd-kit/sortable": "^10.0.0",
+    "@dnd-kit/utilities": "^3.2.2",
+    "@electric-sql/pglite": "^0.4.1",
+    "@neondatabase/serverless": "^1.1.0",
+    "@prisma/adapter-neon": "^7.8.0",
+    "@prisma/adapter-pg": "^7.8.0",
+    "@stripe/react-stripe-js": "^6.3.0",
+    "@stripe/stripe-js": "^9.5.0",
+    "bcryptjs": "^3.0.3",
+    "d3": "^7.9.0",
+    "date-holidays": "^3.30.2",
+    "dotenv": "^17.4.2",
+    "fflate": "^0.8.3",
+    "jose": "^6.2.3",
+    "lucide-react": "^1.16.0",
+    "next": "16.2.6",
+    "next-auth": "^5.0.0-beta.31",
+    "node-ical": "^0.26.1",
+    "pg": "^8.20.0",
+    "pglite-prisma-adapter": "^0.7.2",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "react-markdown": "^10.1.0",
+    "remark-gfm": "^4.0.1",
+    "stripe": "^22.1.1",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@prisma/client": "^7.8.0",
+    "@tailwindcss/postcss": "^4",
+    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/react": "^16.3.2",
+    "@testing-library/user-event": "^14.6.1",
+    "@types/bcryptjs": "^2.4.6",
+    "@types/d3": "^7.4.3",
+    "@types/node": "^20",
+    "@types/pg": "^8.20.0",
+    "@types/react": "^19",
+    "@types/react-dom": "^19",
+    "concurrently": "^10.0.3",
+    "electron": "^42.3.3",
+    "electron-builder": "^26.15.2",
+    "electron-updater": "^6.8.9",
+    "eslint": "^9",
+    "eslint-config-next": "16.2.6",
+    "jsdom": "^29.1.1",
+    "prisma": "^7.8.0",
+    "rimraf": "^6.1.3",
+    "tailwindcss": "^4",
+    "typescript": "^5",
+    "vitest": "^4.1.7",
+    "wait-on": "^9.0.10"
+  }
+}

package/postcss.config.mjs

@@ -0,0 +1,7 @@
+const config = {
+  plugins: {
+    "@tailwindcss/postcss": {},
+  },
+};
+
+export default config;