@knotpad/app 0.1.4 → 0.1.6

package/lib/validation/note.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+import { MAX_CONTENT_LEN, MAX_TITLE_LEN } from "@/lib/limits";
+
+export const createNoteSchema = z.object({
+  title: z
+    .string()
+    .max(MAX_TITLE_LEN, `title must be ≤ ${MAX_TITLE_LEN} chars`)
+    .optional(),
+  content: z
+    .string()
+    .max(MAX_CONTENT_LEN, `content exceeds ${MAX_CONTENT_LEN} char limit`)
+    .nullish(),
+  folderId: z.string().nullish(),
+});
+
+export const updateNoteSchema = z.object({
+  title: z
+    .string()
+    .max(MAX_TITLE_LEN, `title must be ≤ ${MAX_TITLE_LEN} chars`)
+    .optional(),
+  content: z
+    .string()
+    .max(MAX_CONTENT_LEN, `content exceeds ${MAX_CONTENT_LEN} char limit`)
+    .optional(),
+  baseVersion: z.number().int().optional(),
+  folderId: z.string().nullable().optional(),
+});

package/lib/validation/task.ts

@@ -0,0 +1,26 @@
+import { z } from "zod";
+
+// ISO date string, or null to clear, or omitted to leave unchanged.
+const dateField = z.string().nullable().optional();
+
+export const updateTaskSchema = z
+  .object({
+    // Status keys are workspace-specific (custom kanban columns), so the exact
+    // allowed set is validated in the handler against getKanbanStatuses().
+    status: z.string().optional(),
+    priority: z.enum(["LOW", "MEDIUM", "HIGH", "CRITICAL"]).optional(),
+    startDate: dateField,
+    dueDate: dateField,
+    assigneeType: z.enum(["HUMAN", "AGENT"]).optional(),
+    assigneeId: z.string().nullable().optional(),
+  })
+  .refine(
+    (d) =>
+      d.status !== undefined ||
+      d.priority !== undefined ||
+      d.startDate !== undefined ||
+      d.dueDate !== undefined ||
+      d.assigneeType !== undefined ||
+      d.assigneeId !== undefined,
+    { message: "status, priority, startDate, dueDate, assigneeType, or assigneeId required" }
+  );

package/lib/view-preferences.test.ts

@@ -0,0 +1,54 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { loadPreference, savePreference } from "@/lib/view-preferences";
+
+describe("view preferences", () => {
+  beforeEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it("reads a saved boolean preference", () => {
+    const getItem = vi.fn().mockReturnValue("true");
+
+    vi.stubGlobal("window", {
+      localStorage: {
+        getItem,
+        setItem: vi.fn(),
+      },
+    });
+
+    expect(loadPreference("brief:test", false)).toBe(true);
+    expect(getItem).toHaveBeenCalledWith("brief:test");
+  });
+
+  it("falls back when storage contains invalid JSON", () => {
+    vi.stubGlobal("window", {
+      localStorage: {
+        getItem: vi.fn().mockReturnValue("{"),
+        setItem: vi.fn(),
+      },
+    });
+
+    expect(loadPreference("brief:test", "fallback")).toBe("fallback");
+  });
+
+  it("falls back when storage is unavailable", () => {
+    vi.stubGlobal("window", undefined);
+
+    expect(loadPreference("brief:test", "fallback")).toBe("fallback");
+  });
+
+  it("saves a serialized preference", () => {
+    const setItem = vi.fn();
+
+    vi.stubGlobal("window", {
+      localStorage: {
+        getItem: vi.fn(),
+        setItem,
+      },
+    });
+
+    savePreference("brief:test", { open: true });
+
+    expect(setItem).toHaveBeenCalledWith("brief:test", JSON.stringify({ open: true }));
+  });
+});

package/lib/view-preferences.ts

@@ -0,0 +1,28 @@
+export function loadPreference<T>(key: string, fallback: T): T {
+  if (typeof window === "undefined") {
+    return fallback;
+  }
+
+  try {
+    const raw = window.localStorage.getItem(key);
+    if (raw === null) {
+      return fallback;
+    }
+
+    return JSON.parse(raw) as T;
+  } catch {
+    return fallback;
+  }
+}
+
+export function savePreference<T>(key: string, value: T): void {
+  if (typeof window === "undefined") {
+    return;
+  }
+
+  try {
+    window.localStorage.setItem(key, JSON.stringify(value));
+  } catch {
+    // Preferences should never block the UI.
+  }
+}

package/lib/workspace.ts

@@ -0,0 +1,66 @@
+/**
+ * Active-workspace resolution.
+ *
+ * A user can belong to multiple workspaces (a Personal one + Team ones). The
+ * "active" workspace is remembered in the `brief_ws` cookie; everything in the
+ * main app (notes, the board/list/calendar/graph views, and the tasks reached
+ * from notes) resolves through here so switching is consistent.
+ *
+ * Falls back to the user's first workspace when the cookie is absent or points
+ * at a workspace they're no longer a member of.
+ */
+
+import { cookies } from "next/headers";
+import { prisma } from "@/lib/prisma";
+import { isWorkspacePro } from "@/lib/license";
+
+export const ACTIVE_WS_COOKIE = "brief_ws";
+
+const IS_CLOUD = process.env.IS_CLOUD === "true";
+
+/**
+ * On IS_CLOUD=true, only workspaces where isWorkspacePro() is true may be
+ * resolved as "active" — a FREE Personal workspace must never be selectable
+ * on web/PWA, even if it's the user's only or first-joined workspace.
+ */
+export async function getActiveWorkspaceId(userId: string): Promise<string | null> {
+  const store = await cookies();
+  const preferred = store.get(ACTIVE_WS_COOKIE)?.value;
+  if (preferred) {
+    const m = await prisma.workspaceMember.findFirst({
+      where: { userId, workspaceId: preferred, revokedAt: null },
+      select: { workspaceId: true, workspace: { select: { planType: true, licenseType: true } } },
+    });
+    if (m && (!IS_CLOUD || isWorkspacePro(m.workspace))) return m.workspaceId;
+  }
+  const members = await prisma.workspaceMember.findMany({
+    where: { userId, revokedAt: null },
+    orderBy: { joinedAt: "asc" },
+    select: { workspaceId: true, workspace: { select: { planType: true, licenseType: true } } },
+  });
+  const first = IS_CLOUD ? members.find((m) => isWorkspacePro(m.workspace)) : members[0];
+  return first?.workspaceId ?? null;
+}
+
+export type UserWorkspace = {
+  id: string;
+  name: string;
+  type: "PERSONAL" | "TEAM";
+  role: "OWNER" | "ADMIN" | "MEMBER";
+  isPro: boolean;
+};
+
+export async function listUserWorkspaces(userId: string): Promise<UserWorkspace[]> {
+  const members = await prisma.workspaceMember.findMany({
+    where: { userId, revokedAt: null },
+    include: { workspace: { select: { id: true, name: true, type: true, planType: true, licenseType: true } } },
+    orderBy: { joinedAt: "asc" },
+  });
+  return members.map((m) => ({
+    id: m.workspace.id,
+    name: m.workspace.name,
+    type: m.workspace.type as "PERSONAL" | "TEAM",
+    role: m.role as "OWNER" | "ADMIN" | "MEMBER",
+    isPro: isWorkspacePro(m.workspace),
+  }));
+}

package/next.config.ts

@@ -0,0 +1,21 @@
+import type { NextConfig } from "next";
+import path from "path";
+
+const nextConfig: NextConfig = {
+  // Remove .ts from pageExtensions so that middleware.ts and proxy.ts are not
+  // auto-detected as middleware/proxy files by Next.js 16. Route handlers use
+  // .tsx (copied from .ts) to remain detectable.
+  pageExtensions: ["tsx", "jsx", "js"],
+  // PGlite and its adapter use WASM and native bindings — Turbopack cannot
+  // bundle them. Marking them external emits runtime require() calls instead,
+  // which are only reached inside initLocalPrisma() (guarded by IS_CLOUD check)
+  // so they're never executed in cloud mode even if the packages aren't installed.
+  serverExternalPackages: ["@electric-sql/pglite", "pglite-prisma-adapter", "node-ical"],
+  turbopack: {
+    // Fix for git worktree: point to this project's directory as the turbopack root
+    // so it doesn't infer the parent repo as the workspace root.
+    root: path.resolve(__dirname),
+  },
+};
+
+export default nextConfig;

package/package.json

@@ -1,15 +1,61 @@
 {
   "name": "@knotpad/app",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Note-first project management with AI agent task routing",
   "bin": {
-    "knotpad": "brief.js"
+    "knotpad": "bin/brief.js"
   },
   "files": [
     "package.json",
-    "brief.js"
+    "next.config.ts",
+    "app",
+    "components",
+    "lib",
+    "prisma",
+    "public",
+    "bin",
+    "auth.ts",
+    "auth.config.ts",
+    "middleware.ts",
+    "tailwind.config.ts",
+    "tsconfig.json",
+    "postcss.config.mjs",
+    "instrumentation.tsx"
   ],
   "publishConfig": {
     "access": "public"
+  },
+  "scripts": {
+    "postinstall": "prisma generate"
+  },
+  "dependencies": {
+    "@auth/prisma-adapter": "^2.11.2",
+    "@dnd-kit/core": "^6.3.1",
+    "@dnd-kit/sortable": "^10.0.0",
+    "@dnd-kit/utilities": "^3.2.2",
+    "@electric-sql/pglite": "^0.4.1",
+    "@neondatabase/serverless": "^1.1.0",
+    "@prisma/adapter-neon": "^7.8.0",
+    "@prisma/adapter-pg": "^7.8.0",
+    "@stripe/react-stripe-js": "^6.3.0",
+    "@stripe/stripe-js": "^9.5.0",
+    "bcryptjs": "^3.0.3",
+    "d3": "^7.9.0",
+    "date-holidays": "^3.30.2",
+    "dotenv": "^17.4.2",
+    "fflate": "^0.8.3",
+    "jose": "^6.2.3",
+    "lucide-react": "^1.16.0",
+    "next": "16.2.6",
+    "next-auth": "^5.0.0-beta.31",
+    "node-ical": "^0.26.1",
+    "pg": "^8.20.0",
+    "pglite-prisma-adapter": "^0.7.2",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "react-markdown": "^10.1.0",
+    "remark-gfm": "^4.0.1",
+    "stripe": "^22.1.1",
+    "zod": "^4.4.3"
   }
 }

package/postcss.config.mjs

@@ -0,0 +1,7 @@
+const config = {
+  plugins: {
+    "@tailwindcss/postcss": {},
+  },
+};
+
+export default config;

package/prisma/migrations/20260519021916_init/migration.sql

@@ -0,0 +1,388 @@
+-- CreateEnum
+CREATE TYPE "Role" AS ENUM ('OWNER', 'ADMIN', 'MEMBER');
+
+-- CreateEnum
+CREATE TYPE "TaskStatus" AS ENUM ('OPEN', 'CLAIMED', 'IN_PROGRESS', 'REVIEW', 'DONE');
+
+-- CreateEnum
+CREATE TYPE "AssigneeType" AS ENUM ('HUMAN', 'AGENT');
+
+-- CreateEnum
+CREATE TYPE "WorkspaceType" AS ENUM ('PERSONAL', 'TEAM');
+
+-- CreateEnum
+CREATE TYPE "PlanType" AS ENUM ('FREE', 'PERSONAL_PRO', 'TEAM_PRO');
+
+-- CreateEnum
+CREATE TYPE "LicenseType" AS ENUM ('STANDARD', 'COMPLIMENTARY');
+
+-- CreateTable
+CREATE TABLE "User" (
+    "id" TEXT NOT NULL,
+    "email" TEXT,
+    "name" TEXT,
+    "passwordHash" TEXT,
+    "image" TEXT,
+    "isPro" BOOLEAN NOT NULL DEFAULT false,
+    "role" "Role" NOT NULL DEFAULT 'MEMBER',
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "User_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Workspace" (
+    "id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "slug" TEXT NOT NULL,
+    "type" "WorkspaceType" NOT NULL DEFAULT 'PERSONAL',
+    "planType" "PlanType" NOT NULL DEFAULT 'FREE',
+    "licenseType" "LicenseType" NOT NULL DEFAULT 'STANDARD',
+    "isCloud" BOOLEAN NOT NULL DEFAULT false,
+    "isPro" BOOLEAN NOT NULL DEFAULT false,
+    "seatCount" INTEGER NOT NULL DEFAULT 1,
+    "stripeId" TEXT,
+    "stripeSubId" TEXT,
+    "encryptionSalt" TEXT,
+    "syncPasswordSet" BOOLEAN NOT NULL DEFAULT false,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "Workspace_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "WorkspaceMember" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "workspaceId" TEXT NOT NULL,
+    "role" "Role" NOT NULL DEFAULT 'MEMBER',
+    "mcpAlias" TEXT,
+    "joinedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "revokedAt" TIMESTAMP(3),
+
+    CONSTRAINT "WorkspaceMember_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Note" (
+    "id" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "content" TEXT NOT NULL,
+    "workspaceId" TEXT NOT NULL,
+    "folderId" TEXT,
+    "isLocked" BOOLEAN NOT NULL DEFAULT false,
+    "cloudOnly" BOOLEAN NOT NULL DEFAULT false,
+    "version" INTEGER NOT NULL DEFAULT 0,
+    "deviceId" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "Note_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Task" (
+    "id" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "status" "TaskStatus" NOT NULL DEFAULT 'OPEN',
+    "noteId" TEXT NOT NULL,
+    "workspaceId" TEXT NOT NULL,
+    "assigneeId" TEXT,
+    "assigneeType" "AssigneeType" NOT NULL DEFAULT 'HUMAN',
+    "claimedBy" TEXT,
+    "claimedByAlias" TEXT,
+    "claimedAt" TIMESTAMP(3),
+    "lastHeartbeat" TIMESTAMP(3),
+    "fileRefs" TEXT[],
+    "dueDate" TIMESTAMP(3),
+    "syncLocal" BOOLEAN NOT NULL DEFAULT true,
+    "version" INTEGER NOT NULL DEFAULT 0,
+    "deviceId" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "Task_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "TaskReference" (
+    "id" TEXT NOT NULL,
+    "taskId" TEXT NOT NULL,
+    "noteId" TEXT NOT NULL,
+    "snippet" TEXT NOT NULL,
+
+    CONSTRAINT "TaskReference_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "McpToken" (
+    "id" TEXT NOT NULL,
+    "token" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "workspaceId" TEXT NOT NULL,
+    "alias" TEXT,
+    "lastUsed" TIMESTAMP(3),
+    "revokedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "McpToken_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "DeviceSession" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "deviceName" TEXT NOT NULL,
+    "deviceId" TEXT NOT NULL,
+    "lastActive" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "revokedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "DeviceSession_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "AuditLog" (
+    "id" TEXT NOT NULL,
+    "taskId" TEXT NOT NULL,
+    "userId" TEXT,
+    "action" TEXT NOT NULL,
+    "detail" TEXT,
+    "deviceId" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "AuditLog_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "SyncState" (
+    "id" TEXT NOT NULL,
+    "workspaceId" TEXT NOT NULL,
+    "lastSyncedAt" TIMESTAMP(3),
+    "localVersion" INTEGER NOT NULL DEFAULT 0,
+    "cloudVersion" INTEGER NOT NULL DEFAULT 0,
+    "keyRotatedAt" TIMESTAMP(3),
+    "noteSnapshots" TEXT,
+
+    CONSTRAINT "SyncState_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "ConflictLog" (
+    "id" TEXT NOT NULL,
+    "workspaceId" TEXT NOT NULL,
+    "entityType" TEXT NOT NULL,
+    "entityId" TEXT NOT NULL,
+    "localValue" TEXT NOT NULL,
+    "cloudValue" TEXT NOT NULL,
+    "resolvedBy" TEXT,
+    "resolvedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "ConflictLog_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Tombstone" (
+    "id" TEXT NOT NULL,
+    "workspaceId" TEXT NOT NULL,
+    "entityType" TEXT NOT NULL,
+    "entityId" TEXT NOT NULL,
+    "deletedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "Tombstone_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Account" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "type" TEXT NOT NULL,
+    "provider" TEXT NOT NULL,
+    "providerAccountId" TEXT NOT NULL,
+    "refresh_token" TEXT,
+    "access_token" TEXT,
+    "expires_at" INTEGER,
+    "token_type" TEXT,
+    "scope" TEXT,
+    "id_token" TEXT,
+    "session_state" TEXT,
+
+    CONSTRAINT "Account_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Session" (
+    "id" TEXT NOT NULL,
+    "sessionToken" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "expires" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "Session_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "VerificationToken" (
+    "identifier" TEXT NOT NULL,
+    "token" TEXT NOT NULL,
+    "expires" TIMESTAMP(3) NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "InviteToken" (
+    "id" TEXT NOT NULL,
+    "token" TEXT NOT NULL,
+    "email" TEXT NOT NULL,
+    "workspaceId" TEXT NOT NULL,
+    "role" "Role" NOT NULL DEFAULT 'MEMBER',
+    "invitedById" TEXT NOT NULL,
+    "expiresAt" TIMESTAMP(3) NOT NULL,
+    "acceptedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "InviteToken_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Notification" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "type" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "body" TEXT,
+    "read" BOOLEAN NOT NULL DEFAULT false,
+    "taskId" TEXT,
+    "noteId" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "Notification_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "User_email_key" ON "User"("email");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Workspace_slug_key" ON "Workspace"("slug");
+
+-- CreateIndex
+CREATE INDEX "WorkspaceMember_userId_idx" ON "WorkspaceMember"("userId");
+
+-- CreateIndex
+CREATE INDEX "WorkspaceMember_workspaceId_idx" ON "WorkspaceMember"("workspaceId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "WorkspaceMember_userId_workspaceId_key" ON "WorkspaceMember"("userId", "workspaceId");
+
+-- CreateIndex
+CREATE INDEX "Note_workspaceId_idx" ON "Note"("workspaceId");
+
+-- CreateIndex
+CREATE INDEX "Note_workspaceId_updatedAt_idx" ON "Note"("workspaceId", "updatedAt");
+
+-- CreateIndex
+CREATE INDEX "Task_workspaceId_idx" ON "Task"("workspaceId");
+
+-- CreateIndex
+CREATE INDEX "Task_noteId_idx" ON "Task"("noteId");
+
+-- CreateIndex
+CREATE INDEX "Task_workspaceId_status_idx" ON "Task"("workspaceId", "status");
+
+-- CreateIndex
+CREATE INDEX "Task_workspaceId_assigneeType_status_idx" ON "Task"("workspaceId", "assigneeType", "status");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "McpToken_token_key" ON "McpToken"("token");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "DeviceSession_deviceId_key" ON "DeviceSession"("deviceId");
+
+-- CreateIndex
+CREATE INDEX "AuditLog_taskId_idx" ON "AuditLog"("taskId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "SyncState_workspaceId_key" ON "SyncState"("workspaceId");
+
+-- CreateIndex
+CREATE INDEX "ConflictLog_workspaceId_resolvedAt_idx" ON "ConflictLog"("workspaceId", "resolvedAt");
+
+-- CreateIndex
+CREATE INDEX "Tombstone_workspaceId_entityType_entityId_idx" ON "Tombstone"("workspaceId", "entityType", "entityId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Account_provider_providerAccountId_key" ON "Account"("provider", "providerAccountId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Session_sessionToken_key" ON "Session"("sessionToken");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "VerificationToken_token_key" ON "VerificationToken"("token");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "VerificationToken_identifier_token_key" ON "VerificationToken"("identifier", "token");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "InviteToken_token_key" ON "InviteToken"("token");
+
+-- AddForeignKey
+ALTER TABLE "WorkspaceMember" ADD CONSTRAINT "WorkspaceMember_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "WorkspaceMember" ADD CONSTRAINT "WorkspaceMember_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Note" ADD CONSTRAINT "Note_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Task" ADD CONSTRAINT "Task_noteId_fkey" FOREIGN KEY ("noteId") REFERENCES "Note"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Task" ADD CONSTRAINT "Task_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Task" ADD CONSTRAINT "Task_assigneeId_fkey" FOREIGN KEY ("assigneeId") REFERENCES "User"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "TaskReference" ADD CONSTRAINT "TaskReference_taskId_fkey" FOREIGN KEY ("taskId") REFERENCES "Task"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "TaskReference" ADD CONSTRAINT "TaskReference_noteId_fkey" FOREIGN KEY ("noteId") REFERENCES "Note"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "McpToken" ADD CONSTRAINT "McpToken_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "McpToken" ADD CONSTRAINT "McpToken_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "DeviceSession" ADD CONSTRAINT "DeviceSession_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "AuditLog" ADD CONSTRAINT "AuditLog_taskId_fkey" FOREIGN KEY ("taskId") REFERENCES "Task"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "AuditLog" ADD CONSTRAINT "AuditLog_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "SyncState" ADD CONSTRAINT "SyncState_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "ConflictLog" ADD CONSTRAINT "ConflictLog_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Tombstone" ADD CONSTRAINT "Tombstone_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Account" ADD CONSTRAINT "Account_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Session" ADD CONSTRAINT "Session_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "InviteToken" ADD CONSTRAINT "InviteToken_workspaceId_fkey" FOREIGN KEY ("workspaceId") REFERENCES "Workspace"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "InviteToken" ADD CONSTRAINT "InviteToken_invitedById_fkey" FOREIGN KEY ("invitedById") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Notification" ADD CONSTRAINT "Notification_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;