diff --git a/drizzle/0002_mixed_bulldozer.sql b/drizzle/0002_mixed_bulldozer.sql
new file mode 100644
index 0000000..2eb38e3
--- /dev/null
+++ b/drizzle/0002_mixed_bulldozer.sql
@@ -0,0 +1,19 @@
+CREATE TABLE "public_notes" (
+ "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+ "slug" text NOT NULL,
+ "note_id" uuid NOT NULL,
+ "user_id" text NOT NULL,
+ "title" text NOT NULL,
+ "content" text NOT NULL,
+ "type" text DEFAULT 'note' NOT NULL,
+ "author_name" text,
+ "published_at" timestamp with time zone DEFAULT now() NOT NULL,
+ "updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+ CONSTRAINT "public_notes_slug_unique" UNIQUE("slug")
+);
+--> statement-breakpoint
+ALTER TABLE "public_notes" ADD CONSTRAINT "public_notes_note_id_notes_id_fk" FOREIGN KEY ("note_id") REFERENCES "public"."notes"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "public_notes" ADD CONSTRAINT "public_notes_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_public_notes_slug" ON "public_notes" USING btree ("slug");--> statement-breakpoint
+CREATE INDEX "idx_public_notes_note_id" ON "public_notes" USING btree ("note_id");--> statement-breakpoint
+CREATE INDEX "idx_public_notes_user_id" ON "public_notes" USING btree ("user_id");
\ No newline at end of file
diff --git a/drizzle/meta/0002_snapshot.json b/drizzle/meta/0002_snapshot.json
new file mode 100644
index 0000000..5f9a437
--- /dev/null
+++ b/drizzle/meta/0002_snapshot.json
@@ -0,0 +1,689 @@
+{
+ "id": "b19c2015-df98-4a76-8f63-c3ff788c7f48",
+ "prevId": "397ee404-7901-4e52-910e-dcf150145a54",
+ "version": "7",
+ "dialect": "postgresql",
+ "tables": {
+ "public.file_attachments": {
+ "name": "file_attachments",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "uuid",
+ "primaryKey": true,
+ "notNull": true,
+ "default": "gen_random_uuid()"
+ },
+ "note_id": {
+ "name": "note_id",
+ "type": "uuid",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "filename": {
+ "name": "filename",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "original_name": {
+ "name": "original_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "mime_type": {
+ "name": "mime_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "size": {
+ "name": "size",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "encrypted_data": {
+ "name": "encrypted_data",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "encrypted_title": {
+ "name": "encrypted_title",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'encrypted_placeholder'"
+ },
+ "iv": {
+ "name": "iv",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "salt": {
+ "name": "salt",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "uploaded_at": {
+ "name": "uploaded_at",
+ "type": "timestamp with time zone",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "now()"
+ }
+ },
+ "indexes": {
+ "idx_file_attachments_note_id": {
+ "name": "idx_file_attachments_note_id",
+ "columns": [
+ {
+ "expression": "note_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "file_attachments_note_id_notes_id_fk": {
+ "name": "file_attachments_note_id_notes_id_fk",
+ "tableFrom": "file_attachments",
+ "tableTo": "notes",
+ "columnsFrom": [
+ "note_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.folders": {
+ "name": "folders",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "uuid",
+ "primaryKey": true,
+ "notNull": true,
+ "default": "gen_random_uuid()"
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "default": "'#6b7280'"
+ },
+ "parent_id": {
+ "name": "parent_id",
+ "type": "uuid",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "sort_order": {
+ "name": "sort_order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 0
+ },
+ "is_default": {
+ "name": "is_default",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "default": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "timestamp",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "now()"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "timestamp",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "now()"
+ }
+ },
+ "indexes": {
+ "idx_folders_user_id": {
+ "name": "idx_folders_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_folders_user_sort": {
+ "name": "idx_folders_user_sort",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "sort_order",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "folders_user_id_users_id_fk": {
+ "name": "folders_user_id_users_id_fk",
+ "tableFrom": "folders",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.notes": {
+ "name": "notes",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "uuid",
+ "primaryKey": true,
+ "notNull": true,
+ "default": "gen_random_uuid()"
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "folder_id": {
+ "name": "folder_id",
+ "type": "uuid",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "title": {
+ "name": "title",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "content": {
+ "name": "content",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "default": "''"
+ },
+ "type": {
+ "name": "type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'note'"
+ },
+ "encrypted_title": {
+ "name": "encrypted_title",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "encrypted_content": {
+ "name": "encrypted_content",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "iv": {
+ "name": "iv",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "salt": {
+ "name": "salt",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "starred": {
+ "name": "starred",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "default": false
+ },
+ "archived": {
+ "name": "archived",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "default": false
+ },
+ "deleted": {
+ "name": "deleted",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "default": false
+ },
+ "hidden": {
+ "name": "hidden",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "default": false
+ },
+ "hidden_at": {
+ "name": "hidden_at",
+ "type": "timestamp",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "tags": {
+ "name": "tags",
+ "type": "text[]",
+ "primaryKey": false,
+ "notNull": false,
+ "default": "'{}'"
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "timestamp",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "now()"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "timestamp",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "now()"
+ }
+ },
+ "indexes": {
+ "idx_notes_user_id": {
+ "name": "idx_notes_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_notes_folder_id": {
+ "name": "idx_notes_folder_id",
+ "columns": [
+ {
+ "expression": "folder_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_notes_user_updated": {
+ "name": "idx_notes_user_updated",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "updated_at",
+ "isExpression": false,
+ "asc": false,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_notes_type": {
+ "name": "idx_notes_type",
+ "columns": [
+ {
+ "expression": "type",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "notes_user_id_users_id_fk": {
+ "name": "notes_user_id_users_id_fk",
+ "tableFrom": "notes",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "notes_folder_id_folders_id_fk": {
+ "name": "notes_folder_id_folders_id_fk",
+ "tableFrom": "notes",
+ "tableTo": "folders",
+ "columnsFrom": [
+ "folder_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.public_notes": {
+ "name": "public_notes",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "uuid",
+ "primaryKey": true,
+ "notNull": true,
+ "default": "gen_random_uuid()"
+ },
+ "slug": {
+ "name": "slug",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "note_id": {
+ "name": "note_id",
+ "type": "uuid",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "title": {
+ "name": "title",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "content": {
+ "name": "content",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "type": {
+ "name": "type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'note'"
+ },
+ "author_name": {
+ "name": "author_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "published_at": {
+ "name": "published_at",
+ "type": "timestamp with time zone",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "now()"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "timestamp with time zone",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "now()"
+ }
+ },
+ "indexes": {
+ "idx_public_notes_slug": {
+ "name": "idx_public_notes_slug",
+ "columns": [
+ {
+ "expression": "slug",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_public_notes_note_id": {
+ "name": "idx_public_notes_note_id",
+ "columns": [
+ {
+ "expression": "note_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_public_notes_user_id": {
+ "name": "idx_public_notes_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "public_notes_note_id_notes_id_fk": {
+ "name": "public_notes_note_id_notes_id_fk",
+ "tableFrom": "public_notes",
+ "tableTo": "notes",
+ "columnsFrom": [
+ "note_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "public_notes_user_id_users_id_fk": {
+ "name": "public_notes_user_id_users_id_fk",
+ "tableFrom": "public_notes",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "public_notes_slug_unique": {
+ "name": "public_notes_slug_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "slug"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.users": {
+ "name": "users",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "email": {
+ "name": "email",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "first_name": {
+ "name": "first_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "last_name": {
+ "name": "last_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "timestamp",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "now()"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "timestamp",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "now()"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ }
+ },
+ "enums": {},
+ "schemas": {},
+ "sequences": {},
+ "roles": {},
+ "policies": {},
+ "views": {},
+ "_meta": {
+ "columns": {},
+ "schemas": {},
+ "tables": {}
+ }
+}
\ No newline at end of file
diff --git a/drizzle/meta/_journal.json b/drizzle/meta/_journal.json
index 90ea23d..42dfda1 100644
--- a/drizzle/meta/_journal.json
+++ b/drizzle/meta/_journal.json
@@ -15,6 +15,13 @@
"when": 1761780448921,
"tag": "0001_far_winter_soldier",
"breakpoints": true
+ },
+ {
+ "idx": 2,
+ "version": "7",
+ "when": 1763844333301,
+ "tag": "0002_mixed_bulldozer",
+ "breakpoints": true
}
]
}
\ No newline at end of file
diff --git a/package.json b/package.json
index ec3c8d8..783c4c8 100644
--- a/package.json
+++ b/package.json
@@ -60,6 +60,8 @@
"dotenv-flow": "^4.1.0",
"drizzle-orm": "^0.44.2",
"hono": "^4.10.6",
+ "isomorphic-dompurify": "^2.33.0",
+ "nanoid": "^5.1.6",
"postgres": "^3.4.7",
"ws": "^8.18.3",
"zod": "^4.1.12"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 843a0e8..890280b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -81,6 +81,12 @@ importers:
hono:
specifier: ^4.10.6
version: 4.10.6
+ isomorphic-dompurify:
+ specifier: ^2.33.0
+ version: 2.33.0
+ nanoid:
+ specifier: ^5.1.6
+ version: 5.1.6
postgres:
specifier: ^3.4.7
version: 3.4.7
@@ -172,6 +178,18 @@ importers:
packages:
+ '@acemir/cssom@0.9.24':
+ resolution: {integrity: sha512-5YjgMmAiT2rjJZU7XK1SNI7iqTy92DpaYVgG6x63FxkJ11UpYfLndHJATtinWJClAXiOlW9XWaUyAQf8pMrQPg==}
+
+ '@asamuzakjp/css-color@4.1.0':
+ resolution: {integrity: sha512-9xiBAtLn4aNsa4mDnpovJvBn72tNEIACyvlqaNJ+ADemR+yeMJWnBudOi2qGDviJa7SwcDOU/TRh5dnET7qk0w==}
+
+ '@asamuzakjp/dom-selector@6.7.4':
+ resolution: {integrity: sha512-buQDjkm+wDPXd6c13534URWZqbz0RP5PAhXZ+LIoa5LgwInT9HVJvGIJivg75vi8I13CxDGdTnz+aY5YUJlIAA==}
+
+ '@asamuzakjp/nwsapi@2.3.9':
+ resolution: {integrity: sha512-n8GuYSrI9bF7FFZ/SjhwevlHc8xaVlb/7HmHelnc/PZXBD2ZR49NnN9sMMuDdEGPeeRQ5d0hqlSlEpgCX3Wl0Q==}
+
'@asteasolutions/zod-to-openapi@8.1.0':
resolution: {integrity: sha512-tQFxVs05J/6QXXqIzj6rTRk3nj1HFs4pe+uThwE95jL5II2JfpVXkK+CqkO7aT0Do5AYqO6LDrKpleLUFXgY+g==}
peerDependencies:
@@ -391,6 +409,38 @@ packages:
resolution: {integrity: sha512-ooWCrlZP11i8GImSjTHYHLkvFDP48nS4+204nGb1RiX/WXYHmJA2III9/e2DWVabCESdW7hBAEzHRqUn9OUVvQ==}
engines: {node: '>=0.1.90'}
+ '@csstools/color-helpers@5.1.0':
+ resolution: {integrity: sha512-S11EXWJyy0Mz5SYvRmY8nJYTFFd1LCNV+7cXyAgQtOOuzb4EsgfqDufL+9esx72/eLhsRdGZwaldu/h+E4t4BA==}
+ engines: {node: '>=18'}
+
+ '@csstools/css-calc@2.1.4':
+ resolution: {integrity: sha512-3N8oaj+0juUw/1H3YwmDDJXCgTB1gKU6Hc/bB502u9zR0q2vd786XJH9QfrKIEgFlZmhZiq6epXl4rHqhzsIgQ==}
+ engines: {node: '>=18'}
+ peerDependencies:
+ '@csstools/css-parser-algorithms': ^3.0.5
+ '@csstools/css-tokenizer': ^3.0.4
+
+ '@csstools/css-color-parser@3.1.0':
+ resolution: {integrity: sha512-nbtKwh3a6xNVIp/VRuXV64yTKnb1IjTAEEh3irzS+HkKjAOYLTGNb9pmVNntZ8iVBHcWDA2Dof0QtPgFI1BaTA==}
+ engines: {node: '>=18'}
+ peerDependencies:
+ '@csstools/css-parser-algorithms': ^3.0.5
+ '@csstools/css-tokenizer': ^3.0.4
+
+ '@csstools/css-parser-algorithms@3.0.5':
+ resolution: {integrity: sha512-DaDeUkXZKjdGhgYaHNJTV9pV7Y9B3b644jCLs9Upc3VeNGg6LWARAT6O+Q+/COo+2gg/bM5rhpMAtf70WqfBdQ==}
+ engines: {node: '>=18'}
+ peerDependencies:
+ '@csstools/css-tokenizer': ^3.0.4
+
+ '@csstools/css-syntax-patches-for-csstree@1.0.17':
+ resolution: {integrity: sha512-LCC++2h8pLUSPY+EsZmrrJ1EOUu+5iClpEiDhhdw3zRJpPbABML/N5lmRuBHjxtKm9VnRcsUzioyD0sekFMF0A==}
+ engines: {node: '>=18'}
+
+ '@csstools/css-tokenizer@3.0.4':
+ resolution: {integrity: sha512-Vd/9EVDiu6PPJt9yAh6roZP6El1xHrdvIVGjyBsHR0RYwNHgL7FJPyIIW4fANJNG6FtyZfvlRPpFI4ZM/lubvw==}
+ engines: {node: '>=18'}
+
'@drizzle-team/brocli@0.10.2':
resolution: {integrity: sha512-z33Il7l5dKjUgGULTqBsQBQwckHh5AbIuxhdsIxDDiZAzBOrZO6q9ogcWC65kU382AfynTfgNumVcNIjuIua6w==}
@@ -1470,6 +1520,9 @@ packages:
'@types/tedious@4.0.14':
resolution: {integrity: sha512-KHPsfX/FoVbUGbyYvk1q9MMQHLPeRZhRJZdO45Q4YjvFkv4hMNghCWTvy7rdKessBsmtz4euWCWAB6/tVpI1Iw==}
+ '@types/trusted-types@2.0.7':
+ resolution: {integrity: sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==}
+
'@types/ws@8.18.1':
resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==}
@@ -1748,6 +1801,9 @@ packages:
before-after-hook@4.0.0:
resolution: {integrity: sha512-q6tR3RPqIB1pMiTRMFcZwuG5T8vwp+vUvEG0vuI6B+Rikh5BfPp2fQ82c925FOs+b0lcFQ8CFrL+KbilfZFhOQ==}
+ bidi-js@1.0.3:
+ resolution: {integrity: sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw==}
+
bignumber.js@9.3.1:
resolution: {integrity: sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==}
@@ -1926,9 +1982,21 @@ packages:
resolution: {integrity: sha512-x8dy3RnvYdlUcPOjkEHqozhiwzKNSq7GcPuXFbnyMOCHxX8V3OgIg/pYuabl2sbUPfIJaeAQB7PMOK8DFIdoRA==}
engines: {node: '>=12'}
+ css-tree@3.1.0:
+ resolution: {integrity: sha512-0eW44TGN5SQXU1mWSkKwFstI/22X2bG1nYzZTYMAWjylYURhse752YgbE4Cx46AC+bAvI+/dYTPRk1LqSUnu6w==}
+ engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0}
+
+ cssstyle@5.3.3:
+ resolution: {integrity: sha512-OytmFH+13/QXONJcC75QNdMtKpceNk3u8ThBjyyYjkEcy/ekBwR1mMAuNvi3gdBPW3N5TlCzQ0WZw8H0lN/bDw==}
+ engines: {node: '>=20'}
+
csstype@3.1.3:
resolution: {integrity: sha512-M1uQkMl8rQK/szD0LNhtqxIPLpimGm8sOBwU7lLnCpSbTyY3yeU1Vc7l4KT5zT4s/yOxHH5O7tIuuLOCnLADRw==}
+ data-urls@6.0.0:
+ resolution: {integrity: sha512-BnBS08aLUM+DKamupXs3w2tJJoqU+AkaE/+6vQxi/G/DPmIZFJJp9Dkb1kM03AZx8ADehDUZgsNxju3mPXZYIA==}
+ engines: {node: '>=20'}
+
debug@4.4.1:
resolution: {integrity: sha512-KcKCqiftBJcZr++7ykoDIEwSa3XWowTfNPo92BYxjXiyYEVrUQh2aLyhxBCwww+heortUFxEJYcRzosstTEBYQ==}
engines: {node: '>=6.0'}
@@ -1947,6 +2015,9 @@ packages:
supports-color:
optional: true
+ decimal.js@10.6.0:
+ resolution: {integrity: sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==}
+
dedent@1.7.0:
resolution: {integrity: sha512-HGFtf8yhuhGhqO07SV79tRp+br4MnbdjeVxotpn1QBl30pcLLCQjX5b2295ll0fv8RKDKsmWYrl05usHM9CewQ==}
peerDependencies:
@@ -1982,6 +2053,9 @@ packages:
resolution: {integrity: sha512-yS+Q5i3hBf7GBkd4KG8a7eBNNWNGLTaEwwYWUijIYM7zrlYDM0BFXHjjPWlWZ1Rg7UaddZeIDmi9jF3HmqiQ2w==}
engines: {node: '>=6.0.0'}
+ dompurify@3.3.0:
+ resolution: {integrity: sha512-r+f6MYR1gGN1eJv0TVQbhA7if/U7P87cdPl3HN5rikqaBSBxLiCb/b9O+2eG0cxz0ghyU+mU1QkbsOwERMYlWQ==}
+
dot-prop@5.3.0:
resolution: {integrity: sha512-QM8q3zDe58hqUqjraQOmzZ1LIH9SWQJTlEKCH4kJ2oQvLZk7RbQXvtDM2XEq3fwkV9CCvvH4LA0AV+ogFsBM2Q==}
engines: {node: '>=8'}
@@ -2116,6 +2190,10 @@ packages:
emojilib@2.4.0:
resolution: {integrity: sha512-5U0rVMU5Y2n2+ykNLQqMoqklN9ICBT/KsvC1Gz6vqHbz2AXXGkG+Pm5rMWk/8Vjrr/mY9985Hi8DYzn1F09Nyw==}
+ entities@6.0.1:
+ resolution: {integrity: sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==}
+ engines: {node: '>=0.12'}
+
env-ci@11.2.0:
resolution: {integrity: sha512-D5kWfzkmaOQDioPmiviWAVtKmpPT4/iJmMVQxWxMPJTFyTkdc5JQUfc5iXEeWxcOdsYTKSAiA/Age4NUOqKsRA==}
engines: {node: ^18.17 || >=20.6.1}
@@ -2461,6 +2539,10 @@ packages:
resolution: {integrity: sha512-Rw/B2DNQaPBICNXEm8balFz9a6WpZrkCGpcWFpy7nCj+NyhSdqXipmfvtmWt9xGfp0wZnBxB+iVpLmQMYt47Tw==}
engines: {node: ^18.17.0 || >=20.5.0}
+ html-encoding-sniffer@4.0.0:
+ resolution: {integrity: sha512-Y22oTqIU4uuPgEemfz7NDJz6OeKf12Lsu+QC+s3BVpda64lTiMYCyGwg5ki4vFxkMwQdeZDl2adZoqUgdFuTgQ==}
+ engines: {node: '>=18'}
+
html-escaper@2.0.2:
resolution: {integrity: sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==}
@@ -2489,6 +2571,10 @@ packages:
engines: {node: '>=18'}
hasBin: true
+ iconv-lite@0.6.3:
+ resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
+ engines: {node: '>=0.10.0'}
+
ignore@5.3.2:
resolution: {integrity: sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==}
engines: {node: '>= 4'}
@@ -2581,6 +2667,9 @@ packages:
resolution: {integrity: sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==}
engines: {node: '>=12'}
+ is-potential-custom-element-name@1.0.1:
+ resolution: {integrity: sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ==}
+
is-stream@2.0.1:
resolution: {integrity: sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==}
engines: {node: '>=8'}
@@ -2603,6 +2692,10 @@ packages:
isexe@2.0.0:
resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
+ isomorphic-dompurify@2.33.0:
+ resolution: {integrity: sha512-pXGR3rAHAXb5Bvr56pc5aV0Lh8laubLo7/60F+soOzDFmwks6MtgDhL7p46VoxLnwgIsjgmVhQpUt4mUlL/XEw==}
+ engines: {node: '>=20.19.5'}
+
issue-parser@7.0.1:
resolution: {integrity: sha512-3YZcUUR2Wt1WsapF+S/WiA2WmlW0cWAoPccMqne7AxEBhCdFeTPjfv/Axb8V2gyCgY3nRw+ksZ3xSUX+R47iAg==}
engines: {node: ^18.17 || >=20.6.1}
@@ -2793,6 +2886,15 @@ packages:
resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==}
hasBin: true
+ jsdom@27.2.0:
+ resolution: {integrity: sha512-454TI39PeRDW1LgpyLPyURtB4Zx1tklSr6+OFOipsxGUH1WMTvk6C65JQdrj455+DP2uJ1+veBEHTGFKWVLFoA==}
+ engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0}
+ peerDependencies:
+ canvas: ^3.0.0
+ peerDependenciesMeta:
+ canvas:
+ optional: true
+
jsesc@3.1.0:
resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
engines: {node: '>=6'}
@@ -2890,6 +2992,10 @@ packages:
lru-cache@10.4.3:
resolution: {integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==}
+ lru-cache@11.2.2:
+ resolution: {integrity: sha512-F9ODfyqML2coTIsQpSkRHnLSZMtkU8Q+mSfcaIyKwy58u+8k5nvAYeiNhsyMARvzNcXJ9QfWVrcPsC9e9rAxtg==}
+ engines: {node: 20 || >=22}
+
lru-cache@5.1.1:
resolution: {integrity: sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==}
@@ -2914,6 +3020,9 @@ packages:
engines: {node: '>= 18'}
hasBin: true
+ mdn-data@2.12.2:
+ resolution: {integrity: sha512-IEn+pegP1aManZuckezWCO+XZQDplx1366JoVhTpMpBB1sPey/SbveZQUosKiKiGYjg1wH4pMlNgXbCiYgihQA==}
+
meow@13.2.0:
resolution: {integrity: sha512-pxQJQzB6djGPXh08dacEloMFopsOqGVRKFPYvPOt9XDZ1HasbgDZA74CJGreSU4G3Ak7EFJGoiH2auq+yXISgA==}
engines: {node: '>=18'}
@@ -2965,6 +3074,11 @@ packages:
mz@2.7.0:
resolution: {integrity: sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==}
+ nanoid@5.1.6:
+ resolution: {integrity: sha512-c7+7RQ+dMB5dPwwCp4ee1/iV/q2P6aK1mTZcfr1BTuVlyW9hJYiMPybJCcnBlQtuSmTIWNeazm/zqNoZSSElBg==}
+ engines: {node: ^18 || >=20}
+ hasBin: true
+
napi-postinstall@0.3.4:
resolution: {integrity: sha512-PHI5f1O0EP5xJ9gQmFGMS6IZcrVvTjpXjz7Na41gTE7eE2hK11lg04CECCYEEjdc17EV4DO+fkGEtt7TpTaTiQ==}
engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
@@ -3206,6 +3320,9 @@ packages:
parse5@6.0.1:
resolution: {integrity: sha512-Ofn/CTFzRGTTxwpNEs9PP93gXShHcTq255nzRYSKe8AkVpZY7e1fpmTfOyoIvjP5HG7Z2ZM7VS9PPhQGW2pOpw==}
+ parse5@8.0.0:
+ resolution: {integrity: sha512-9m4m5GSgXjL4AjumKzq1Fgfp3Z8rsvjRNbnkVwfu2ImRqE5D0LnY2QfDen18FSY9C573YU5XxSapdHZTZ2WolA==}
+
path-exists@3.0.0:
resolution: {integrity: sha512-bpC7GYwiDYQ4wYLe+FA8lhRjhQCMcQGuSgGGqDkg/QerRWw9CmGRT0iSOVRSZJ29NMLZgIzqaljJ63oaL4NIJQ==}
engines: {node: '>=4'}
@@ -3371,6 +3488,10 @@ packages:
resolution: {integrity: sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==}
engines: {node: '>=0.10.0'}
+ require-from-string@2.0.2:
+ resolution: {integrity: sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==}
+ engines: {node: '>=0.10.0'}
+
require-in-the-middle@8.0.1:
resolution: {integrity: sha512-QT7FVMXfWOYFbeRBF6nu+I6tr2Tf3u0q8RIEjNob/heKY/nh7drD/k7eeMFmSQgnTtCzLDcCu/XEnpW2wk4xCQ==}
engines: {node: '>=9.3.0 || >=8.10.0 <9.0.0'}
@@ -3405,6 +3526,13 @@ packages:
safe-buffer@5.1.2:
resolution: {integrity: sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==}
+ safer-buffer@2.1.2:
+ resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
+
+ saxes@6.0.0:
+ resolution: {integrity: sha512-xAg7SOnEhrm5zI3puOOKyy1OMcMlIJZYNJY7xLBwSze0UjhPLnWfj2GF2EpT0jmzaJKIWKHLsaSSajf35bcYnA==}
+ engines: {node: '>=v12.22.7'}
+
semantic-release@24.2.9:
resolution: {integrity: sha512-phCkJ6pjDi9ANdhuF5ElS10GGdAKY6R1Pvt9lT3SFhOwM4T7QZE7MLpBDbNruUx/Q3gFD92/UOFringGipRqZA==}
engines: {node: '>=20.8.1'}
@@ -3464,6 +3592,10 @@ packages:
resolution: {integrity: sha512-ZA6oR3T/pEyuqwMgAKT0/hAv8oAXckzbkmR0UkUosQ+Mc4RxGoJkRmwHgHufaenlyAgE1Mxgpdcrf75y6XcnDg==}
engines: {node: '>=14.16'}
+ source-map-js@1.2.1:
+ resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
+ engines: {node: '>=0.10.0'}
+
source-map-support@0.5.13:
resolution: {integrity: sha512-SHSKFHadjVA5oR4PPqhtAVdcBWwRYVd6g6cAXnIbRiIwc2EhPrTuKUBdSLvlEKyIP3GCf89fltvcZiP9MMFA1w==}
@@ -3581,6 +3713,9 @@ packages:
peerDependencies:
react: ^16.11.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+ symbol-tree@3.2.4:
+ resolution: {integrity: sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==}
+
synckit@0.11.11:
resolution: {integrity: sha512-MeQTA1r0litLUf0Rp/iisCaL8761lKAZHaimlbGK4j0HysC4PLfqygQj9srcs0m2RdtDYnF8UuYyKpbjHYp7Jw==}
engines: {node: ^14.18.0 || >=16.0.0}
@@ -3614,6 +3749,13 @@ packages:
resolution: {integrity: sha512-75voc/9G4rDIJleOo4jPvN4/YC4GRZrY8yy1uU4lwrB3XEQbWve8zXoO5No4eFrGcTAMYyoY67p8jRQdtA1HbA==}
engines: {node: '>=12'}
+ tldts-core@7.0.18:
+ resolution: {integrity: sha512-jqJC13oP4FFAahv4JT/0WTDrCF9Okv7lpKtOZUGPLiAnNbACcSg8Y8T+Z9xthOmRBqi/Sob4yi0TE0miRCvF7Q==}
+
+ tldts@7.0.18:
+ resolution: {integrity: sha512-lCcgTAgMxQ1JKOWrVGo6E69Ukbnx4Gc1wiYLRf6J5NN4HRYJtCby1rPF8rkQ4a6qqoFBK5dvjJ1zJ0F7VfDSvw==}
+ hasBin: true
+
tmpl@1.0.5:
resolution: {integrity: sha512-3f0uOEAQwIqGuWW2MVzYg8fV/QNnc/IpuJNG837rLuczAaLVHslWHZQj4IGiEl5Hs3kkbhwL9Ab7Hrsmuj+Smw==}
@@ -3621,9 +3763,17 @@ packages:
resolution: {integrity: sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==}
engines: {node: '>=8.0'}
+ tough-cookie@6.0.0:
+ resolution: {integrity: sha512-kXuRi1mtaKMrsLUxz3sQYvVl37B0Ns6MzfrtV5DvJceE9bPyspOqk9xxv7XbZWcfLWbFmm997vl83qUWVJA64w==}
+ engines: {node: '>=16'}
+
tr46@0.0.3:
resolution: {integrity: sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==}
+ tr46@6.0.0:
+ resolution: {integrity: sha512-bLVMLPtstlZ4iMQHpFHTR7GAGj2jxi8Dg0s2h2MafAE4uSWF98FC/3MomU51iQAMf8/qDUbKWf5GxuvvVcXEhw==}
+ engines: {node: '>=20'}
+
traverse@0.6.8:
resolution: {integrity: sha512-aXJDbk6SnumuaZSANd21XAo15ucCDE38H4fkqiGsc3MhCK+wOlZvLP9cB/TvpHT0mOyWgC4Z8EwRlzqYSUzdsA==}
engines: {node: '>= 0.4'}
@@ -3771,12 +3921,32 @@ packages:
validate-npm-package-license@3.0.4:
resolution: {integrity: sha512-DpKm2Ui/xN7/HQKCtpZxoRWBhZ9Z0kqtygG8XCgNQ8ZlDnxuQmWhj566j8fN4Cu3/JmbhsDo7fcAJq4s9h27Ew==}
+ w3c-xmlserializer@5.0.0:
+ resolution: {integrity: sha512-o8qghlI8NZHU1lLPrpi2+Uq7abh4GGPpYANlalzWxyWteJOCsr/P+oPBA49TOLu5FTZO4d3F9MnWJfiMo4BkmA==}
+ engines: {node: '>=18'}
+
walker@1.0.8:
resolution: {integrity: sha512-ts/8E8l5b7kY0vlWLewOkDXMmPdLcVV4GmOQLyxuSswIJsweeFZtAsMF7k1Nszz+TYBQrlYRmzOnr398y1JemQ==}
webidl-conversions@3.0.1:
resolution: {integrity: sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==}
+ webidl-conversions@8.0.0:
+ resolution: {integrity: sha512-n4W4YFyz5JzOfQeA8oN7dUYpR+MBP3PIUsn2jLjWXwK5ASUzt0Jc/A5sAUZoCYFJRGF0FBKJ+1JjN43rNdsQzA==}
+ engines: {node: '>=20'}
+
+ whatwg-encoding@3.1.1:
+ resolution: {integrity: sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==}
+ engines: {node: '>=18'}
+
+ whatwg-mimetype@4.0.0:
+ resolution: {integrity: sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==}
+ engines: {node: '>=18'}
+
+ whatwg-url@15.1.0:
+ resolution: {integrity: sha512-2ytDk0kiEj/yu90JOAp44PVPUkO9+jVhyf+SybKlRHSDlvOOZhdPIrr7xTH64l4WixO2cP+wQIcgujkGBPPz6g==}
+ engines: {node: '>=20'}
+
whatwg-url@5.0.0:
resolution: {integrity: sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==}
@@ -3819,6 +3989,13 @@ packages:
utf-8-validate:
optional: true
+ xml-name-validator@5.0.0:
+ resolution: {integrity: sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg==}
+ engines: {node: '>=18'}
+
+ xmlchars@2.2.0:
+ resolution: {integrity: sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==}
+
xtend@4.0.2:
resolution: {integrity: sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==}
engines: {node: '>=0.4'}
@@ -3864,6 +4041,26 @@ packages:
snapshots:
+ '@acemir/cssom@0.9.24': {}
+
+ '@asamuzakjp/css-color@4.1.0':
+ dependencies:
+ '@csstools/css-calc': 2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
+ '@csstools/css-color-parser': 3.1.0(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
+ '@csstools/css-parser-algorithms': 3.0.5(@csstools/css-tokenizer@3.0.4)
+ '@csstools/css-tokenizer': 3.0.4
+ lru-cache: 11.2.2
+
+ '@asamuzakjp/dom-selector@6.7.4':
+ dependencies:
+ '@asamuzakjp/nwsapi': 2.3.9
+ bidi-js: 1.0.3
+ css-tree: 3.1.0
+ is-potential-custom-element-name: 1.0.1
+ lru-cache: 11.2.2
+
+ '@asamuzakjp/nwsapi@2.3.9': {}
+
'@asteasolutions/zod-to-openapi@8.1.0(zod@4.1.12)':
dependencies:
openapi3-ts: 4.5.0
@@ -4222,6 +4419,28 @@ snapshots:
'@colors/colors@1.5.0':
optional: true
+ '@csstools/color-helpers@5.1.0': {}
+
+ '@csstools/css-calc@2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)':
+ dependencies:
+ '@csstools/css-parser-algorithms': 3.0.5(@csstools/css-tokenizer@3.0.4)
+ '@csstools/css-tokenizer': 3.0.4
+
+ '@csstools/css-color-parser@3.1.0(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)':
+ dependencies:
+ '@csstools/color-helpers': 5.1.0
+ '@csstools/css-calc': 2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
+ '@csstools/css-parser-algorithms': 3.0.5(@csstools/css-tokenizer@3.0.4)
+ '@csstools/css-tokenizer': 3.0.4
+
+ '@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4)':
+ dependencies:
+ '@csstools/css-tokenizer': 3.0.4
+
+ '@csstools/css-syntax-patches-for-csstree@1.0.17': {}
+
+ '@csstools/css-tokenizer@3.0.4': {}
+
'@drizzle-team/brocli@0.10.2': {}
'@emnapi/core@1.7.1':
@@ -5640,6 +5859,9 @@ snapshots:
dependencies:
'@types/node': 24.3.1
+ '@types/trusted-types@2.0.7':
+ optional: true
+
'@types/ws@8.18.1':
dependencies:
'@types/node': 24.3.1
@@ -5949,6 +6171,10 @@ snapshots:
before-after-hook@4.0.0: {}
+ bidi-js@1.0.3:
+ dependencies:
+ require-from-string: 2.0.2
+
bignumber.js@9.3.1: {}
bottleneck@2.19.5: {}
@@ -6119,8 +6345,24 @@ snapshots:
dependencies:
type-fest: 1.4.0
+ css-tree@3.1.0:
+ dependencies:
+ mdn-data: 2.12.2
+ source-map-js: 1.2.1
+
+ cssstyle@5.3.3:
+ dependencies:
+ '@asamuzakjp/css-color': 4.1.0
+ '@csstools/css-syntax-patches-for-csstree': 1.0.17
+ css-tree: 3.1.0
+
csstype@3.1.3: {}
+ data-urls@6.0.0:
+ dependencies:
+ whatwg-mimetype: 4.0.0
+ whatwg-url: 15.1.0
+
debug@4.4.1:
dependencies:
ms: 2.1.3
@@ -6129,6 +6371,8 @@ snapshots:
dependencies:
ms: 2.1.3
+ decimal.js@10.6.0: {}
+
dedent@1.7.0: {}
deep-extend@0.6.0: {}
@@ -6149,6 +6393,10 @@ snapshots:
dependencies:
esutils: 2.0.3
+ dompurify@3.3.0:
+ optionalDependencies:
+ '@types/trusted-types': 2.0.7
+
dot-prop@5.3.0:
dependencies:
is-obj: 2.0.0
@@ -6193,6 +6441,8 @@ snapshots:
emojilib@2.4.0: {}
+ entities@6.0.1: {}
+
env-ci@11.2.0:
dependencies:
execa: 8.0.1
@@ -6622,6 +6872,10 @@ snapshots:
dependencies:
lru-cache: 10.4.3
+ html-encoding-sniffer@4.0.0:
+ dependencies:
+ whatwg-encoding: 3.1.1
+
html-escaper@2.0.2: {}
http-proxy-agent@7.0.2:
@@ -6646,6 +6900,10 @@ snapshots:
husky@9.1.7: {}
+ iconv-lite@0.6.3:
+ dependencies:
+ safer-buffer: 2.1.2
+
ignore@5.3.2: {}
ignore@7.0.5: {}
@@ -6718,6 +6976,8 @@ snapshots:
is-plain-obj@4.1.0: {}
+ is-potential-custom-element-name@1.0.1: {}
+
is-stream@2.0.1: {}
is-stream@3.0.0: {}
@@ -6730,6 +6990,16 @@ snapshots:
isexe@2.0.0: {}
+ isomorphic-dompurify@2.33.0:
+ dependencies:
+ dompurify: 3.3.0
+ jsdom: 27.2.0
+ transitivePeerDependencies:
+ - bufferutil
+ - canvas
+ - supports-color
+ - utf-8-validate
+
issue-parser@7.0.1:
dependencies:
lodash.capitalize: 4.2.1
@@ -7138,6 +7408,33 @@ snapshots:
dependencies:
argparse: 2.0.1
+ jsdom@27.2.0:
+ dependencies:
+ '@acemir/cssom': 0.9.24
+ '@asamuzakjp/dom-selector': 6.7.4
+ cssstyle: 5.3.3
+ data-urls: 6.0.0
+ decimal.js: 10.6.0
+ html-encoding-sniffer: 4.0.0
+ http-proxy-agent: 7.0.2
+ https-proxy-agent: 7.0.6
+ is-potential-custom-element-name: 1.0.1
+ parse5: 8.0.0
+ saxes: 6.0.0
+ symbol-tree: 3.2.4
+ tough-cookie: 6.0.0
+ w3c-xmlserializer: 5.0.0
+ webidl-conversions: 8.0.0
+ whatwg-encoding: 3.1.1
+ whatwg-mimetype: 4.0.0
+ whatwg-url: 15.1.0
+ ws: 8.18.3
+ xml-name-validator: 5.0.0
+ transitivePeerDependencies:
+ - bufferutil
+ - supports-color
+ - utf-8-validate
+
jsesc@3.1.0: {}
json-bigint@1.0.0:
@@ -7219,6 +7516,8 @@ snapshots:
lru-cache@10.4.3: {}
+ lru-cache@11.2.2: {}
+
lru-cache@5.1.1:
dependencies:
yallist: 3.1.1
@@ -7246,6 +7545,8 @@ snapshots:
marked@15.0.12: {}
+ mdn-data@2.12.2: {}
+
meow@13.2.0: {}
merge-stream@2.0.0: {}
@@ -7285,6 +7586,8 @@ snapshots:
object-assign: 4.1.1
thenify-all: 1.6.0
+ nanoid@5.1.6: {}
+
napi-postinstall@0.3.4: {}
natural-compare@1.4.0: {}
@@ -7436,6 +7739,10 @@ snapshots:
parse5@6.0.1: {}
+ parse5@8.0.0:
+ dependencies:
+ entities: 6.0.1
+
path-exists@3.0.0: {}
path-exists@4.0.0: {}
@@ -7588,6 +7895,8 @@ snapshots:
require-directory@2.1.1: {}
+ require-from-string@2.0.2: {}
+
require-in-the-middle@8.0.1:
dependencies:
debug: 4.4.1
@@ -7617,6 +7926,12 @@ snapshots:
safe-buffer@5.1.2: {}
+ safer-buffer@2.1.2: {}
+
+ saxes@6.0.0:
+ dependencies:
+ xmlchars: 2.2.0
+
semantic-release@24.2.9(typescript@5.9.2):
dependencies:
'@semantic-release/commit-analyzer': 13.0.1(semantic-release@24.2.9(typescript@5.9.2))
@@ -7688,6 +8003,8 @@ snapshots:
slash@5.1.0: {}
+ source-map-js@1.2.1: {}
+
source-map-support@0.5.13:
dependencies:
buffer-from: 1.1.2
@@ -7807,6 +8124,8 @@ snapshots:
react: 19.1.1
use-sync-external-store: 1.5.0(react@19.1.1)
+ symbol-tree@3.2.4: {}
+
synckit@0.11.11:
dependencies:
'@pkgr/core': 0.2.9
@@ -7845,14 +8164,28 @@ snapshots:
dependencies:
convert-hrtime: 5.0.0
+ tldts-core@7.0.18: {}
+
+ tldts@7.0.18:
+ dependencies:
+ tldts-core: 7.0.18
+
tmpl@1.0.5: {}
to-regex-range@5.0.1:
dependencies:
is-number: 7.0.0
+ tough-cookie@6.0.0:
+ dependencies:
+ tldts: 7.0.18
+
tr46@0.0.3: {}
+ tr46@6.0.0:
+ dependencies:
+ punycode: 2.3.1
+
traverse@0.6.8: {}
ts-api-utils@2.1.0(typescript@5.9.2):
@@ -7983,12 +8316,29 @@ snapshots:
spdx-correct: 3.2.0
spdx-expression-parse: 3.0.1
+ w3c-xmlserializer@5.0.0:
+ dependencies:
+ xml-name-validator: 5.0.0
+
walker@1.0.8:
dependencies:
makeerror: 1.0.12
webidl-conversions@3.0.1: {}
+ webidl-conversions@8.0.0: {}
+
+ whatwg-encoding@3.1.1:
+ dependencies:
+ iconv-lite: 0.6.3
+
+ whatwg-mimetype@4.0.0: {}
+
+ whatwg-url@15.1.0:
+ dependencies:
+ tr46: 6.0.0
+ webidl-conversions: 8.0.0
+
whatwg-url@5.0.0:
dependencies:
tr46: 0.0.3
@@ -8023,6 +8373,10 @@ snapshots:
ws@8.18.3: {}
+ xml-name-validator@5.0.0: {}
+
+ xmlchars@2.2.0: {}
+
xtend@4.0.2: {}
y18n@5.0.8: {}
diff --git a/src/db/schema.ts b/src/db/schema.ts
index 89e87bd..fb24d06 100644
--- a/src/db/schema.ts
+++ b/src/db/schema.ts
@@ -153,6 +153,49 @@ export const fileAttachmentsRelations = relations(fileAttachments, ({ one }) =>
}),
}));
+export const publicNotes = pgTable(
+ "public_notes",
+ {
+ id: uuid("id").primaryKey().defaultRandom(),
+ slug: text("slug").unique().notNull(), // URL-friendly identifier (e.g., "abc123xyz")
+ noteId: uuid("note_id")
+ .references(() => notes.id, { onDelete: "cascade" })
+ .notNull(),
+ userId: text("user_id")
+ .references(() => users.id, { onDelete: "cascade" })
+ .notNull(),
+ title: text("title").notNull(), // Plaintext title (NOT encrypted)
+ content: text("content").notNull(), // Plaintext HTML content (NOT encrypted)
+ type: text("type", { enum: ["note", "diagram", "code"] })
+ .default("note")
+ .notNull(),
+ authorName: text("author_name"), // Optional display name
+ publishedAt: timestamp("published_at", { withTimezone: true }).defaultNow().notNull(),
+ updatedAt: timestamp("updated_at", { withTimezone: true }).defaultNow().notNull(),
+ },
+ (table) => ({
+ slugIdx: index("idx_public_notes_slug").on(table.slug),
+ noteIdIdx: index("idx_public_notes_note_id").on(table.noteId),
+ userIdIdx: index("idx_public_notes_user_id").on(table.userId),
+ })
+);
+
+/**
+ * Public note relations - defines relationship between public notes, notes, and users
+ * Used by Drizzle's relational query API (db.query.publicNotes.*)
+ * @important Do not remove - required for db.query.* to work properly
+ */
+export const publicNotesRelations = relations(publicNotes, ({ one }) => ({
+ note: one(notes, {
+ fields: [publicNotes.noteId],
+ references: [notes.id],
+ }),
+ user: one(users, {
+ fields: [publicNotes.userId],
+ references: [users.id],
+ }),
+}));
+
export type User = typeof users.$inferSelect;
export type UserInsert = typeof users.$inferInsert;
export type Note = typeof notes.$inferSelect;
@@ -161,3 +204,5 @@ export type Folder = typeof folders.$inferSelect; // Now includes sortOrder: num
export type FolderInsert = typeof folders.$inferInsert;
export type FileAttachment = typeof fileAttachments.$inferSelect;
export type FileAttachmentInsert = typeof fileAttachments.$inferInsert;
+export type PublicNote = typeof publicNotes.$inferSelect;
+export type PublicNoteInsert = typeof publicNotes.$inferInsert;
diff --git a/src/lib/openapi-schemas.ts b/src/lib/openapi-schemas.ts
index d8df9de..68306ee 100644
--- a/src/lib/openapi-schemas.ts
+++ b/src/lib/openapi-schemas.ts
@@ -346,6 +346,22 @@ export const noteSchema = z
.datetime()
.openapi({ example: "2025-01-01T00:00:00.000Z", description: "Updated date" }),
folder: folderSchema.nullable().optional().openapi({ description: "Associated folder" }),
+ // Publish status fields (from LEFT JOIN with public_notes)
+ isPublished: z
+ .boolean()
+ .openapi({ example: false, description: "Whether note has a public version" }),
+ publicSlug: z
+ .string()
+ .nullable()
+ .openapi({ example: "a1b2c3d4e5", description: "Public note slug (null if not published)" }),
+ publishedAt: z.string().datetime().nullable().openapi({
+ example: "2025-01-01T00:00:00.000Z",
+ description: "When note was published (null if not published)",
+ }),
+ publicUpdatedAt: z.string().datetime().nullable().openapi({
+ example: "2025-01-01T00:00:00.000Z",
+ description: "When public note was last updated (null if not published)",
+ }),
})
.openapi("Note");
@@ -758,3 +774,147 @@ export const tokenParamSchema = z.object({
description: "Submission token",
}),
});
+
+// Public notes schemas
+export const publicNoteSchema = z
+ .object({
+ id: z
+ .string()
+ .uuid()
+ .openapi({ example: "123e4567-e89b-12d3-a456-426614174000", description: "Public note ID" }),
+ slug: z.string().openapi({ example: "a1b2c3d4e5", description: "URL-friendly slug" }),
+ noteId: z.string().uuid().openapi({
+ example: "123e4567-e89b-12d3-a456-426614174001",
+ description: "Original note ID",
+ }),
+ userId: z.string().openapi({ example: "user_2abc123", description: "User ID" }),
+ title: z.string().openapi({ example: "My Public Note", description: "Plaintext note title" }),
+ content: z
+ .string()
+ .openapi({ example: "Note content...
", description: "Plaintext HTML content" }),
+ type: z
+ .enum(["note", "diagram", "code"])
+ .openapi({ example: "note", description: "Note type" }),
+ authorName: z
+ .string()
+ .nullable()
+ .openapi({ example: "John Doe", description: "Optional author display name" }),
+ publishedAt: z
+ .string()
+ .datetime()
+ .openapi({ example: "2025-01-01T00:00:00.000Z", description: "Published date" }),
+ updatedAt: z
+ .string()
+ .datetime()
+ .openapi({ example: "2025-01-01T00:00:00.000Z", description: "Last updated date" }),
+ })
+ .openapi("PublicNote");
+
+// Public-facing schema (excludes sensitive fields: id, noteId, userId)
+export const publicNoteViewSchema = z
+ .object({
+ slug: z.string().openapi({ example: "a1b2c3d4e5", description: "URL-friendly slug" }),
+ title: z.string().openapi({ example: "My Public Note", description: "Plaintext note title" }),
+ content: z
+ .string()
+ .openapi({ example: "Note content...
", description: "Plaintext HTML content" }),
+ type: z
+ .enum(["note", "diagram", "code"])
+ .openapi({ example: "note", description: "Note type" }),
+ authorName: z
+ .string()
+ .nullable()
+ .openapi({ example: "John Doe", description: "Optional author display name" }),
+ publishedAt: z
+ .string()
+ .datetime()
+ .openapi({ example: "2025-01-01T00:00:00.000Z", description: "Published date" }),
+ updatedAt: z
+ .string()
+ .datetime()
+ .openapi({ example: "2025-01-01T00:00:00.000Z", description: "Last updated date" }),
+ })
+ .openapi("PublicNoteView");
+
+export const publishNoteRequestSchema = z
+ .object({
+ noteId: z.string().uuid().openapi({
+ example: "123e4567-e89b-12d3-a456-426614174001",
+ description: "Note ID to publish",
+ }),
+ title: z
+ .string()
+ .min(1)
+ .max(500)
+ .openapi({ example: "My Public Note", description: "Plaintext title (decrypted by client)" }),
+ content: z
+ .string()
+ .max(5 * 1024 * 1024) // 5MB max
+ .openapi({ example: "Note content...
", description: "Plaintext HTML content" }),
+ type: z
+ .enum(["note", "diagram", "code"])
+ .optional()
+ .openapi({ example: "note", description: "Note type (defaults to 'note')" }),
+ authorName: z
+ .string()
+ .max(255)
+ .optional()
+ .openapi({ example: "John Doe", description: "Optional author display name" }),
+ })
+ .openapi("PublishNoteRequest");
+
+export const updatePublicNoteRequestSchema = z
+ .object({
+ title: z
+ .string()
+ .min(1)
+ .max(500)
+ .optional()
+ .openapi({ example: "Updated Title", description: "Updated plaintext title" }),
+ content: z
+ .string()
+ .max(5 * 1024 * 1024) // 5MB max
+ .optional()
+ .openapi({
+ example: "Updated content...
",
+ description: "Updated plaintext HTML content",
+ }),
+ authorName: z
+ .string()
+ .max(255)
+ .nullable()
+ .optional()
+ .openapi({ example: "Jane Doe", description: "Updated author display name" }),
+ })
+ .openapi("UpdatePublicNoteRequest");
+
+export const publicNoteSlugParamSchema = z.object({
+ slug: z
+ .string()
+ .min(1)
+ .openapi({
+ param: { name: "slug", in: "path" },
+ example: "a1b2c3d4e5",
+ description: "Public note slug",
+ }),
+});
+
+export const publicNoteNoteIdParamSchema = z.object({
+ noteId: z
+ .string()
+ .uuid()
+ .openapi({
+ param: { name: "noteId", in: "path" },
+ example: "123e4567-e89b-12d3-a456-426614174001",
+ description: "Original note ID",
+ }),
+});
+
+export const unpublishNoteResponseSchema = z
+ .object({
+ message: z.string().openapi({
+ example: "Note unpublished successfully",
+ description: "Success message",
+ }),
+ })
+ .openapi("UnpublishNoteResponse");
diff --git a/src/routes/notes/crud.ts b/src/routes/notes/crud.ts
index 0f0ae66..1006871 100644
--- a/src/routes/notes/crud.ts
+++ b/src/routes/notes/crud.ts
@@ -1,8 +1,8 @@
import { OpenAPIHono, createRoute, RouteHandler } from "@hono/zod-openapi";
import { HTTPException } from "hono/http-exception";
-import { db, notes } from "../../db";
+import { db, notes, publicNotes } from "../../db";
import { createNoteSchema, updateNoteSchema } from "../../lib/validation";
-import { eq, and, desc, or, ilike, count, SQL } from "drizzle-orm";
+import { eq, and, desc, or, ilike, count, SQL, inArray } from "drizzle-orm";
import { checkNoteLimits } from "../../middleware/usage";
import {
noteSchema,
@@ -128,11 +128,46 @@ const listNotesHandler: RouteHandler = async (c) => {
});
logger.databaseQuery("select", "notes", Date.now() - selectStart, userId);
- // Add attachment counts to notes
- const notesWithAttachmentCount = userNotes.map((note) => ({
- ...note,
- attachmentCount: note.attachments.length,
- }));
+ // Fetch publish status for all notes in one query
+ const noteIds = userNotes.map((note) => note.id);
+ let publishStatusMap = new Map<
+ string,
+ { slug: string; publishedAt: Date; updatedAt: Date }
+ >();
+
+ if (noteIds.length > 0) {
+ const publishStart = Date.now();
+ const publishedNotes = await db
+ .select({
+ noteId: publicNotes.noteId,
+ slug: publicNotes.slug,
+ publishedAt: publicNotes.publishedAt,
+ updatedAt: publicNotes.updatedAt,
+ })
+ .from(publicNotes)
+ .where(inArray(publicNotes.noteId, noteIds));
+ logger.databaseQuery("select", "public_notes", Date.now() - publishStart, userId);
+
+ publishStatusMap = new Map(
+ publishedNotes.map((pn) => [
+ pn.noteId,
+ { slug: pn.slug, publishedAt: pn.publishedAt, updatedAt: pn.updatedAt },
+ ])
+ );
+ }
+
+ // Add attachment counts and publish status to notes
+ const notesWithAttachmentCount = userNotes.map((note) => {
+ const publishStatus = publishStatusMap.get(note.id);
+ return {
+ ...note,
+ attachmentCount: note.attachments.length,
+ isPublished: !!publishStatus,
+ publicSlug: publishStatus?.slug ?? null,
+ publishedAt: publishStatus?.publishedAt?.toISOString() ?? null,
+ publicUpdatedAt: publishStatus?.updatedAt?.toISOString() ?? null,
+ };
+ });
return c.json(
{
@@ -225,7 +260,27 @@ crudRouter.openapi(getNoteRoute, async (c) => {
throw new HTTPException(404, { message: "Note not found" });
}
- return c.json(note, 200);
+ // Fetch publish status
+ const publishStart = Date.now();
+ const publishedNote = await db.query.publicNotes.findFirst({
+ where: eq(publicNotes.noteId, noteId),
+ columns: {
+ slug: true,
+ publishedAt: true,
+ updatedAt: true,
+ },
+ });
+ logger.databaseQuery("select", "public_notes", Date.now() - publishStart, userId);
+
+ const noteWithPublishStatus = {
+ ...note,
+ isPublished: !!publishedNote,
+ publicSlug: publishedNote?.slug ?? null,
+ publishedAt: publishedNote?.publishedAt?.toISOString() ?? null,
+ publicUpdatedAt: publishedNote?.updatedAt?.toISOString() ?? null,
+ };
+
+ return c.json(noteWithPublishStatus, 200);
});
// POST /api/notes - Create a new note
diff --git a/src/routes/public-notes/crud.ts b/src/routes/public-notes/crud.ts
new file mode 100644
index 0000000..9d107df
--- /dev/null
+++ b/src/routes/public-notes/crud.ts
@@ -0,0 +1,473 @@
+import { OpenAPIHono, createRoute } from "@hono/zod-openapi";
+import { HTTPException } from "hono/http-exception";
+import { db, publicNotes, notes } from "../../db";
+import {
+ publicNoteSchema,
+ publicNoteViewSchema,
+ publishNoteRequestSchema,
+ updatePublicNoteRequestSchema,
+ publicNoteSlugParamSchema,
+ publicNoteNoteIdParamSchema,
+ unpublishNoteResponseSchema,
+} from "../../lib/openapi-schemas";
+import { eq, and } from "drizzle-orm";
+import { nanoid } from "nanoid";
+import { logger } from "../../lib/logger";
+import DOMPurify from "isomorphic-dompurify";
+
+const crudRouter = new OpenAPIHono();
+
+/**
+ * Generate a unique URL-safe slug for public notes
+ * Uses nanoid for cryptographically secure random generation
+ */
+function generateSlug(): string {
+ return nanoid(10); // e.g., "V1StGXR8_Z"
+}
+
+/**
+ * Sanitize HTML content to prevent XSS attacks
+ * Allows safe HTML tags for rich text content while removing dangerous elements
+ */
+function sanitizeHtml(html: string): string {
+ return DOMPurify.sanitize(html, {
+ // Allow common formatting tags for rich text editors
+ ALLOWED_TAGS: [
+ // Text formatting
+ "p", "br", "span", "div",
+ "strong", "b", "em", "i", "u", "s", "strike",
+ "h1", "h2", "h3", "h4", "h5", "h6",
+ // Lists
+ "ul", "ol", "li",
+ // Links and media
+ "a", "img",
+ // Tables
+ "table", "thead", "tbody", "tr", "th", "td",
+ // Code
+ "pre", "code", "blockquote",
+ // Other
+ "hr", "sub", "sup", "mark",
+ ],
+ ALLOWED_ATTR: [
+ "href", "src", "alt", "title", "class", "id",
+ "target", "rel", "width", "height",
+ "colspan", "rowspan",
+ ],
+ // Only allow safe URL protocols (blocks javascript:, data:, vbscript:, etc.)
+ ALLOWED_URI_REGEXP: /^(?:https?|mailto|tel):/i,
+ // Force all links to open in new tab and prevent reverse tabnabbing
+ ADD_ATTR: ["target", "rel"],
+ // Ensure links have proper security attributes
+ FORBID_TAGS: ["script", "style", "iframe", "form", "input", "textarea", "button"],
+ FORBID_ATTR: ["onerror", "onload", "onclick", "onmouseover", "onfocus", "onblur"],
+ });
+}
+
+/**
+ * Sanitize plain text fields (strip all HTML)
+ */
+function sanitizeText(text: string): string {
+ return DOMPurify.sanitize(text, { ALLOWED_TAGS: [], ALLOWED_ATTR: [] });
+}
+
+// POST /api/public-notes - Publish a note
+const publishNoteRoute = createRoute({
+ method: "post",
+ path: "/",
+ summary: "Publish a note",
+ description:
+ "Creates a public, unencrypted copy of a note. The client must decrypt the note content before sending.",
+ tags: ["Public Notes"],
+ request: {
+ body: {
+ content: {
+ "application/json": {
+ schema: publishNoteRequestSchema,
+ },
+ },
+ },
+ },
+ responses: {
+ 201: {
+ description: "Note published successfully",
+ content: {
+ "application/json": {
+ schema: publicNoteSchema,
+ },
+ },
+ },
+ 401: {
+ description: "Unauthorized - Invalid or missing authentication",
+ },
+ 403: {
+ description: "Forbidden - User doesn't own the note",
+ },
+ 404: {
+ description: "Not Found - Note doesn't exist",
+ },
+ 409: {
+ description: "Conflict - Note is already published",
+ },
+ },
+ security: [{ Bearer: [] }],
+});
+
+crudRouter.openapi(publishNoteRoute, async (c) => {
+ const userId = c.get("userId");
+ const body = c.req.valid("json");
+
+ // 1. Verify user owns the note
+ const selectStart = Date.now();
+ const existingNote = await db.query.notes.findFirst({
+ where: and(eq(notes.id, body.noteId), eq(notes.userId, userId)),
+ });
+ logger.databaseQuery("select", "notes", Date.now() - selectStart, userId);
+
+ if (!existingNote) {
+ // Check if note exists but belongs to someone else
+ const noteExistsStart = Date.now();
+ const noteExists = await db.query.notes.findFirst({
+ where: eq(notes.id, body.noteId),
+ columns: { id: true },
+ });
+ logger.databaseQuery("select", "notes", Date.now() - noteExistsStart, userId);
+
+ if (noteExists) {
+ throw new HTTPException(403, { message: "You don't have permission to publish this note" });
+ }
+ throw new HTTPException(404, { message: "Note not found" });
+ }
+
+ // 2. Check if note is already published
+ const checkPublishedStart = Date.now();
+ const existingPublicNote = await db.query.publicNotes.findFirst({
+ where: eq(publicNotes.noteId, body.noteId),
+ });
+ logger.databaseQuery("select", "public_notes", Date.now() - checkPublishedStart, userId);
+
+ if (existingPublicNote) {
+ throw new HTTPException(409, { message: "Note is already published" });
+ }
+
+ // 3. Generate unique slug
+ let slug = generateSlug();
+ let slugExists = true;
+ let attempts = 0;
+ const maxAttempts = 5;
+
+ while (slugExists && attempts < maxAttempts) {
+ const checkSlugStart = Date.now();
+ const existing = await db.query.publicNotes.findFirst({
+ where: eq(publicNotes.slug, slug),
+ columns: { id: true },
+ });
+ logger.databaseQuery("select", "public_notes", Date.now() - checkSlugStart, userId);
+
+ if (!existing) {
+ slugExists = false;
+ } else {
+ slug = generateSlug();
+ attempts++;
+ }
+ }
+
+ if (slugExists) {
+ throw new HTTPException(500, { message: "Failed to generate unique slug" });
+ }
+
+ // 4. Sanitize content to prevent XSS attacks
+ const sanitizedTitle = sanitizeText(body.title);
+ const sanitizedContent = sanitizeHtml(body.content);
+ const sanitizedAuthorName = body.authorName ? sanitizeText(body.authorName) : null;
+
+ // 5. Insert into public_notes table
+ const insertStart = Date.now();
+ const [newPublicNote] = await db
+ .insert(publicNotes)
+ .values({
+ slug,
+ noteId: body.noteId,
+ userId,
+ title: sanitizedTitle,
+ content: sanitizedContent,
+ type: body.type || "note",
+ authorName: sanitizedAuthorName,
+ })
+ .returning();
+ logger.databaseQuery("insert", "public_notes", Date.now() - insertStart, userId);
+
+ logger.info("[PUBLIC_NOTES] Note published", {
+ type: "public_note_event",
+ event_type: "note_published",
+ "user.id": userId,
+ publicNoteId: newPublicNote.id,
+ slug: newPublicNote.slug,
+ noteId: body.noteId,
+ });
+
+ return c.json(newPublicNote, 201);
+});
+
+// GET /api/public-notes/:slug - Get public note (NO AUTH REQUIRED)
+const getPublicNoteRoute = createRoute({
+ method: "get",
+ path: "/{slug}",
+ summary: "Get public note",
+ description: "Fetches a public note for viewing. This is a public endpoint - no authentication required. Sensitive fields (id, noteId, userId) are excluded from the response.",
+ tags: ["Public Notes"],
+ request: {
+ params: publicNoteSlugParamSchema,
+ },
+ responses: {
+ 200: {
+ description: "Public note retrieved successfully",
+ content: {
+ "application/json": {
+ schema: publicNoteViewSchema,
+ },
+ },
+ },
+ 404: {
+ description: "Not Found - Public note doesn't exist",
+ },
+ },
+ // No security - public endpoint
+});
+
+crudRouter.openapi(getPublicNoteRoute, async (c) => {
+ const { slug } = c.req.valid("param");
+
+ const selectStart = Date.now();
+ const publicNote = await db.query.publicNotes.findFirst({
+ where: eq(publicNotes.slug, slug),
+ columns: {
+ // Only select public-safe fields (exclude id, noteId, userId)
+ slug: true,
+ title: true,
+ content: true,
+ type: true,
+ authorName: true,
+ publishedAt: true,
+ updatedAt: true,
+ },
+ });
+ logger.databaseQuery("select", "public_notes", Date.now() - selectStart);
+
+ if (!publicNote) {
+ throw new HTTPException(404, { message: "Public note not found" });
+ }
+
+ return c.json(publicNote, 200);
+});
+
+// PUT /api/public-notes/:slug - Update public note
+const updatePublicNoteRoute = createRoute({
+ method: "put",
+ path: "/{slug}",
+ summary: "Update public note",
+ description: "Updates the content of a published note. Called automatically when user saves.",
+ tags: ["Public Notes"],
+ request: {
+ params: publicNoteSlugParamSchema,
+ body: {
+ content: {
+ "application/json": {
+ schema: updatePublicNoteRequestSchema,
+ },
+ },
+ },
+ },
+ responses: {
+ 200: {
+ description: "Public note updated successfully",
+ content: {
+ "application/json": {
+ schema: publicNoteSchema,
+ },
+ },
+ },
+ 401: {
+ description: "Unauthorized - Invalid or missing authentication",
+ },
+ 403: {
+ description: "Forbidden - User doesn't own the public note",
+ },
+ 404: {
+ description: "Not Found - Public note doesn't exist",
+ },
+ },
+ security: [{ Bearer: [] }],
+});
+
+crudRouter.openapi(updatePublicNoteRoute, async (c) => {
+ const userId = c.get("userId");
+ const { slug } = c.req.valid("param");
+ const body = c.req.valid("json");
+
+ // 1. Find public note by slug
+ const selectStart = Date.now();
+ const existingPublicNote = await db.query.publicNotes.findFirst({
+ where: eq(publicNotes.slug, slug),
+ });
+ logger.databaseQuery("select", "public_notes", Date.now() - selectStart, userId);
+
+ if (!existingPublicNote) {
+ throw new HTTPException(404, { message: "Public note not found" });
+ }
+
+ // 2. Verify user owns it
+ if (existingPublicNote.userId !== userId) {
+ throw new HTTPException(403, { message: "You don't have permission to update this public note" });
+ }
+
+ // 3. Sanitize and update fields
+ const updateData: Partial = {
+ updatedAt: new Date(),
+ };
+
+ if (body.title !== undefined) {
+ updateData.title = sanitizeText(body.title);
+ }
+ if (body.content !== undefined) {
+ updateData.content = sanitizeHtml(body.content);
+ }
+ if (body.authorName !== undefined) {
+ updateData.authorName = body.authorName ? sanitizeText(body.authorName) : null;
+ }
+
+ const updateStart = Date.now();
+ const [updatedPublicNote] = await db
+ .update(publicNotes)
+ .set(updateData)
+ .where(eq(publicNotes.id, existingPublicNote.id))
+ .returning();
+ logger.databaseQuery("update", "public_notes", Date.now() - updateStart, userId);
+
+ return c.json(updatedPublicNote, 200);
+});
+
+// DELETE /api/public-notes/:slug - Unpublish note
+const unpublishNoteRoute = createRoute({
+ method: "delete",
+ path: "/{slug}",
+ summary: "Unpublish note",
+ description: "Removes the public version of a note.",
+ tags: ["Public Notes"],
+ request: {
+ params: publicNoteSlugParamSchema,
+ },
+ responses: {
+ 200: {
+ description: "Note unpublished successfully",
+ content: {
+ "application/json": {
+ schema: unpublishNoteResponseSchema,
+ },
+ },
+ },
+ 401: {
+ description: "Unauthorized - Invalid or missing authentication",
+ },
+ 403: {
+ description: "Forbidden - User doesn't own the public note",
+ },
+ 404: {
+ description: "Not Found - Public note doesn't exist",
+ },
+ },
+ security: [{ Bearer: [] }],
+});
+
+crudRouter.openapi(unpublishNoteRoute, async (c) => {
+ const userId = c.get("userId");
+ const { slug } = c.req.valid("param");
+
+ // 1. Find public note by slug
+ const selectStart = Date.now();
+ const existingPublicNote = await db.query.publicNotes.findFirst({
+ where: eq(publicNotes.slug, slug),
+ });
+ logger.databaseQuery("select", "public_notes", Date.now() - selectStart, userId);
+
+ if (!existingPublicNote) {
+ throw new HTTPException(404, { message: "Public note not found" });
+ }
+
+ // 2. Verify user owns it
+ if (existingPublicNote.userId !== userId) {
+ throw new HTTPException(403, { message: "You don't have permission to unpublish this note" });
+ }
+
+ // 3. Delete from public_notes table
+ const deleteStart = Date.now();
+ await db.delete(publicNotes).where(eq(publicNotes.id, existingPublicNote.id));
+ logger.databaseQuery("delete", "public_notes", Date.now() - deleteStart, userId);
+
+ logger.info("[PUBLIC_NOTES] Note unpublished", {
+ type: "public_note_event",
+ event_type: "note_unpublished",
+ "user.id": userId,
+ publicNoteId: existingPublicNote.id,
+ slug,
+ noteId: existingPublicNote.noteId,
+ });
+
+ return c.json({ message: "Note unpublished successfully" }, 200);
+});
+
+// GET /api/public-notes/note/:noteId - Check if note is published
+const checkPublicNoteRoute = createRoute({
+ method: "get",
+ path: "/note/{noteId}",
+ summary: "Check if note is published",
+ description: "Checks if a specific note has been published and returns its public info.",
+ tags: ["Public Notes"],
+ request: {
+ params: publicNoteNoteIdParamSchema,
+ },
+ responses: {
+ 200: {
+ description: "Note is published",
+ content: {
+ "application/json": {
+ schema: publicNoteSchema,
+ },
+ },
+ },
+ 401: {
+ description: "Unauthorized - Invalid or missing authentication",
+ },
+ 403: {
+ description: "Forbidden - User doesn't own the note",
+ },
+ 404: {
+ description: "Not Found - Note is not published",
+ },
+ },
+ security: [{ Bearer: [] }],
+});
+
+crudRouter.openapi(checkPublicNoteRoute, async (c) => {
+ const userId = c.get("userId");
+ const { noteId } = c.req.valid("param");
+
+ // 1. Find public note by note_id
+ const selectStart = Date.now();
+ const publicNote = await db.query.publicNotes.findFirst({
+ where: eq(publicNotes.noteId, noteId),
+ });
+ logger.databaseQuery("select", "public_notes", Date.now() - selectStart, userId);
+
+ if (!publicNote) {
+ throw new HTTPException(404, { message: "Note is not published" });
+ }
+
+ // 2. Verify user owns it
+ if (publicNote.userId !== userId) {
+ throw new HTTPException(403, { message: "You don't have permission to view this public note status" });
+ }
+
+ return c.json(publicNote, 200);
+});
+
+export default crudRouter;
diff --git a/src/server.ts b/src/server.ts
index 56c5b74..a5b9555 100644
--- a/src/server.ts
+++ b/src/server.ts
@@ -23,6 +23,7 @@ import countsRouter from "./routes/notes/counts";
import usersRouter from "./routes/users/crud";
import filesRouter from "./routes/files/crud";
import codeRouter from "./routes/code/crud";
+import publicNotesRouter from "./routes/public-notes/crud";
import { VERSION } from "./version";
import { logger, sanitizeHeaders } from "./lib/logger";
@@ -218,6 +219,7 @@ app.get("/api/openapi.json", (c) => {
const codeDoc = (codeRouter as OpenAPIRouter).getOpenAPIDocument({});
const foldersCrudDoc = (foldersCrudRouter as OpenAPIRouter).getOpenAPIDocument({});
const foldersActionsDoc = (foldersActionsRouter as OpenAPIRouter).getOpenAPIDocument({});
+ const publicNotesDoc = (publicNotesRouter as OpenAPIRouter).getOpenAPIDocument({});
// Merge paths from all routers into usersDoc
if (!usersDoc.paths) {
@@ -296,6 +298,14 @@ app.get("/api/openapi.json", (c) => {
});
}
+ // Merge public-notes paths with /api/public-notes prefix
+ if (publicNotesDoc.paths) {
+ Object.keys(publicNotesDoc.paths).forEach((path) => {
+ const fullPath = path === "" || path === "/" ? "/api/public-notes" : `/api/public-notes${path}`;
+ usersDoc.paths[fullPath] = publicNotesDoc.paths[path];
+ });
+ }
+
// Merge schemas from all routers
if (!usersDoc.components) {
usersDoc.components = {};
@@ -336,6 +346,10 @@ app.get("/api/openapi.json", (c) => {
Object.assign(usersDoc.components.schemas, foldersActionsDoc.components.schemas);
}
+ if (publicNotesDoc.components?.schemas) {
+ Object.assign(usersDoc.components.schemas, publicNotesDoc.components.schemas);
+ }
+
// Manually add securitySchemes to components
usersDoc.components.securitySchemes = {
Bearer: {
@@ -361,6 +375,24 @@ app.get("/websocket/status", (c) => {
});
});
+// Public endpoint for viewing public notes (NO AUTH REQUIRED)
+// Must be registered BEFORE auth middleware
+app.get("/api/public-notes/:slug", async (c) => {
+ const slug = c.req.param("slug");
+ // Skip if slug looks like "note" (to allow /api/public-notes/note/:noteId to use auth)
+ if (slug === "note") {
+ return c.notFound();
+ }
+ // Forward to the router handler
+ const response = await publicNotesRouter.fetch(
+ new Request(`http://localhost/${slug}`, {
+ method: "GET",
+ headers: c.req.raw.headers,
+ })
+ );
+ return response;
+});
+
app.use("*", authMiddleware);
// Code Execution Rate Limiting Configuration - AFTER auth so users are properly identified
@@ -396,6 +428,7 @@ app.route("/api/notes", crudRouter);
app.route("/api/notes", actionsRouter);
app.route("/api/code", codeRouter);
app.route("/api", filesRouter);
+app.route("/api/public-notes", publicNotesRouter);
app.onError((err, c) => {
// Generate unique error ID for tracking