marcandClaude Opus 5
92d525b3ab
The app is meant to run in daily private use now, so this pass was mostly
about the ways it could quietly lose data.
Reliability and security:
- the server no longer invents a JWT_SECRET or ENCRYPTION_KEY when one is
missing; it refuses to start. The old fallback silently made every stored
note unreadable after a restart.
- notes are encrypted with AES-256-GCM (v2:); existing CBC bodies still read.
- login is rate limited and compares against a dummy hash when the user does
not exist, so timing does not reveal who is registered.
- a server response issued before a local save is never adopted. This had
already eaten drawing strokes and note links; sync.hasPendingWrites() now
guards every path that takes a body from the server.
Editor and features:
- TipTap replaces the contenteditable editor: tables, task lists, and links
to other notes and notebooks, with a backlinks bar on the target.
- content format v2 ({v:2,doc}); v1 {html,tasks} bodies migrate on open.
- version history: the state before each write is snapshotted, coalesced
into 5-minute windows, 50 versions or 90 days per note.
- full-text search runs in the client, because the server cannot read
encrypted bodies and a server index would defeat the encryption.
- image attachments are stored by SHA-256 and deduplicated; the client
fetches them authenticated and caches the blob, so they work offline.
- drawings are vector strokes in a fixed 1200x1600 page space and now look
the same on every screen (0.0-0.2% deviation across four widths).
- login is by username; existing email accounts migrate automatically.
Operations:
- data lives on host bind mounts, not Docker volumes, so Proxmox Backup
covers it. Back up .env with it — without ENCRYPTION_KEY the dump is
unreadable.
Structure:
- NoteApp.jsx is gone. App.jsx now holds only where the user is; note data,
search, layout, history and drag each live behind a hook, and the four
panes are stateless.
- the whole data layer is TypeScript, with 81 unit tests concentrated on
the places that have actually broken.
- fixed along the way: the browser back button had a dead press, because
restoring a history entry pushed a duplicate one.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
99 lines
2.5 KiB
React
99 lines
2.5 KiB
React
import { useMemo } from "react";
|
|
|
|
/* ═══════ Shared Components ═══════ */
|
|
export function ConfirmDialog({ title, message, confirmLabel = "Delete", onConfirm, onCancel, dark }) {
|
|
const T = useMemo(
|
|
() => ({
|
|
bg: dark ? "#161b22" : "#fff",
|
|
border: dark ? "#30363d" : "#d0d7de",
|
|
text: dark ? "#e6edf3" : "#1f2328",
|
|
muted: dark ? "#8b949e" : "#656d76",
|
|
danger: dark ? "#f85149" : "#cf222e",
|
|
}),
|
|
[dark]
|
|
);
|
|
return (
|
|
<div
|
|
style={{
|
|
position: "fixed",
|
|
inset: 0,
|
|
background: "rgba(0,0,0,0.5)",
|
|
display: "flex",
|
|
alignItems: "center",
|
|
justifyContent: "center",
|
|
zIndex: 2000,
|
|
backdropFilter: "blur(4px)",
|
|
}}
|
|
onClick={onCancel}
|
|
>
|
|
<div
|
|
style={{
|
|
background: T.bg,
|
|
borderRadius: 16,
|
|
padding: 26,
|
|
width: 380,
|
|
maxWidth: "90vw",
|
|
boxShadow: "0 20px 40px rgba(0,0,0,0.3)",
|
|
border: `1px solid ${T.border}`,
|
|
}}
|
|
onClick={(e) => e.stopPropagation()}
|
|
>
|
|
<div
|
|
style={{
|
|
fontSize: 17,
|
|
fontWeight: 600,
|
|
color: T.text,
|
|
marginBottom: 8,
|
|
fontFamily: "'Newsreader',Georgia,serif",
|
|
}}
|
|
>
|
|
{title}
|
|
</div>
|
|
<div
|
|
style={{
|
|
fontSize: 13,
|
|
color: T.muted,
|
|
lineHeight: 1.6,
|
|
marginBottom: 22,
|
|
fontFamily: "'DM Sans',sans-serif",
|
|
}}
|
|
>
|
|
{message}
|
|
</div>
|
|
<div style={{ display: "flex", gap: 10, justifyContent: "flex-end" }}>
|
|
<button
|
|
onClick={onCancel}
|
|
style={{
|
|
padding: "8px 20px",
|
|
borderRadius: 10,
|
|
border: `1px solid ${T.border}`,
|
|
background: "transparent",
|
|
color: T.text,
|
|
cursor: "pointer",
|
|
fontSize: 13,
|
|
fontWeight: 500,
|
|
}}
|
|
>
|
|
Cancel
|
|
</button>
|
|
<button
|
|
onClick={onConfirm}
|
|
style={{
|
|
padding: "8px 20px",
|
|
borderRadius: 10,
|
|
border: "none",
|
|
background: T.danger,
|
|
color: "#fff",
|
|
cursor: "pointer",
|
|
fontSize: 13,
|
|
fontWeight: 500,
|
|
}}
|
|
>
|
|
{confirmLabel}
|
|
</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
);
|
|
}
|