feat: add reminders page, BMad skills upgrade, MCP server refactor

- Add reminders page with navigation support
- Upgrade BMad builder module to skills-based architecture
- Refactor MCP server: extract tools and auth into separate modules
- Add connections cache, custom AI provider support
- Update prisma schema and generated client
- Various UI/UX improvements and i18n updates
- Add service worker for PWA support

Made-with: Cursor

keep-notes/app/api/notes/[id]/route.ts

@@ -1,20 +1,21 @@
 import { NextRequest, NextResponse } from 'next/server'
 import prisma from '@/lib/prisma'
-
-// Helper to parse JSON fields
-function parseNote(dbNote: any) {
-  return {
-    ...dbNote,
-    checkItems: dbNote.checkItems ? JSON.parse(dbNote.checkItems) : null,
-    labels: dbNote.labels ? JSON.parse(dbNote.labels) : null,
-  }
-}
+import { auth } from '@/auth'
+import { parseNote } from '@/lib/utils'
 
 // GET /api/notes/[id] - Get a single note
 export async function GET(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
 ) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json(
+      { success: false, error: 'Unauthorized' },
+      { status: 401 }
+    )
+  }
+
   try {
     const { id } = await params
     const note = await prisma.note.findUnique({
@@ -28,11 +29,19 @@ export async function GET(
       )
     }
 
+    if (note.userId !== session.user.id) {
+      return NextResponse.json(
+        { success: false, error: 'Forbidden' },
+        { status: 403 }
+      )
+    }
+
     return NextResponse.json({
       success: true,
       data: parseNote(note)
     })
   } catch (error) {
+    console.error('Error fetching note:', error)
     return NextResponse.json(
       { success: false, error: 'Failed to fetch note' },
       { status: 500 }
@@ -45,12 +54,38 @@ export async function PUT(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
 ) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json(
+      { success: false, error: 'Unauthorized' },
+      { status: 401 }
+    )
+  }
+
   try {
     const { id } = await params
+    
+    const existingNote = await prisma.note.findUnique({
+      where: { id }
+    })
+
+    if (!existingNote) {
+      return NextResponse.json(
+        { success: false, error: 'Note not found' },
+        { status: 404 }
+      )
+    }
+
+    if (existingNote.userId !== session.user.id) {
+      return NextResponse.json(
+        { success: false, error: 'Forbidden' },
+        { status: 403 }
+      )
+    }
+
     const body = await request.json()
     const updateData: any = { ...body }
 
-    // Stringify JSON fields if they exist
     if ('checkItems' in body) {
       updateData.checkItems = body.checkItems ? JSON.stringify(body.checkItems) : null
     }
@@ -69,6 +104,7 @@ export async function PUT(
       data: parseNote(note)
     })
   } catch (error) {
+    console.error('Error updating note:', error)
     return NextResponse.json(
       { success: false, error: 'Failed to update note' },
       { status: 500 }
@@ -81,8 +117,35 @@ export async function DELETE(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> }
 ) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json(
+      { success: false, error: 'Unauthorized' },
+      { status: 401 }
+    )
+  }
+
   try {
     const { id } = await params
+    
+    const existingNote = await prisma.note.findUnique({
+      where: { id }
+    })
+
+    if (!existingNote) {
+      return NextResponse.json(
+        { success: false, error: 'Note not found' },
+        { status: 404 }
+      )
+    }
+
+    if (existingNote.userId !== session.user.id) {
+      return NextResponse.json(
+        { success: false, error: 'Forbidden' },
+        { status: 403 }
+      )
+    }
+
     await prisma.note.delete({
       where: { id }
     })
@@ -92,6 +155,7 @@ export async function DELETE(
       message: 'Note deleted successfully'
     })
   } catch (error) {
+    console.error('Error deleting note:', error)
     return NextResponse.json(
       { success: false, error: 'Failed to delete note' },
       { status: 500 }