Add safe database migration workflow and note history infrastructure.

This introduces guarded migrations with automatic backups, fixes note creation after DB reset, and wires snapshot/restore history across notes surfaces.

Momento-main/momento/memento-note/app/api/notes/[id]/history/route.ts

@@ -0,0 +1,51 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { auth } from '@/auth'
+import { getNoteHistory, restoreNoteVersion } from '@/app/actions/notes'
+
+export async function GET(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+  }
+
+  try {
+    const { id } = await params
+    const limitRaw = request.nextUrl.searchParams.get('limit')
+    const limit = limitRaw ? Number.parseInt(limitRaw, 10) : 30
+    const entries = await getNoteHistory(id, Number.isNaN(limit) ? 30 : limit)
+    return NextResponse.json({ success: true, data: entries })
+  } catch (error) {
+    console.error('Error fetching note history:', error)
+    return NextResponse.json({ success: false, error: 'Failed to fetch history' }, { status: 500 })
+  }
+}
+
+export async function POST(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+  }
+
+  try {
+    const { id } = await params
+    const body = await request.json()
+    const historyEntryId = body?.historyEntryId
+
+    if (!historyEntryId || typeof historyEntryId !== 'string') {
+      return NextResponse.json({ success: false, error: 'historyEntryId is required' }, { status: 400 })
+    }
+
+    const restoredNote = await restoreNoteVersion(id, historyEntryId)
+    return NextResponse.json({ success: true, data: restoredNote })
+  } catch (error) {
+    const message = error instanceof Error ? error.message : 'Failed to restore history version'
+    console.error('Error restoring note history:', error)
+    return NextResponse.json({ success: false, error: message }, { status: 500 })
+  }
+}

Momento-main/momento/memento-note/app/api/notes/[id]/move/route.ts

@@ -0,0 +1,110 @@
+import { NextRequest, NextResponse } from 'next/server'
+import prisma from '@/lib/prisma'
+import { auth } from '@/auth'
+import { reconcileLabelsAfterNoteMove } from '@/app/actions/notes'
+import { createNoteHistorySnapshot, isNoteHistoryEnabledForUser } from '@/lib/note-history'
+
+// POST /api/notes/[id]/move - Move a note to a notebook (or to Inbox)
+export async function POST(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  try {
+    const { id } = await params
+    const body = await request.json()
+    const { notebookId } = body
+
+    // Get the note
+    const note = await prisma.note.findUnique({
+      where: { id },
+      select: {
+        id: true,
+        userId: true,
+        notebookId: true
+      }
+    })
+
+    if (!note) {
+      return NextResponse.json(
+        { success: false, error: 'Note not found' },
+        { status: 404 }
+      )
+    }
+
+    // Verify ownership
+    if (note.userId !== session.user.id) {
+      return NextResponse.json(
+        { success: false, error: 'Forbidden' },
+        { status: 403 }
+      )
+    }
+
+    // If notebookId is provided, verify it exists and belongs to the user
+    if (notebookId !== null && notebookId !== '') {
+      const notebook = await prisma.notebook.findUnique({
+        where: { id: notebookId },
+        select: { userId: true }
+      })
+
+      if (!notebook || notebook.userId !== session.user.id) {
+        return NextResponse.json(
+          { success: false, error: 'Notebook not found or unauthorized' },
+          { status: 403 }
+        )
+      }
+    }
+
+    // Update the note's notebook
+    // notebookId = null or "" means move to Inbox (Notes générales)
+    const targetNotebookId = notebookId && notebookId !== '' ? notebookId : null
+
+    const updatedNote = await prisma.note.update({
+      where: { id },
+      data: {
+        notebookId: targetNotebookId
+      },
+      include: {
+        notebook: {
+          select: { id: true, name: true }
+        }
+      }
+    })
+
+    await reconcileLabelsAfterNoteMove(id, targetNotebookId)
+
+    try {
+      const historyEnabled = await isNoteHistoryEnabledForUser(session.user.id)
+      if (historyEnabled) {
+        await createNoteHistorySnapshot({
+          noteId: id,
+          userId: session.user.id,
+          reason: 'move-notebook',
+        })
+      }
+    } catch (snapshotError) {
+      console.error('[HISTORY] Failed to create snapshot after notebook move:', snapshotError)
+    }
+
+    // No revalidatePath('/') here — the client-side triggerRefresh() in
+    // notebooks-context.tsx handles the refresh.  Avoiding server-side
+    // revalidation prevents a double-refresh (server + client).
+
+    return NextResponse.json({
+      success: true,
+      data: updatedNote,
+      message: notebookId && notebookId !== ''
+        ? `Note moved to "${updatedNote.notebook?.name || 'notebook'}"`
+        : 'Note moved to Inbox'
+    })
+  } catch (error) {
+    return NextResponse.json(
+      { success: false, error: 'Failed to move note' },
+      { status: 500 }
+    )
+  }
+}

Momento-main/momento/memento-note/app/api/notes/[id]/route.ts

@@ -0,0 +1,218 @@
+import { NextRequest, NextResponse } from 'next/server'
+import prisma from '@/lib/prisma'
+import { auth } from '@/auth'
+import { parseNote } from '@/lib/utils'
+import {
+  createNoteHistorySnapshot,
+  isNoteHistoryEnabledForUser,
+  shouldCaptureHistorySnapshot,
+} from '@/lib/note-history'
+
+// GET /api/notes/[id] - Get a single note
+export async function GET(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json(
+      { success: false, error: 'Unauthorized' },
+      { status: 401 }
+    )
+  }
+
+  try {
+    const { id } = await params
+    const note = await prisma.note.findUnique({
+      where: { id }
+    })
+
+    if (!note) {
+      return NextResponse.json(
+        { success: false, error: 'Note not found' },
+        { status: 404 }
+      )
+    }
+
+    if (note.userId !== session.user.id) {
+      const share = await prisma.noteShare.findUnique({
+        where: {
+          noteId_userId: {
+            noteId: note.id,
+            userId: session.user.id
+          }
+        }
+      })
+      if (!share || share.status !== 'accepted') {
+        return NextResponse.json(
+          { success: false, error: 'Forbidden' },
+          { status: 403 }
+        )
+      }
+    }
+
+    return NextResponse.json({
+      success: true,
+      data: parseNote(note)
+    })
+  } catch (error) {
+    console.error('Error fetching note:', error)
+    return NextResponse.json(
+      { success: false, error: 'Failed to fetch note' },
+      { status: 500 }
+    )
+  }
+}
+
+// PUT /api/notes/[id] - Update a note
+export async function PUT(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json(
+      { success: false, error: 'Unauthorized' },
+      { status: 401 }
+    )
+  }
+
+  try {
+    const { id } = await params
+    
+    const existingNote = await prisma.note.findUnique({
+      where: { id }
+    })
+
+    if (!existingNote) {
+      return NextResponse.json(
+        { success: false, error: 'Note not found' },
+        { status: 404 }
+      )
+    }
+
+    if (existingNote.userId !== session.user.id) {
+      return NextResponse.json(
+        { success: false, error: 'Forbidden' },
+        { status: 403 }
+      )
+    }
+
+    const body = await request.json()
+    // Whitelist allowed fields to prevent mass assignment
+    const allowedFields = ['title', 'content', 'color', 'isPinned', 'isArchived', 'type', 'isMarkdown', 'size', 'notebookId']
+    const updateData: Record<string, any> = {}
+    for (const key of allowedFields) {
+      if (key in body) {
+        updateData[key] = body[key]
+      }
+    }
+
+    if ('checkItems' in body) {
+      updateData.checkItems = body.checkItems ?? null
+    }
+    if ('labels' in body) {
+      updateData.labels = body.labels ?? null
+    }
+
+    // Only update if data actually changed
+    const hasChanges = Object.keys(updateData).some((key) => {
+      const newValue = updateData[key]
+      const oldValue = (existingNote as any)[key]
+      // Handle arrays/objects by comparing JSON
+      if (typeof newValue === 'object' && newValue !== null) {
+        return JSON.stringify(newValue) !== JSON.stringify(oldValue)
+      }
+      return newValue !== oldValue
+    })
+
+    // If no changes, return existing note without updating timestamp
+    if (!hasChanges) {
+      return NextResponse.json({
+        success: true,
+        data: parseNote(existingNote),
+      })
+    }
+
+    const note = await prisma.note.update({
+      where: { id },
+      data: updateData,
+    })
+
+    try {
+      const historyEnabled = await isNoteHistoryEnabledForUser(session.user.id)
+      if (historyEnabled && shouldCaptureHistorySnapshot(updateData)) {
+        await createNoteHistorySnapshot({
+          noteId: id,
+          userId: session.user.id,
+          reason: 'api:update',
+        })
+      }
+    } catch (snapshotError) {
+      console.error('[HISTORY] Failed to create snapshot from /api/notes/[id] PUT:', snapshotError)
+    }
+
+    return NextResponse.json({
+      success: true,
+      data: parseNote(note)
+    })
+  } catch (error) {
+    console.error('Error updating note:', error)
+    return NextResponse.json(
+      { success: false, error: 'Failed to update note' },
+      { status: 500 }
+    )
+  }
+}
+
+// DELETE /api/notes/[id] - Delete a note
+export async function DELETE(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json(
+      { success: false, error: 'Unauthorized' },
+      { status: 401 }
+    )
+  }
+
+  try {
+    const { id } = await params
+    
+    const existingNote = await prisma.note.findUnique({
+      where: { id }
+    })
+
+    if (!existingNote) {
+      return NextResponse.json(
+        { success: false, error: 'Note not found' },
+        { status: 404 }
+      )
+    }
+
+    if (existingNote.userId !== session.user.id) {
+      return NextResponse.json(
+        { success: false, error: 'Forbidden' },
+        { status: 403 }
+      )
+    }
+
+    await prisma.note.update({
+      where: { id },
+      data: { trashedAt: new Date() }
+    })
+
+    return NextResponse.json({
+      success: true,
+      message: 'Note moved to trash'
+    })
+  } catch (error) {
+    console.error('Error deleting note:', error)
+    return NextResponse.json(
+      { success: false, error: 'Failed to delete note' },
+      { status: 500 }
+    )
+  }
+}