From d4bc1ea3e3e9b92ed0f708f25e4854b2f23c7150 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 17:38:59 -0300
Subject: [PATCH 01/26] docs: specify versioned docs api

---
 .../2026-06-12-docs-api-versioning-design.md  | 437 ++++++++++++++++++
 1 file changed, 437 insertions(+)
 create mode 100644 docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md

diff --git a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
new file mode 100644
index 0000000..485920c
--- /dev/null
+++ b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
@@ -0,0 +1,437 @@
+# Docs API Versioning Design
+
+## Context
+
+This project is a Next.js 16.2.9 App Router application under `src/app`. API endpoints should be implemented as Route Handlers in `src/app/api/**/route.ts`, using the Web `Request` and `Response` APIs and following the local Next.js 16 documentation in `node_modules/next/dist/docs/`.
+
+The existing backend foundation is Clerk authentication, a synchronized local `users` table, Drizzle ORM, and Postgres. Clerk remains the source of truth for identity, while application authorization should use the local `users.id` row associated with the current Clerk user.
+
+The new documents API must store HTML documents, support multiple immutable versions per document, and allow document access through ownership or email-based sharing.
+
+## Goals
+
+- Add REST API endpoints for creating, reading, updating, listing, and sharing HTML documents.
+- Store document metadata separately from versioned HTML content.
+- Preserve every document version instead of overwriting HTML.
+- Authorize reads for owners and users whose primary email was shared.
+- Authorize updates only for owners.
+- Authorize sharing for any user who currently has access to the document.
+- Validate API request contracts and database write contracts with Zod.
+- Centralize request user resolution in a reusable API context helper.
+
+## Non-Goals
+
+- No UI changes are included in this spec.
+- No rich text sanitization or HTML rewriting is included. The API stores the submitted HTML as-is.
+- No per-version sharing rules. If a user has access to a document, they have access to every version.
+- No public link sharing.
+- No document deletion endpoint.
+- No metadata-only update endpoint for `name` or `description`.
+
+## API Context
+
+Create a shared server helper for API Route Handlers, for example `src/server/api/context.ts`.
+
+The helper should build an `ApiContext` for every protected API request. It should:
+
+- Read the current Clerk auth state.
+- Require an authenticated Clerk user.
+- Load the active local `users` row by `clerkUserId`.
+- Normalize and expose the local user's primary email when present.
+- Return a clear `401` response when no Clerk session exists.
+- Return a clear `409` response when a Clerk session exists but the local user row has not been synchronized yet.
+- Expose the local user as `ctx.user`.
+- Expose the local user's normalized primary email as `ctx.userEmail`.
+- Expose the Drizzle database handle as `ctx.db`.
+
+The context helper should avoid database work in `src/proxy.ts`. Proxy remains responsible only for coarse route protection.
+
+Suggested shape:
+
+```ts
+type ApiContext = {
+  db: typeof db;
+  user: User;
+  userEmail: string | null;
+};
+
+type ApiContextResult =
+  | { ok: true; ctx: ApiContext }
+  | { ok: false; response: Response };
+```
+
+Route handlers should call this helper at the start of each endpoint and return `result.response` when `ok` is false. This keeps endpoint files focused on request parsing, authorization, and document behavior.
+
+## Database Design
+
+Add three Postgres tables to `src/db/schema.ts`.
+
+### `documents`
+
+Stores stable document metadata and ownership.
+
+- `id`: text primary key, generated by the application with `crypto.randomUUID()`.
+- `ownerUserId`: text, required, references `users.id`.
+- `name`: text, required.
+- `description`: text, nullable.
+- `createdAt`: timestamptz, required.
+- `updatedAt`: timestamptz, required.
+- `deletedAt`: timestamptz, nullable.
+
+Indexes:
+
+- `documents_owner_user_id_idx` on `ownerUserId`.
+
+### `document_versions`
+
+Stores immutable HTML snapshots.
+
+- `id`: text primary key, generated by the application with `crypto.randomUUID()`.
+- `documentId`: text, required, references `documents.id`.
+- `versionNumber`: integer, required, starts at `1`.
+- `html`: text, required.
+- `createdByUserId`: text, required, references `users.id`.
+- `createdAt`: timestamptz, required.
+
+Indexes:
+
+- Unique index `document_versions_document_id_version_unique` on `(documentId, versionNumber)`.
+- Index `document_versions_document_id_created_at_idx` on `(documentId, createdAt)`.
+
+### `document_shares`
+
+Stores email-based access grants. The share target does not need to exist in `users` yet.
+
+- `id`: text primary key, generated by the application with `crypto.randomUUID()`.
+- `documentId`: text, required, references `documents.id`.
+- `sharedWithEmail`: text, required, stored lowercased and trimmed.
+- `sharedByUserId`: text, required, references `users.id`.
+- `createdAt`: timestamptz, required.
+
+Indexes:
+
+- Unique index `document_shares_document_id_email_unique` on `(documentId, sharedWithEmail)`.
+- Index `document_shares_shared_with_email_idx` on `sharedWithEmail`.
+
+## Zod Contracts
+
+Create shared schemas for endpoint inputs and database inserts, for example under `src/server/docs/contracts.ts`.
+
+API schemas:
+
+- `createDocumentRequestSchema`
+  - `name`: non-empty string.
+  - `description`: optional string; blank strings may be normalized to `null`.
+  - `html`: non-empty string.
+- `updateDocumentRequestSchema`
+  - `html`: non-empty string.
+- `getDocumentQuerySchema`
+  - `version`: optional positive integer parsed from the query string.
+- `listDocumentsQuerySchema`
+  - `access`: optional enum `"all" | "owned" | "shared"`, default `"all"`.
+- `shareDocumentRequestSchema`
+  - `emails`: non-empty array of valid email strings.
+
+Database write schemas:
+
+- `newDocumentSchema`.
+- `newDocumentVersionSchema`.
+- `newDocumentShareSchema`.
+
+Database schemas should validate the full object immediately before insertion. Email fields should be normalized before DB validation.
+
+## Endpoint Contracts
+
+All document endpoints use `runtime = "nodejs"` because they access Postgres through the server database driver.
+
+Dynamic Route Handlers should follow the Next.js 16 route context shape where `params` is a promise. For example, `GET /api/docs/{id}` should await `ctx.params` before validating `id`.
+
+### `POST /api/docs`
+
+Creates a document and its initial version.
+
+Request body:
+
+```json
+{
+  "name": "Quarterly report",
+  "description": "Optional description",
+  "html": "<h1>Report</h1>"
+}
+```
+
+Behavior:
+
+1. Build `ApiContext`.
+2. Validate request body with Zod.
+3. Insert `documents` with the current local user as owner.
+4. Insert `document_versions` with `versionNumber = 1`.
+5. Return `201`.
+
+Response body:
+
+```json
+{
+  "id": "doc_id",
+  "name": "Quarterly report",
+  "description": "Optional description",
+  "latestVersion": 1,
+  "ownerUserId": "user_id",
+  "createdAt": "2026-06-12T00:00:00.000Z",
+  "updatedAt": "2026-06-12T00:00:00.000Z"
+}
+```
+
+### `GET /api/docs/{id}`
+
+Returns a document HTML version.
+
+Query string:
+
+- `version`: optional positive integer. Defaults to the latest version.
+
+Behavior:
+
+1. Build `ApiContext`.
+2. Validate route params and query string with Zod.
+3. Verify the current user can access the document.
+4. Load the requested version or latest version.
+5. Return `404` if the document or requested version does not exist.
+6. Return `403` if the document exists but the current user cannot access it.
+
+Response body:
+
+```json
+{
+  "id": "doc_id",
+  "name": "Quarterly report",
+  "description": "Optional description",
+  "version": 2,
+  "latestVersion": 3,
+  "html": "<h1>Report v2</h1>",
+  "ownerUserId": "user_id",
+  "createdAt": "2026-06-12T00:00:00.000Z",
+  "updatedAt": "2026-06-12T00:00:00.000Z",
+  "versionCreatedAt": "2026-06-12T00:00:00.000Z"
+}
+```
+
+### `PUT /api/docs/{id}`
+
+Creates a new immutable version for an existing document.
+
+Request body:
+
+```json
+{
+  "html": "<h1>Updated report</h1>"
+}
+```
+
+Behavior:
+
+1. Build `ApiContext`.
+2. Validate route params and body with Zod.
+3. Load the document.
+4. Return `404` if the document does not exist.
+5. Return `403` if the current user is not the owner.
+6. Compute the next version number as `latestVersion + 1`.
+7. Insert a new `document_versions` row.
+8. Update `documents.updatedAt`.
+9. Return `200`.
+
+Response body:
+
+```json
+{
+  "id": "doc_id",
+  "version": 4,
+  "latestVersion": 4,
+  "updatedAt": "2026-06-12T00:00:00.000Z"
+}
+```
+
+The implementation should use a transaction for the latest-version lookup and insert. The unique `(documentId, versionNumber)` index protects against duplicate version numbers if concurrent updates race.
+
+### `GET /api/docs`
+
+Lists documents the current user can access.
+
+Query string:
+
+- `access`: optional `"all" | "owned" | "shared"`, default `"all"`.
+
+Behavior:
+
+1. Build `ApiContext`.
+2. Validate query string with Zod.
+3. List documents where the current user is the owner and/or where `ctx.userEmail` matches `document_shares.sharedWithEmail`.
+4. Exclude soft-deleted documents.
+5. Include the latest version number for each document.
+6. Sort by `documents.updatedAt` descending.
+
+Response body:
+
+```json
+{
+  "documents": [
+    {
+      "id": "doc_id",
+      "name": "Quarterly report",
+      "description": "Optional description",
+      "access": "owned",
+      "latestVersion": 3,
+      "ownerUserId": "user_id",
+      "createdAt": "2026-06-12T00:00:00.000Z",
+      "updatedAt": "2026-06-12T00:00:00.000Z"
+    }
+  ]
+}
+```
+
+If a user has no primary email, `access=shared` should return an empty list because there is no email to match.
+
+### `POST /api/docs/share/{id}`
+
+Shares a document with one or more email addresses.
+
+Request body:
+
+```json
+{
+  "emails": ["reader@example.com", "Reviewer@Example.com"]
+}
+```
+
+Behavior:
+
+1. Build `ApiContext`.
+2. Validate route params and body with Zod.
+3. Normalize emails by trimming and lowercasing.
+4. Remove duplicate emails from the request.
+5. Verify the current user can access the document.
+6. Return `404` if the document does not exist.
+7. Return `403` if the document exists but the current user cannot access it.
+8. Insert access grants idempotently.
+9. Return `200`.
+
+Response body:
+
+```json
+{
+  "id": "doc_id",
+  "sharedWith": ["reader@example.com", "reviewer@example.com"]
+}
+```
+
+Sharing is document-level. A shared email can read every existing and future version of that document.
+
+## Authorization Rules
+
+- Unauthenticated requests return `401`.
+- Authenticated requests without a local `users` row return `409`.
+- Owners can read, update, list, and share their documents.
+- Shared users can read, list, and share documents shared with their primary email.
+- Shared users cannot update documents.
+- A user with no primary email can still own documents but cannot receive email-based shares until their local `primaryEmail` is present.
+- Soft-deleted users should not be loaded by `ApiContext`.
+- Soft-deleted documents should be excluded from all endpoints.
+
+## Error Responses
+
+Use JSON error bodies consistently:
+
+```json
+{
+  "error": {
+    "code": "validation_error",
+    "message": "Invalid request body"
+  }
+}
+```
+
+Recommended status codes:
+
+- `400`: malformed JSON, invalid route param, invalid query string, invalid body.
+- `401`: missing Clerk session.
+- `403`: authenticated user lacks access.
+- `404`: document or version not found.
+- `409`: local user has not been synchronized yet, or a concurrent version insert conflicts after retry handling.
+- `500`: unexpected server/database error.
+
+Validation errors should not echo submitted HTML.
+
+## File Layout
+
+Expected implementation files:
+
+```txt
+src/app/api/docs/route.ts
+src/app/api/docs/[id]/route.ts
+src/app/api/docs/share/[id]/route.ts
+src/server/api/context.ts
+src/server/api/responses.ts
+src/server/docs/contracts.ts
+src/server/docs/repository.ts
+src/server/docs/service.ts
+```
+
+`repository.ts` should contain database queries. `service.ts` should contain authorization and document workflows that are easier to test without Route Handler boilerplate.
+
+## Testing
+
+Use Vitest and follow the existing unit-test style.
+
+Test the contract layer:
+
+- Create request accepts valid input.
+- Create request rejects missing name and empty HTML.
+- Query schema parses positive integer versions.
+- Share schema normalizes and deduplicates emails.
+- DB insert schemas reject invalid persisted shapes.
+
+Test the API context helper:
+
+- Returns `401` when Clerk has no authenticated user.
+- Returns `409` when a Clerk user exists but no active local user row exists.
+- Returns `ApiContext` with local user and normalized email when present.
+
+Test the document service:
+
+- Create inserts metadata and initial version.
+- Get latest version defaults correctly.
+- Get specific version returns requested HTML.
+- Owner can read and update.
+- Shared email can read.
+- Shared email cannot update.
+- Owner and shared user can share.
+- List returns owned, shared, or all based on the filter.
+- User without primary email gets no shared documents.
+
+Test Route Handlers with mocked service/context dependencies where useful:
+
+- `POST /api/docs` returns `201`.
+- `GET /api/docs/{id}` returns latest by default.
+- `PUT /api/docs/{id}` returns `403` for non-owner.
+- `GET /api/docs?access=shared` validates the filter.
+- `POST /api/docs/share/{id}` validates emails.
+
+## Migration Plan
+
+1. Add Drizzle schema definitions for `documents`, `document_versions`, and `document_shares`.
+2. Generate a Postgres migration with `bun run db:generate`.
+3. Add Zod contracts.
+4. Add the API context helper.
+5. Add repository and service tests before implementation.
+6. Add repository and service implementation.
+7. Add Route Handler tests before each handler implementation.
+8. Add Route Handlers.
+9. Run `bun run test`, `bun run typecheck`, and `bun run lint`.
+
+## Open Decisions Resolved
+
+- Sharing is stored by normalized email, not by `userId`, so recipients do not need accounts before access is granted.
+- Any user with document access can share the document onward.
+- Updating a document creates a new version and does not mutate existing version rows.
+- Reading without `version` returns the latest version.
+- Listing defaults to all accessible documents.

From 03bc7c43f28e58d2544ee60b4cf4d2915eb1cd70 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 17:46:42 -0300
Subject: [PATCH 02/26] docs: define api endpoint foundation

---
 .../2026-06-12-docs-api-versioning-design.md  | 106 ++++++++++++++++--
 1 file changed, 99 insertions(+), 7 deletions(-)

diff --git a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
index 485920c..43692fc 100644
--- a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
+++ b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
@@ -18,6 +18,7 @@ The new documents API must store HTML documents, support multiple immutable vers
 - Authorize sharing for any user who currently has access to the document.
 - Validate API request contracts and database write contracts with Zod.
 - Centralize request user resolution in a reusable API context helper.
+- Create a reusable endpoint foundation for error handling, request parsing, database access, structured logs, and business-logic dispatch.
 
 ## Non-Goals
 
@@ -62,6 +63,84 @@ type ApiContextResult =
 
 Route handlers should call this helper at the start of each endpoint and return `result.response` when `ok` is false. This keeps endpoint files focused on request parsing, authorization, and document behavior.
 
+## API Endpoint Foundation
+
+Create a small server-side API foundation before implementing the document endpoints. The foundation should make Route Handlers consistent and keep framework code separate from business logic.
+
+Suggested files:
+
+```txt
+src/server/api/context.ts
+src/server/api/errors.ts
+src/server/api/handler.ts
+src/server/api/logger.ts
+src/server/api/requests.ts
+src/server/api/responses.ts
+```
+
+### Handler wrapper
+
+`src/server/api/handler.ts` should expose a wrapper such as `withApiHandler`. It should:
+
+- Build `ApiContext` once per request.
+- Catch expected application errors and convert them to JSON responses.
+- Catch unexpected errors, log them, and return a generic `500` response.
+- Add a request id to every request if none is provided by upstream headers.
+- Log request completion with method, pathname, status, duration, request id, and user id when available.
+- Avoid logging submitted HTML or full request bodies.
+
+Suggested shape:
+
+```ts
+type ApiHandler<TParams = unknown> = (input: {
+  request: Request;
+  ctx: ApiContext;
+  params: TParams;
+}) => Promise<Response>;
+
+function withApiHandler<TParams>(
+  handler: ApiHandler<TParams>,
+): (request: Request, routeContext?: unknown) => Promise<Response>;
+```
+
+Dynamic route params should still be awaited and validated by the endpoint or request helper, because Next.js 16 exposes route `params` as a promise.
+
+### Errors and responses
+
+`src/server/api/errors.ts` should define typed application errors, for example `ApiError`, with a status code, stable error code, safe message, and optional validation details. Business logic should throw these typed errors for expected failures such as forbidden access, missing documents, validation failures, and local user sync conflicts.
+
+`src/server/api/responses.ts` should provide JSON helpers for success and error responses. Response helpers should produce one consistent envelope for errors and should avoid leaking stack traces, SQL details, Clerk secrets, or submitted HTML.
+
+### Request parsing
+
+`src/server/api/requests.ts` should contain reusable helpers for:
+
+- Reading JSON request bodies safely.
+- Returning `400` for malformed JSON.
+- Validating bodies, query strings, and route params with Zod.
+- Converting `URLSearchParams` to plain objects before validation.
+
+Endpoint files should not duplicate try/catch blocks for JSON parsing or Zod formatting.
+
+### Database access
+
+Route Handlers should not import the global database directly. They should receive `ctx.db` from `ApiContext` and pass it into repositories or services. This makes tests easier and keeps database access consistent.
+
+Repository modules should own Drizzle queries. Service modules should own business rules and transaction orchestration. Route files should only compose the API foundation, request contracts, and service calls.
+
+### Logging
+
+`src/server/api/logger.ts` should expose a minimal structured logger wrapper around `console`. Logs should include:
+
+- `requestId`.
+- HTTP method and pathname.
+- Response status.
+- Duration in milliseconds.
+- `userId` when a local user was resolved.
+- Stable error code for expected failures.
+
+Logs should not include raw HTML, complete request bodies, secret values, database URLs, or full email lists unless explicitly safe and necessary. For share operations, logging counts is safer than logging every email.
+
 ## Database Design
 
 Add three Postgres tables to `src/db/schema.ts`.
@@ -370,6 +449,10 @@ src/app/api/docs/route.ts
 src/app/api/docs/[id]/route.ts
 src/app/api/docs/share/[id]/route.ts
 src/server/api/context.ts
+src/server/api/errors.ts
+src/server/api/handler.ts
+src/server/api/logger.ts
+src/server/api/requests.ts
 src/server/api/responses.ts
 src/server/docs/contracts.ts
 src/server/docs/repository.ts
@@ -396,6 +479,14 @@ Test the API context helper:
 - Returns `409` when a Clerk user exists but no active local user row exists.
 - Returns `ApiContext` with local user and normalized email when present.
 
+Test the API foundation:
+
+- Handler wrapper catches typed `ApiError` instances and returns the expected status and JSON error envelope.
+- Handler wrapper catches unexpected errors, logs them, and returns a generic `500`.
+- Request parser returns `400` for malformed JSON.
+- Zod request helpers format validation failures without echoing submitted HTML.
+- Completion logs include request id, method, pathname, status, duration, and user id when available.
+
 Test the document service:
 
 - Create inserts metadata and initial version.
@@ -420,13 +511,14 @@ Test Route Handlers with mocked service/context dependencies where useful:
 
 1. Add Drizzle schema definitions for `documents`, `document_versions`, and `document_shares`.
 2. Generate a Postgres migration with `bun run db:generate`.
-3. Add Zod contracts.
-4. Add the API context helper.
-5. Add repository and service tests before implementation.
-6. Add repository and service implementation.
-7. Add Route Handler tests before each handler implementation.
-8. Add Route Handlers.
-9. Run `bun run test`, `bun run typecheck`, and `bun run lint`.
+3. Add the shared API foundation: errors, responses, request parsing, logging, handler wrapper, and API context.
+4. Add foundation tests before implementation.
+5. Add Zod contracts for docs endpoints and DB writes.
+6. Add repository and service tests before implementation.
+7. Add repository and service implementation.
+8. Add Route Handler tests before each handler implementation.
+9. Add Route Handlers using the shared handler wrapper.
+10. Run `bun run test`, `bun run typecheck`, and `bun run lint`.
 
 ## Open Decisions Resolved
 

From 4332cdd54eea9d81da632bb33d842de95f5cfcfd Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 17:52:51 -0300
Subject: [PATCH 03/26] docs: keep docs api modules under server api

---
 .../specs/2026-06-12-docs-api-versioning-design.md        | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
index 43692fc..068e3e1 100644
--- a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
+++ b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
@@ -194,7 +194,7 @@ Indexes:
 
 ## Zod Contracts
 
-Create shared schemas for endpoint inputs and database inserts, for example under `src/server/docs/contracts.ts`.
+Create shared schemas for endpoint inputs and database inserts, for example under `src/server/api/docs/contracts.ts`.
 
 API schemas:
 
@@ -454,9 +454,9 @@ src/server/api/handler.ts
 src/server/api/logger.ts
 src/server/api/requests.ts
 src/server/api/responses.ts
-src/server/docs/contracts.ts
-src/server/docs/repository.ts
-src/server/docs/service.ts
+src/server/api/docs/contracts.ts
+src/server/api/docs/repository.ts
+src/server/api/docs/service.ts
 ```
 
 `repository.ts` should contain database queries. `service.ts` should contain authorization and document workflows that are easier to test without Route Handler boilerplate.

From 45a58738e8c03e2cec233586640efa093964dbfe Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 17:59:52 -0300
Subject: [PATCH 04/26] docs: align docs api architecture

---
 .../2026-06-12-docs-api-versioning-design.md  | 77 ++++++++++---------
 1 file changed, 40 insertions(+), 37 deletions(-)

diff --git a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
index 068e3e1..d6d80e2 100644
--- a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
+++ b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
@@ -31,7 +31,7 @@ The new documents API must store HTML documents, support multiple immutable vers
 
 ## API Context
 
-Create a shared server helper for API Route Handlers, for example `src/server/api/context.ts`.
+Create a shared server helper for API Route Handlers in `src/server/foundation/context.ts`.
 
 The helper should build an `ApiContext` for every protected API request. It should:
 
@@ -61,7 +61,7 @@ type ApiContextResult =
   | { ok: false; response: Response };
 ```
 
-Route handlers should call this helper at the start of each endpoint and return `result.response` when `ok` is false. This keeps endpoint files focused on request parsing, authorization, and document behavior.
+HTTP handlers should call this helper at the start of each endpoint and return `result.response` when `ok` is false. This keeps `src/app/api/**/route.ts` files as thin Next.js adapters and keeps request parsing, authorization, and document behavior in server modules.
 
 ## API Endpoint Foundation
 
@@ -70,17 +70,16 @@ Create a small server-side API foundation before implementing the document endpo
 Suggested files:
 
 ```txt
-src/server/api/context.ts
-src/server/api/errors.ts
-src/server/api/handler.ts
-src/server/api/logger.ts
-src/server/api/requests.ts
-src/server/api/responses.ts
+src/server/handlers/api.ts
+src/server/handlers/docs.ts
+src/server/foundation/context.ts
+src/server/foundation/errors.ts
+src/server/foundation/logs.ts
 ```
 
 ### Handler wrapper
 
-`src/server/api/handler.ts` should expose a wrapper such as `withApiHandler`. It should:
+`src/server/handlers/api.ts` should expose a wrapper such as `withApiHandler`. It should:
 
 - Build `ApiContext` once per request.
 - Catch expected application errors and convert them to JSON responses.
@@ -107,13 +106,13 @@ Dynamic route params should still be awaited and validated by the endpoint or re
 
 ### Errors and responses
 
-`src/server/api/errors.ts` should define typed application errors, for example `ApiError`, with a status code, stable error code, safe message, and optional validation details. Business logic should throw these typed errors for expected failures such as forbidden access, missing documents, validation failures, and local user sync conflicts.
+`src/server/foundation/errors.ts` should define typed application errors, for example `ApiError`, with a status code, stable error code, safe message, and optional validation details. Business logic should throw these typed errors for expected failures such as forbidden access, missing documents, validation failures, and local user sync conflicts.
 
-`src/server/api/responses.ts` should provide JSON helpers for success and error responses. Response helpers should produce one consistent envelope for errors and should avoid leaking stack traces, SQL details, Clerk secrets, or submitted HTML.
+The handler layer should provide JSON helpers for success and error responses, either in `src/server/handlers/api.ts` or a sibling file under `src/server/handlers`. Response helpers should produce one consistent envelope for errors and should avoid leaking stack traces, SQL details, Clerk secrets, or submitted HTML.
 
 ### Request parsing
 
-`src/server/api/requests.ts` should contain reusable helpers for:
+`src/server/handlers/api.ts`, or a sibling file under `src/server/handlers`, should contain reusable helpers for:
 
 - Reading JSON request bodies safely.
 - Returning `400` for malformed JSON.
@@ -124,13 +123,13 @@ Endpoint files should not duplicate try/catch blocks for JSON parsing or Zod for
 
 ### Database access
 
-Route Handlers should not import the global database directly. They should receive `ctx.db` from `ApiContext` and pass it into repositories or services. This makes tests easier and keeps database access consistent.
+Next.js route files and HTTP handlers should not import the global database directly. They should receive `ctx.db` from `ApiContext` and pass it into repositories or services. This makes tests easier and keeps database access consistent.
 
-Repository modules should own Drizzle queries. Service modules should own business rules and transaction orchestration. Route files should only compose the API foundation, request contracts, and service calls.
+Repository modules under `src/repository/docs` should own Drizzle queries. Service modules under `src/services/docs` should own business rules and transaction orchestration. Handler files under `src/server/handlers` should only compose the API foundation, request contracts, and service calls. Next route files under `src/app/api` should only export the corresponding handler functions required by Next.js.
 
 ### Logging
 
-`src/server/api/logger.ts` should expose a minimal structured logger wrapper around `console`. Logs should include:
+`src/server/foundation/logs.ts` should expose a minimal structured logger wrapper around `console`. Logs should include:
 
 - `requestId`.
 - HTTP method and pathname.
@@ -194,7 +193,7 @@ Indexes:
 
 ## Zod Contracts
 
-Create shared schemas for endpoint inputs and database inserts, for example under `src/server/api/docs/contracts.ts`.
+Create shared schemas for endpoint inputs, database inserts, and document-facing TypeScript types in `src/types/docs.ts`.
 
 API schemas:
 
@@ -448,18 +447,21 @@ Expected implementation files:
 src/app/api/docs/route.ts
 src/app/api/docs/[id]/route.ts
 src/app/api/docs/share/[id]/route.ts
-src/server/api/context.ts
-src/server/api/errors.ts
-src/server/api/handler.ts
-src/server/api/logger.ts
-src/server/api/requests.ts
-src/server/api/responses.ts
-src/server/api/docs/contracts.ts
-src/server/api/docs/repository.ts
-src/server/api/docs/service.ts
+src/server/handlers/api.ts
+src/server/handlers/docs.ts
+src/server/foundation/context.ts
+src/server/foundation/errors.ts
+src/server/foundation/logs.ts
+src/services/docs/create-document.ts
+src/services/docs/get-document.ts
+src/services/docs/list-documents.ts
+src/services/docs/share-document.ts
+src/services/docs/update-document.ts
+src/repository/docs/documents.ts
+src/types/docs.ts
 ```
 
-`repository.ts` should contain database queries. `service.ts` should contain authorization and document workflows that are easier to test without Route Handler boilerplate.
+Files under `src/repository/docs` should contain database queries. Files under `src/services/docs` should contain authorization and document workflows that are easier to test without Route Handler boilerplate. `src/server/handlers/docs.ts` should parse HTTP inputs and call the document services. The `src/app/api/docs/**/route.ts` files should stay thin and export the matching Next.js Route Handler methods from `src/server/handlers/docs.ts`.
 
 ## Testing
 
@@ -482,9 +484,9 @@ Test the API context helper:
 Test the API foundation:
 
 - Handler wrapper catches typed `ApiError` instances and returns the expected status and JSON error envelope.
-- Handler wrapper catches unexpected errors, logs them, and returns a generic `500`.
-- Request parser returns `400` for malformed JSON.
-- Zod request helpers format validation failures without echoing submitted HTML.
+- Handler wrapper catches unexpected errors, logs them through `src/server/foundation/logs.ts`, and returns a generic `500`.
+- Request parser in the handler layer returns `400` for malformed JSON.
+- Zod request helpers in the handler layer format validation failures without echoing submitted HTML.
 - Completion logs include request id, method, pathname, status, duration, and user id when available.
 
 Test the document service:
@@ -499,7 +501,7 @@ Test the document service:
 - List returns owned, shared, or all based on the filter.
 - User without primary email gets no shared documents.
 
-Test Route Handlers with mocked service/context dependencies where useful:
+Test HTTP handlers with mocked service/context dependencies where useful:
 
 - `POST /api/docs` returns `201`.
 - `GET /api/docs/{id}` returns latest by default.
@@ -511,14 +513,15 @@ Test Route Handlers with mocked service/context dependencies where useful:
 
 1. Add Drizzle schema definitions for `documents`, `document_versions`, and `document_shares`.
 2. Generate a Postgres migration with `bun run db:generate`.
-3. Add the shared API foundation: errors, responses, request parsing, logging, handler wrapper, and API context.
+3. Add the shared API foundation: errors, logging, and API context under `src/server/foundation`.
 4. Add foundation tests before implementation.
-5. Add Zod contracts for docs endpoints and DB writes.
-6. Add repository and service tests before implementation.
-7. Add repository and service implementation.
-8. Add Route Handler tests before each handler implementation.
-9. Add Route Handlers using the shared handler wrapper.
-10. Run `bun run test`, `bun run typecheck`, and `bun run lint`.
+5. Add the shared handler wrapper, response helpers, and request parsing under `src/server/handlers`.
+6. Add Zod contracts and document types in `src/types/docs.ts`.
+7. Add repository and service tests before implementation.
+8. Add repository and service implementation under `src/repository/docs` and `src/services/docs`.
+9. Add handler tests before each handler implementation.
+10. Add thin Next.js Route Handlers in `src/app/api/docs/**/route.ts` that delegate to `src/server/handlers/docs.ts`.
+11. Run `bun run test`, `bun run typecheck`, and `bun run lint`.
 
 ## Open Decisions Resolved
 

From ca6556ade53f3558b05216a4c137d454c9356351 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 18:04:24 -0300
Subject: [PATCH 05/26] docs: plan docs api endpoints

---
 .../plans/2026-06-12-docs-api-endpoints.md    | 341 ++++++++++++++++++
 1 file changed, 341 insertions(+)
 create mode 100644 docs/superpowers/plans/2026-06-12-docs-api-endpoints.md

diff --git a/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md b/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md
new file mode 100644
index 0000000..54f387d
--- /dev/null
+++ b/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md
@@ -0,0 +1,341 @@
+# Docs API Endpoints Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Build versioned HTML document APIs with shared endpoint foundation, authenticated API context, Drizzle persistence, Zod contracts, and tests.
+
+**Architecture:** Next.js `src/app/api/**/route.ts` files stay thin and delegate to HTTP handlers in `src/server/handlers/docs.ts`. Generic API infrastructure lives in `src/server/foundation` and `src/server/handlers/api.ts`; business rules live in `src/services/docs`; Drizzle queries live in `src/repository/docs`; Zod contracts and shared document types live in `src/types/docs.ts`.
+
+**Tech Stack:** Next.js 16 Route Handlers, Clerk, Drizzle ORM, Postgres, Zod 4, Vitest, Bun.
+
+---
+
+### Task 1: Database Schema And Migration
+
+**Files:**
+- Modify: `src/db/schema.ts`
+- Create: `drizzle/0001_*.sql` via `bun run db:generate`
+- Modify: `drizzle/meta/_journal.json` via Drizzle Kit
+- Create/modify: `drizzle/meta/0001_snapshot.json` via Drizzle Kit
+
+- [ ] **Step 1: Add failing schema tests**
+
+Create `src/db/schema.test.ts` with assertions that `documents`, `documentVersions`, and `documentShares` are exported and expose the required Drizzle column keys:
+
+```ts
+import { describe, expect, it } from "vitest";
+
+import { documentShares, documentVersions, documents } from "./schema";
+
+describe("documents schema", () => {
+  it("exports document tables with required columns", () => {
+    expect(documents.id).toBeDefined();
+    expect(documents.ownerUserId).toBeDefined();
+    expect(documentVersions.versionNumber).toBeDefined();
+    expect(documentVersions.html).toBeDefined();
+    expect(documentShares.sharedWithEmail).toBeDefined();
+  });
+});
+```
+
+- [ ] **Step 2: Verify the test fails**
+
+Run: `bun run test src/db/schema.test.ts`
+
+Expected: fail because the document table exports do not exist.
+
+- [ ] **Step 3: Add Drizzle tables**
+
+Update `src/db/schema.ts` to define `documents`, `documentVersions`, and `documentShares` with the columns and indexes from the spec. Use `integer` and `foreignKey`/`.references()` from `drizzle-orm/pg-core` as appropriate.
+
+- [ ] **Step 4: Verify schema test passes**
+
+Run: `bun run test src/db/schema.test.ts`
+
+Expected: pass.
+
+- [ ] **Step 5: Generate migration**
+
+Run: `bun run db:generate`
+
+Expected: a new migration creates the three tables and indexes.
+
+### Task 2: Document Types And Zod Contracts
+
+**Files:**
+- Create: `src/types/docs.ts`
+- Create: `src/types/docs.test.ts`
+
+- [ ] **Step 1: Add failing contract tests**
+
+Create tests for request contracts and DB write contracts:
+
+```ts
+import { describe, expect, it } from "vitest";
+
+import {
+  createDocumentRequestSchema,
+  getDocumentQuerySchema,
+  listDocumentsQuerySchema,
+  newDocumentShareSchema,
+  shareDocumentRequestSchema,
+} from "./docs";
+
+describe("docs contracts", () => {
+  it("normalizes create document descriptions", () => {
+    expect(
+      createDocumentRequestSchema.parse({
+        name: "Report",
+        description: "  ",
+        html: "<h1>Report</h1>",
+      }),
+    ).toEqual({ name: "Report", description: null, html: "<h1>Report</h1>" });
+  });
+
+  it("rejects empty HTML", () => {
+    expect(() =>
+      createDocumentRequestSchema.parse({ name: "Report", html: "" }),
+    ).toThrow();
+  });
+
+  it("parses version and list filters", () => {
+    expect(getDocumentQuerySchema.parse({ version: "2" })).toEqual({ version: 2 });
+    expect(listDocumentsQuerySchema.parse({})).toEqual({ access: "all" });
+  });
+
+  it("normalizes and deduplicates share emails", () => {
+    expect(
+      shareDocumentRequestSchema.parse({
+        emails: [" Reader@Example.com ", "reader@example.com"],
+      }),
+    ).toEqual({ emails: ["reader@example.com"] });
+  });
+
+  it("validates normalized DB share inserts", () => {
+    expect(() =>
+      newDocumentShareSchema.parse({
+        id: "share_1",
+        documentId: "doc_1",
+        sharedWithEmail: "Reader@Example.com",
+        sharedByUserId: "user_1",
+        createdAt: new Date(),
+      }),
+    ).toThrow();
+  });
+});
+```
+
+- [ ] **Step 2: Verify tests fail**
+
+Run: `bun run test src/types/docs.test.ts`
+
+Expected: fail because `src/types/docs.ts` does not exist.
+
+- [ ] **Step 3: Implement contracts**
+
+Create `src/types/docs.ts` with Zod schemas for request bodies, query strings, route params, DB inserts, and inferred TypeScript types. Normalize email with `trim().toLowerCase()`, deduplicate share email arrays, and normalize blank descriptions to `null`.
+
+- [ ] **Step 4: Verify contracts pass**
+
+Run: `bun run test src/types/docs.test.ts`
+
+Expected: pass.
+
+### Task 3: API Foundation And Context
+
+**Files:**
+- Create: `src/server/foundation/errors.ts`
+- Create: `src/server/foundation/logs.ts`
+- Create: `src/server/foundation/context.ts`
+- Create: `src/server/handlers/api.ts`
+- Create: `src/server/foundation/context.test.ts`
+- Create: `src/server/handlers/api.test.ts`
+
+- [ ] **Step 1: Add failing foundation tests**
+
+Write tests that prove:
+
+```ts
+// context.test.ts
+// - unauthenticated Clerk auth returns a 401 Response
+// - authenticated Clerk user without local active row returns a 409 Response
+// - active local user returns ctx.user, ctx.userEmail, and ctx.db
+
+// api.test.ts
+// - withApiHandler converts ApiError into the expected JSON error response
+// - withApiHandler converts unexpected errors into generic 500 JSON
+// - parseJsonBody returns validation_error for malformed JSON
+// - parseWithSchema does not include submitted HTML in validation details
+```
+
+Mock `@clerk/nextjs/server` and use a small Drizzle-like fake DB for context tests.
+
+- [ ] **Step 2: Verify foundation tests fail**
+
+Run: `bun run test src/server/foundation/context.test.ts src/server/handlers/api.test.ts`
+
+Expected: fail because foundation files do not exist.
+
+- [ ] **Step 3: Implement foundation**
+
+Implement:
+
+```ts
+// errors.ts
+export class ApiError extends Error {
+  constructor(
+    public readonly status: number,
+    public readonly code: string,
+    message: string,
+    public readonly details?: unknown,
+  ) {
+    super(message);
+  }
+}
+```
+
+Add helper constructors for validation, unauthorized, forbidden, not found, conflict, and internal errors. Implement `logs.ts` as a thin wrapper around `console.info` and `console.error`. Implement `context.ts` with `createApiContext(database = db)` and `auth()` from Clerk. Implement `api.ts` with JSON response helpers, request id extraction, safe JSON parsing, Zod parsing, and `withApiHandler`.
+
+- [ ] **Step 4: Verify foundation passes**
+
+Run: `bun run test src/server/foundation/context.test.ts src/server/handlers/api.test.ts`
+
+Expected: pass.
+
+### Task 4: Repository And Services
+
+**Files:**
+- Create: `src/repository/docs/documents.ts`
+- Create: `src/services/docs/create-document.ts`
+- Create: `src/services/docs/get-document.ts`
+- Create: `src/services/docs/list-documents.ts`
+- Create: `src/services/docs/share-document.ts`
+- Create: `src/services/docs/update-document.ts`
+- Create: `src/services/docs/service.test.ts`
+
+- [ ] **Step 1: Add failing service tests**
+
+Create service tests using an in-memory repository fake. Cover:
+
+```ts
+// createDocument creates metadata and version 1
+// getDocument defaults to latest version
+// getDocument returns a requested version
+// shared email can read
+// shared email cannot update
+// owner can update and gets latestVersion + 1
+// owner and shared user can share
+// listDocuments filters all, owned, and shared
+// user without primary email gets no shared documents
+```
+
+- [ ] **Step 2: Verify service tests fail**
+
+Run: `bun run test src/services/docs/service.test.ts`
+
+Expected: fail because services do not exist.
+
+- [ ] **Step 3: Implement services**
+
+Services should accept `{ db, user, userEmail }` from `ApiContext`, create a repository with `createDocumentsRepository(db)`, enforce authorization, and throw `ApiError` for expected failures. `updateDocument` should call a repository transaction that computes the next version and inserts the new immutable version.
+
+- [ ] **Step 4: Implement repository**
+
+Implement Drizzle queries in `src/repository/docs/documents.ts`. Include:
+
+```ts
+createDocumentWithInitialVersion(input)
+findDocumentAccess(documentId, userId, userEmail)
+findDocumentVersion(documentId, version?)
+listAccessibleDocuments(userId, userEmail, access)
+createDocumentVersion(documentId, userId, html)
+shareDocument(documentId, sharedByUserId, emails)
+```
+
+Use `onConflictDoNothing` for idempotent share inserts.
+
+- [ ] **Step 5: Verify services pass**
+
+Run: `bun run test src/services/docs/service.test.ts`
+
+Expected: pass.
+
+### Task 5: HTTP Handlers And Next Route Adapters
+
+**Files:**
+- Create: `src/server/handlers/docs.ts`
+- Create: `src/server/handlers/docs.test.ts`
+- Create: `src/app/api/docs/route.ts`
+- Create: `src/app/api/docs/[id]/route.ts`
+- Create: `src/app/api/docs/share/[id]/route.ts`
+
+- [ ] **Step 1: Add failing handler tests**
+
+Write handler tests with mocked document services. Cover:
+
+```ts
+// POST /api/docs returns 201 and parses body
+// GET /api/docs returns list response and validates access filter
+// GET /api/docs/{id} awaits params and defaults latest version
+// PUT /api/docs/{id} returns 403 when service throws forbidden ApiError
+// POST /api/docs/share/{id} normalizes email input
+```
+
+- [ ] **Step 2: Verify handler tests fail**
+
+Run: `bun run test src/server/handlers/docs.test.ts`
+
+Expected: fail because handlers do not exist.
+
+- [ ] **Step 3: Implement HTTP handlers**
+
+Implement named exports in `src/server/handlers/docs.ts`, for example:
+
+```ts
+export const POST = withApiHandler(async ({ request, ctx }) => {
+  const body = await parseJsonBody(request);
+  const input = parseWithSchema(createDocumentRequestSchema, body);
+  return jsonResponse(await createDocument(ctx, input), { status: 201 });
+});
+```
+
+Use Next.js 16 async route params by awaiting `routeContext.params` inside the handler wrapper or handler.
+
+- [ ] **Step 4: Implement route adapters**
+
+Each `src/app/api/docs/**/route.ts` should export `runtime = "nodejs"` and delegate to the matching function from `src/server/handlers/docs.ts`.
+
+- [ ] **Step 5: Verify handlers pass**
+
+Run: `bun run test src/server/handlers/docs.test.ts`
+
+Expected: pass.
+
+### Task 6: Final Verification
+
+**Files:**
+- All touched implementation and test files.
+
+- [ ] **Step 1: Run unit tests**
+
+Run: `bun run test`
+
+Expected: all tests pass.
+
+- [ ] **Step 2: Run typecheck**
+
+Run: `bun run typecheck`
+
+Expected: exit code 0.
+
+- [ ] **Step 3: Run lint**
+
+Run: `bun run lint`
+
+Expected: exit code 0.
+
+- [ ] **Step 4: Review git diff**
+
+Run: `git diff --stat` and `git diff --check`
+
+Expected: no whitespace errors; diff only contains docs API implementation, migration, tests, and plan.

From 1b1e8b34efb58a51c9f5418f90dab230d1e30445 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 18:07:12 -0300
Subject: [PATCH 06/26] feat: add docs API type contracts

---
 src/types/docs.test.ts | 170 +++++++++++++++++++++++++++++++++++++++++
 src/types/docs.ts      | 110 ++++++++++++++++++++++++++
 2 files changed, 280 insertions(+)
 create mode 100644 src/types/docs.test.ts
 create mode 100644 src/types/docs.ts

diff --git a/src/types/docs.test.ts b/src/types/docs.test.ts
new file mode 100644
index 0000000..cab3a2b
--- /dev/null
+++ b/src/types/docs.test.ts
@@ -0,0 +1,170 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  createDocumentRequestSchema,
+  documentRouteParamsSchema,
+  getDocumentQuerySchema,
+  listDocumentsQuerySchema,
+  newDocumentSchema,
+  newDocumentShareSchema,
+  newDocumentVersionSchema,
+  shareDocumentRequestSchema,
+  updateDocumentRequestSchema,
+} from "./docs";
+
+describe("docs contracts", () => {
+  it("normalizes create document input", () => {
+    expect(
+      createDocumentRequestSchema.parse({
+        name: "  Report  ",
+        description: "  ",
+        html: "<h1>Report</h1>",
+      }),
+    ).toEqual({
+      name: "Report",
+      description: null,
+      html: "<h1>Report</h1>",
+    });
+
+    expect(
+      createDocumentRequestSchema.parse({
+        name: "Report",
+        description: null,
+        html: "<p>Body</p>",
+      }),
+    ).toEqual({ name: "Report", description: null, html: "<p>Body</p>" });
+  });
+
+  it("rejects empty create and update content", () => {
+    expect(() =>
+      createDocumentRequestSchema.parse({ name: "   ", html: "<p>Body</p>" }),
+    ).toThrow();
+
+    expect(() =>
+      createDocumentRequestSchema.parse({ name: "Report", html: "" }),
+    ).toThrow();
+
+    expect(() => updateDocumentRequestSchema.parse({ html: "" })).toThrow();
+  });
+
+  it("parses route params, versions, and list filters", () => {
+    expect(documentRouteParamsSchema.parse({ id: "doc_1" })).toEqual({
+      id: "doc_1",
+    });
+    expect(() => documentRouteParamsSchema.parse({ id: "" })).toThrow();
+
+    expect(getDocumentQuerySchema.parse({ version: "2" })).toEqual({
+      version: 2,
+    });
+    expect(getDocumentQuerySchema.parse({})).toEqual({});
+    expect(() => getDocumentQuerySchema.parse({ version: "0" })).toThrow();
+    expect(() => getDocumentQuerySchema.parse({ version: "1.5" })).toThrow();
+
+    expect(listDocumentsQuerySchema.parse({})).toEqual({ access: "all" });
+    expect(listDocumentsQuerySchema.parse({ access: "shared" })).toEqual({
+      access: "shared",
+    });
+    expect(() =>
+      listDocumentsQuerySchema.parse({ access: "unknown" }),
+    ).toThrow();
+  });
+
+  it("normalizes and deduplicates share emails", () => {
+    expect(
+      shareDocumentRequestSchema.parse({
+        emails: [
+          " Reader@Example.com ",
+          "reader@example.com",
+          "reviewer@example.com",
+        ],
+      }),
+    ).toEqual({
+      emails: ["reader@example.com", "reviewer@example.com"],
+    });
+
+    expect(() => shareDocumentRequestSchema.parse({ emails: [] })).toThrow();
+    expect(() =>
+      shareDocumentRequestSchema.parse({ emails: ["not-an-email"] }),
+    ).toThrow();
+  });
+
+  it("validates DB insert objects", () => {
+    const createdAt = new Date("2026-06-12T00:00:00.000Z");
+
+    expect(
+      newDocumentSchema.parse({
+        id: "doc_1",
+        ownerUserId: "user_1",
+        name: "Report",
+        description: null,
+        createdAt,
+        updatedAt: createdAt,
+      }),
+    ).toEqual({
+      id: "doc_1",
+      ownerUserId: "user_1",
+      name: "Report",
+      description: null,
+      createdAt,
+      updatedAt: createdAt,
+    });
+
+    expect(
+      newDocumentVersionSchema.parse({
+        id: "version_1",
+        documentId: "doc_1",
+        versionNumber: 1,
+        html: "<p>Body</p>",
+        createdByUserId: "user_1",
+        createdAt,
+      }),
+    ).toEqual({
+      id: "version_1",
+      documentId: "doc_1",
+      versionNumber: 1,
+      html: "<p>Body</p>",
+      createdByUserId: "user_1",
+      createdAt,
+    });
+
+    expect(
+      newDocumentShareSchema.parse({
+        id: "share_1",
+        documentId: "doc_1",
+        sharedWithEmail: "reader@example.com",
+        sharedByUserId: "user_1",
+        createdAt,
+      }),
+    ).toEqual({
+      id: "share_1",
+      documentId: "doc_1",
+      sharedWithEmail: "reader@example.com",
+      sharedByUserId: "user_1",
+      createdAt,
+    });
+  });
+
+  it("rejects non-normalized DB share emails", () => {
+    const createdAt = new Date("2026-06-12T00:00:00.000Z");
+
+    expect(() =>
+      newDocumentShareSchema.parse({
+        id: "share_1",
+        documentId: "doc_1",
+        sharedWithEmail: "Reader@Example.com",
+        sharedByUserId: "user_1",
+        createdAt,
+      }),
+    ).toThrow();
+
+    expect(() =>
+      newDocumentShareSchema.parse({
+        id: "share_1",
+        documentId: "doc_1",
+        sharedWithEmail: " reader@example.com ",
+        sharedByUserId: "user_1",
+        createdAt,
+      }),
+    ).toThrow();
+  });
+});
diff --git a/src/types/docs.ts b/src/types/docs.ts
new file mode 100644
index 0000000..2a2e4c9
--- /dev/null
+++ b/src/types/docs.ts
@@ -0,0 +1,110 @@
+import { z } from "zod";
+
+const nonEmptyTrimmedStringSchema = z
+  .string()
+  .trim()
+  .min(1, "Required");
+
+const nonEmptyStringSchema = z.string().min(1, "Required");
+
+const dateSchema = z.date();
+
+const normalizedEmailSchema = z.string().trim().toLowerCase().email();
+
+const storedEmailSchema = z
+  .string()
+  .email()
+  .refine((email) => email === email.trim(), {
+    message: "Email must be trimmed before insertion.",
+  })
+  .refine((email) => email === email.toLowerCase(), {
+    message: "Email must be lowercased before insertion.",
+  });
+
+const nullishDescriptionSchema = z
+  .string()
+  .trim()
+  .nullish()
+  .transform((description) => {
+    if (description === undefined || description === null || description === "") {
+      return null;
+    }
+
+    return description;
+  });
+
+export const createDocumentRequestSchema = z.object({
+  name: nonEmptyTrimmedStringSchema,
+  description: nullishDescriptionSchema,
+  html: nonEmptyStringSchema,
+});
+
+export const updateDocumentRequestSchema = z.object({
+  html: nonEmptyStringSchema,
+});
+
+export const getDocumentQuerySchema = z.object({
+  version: z.coerce.number().int().positive().optional(),
+});
+
+export const listDocumentsQuerySchema = z.object({
+  access: z.enum(["all", "owned", "shared"]).default("all"),
+});
+
+export const shareDocumentRequestSchema = z.object({
+  emails: z
+    .array(normalizedEmailSchema)
+    .nonempty()
+    .transform((emails) => [...new Set(emails)]),
+});
+
+export const documentRouteParamsSchema = z.object({
+  id: nonEmptyStringSchema,
+});
+
+export const newDocumentSchema = z
+  .object({
+    id: nonEmptyStringSchema,
+    ownerUserId: nonEmptyStringSchema,
+    name: nonEmptyTrimmedStringSchema,
+    description: nullishDescriptionSchema,
+    createdAt: dateSchema,
+    updatedAt: dateSchema,
+    deletedAt: dateSchema.nullable().optional(),
+  })
+  .strict();
+
+export const newDocumentVersionSchema = z
+  .object({
+    id: nonEmptyStringSchema,
+    documentId: nonEmptyStringSchema,
+    versionNumber: z.number().int().positive(),
+    html: nonEmptyStringSchema,
+    createdByUserId: nonEmptyStringSchema,
+    createdAt: dateSchema,
+  })
+  .strict();
+
+export const newDocumentShareSchema = z
+  .object({
+    id: nonEmptyStringSchema,
+    documentId: nonEmptyStringSchema,
+    sharedWithEmail: storedEmailSchema,
+    sharedByUserId: nonEmptyStringSchema,
+    createdAt: dateSchema,
+  })
+  .strict();
+
+export type CreateDocumentRequest = z.infer<
+  typeof createDocumentRequestSchema
+>;
+export type UpdateDocumentRequest = z.infer<
+  typeof updateDocumentRequestSchema
+>;
+export type GetDocumentQuery = z.infer<typeof getDocumentQuerySchema>;
+export type ListDocumentsQuery = z.infer<typeof listDocumentsQuerySchema>;
+export type ShareDocumentRequest = z.infer<typeof shareDocumentRequestSchema>;
+export type DocumentRouteParams = z.infer<typeof documentRouteParamsSchema>;
+export type NewDocument = z.infer<typeof newDocumentSchema>;
+export type NewDocumentVersion = z.infer<typeof newDocumentVersionSchema>;
+export type NewDocumentShare = z.infer<typeof newDocumentShareSchema>;

From 49db1033595772bb73dd5bdb4fecc4398a6f466b Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 18:08:10 -0300
Subject: [PATCH 07/26] feat: add document schema tables

---
 drizzle/0001_wide_flatman.sql   |  37 +++
 drizzle/meta/0001_snapshot.json | 428 ++++++++++++++++++++++++++++++++
 drizzle/meta/_journal.json      |   7 +
 src/db/schema.test.ts           | 140 +++++++++++
 src/db/schema.ts                |  89 ++++++-
 5 files changed, 700 insertions(+), 1 deletion(-)
 create mode 100644 drizzle/0001_wide_flatman.sql
 create mode 100644 drizzle/meta/0001_snapshot.json
 create mode 100644 src/db/schema.test.ts

diff --git a/drizzle/0001_wide_flatman.sql b/drizzle/0001_wide_flatman.sql
new file mode 100644
index 0000000..d9a98df
--- /dev/null
+++ b/drizzle/0001_wide_flatman.sql
@@ -0,0 +1,37 @@
+CREATE TABLE "document_shares" (
+	"id" text PRIMARY KEY NOT NULL,
+	"document_id" text NOT NULL,
+	"shared_with_email" text NOT NULL,
+	"shared_by_user_id" text NOT NULL,
+	"created_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "document_versions" (
+	"id" text PRIMARY KEY NOT NULL,
+	"document_id" text NOT NULL,
+	"version_number" integer NOT NULL,
+	"html" text NOT NULL,
+	"created_by_user_id" text NOT NULL,
+	"created_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "documents" (
+	"id" text PRIMARY KEY NOT NULL,
+	"owner_user_id" text NOT NULL,
+	"name" text NOT NULL,
+	"description" text,
+	"created_at" timestamp with time zone NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL,
+	"deleted_at" timestamp with time zone
+);
+--> statement-breakpoint
+ALTER TABLE "document_shares" ADD CONSTRAINT "document_shares_document_id_documents_id_fk" FOREIGN KEY ("document_id") REFERENCES "public"."documents"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "document_shares" ADD CONSTRAINT "document_shares_shared_by_user_id_users_id_fk" FOREIGN KEY ("shared_by_user_id") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "document_versions" ADD CONSTRAINT "document_versions_document_id_documents_id_fk" FOREIGN KEY ("document_id") REFERENCES "public"."documents"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "document_versions" ADD CONSTRAINT "document_versions_created_by_user_id_users_id_fk" FOREIGN KEY ("created_by_user_id") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "documents" ADD CONSTRAINT "documents_owner_user_id_users_id_fk" FOREIGN KEY ("owner_user_id") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "document_shares_document_id_email_unique" ON "document_shares" USING btree ("document_id","shared_with_email");--> statement-breakpoint
+CREATE INDEX "document_shares_shared_with_email_idx" ON "document_shares" USING btree ("shared_with_email");--> statement-breakpoint
+CREATE UNIQUE INDEX "document_versions_document_id_version_unique" ON "document_versions" USING btree ("document_id","version_number");--> statement-breakpoint
+CREATE INDEX "document_versions_document_id_created_at_idx" ON "document_versions" USING btree ("document_id","created_at");--> statement-breakpoint
+CREATE INDEX "documents_owner_user_id_idx" ON "documents" USING btree ("owner_user_id");
\ No newline at end of file
diff --git a/drizzle/meta/0001_snapshot.json b/drizzle/meta/0001_snapshot.json
new file mode 100644
index 0000000..2426a17
--- /dev/null
+++ b/drizzle/meta/0001_snapshot.json
@@ -0,0 +1,428 @@
+{
+  "id": "b9031c25-0d22-4e52-be63-f7b67491fd41",
+  "prevId": "2c4937ce-8f75-4996-8915-f538a28ffdaf",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.document_shares": {
+      "name": "document_shares",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "document_id": {
+          "name": "document_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "shared_with_email": {
+          "name": "shared_with_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "shared_by_user_id": {
+          "name": "shared_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "document_shares_document_id_email_unique": {
+          "name": "document_shares_document_id_email_unique",
+          "columns": [
+            {
+              "expression": "document_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "shared_with_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "document_shares_shared_with_email_idx": {
+          "name": "document_shares_shared_with_email_idx",
+          "columns": [
+            {
+              "expression": "shared_with_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "document_shares_document_id_documents_id_fk": {
+          "name": "document_shares_document_id_documents_id_fk",
+          "tableFrom": "document_shares",
+          "tableTo": "documents",
+          "columnsFrom": [
+            "document_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "document_shares_shared_by_user_id_users_id_fk": {
+          "name": "document_shares_shared_by_user_id_users_id_fk",
+          "tableFrom": "document_shares",
+          "tableTo": "users",
+          "columnsFrom": [
+            "shared_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.document_versions": {
+      "name": "document_versions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "document_id": {
+          "name": "document_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "version_number": {
+          "name": "version_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "html": {
+          "name": "html",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "document_versions_document_id_version_unique": {
+          "name": "document_versions_document_id_version_unique",
+          "columns": [
+            {
+              "expression": "document_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "version_number",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "document_versions_document_id_created_at_idx": {
+          "name": "document_versions_document_id_created_at_idx",
+          "columns": [
+            {
+              "expression": "document_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "document_versions_document_id_documents_id_fk": {
+          "name": "document_versions_document_id_documents_id_fk",
+          "tableFrom": "document_versions",
+          "tableTo": "documents",
+          "columnsFrom": [
+            "document_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "document_versions_created_by_user_id_users_id_fk": {
+          "name": "document_versions_created_by_user_id_users_id_fk",
+          "tableFrom": "document_versions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.documents": {
+      "name": "documents",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "deleted_at": {
+          "name": "deleted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "documents_owner_user_id_idx": {
+          "name": "documents_owner_user_id_idx",
+          "columns": [
+            {
+              "expression": "owner_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "documents_owner_user_id_users_id_fk": {
+          "name": "documents_owner_user_id_users_id_fk",
+          "tableFrom": "documents",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.users": {
+      "name": "users",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "clerk_user_id": {
+          "name": "clerk_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "primary_email": {
+          "name": "primary_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "first_name": {
+          "name": "first_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_name": {
+          "name": "last_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "image_url": {
+          "name": "image_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "deleted_at": {
+          "name": "deleted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "users_clerk_user_id_unique": {
+          "name": "users_clerk_user_id_unique",
+          "columns": [
+            {
+              "expression": "clerk_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "users_primary_email_idx": {
+          "name": "users_primary_email_idx",
+          "columns": [
+            {
+              "expression": "primary_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {},
+  "schemas": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "views": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/meta/_journal.json b/drizzle/meta/_journal.json
index d2ebd60..f2b6342 100644
--- a/drizzle/meta/_journal.json
+++ b/drizzle/meta/_journal.json
@@ -8,6 +8,13 @@
       "when": 1781227457832,
       "tag": "0000_create_users_table",
       "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "7",
+      "when": 1781298395771,
+      "tag": "0001_wide_flatman",
+      "breakpoints": true
     }
   ]
 }
\ No newline at end of file
diff --git a/src/db/schema.test.ts b/src/db/schema.test.ts
new file mode 100644
index 0000000..e71f63f
--- /dev/null
+++ b/src/db/schema.test.ts
@@ -0,0 +1,140 @@
+import { describe, expect, it } from "vitest";
+import { getTableColumns, getTableName } from "drizzle-orm";
+
+import * as schema from "./schema";
+
+type TableExport = Parameters<typeof getTableColumns>[0];
+
+function expectTableExport(name: keyof typeof schema, tableName: string) {
+  const table = schema[name];
+
+  expect(table).toBeDefined();
+  expect(getTableName(table as TableExport)).toBe(tableName);
+
+  return getTableColumns(table as TableExport);
+}
+
+function expectColumn(
+  column: { name: string; notNull: boolean; primary: boolean; columnType: string },
+  expected: {
+    name: string;
+    notNull: boolean;
+    primary?: boolean;
+    columnType: string;
+  },
+) {
+  expect(column.name).toBe(expected.name);
+  expect(column.notNull).toBe(expected.notNull);
+  expect(column.primary).toBe(expected.primary ?? false);
+  expect(column.columnType).toBe(expected.columnType);
+}
+
+describe("document schema", () => {
+  it("exports documents with required columns", () => {
+    const columns = expectTableExport("documents", "documents");
+
+    expectColumn(columns.id, {
+      name: "id",
+      notNull: true,
+      primary: true,
+      columnType: "PgText",
+    });
+    expectColumn(columns.ownerUserId, {
+      name: "owner_user_id",
+      notNull: true,
+      columnType: "PgText",
+    });
+    expectColumn(columns.name, {
+      name: "name",
+      notNull: true,
+      columnType: "PgText",
+    });
+    expectColumn(columns.description, {
+      name: "description",
+      notNull: false,
+      columnType: "PgText",
+    });
+    expectColumn(columns.createdAt, {
+      name: "created_at",
+      notNull: true,
+      columnType: "PgTimestamp",
+    });
+    expectColumn(columns.updatedAt, {
+      name: "updated_at",
+      notNull: true,
+      columnType: "PgTimestamp",
+    });
+    expectColumn(columns.deletedAt, {
+      name: "deleted_at",
+      notNull: false,
+      columnType: "PgTimestamp",
+    });
+  });
+
+  it("exports documentVersions with required columns", () => {
+    const columns = expectTableExport("documentVersions", "document_versions");
+
+    expectColumn(columns.id, {
+      name: "id",
+      notNull: true,
+      primary: true,
+      columnType: "PgText",
+    });
+    expectColumn(columns.documentId, {
+      name: "document_id",
+      notNull: true,
+      columnType: "PgText",
+    });
+    expectColumn(columns.versionNumber, {
+      name: "version_number",
+      notNull: true,
+      columnType: "PgInteger",
+    });
+    expectColumn(columns.html, {
+      name: "html",
+      notNull: true,
+      columnType: "PgText",
+    });
+    expectColumn(columns.createdByUserId, {
+      name: "created_by_user_id",
+      notNull: true,
+      columnType: "PgText",
+    });
+    expectColumn(columns.createdAt, {
+      name: "created_at",
+      notNull: true,
+      columnType: "PgTimestamp",
+    });
+  });
+
+  it("exports documentShares with required columns", () => {
+    const columns = expectTableExport("documentShares", "document_shares");
+
+    expectColumn(columns.id, {
+      name: "id",
+      notNull: true,
+      primary: true,
+      columnType: "PgText",
+    });
+    expectColumn(columns.documentId, {
+      name: "document_id",
+      notNull: true,
+      columnType: "PgText",
+    });
+    expectColumn(columns.sharedWithEmail, {
+      name: "shared_with_email",
+      notNull: true,
+      columnType: "PgText",
+    });
+    expectColumn(columns.sharedByUserId, {
+      name: "shared_by_user_id",
+      notNull: true,
+      columnType: "PgText",
+    });
+    expectColumn(columns.createdAt, {
+      name: "created_at",
+      notNull: true,
+      columnType: "PgTimestamp",
+    });
+  });
+});
diff --git a/src/db/schema.ts b/src/db/schema.ts
index bcf9c3b..77e1be2 100644
--- a/src/db/schema.ts
+++ b/src/db/schema.ts
@@ -1,4 +1,11 @@
-import { index, pgTable, text, timestamp, uniqueIndex } from "drizzle-orm/pg-core";
+import {
+  index,
+  integer,
+  pgTable,
+  text,
+  timestamp,
+  uniqueIndex,
+} from "drizzle-orm/pg-core";
 
 export const users = pgTable(
   "users",
@@ -26,3 +33,83 @@ export const users = pgTable(
 
 export type User = typeof users.$inferSelect;
 export type NewUser = typeof users.$inferInsert;
+
+export const documents = pgTable(
+  "documents",
+  {
+    id: text("id").primaryKey(),
+    ownerUserId: text("owner_user_id")
+      .notNull()
+      .references(() => users.id),
+    name: text("name").notNull(),
+    description: text("description"),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .$defaultFn(() => new Date()),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .$defaultFn(() => new Date())
+      .$onUpdateFn(() => new Date()),
+    deletedAt: timestamp("deleted_at", { withTimezone: true }),
+  },
+  (table) => [index("documents_owner_user_id_idx").on(table.ownerUserId)],
+);
+
+export const documentVersions = pgTable(
+  "document_versions",
+  {
+    id: text("id").primaryKey(),
+    documentId: text("document_id")
+      .notNull()
+      .references(() => documents.id),
+    versionNumber: integer("version_number").notNull(),
+    html: text("html").notNull(),
+    createdByUserId: text("created_by_user_id")
+      .notNull()
+      .references(() => users.id),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .$defaultFn(() => new Date()),
+  },
+  (table) => [
+    uniqueIndex("document_versions_document_id_version_unique").on(
+      table.documentId,
+      table.versionNumber,
+    ),
+    index("document_versions_document_id_created_at_idx").on(
+      table.documentId,
+      table.createdAt,
+    ),
+  ],
+);
+
+export const documentShares = pgTable(
+  "document_shares",
+  {
+    id: text("id").primaryKey(),
+    documentId: text("document_id")
+      .notNull()
+      .references(() => documents.id),
+    sharedWithEmail: text("shared_with_email").notNull(),
+    sharedByUserId: text("shared_by_user_id")
+      .notNull()
+      .references(() => users.id),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .$defaultFn(() => new Date()),
+  },
+  (table) => [
+    uniqueIndex("document_shares_document_id_email_unique").on(
+      table.documentId,
+      table.sharedWithEmail,
+    ),
+    index("document_shares_shared_with_email_idx").on(table.sharedWithEmail),
+  ],
+);
+
+export type Document = typeof documents.$inferSelect;
+export type NewDocument = typeof documents.$inferInsert;
+export type DocumentVersion = typeof documentVersions.$inferSelect;
+export type NewDocumentVersion = typeof documentVersions.$inferInsert;
+export type DocumentShare = typeof documentShares.$inferSelect;
+export type NewDocumentShare = typeof documentShares.$inferInsert;

From 6f0e7ef0bbf93d6a8d0aff02dd1e373f84c7017b Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 18:08:53 -0300
Subject: [PATCH 08/26] feat: add api endpoint foundation

---
 src/server/foundation/context.test.ts |  80 +++++++++++++
 src/server/foundation/context.ts      |  73 ++++++++++++
 src/server/foundation/errors.ts       |  44 +++++++
 src/server/foundation/logs.ts         |  26 +++++
 src/server/handlers/api.test.ts       |  77 +++++++++++++
 src/server/handlers/api.ts            | 160 ++++++++++++++++++++++++++
 6 files changed, 460 insertions(+)
 create mode 100644 src/server/foundation/context.test.ts
 create mode 100644 src/server/foundation/context.ts
 create mode 100644 src/server/foundation/errors.ts
 create mode 100644 src/server/foundation/logs.ts
 create mode 100644 src/server/handlers/api.test.ts
 create mode 100644 src/server/handlers/api.ts

diff --git a/src/server/foundation/context.test.ts b/src/server/foundation/context.test.ts
new file mode 100644
index 0000000..09d3e47
--- /dev/null
+++ b/src/server/foundation/context.test.ts
@@ -0,0 +1,80 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+vi.mock("@clerk/nextjs/server", () => ({
+  auth: vi.fn(),
+}));
+
+describe("createApiContext", () => {
+  beforeEach(() => {
+    vi.resetModules();
+    vi.clearAllMocks();
+  });
+
+  it("returns 401 when Clerk has no authenticated user", async () => {
+    const { auth } = await import("@clerk/nextjs/server");
+    vi.mocked(auth).mockResolvedValue({ userId: null } as never);
+
+    const { createApiContext } = await import("./context");
+    const result = await createApiContext(fakeDb());
+
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.response.status).toBe(401);
+      await expect(result.response.json()).resolves.toMatchObject({
+        error: { code: "unauthorized" },
+      });
+    }
+  });
+
+  it("returns 409 when the Clerk user has no active local user row", async () => {
+    const { auth } = await import("@clerk/nextjs/server");
+    vi.mocked(auth).mockResolvedValue({ userId: "clerk_123" } as never);
+
+    const { createApiContext } = await import("./context");
+    const result = await createApiContext(fakeDb(null));
+
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.response.status).toBe(409);
+      await expect(result.response.json()).resolves.toMatchObject({
+        error: { code: "user_not_synced" },
+      });
+    }
+  });
+
+  it("returns context with local user, normalized email, and db", async () => {
+    const { auth } = await import("@clerk/nextjs/server");
+    vi.mocked(auth).mockResolvedValue({ userId: "clerk_123" } as never);
+    const database = fakeDb({
+      id: "user_1",
+      clerkUserId: "clerk_123",
+      primaryEmail: " Ada@Example.com ",
+      firstName: null,
+      lastName: null,
+      imageUrl: null,
+      createdAt: new Date("2026-06-12T00:00:00.000Z"),
+      updatedAt: new Date("2026-06-12T00:00:00.000Z"),
+      deletedAt: null,
+    });
+
+    const { createApiContext } = await import("./context");
+    const result = await createApiContext(database);
+
+    expect(result.ok).toBe(true);
+    if (result.ok) {
+      expect(result.ctx.db).toBe(database);
+      expect(result.ctx.user.id).toBe("user_1");
+      expect(result.ctx.userEmail).toBe("ada@example.com");
+    }
+  });
+});
+
+function fakeDb(user: unknown = null) {
+  return {
+    query: {
+      users: {
+        findFirst: vi.fn().mockResolvedValue(user),
+      },
+    },
+  };
+}
diff --git a/src/server/foundation/context.ts b/src/server/foundation/context.ts
new file mode 100644
index 0000000..efa36a7
--- /dev/null
+++ b/src/server/foundation/context.ts
@@ -0,0 +1,73 @@
+import { auth } from "@clerk/nextjs/server";
+import { and, eq, isNull } from "drizzle-orm";
+
+import { db, type User, users } from "@/db";
+
+type Db = typeof db;
+
+export type ApiContext = {
+  db: Db;
+  requestId: string;
+  user: User;
+  userEmail: string | null;
+};
+
+export type ApiContextResult =
+  | { ok: true; ctx: ApiContext }
+  | { ok: false; response: Response };
+
+type DbLike = Db & {
+  query: {
+    users: {
+      findFirst(args: unknown): Promise<User | undefined | null>;
+    };
+  };
+};
+
+export async function createApiContext(
+  database: DbLike = db as DbLike,
+  requestId = crypto.randomUUID(),
+): Promise<ApiContextResult> {
+  const session = await auth();
+
+  if (!session.userId) {
+    return {
+      ok: false,
+      response: errorResponse("unauthorized", "Authentication required", 401),
+    };
+  }
+
+  const user = await database.query.users.findFirst({
+    where: and(eq(users.clerkUserId, session.userId), isNull(users.deletedAt)),
+  });
+
+  if (!user) {
+    return {
+      ok: false,
+      response: errorResponse(
+        "user_not_synced",
+        "Authenticated user has not been synchronized yet",
+        409,
+      ),
+    };
+  }
+
+  return {
+    ok: true,
+    ctx: {
+      db: database,
+      requestId,
+      user,
+      userEmail: normalizeEmail(user.primaryEmail),
+    },
+  };
+}
+
+function normalizeEmail(email: string | null): string | null {
+  const normalized = email?.trim().toLowerCase();
+  return normalized === "" ? null : normalized ?? null;
+}
+
+function errorResponse(code: string, message: string, status: number): Response {
+  return Response.json({ error: { code, message } }, { status });
+}
diff --git a/src/server/foundation/errors.ts b/src/server/foundation/errors.ts
new file mode 100644
index 0000000..3dc3422
--- /dev/null
+++ b/src/server/foundation/errors.ts
@@ -0,0 +1,44 @@
+export type ApiErrorCode =
+  | "validation_error"
+  | "unauthorized"
+  | "forbidden"
+  | "not_found"
+  | "conflict"
+  | "user_not_synced"
+  | "internal_error";
+
+export class ApiError extends Error {
+  constructor(
+    public readonly status: number,
+    public readonly code: ApiErrorCode,
+    message: string,
+    public readonly details?: unknown,
+  ) {
+    super(message);
+    this.name = "ApiError";
+  }
+}
+
+export function validationError(message = "Invalid request", details?: unknown) {
+  return new ApiError(400, "validation_error", message, details);
+}
+
+export function unauthorizedError(message = "Authentication required") {
+  return new ApiError(401, "unauthorized", message);
+}
+
+export function forbiddenError(message = "Forbidden") {
+  return new ApiError(403, "forbidden", message);
+}
+
+export function notFoundError(message = "Not found") {
+  return new ApiError(404, "not_found", message);
+}
+
+export function conflictError(message = "Conflict", code: ApiErrorCode = "conflict") {
+  return new ApiError(409, code, message);
+}
+
+export function internalError(message = "Internal server error") {
+  return new ApiError(500, "internal_error", message);
+}
diff --git a/src/server/foundation/logs.ts b/src/server/foundation/logs.ts
new file mode 100644
index 0000000..3677c82
--- /dev/null
+++ b/src/server/foundation/logs.ts
@@ -0,0 +1,26 @@
+type ApiLogFields = {
+  requestId: string;
+  method: string;
+  pathname: string;
+  status: number;
+  durationMs: number;
+  userId?: string;
+  errorCode?: string;
+};
+
+export function logApiRequest(fields: ApiLogFields): void {
+  console.info("api_request", fields);
+}
+
+export function logApiError(
+  error: unknown,
+  fields: Omit<ApiLogFields, "status" | "durationMs"> & {
+    status?: number;
+    durationMs?: number;
+  },
+): void {
+  console.error("api_error", {
+    ...fields,
+    errorName: error instanceof Error ? error.name : "UnknownError",
+  });
+}
diff --git a/src/server/handlers/api.test.ts b/src/server/handlers/api.test.ts
new file mode 100644
index 0000000..6b8ec82
--- /dev/null
+++ b/src/server/handlers/api.test.ts
@@ -0,0 +1,77 @@
+import { describe, expect, it, vi } from "vitest";
+import { z } from "zod";
+
+import { ApiError } from "@/server/foundation/errors";
+
+vi.mock("@/server/foundation/context", () => ({
+  createApiContext: vi.fn().mockResolvedValue({
+    ok: true,
+    ctx: {
+      db: {},
+      user: { id: "user_1" },
+      userEmail: "ada@example.com",
+      requestId: "req_test",
+    },
+  }),
+}));
+
+vi.mock("@/server/foundation/logs", () => ({
+  logApiError: vi.fn(),
+  logApiRequest: vi.fn(),
+}));
+
+describe("API handler foundation", () => {
+  it("converts ApiError into a JSON error response", async () => {
+    const { withApiHandler } = await import("./api");
+    const handler = withApiHandler(async () => {
+      throw new ApiError(403, "forbidden", "Forbidden");
+    });
+
+    const response = await handler(new Request("https://app.test/api/docs"));
+
+    expect(response.status).toBe(403);
+    await expect(response.json()).resolves.toEqual({
+      error: { code: "forbidden", message: "Forbidden" },
+    });
+  });
+
+  it("converts unexpected errors into generic 500 JSON", async () => {
+    const { withApiHandler } = await import("./api");
+    const handler = withApiHandler(async () => {
+      throw new Error("database password leaked");
+    });
+
+    const response = await handler(new Request("https://app.test/api/docs"));
+
+    expect(response.status).toBe(500);
+    await expect(response.json()).resolves.toEqual({
+      error: { code: "internal_error", message: "Internal server error" },
+    });
+  });
+
+  it("returns validation_error for malformed JSON", async () => {
+    const { parseJsonBody } = await import("./api");
+
+    await expect(
+      parseJsonBody(
+        new Request("https://app.test/api/docs", {
+          method: "POST",
+          body: "{",
+        }),
+      ),
+    ).rejects.toMatchObject({ status: 400, code: "validation_error" });
+  });
+
+  it("formats Zod validation failures without echoing submitted HTML", async () => {
+    const { parseWithSchema } = await import("./api");
+    const schema = z.object({ name: z.string().min(1) });
+
+    try {
+      parseWithSchema(schema, { name: "", html: "<script>alert(1)</script>" });
+      throw new Error("expected parseWithSchema to throw");
+    } catch (error) {
+      expect(error).toMatchObject({ status: 400, code: "validation_error" });
+      expect(JSON.stringify(error)).not.toContain("<script>");
+    }
+  });
+});
diff --git a/src/server/handlers/api.ts b/src/server/handlers/api.ts
new file mode 100644
index 0000000..e057f54
--- /dev/null
+++ b/src/server/handlers/api.ts
@@ -0,0 +1,160 @@
+import { ZodError, type ZodType } from "zod";
+
+import { createApiContext, type ApiContext } from "@/server/foundation/context";
+import { ApiError, validationError } from "@/server/foundation/errors";
+import { logApiError, logApiRequest } from "@/server/foundation/logs";
+
+type JsonResponseOptions = {
+  status?: number;
+  headers?: HeadersInit;
+};
+
+export type ApiHandler<TParams = unknown> = (input: {
+  request: Request;
+  ctx: ApiContext;
+  params: TParams;
+}) => Promise<Response>;
+
+export function jsonResponse(
+  body: unknown,
+  options: JsonResponseOptions = {},
+): Response {
+  return Response.json(body, {
+    status: options.status ?? 200,
+    headers: options.headers,
+  });
+}
+
+export function jsonErrorResponse(
+  code: string,
+  message: string,
+  status: number,
+  details?: unknown,
+): Response {
+  return jsonResponse(
+    {
+      error: {
+        code,
+        message,
+        ...(details === undefined ? {} : { details }),
+      },
+    },
+    { status },
+  );
+}
+
+export async function parseJsonBody(request: Request): Promise<unknown> {
+  try {
+    return await request.json();
+  } catch {
+    throw validationError("Malformed JSON");
+  }
+}
+
+export function parseWithSchema<T>(schema: ZodType<T>, value: unknown): T {
+  const result = schema.safeParse(value);
+
+  if (result.success) {
+    return result.data;
+  }
+
+  throw validationError("Invalid request", toSafeZodDetails(result.error));
+}
+
+export function searchParamsToObject(searchParams: URLSearchParams) {
+  return Object.fromEntries(searchParams.entries());
+}
+
+export function withApiHandler<TParams = unknown>(
+  handler: ApiHandler<TParams>,
+): (request: Request, routeContext?: { params?: Promise<TParams> | TParams }) => Promise<Response> {
+  return async (request, routeContext) => {
+    const startedAt = performance.now();
+    const requestId = getRequestId(request);
+    const url = new URL(request.url);
+    let userId: string | undefined;
+    let errorCode: string | undefined;
+    let response: Response;
+
+    try {
+      const contextResult = await createApiContext(undefined, requestId);
+
+      if (!contextResult.ok) {
+        response = contextResult.response;
+        errorCode = await readErrorCode(response);
+        return response;
+      }
+
+      userId = contextResult.ctx.user.id;
+      const params = await routeContext?.params;
+      response = await handler({
+        request,
+        ctx: contextResult.ctx,
+        params: params as TParams,
+      });
+      return response;
+    } catch (error) {
+      if (error instanceof ApiError) {
+        errorCode = error.code;
+        response = jsonErrorResponse(
+          error.code,
+          error.message,
+          error.status,
+          error.details,
+        );
+        return response;
+      }
+
+      errorCode = "internal_error";
+      logApiError(error, {
+        requestId,
+        method: request.method,
+        pathname: url.pathname,
+        userId,
+        errorCode,
+      });
+      response = jsonErrorResponse(
+        "internal_error",
+        "Internal server error",
+        500,
+      );
+      return response;
+    } finally {
+      const status = response?.status ?? 500;
+      logApiRequest({
+        requestId,
+        method: request.method,
+        pathname: url.pathname,
+        status,
+        durationMs: Math.round(performance.now() - startedAt),
+        userId,
+        errorCode,
+      });
+    }
+  };
+}
+
+function getRequestId(request: Request): string {
+  return (
+    request.headers.get("x-request-id") ??
+    request.headers.get("x-vercel-id") ??
+    crypto.randomUUID()
+  );
+}
+
+function toSafeZodDetails(error: ZodError) {
+  return error.issues.map((issue) => ({
+    path: issue.path.map(String),
+    message: issue.message,
+  }));
+}
+
+async function readErrorCode(response: Response): Promise<string | undefined> {
+  try {
+    const clone = response.clone();
+    const body = (await clone.json()) as { error?: { code?: string } };
+    return body.error?.code;
+  } catch {
+    return undefined;
+  }
+}

From 6420eb62d88c3be32d11dca64aa91bb52e7c31e1 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 18:13:43 -0300
Subject: [PATCH 09/26] feat: add docs service layer

---
 src/repository/docs/documents.ts     | 262 ++++++++++++++++++
 src/services/docs/create-document.ts |  21 ++
 src/services/docs/get-document.ts    |  55 ++++
 src/services/docs/list-documents.ts  |  17 ++
 src/services/docs/service.test.ts    | 391 +++++++++++++++++++++++++++
 src/services/docs/share-document.ts  |  52 ++++
 src/services/docs/update-document.ts |  32 +++
 7 files changed, 830 insertions(+)
 create mode 100644 src/repository/docs/documents.ts
 create mode 100644 src/services/docs/create-document.ts
 create mode 100644 src/services/docs/get-document.ts
 create mode 100644 src/services/docs/list-documents.ts
 create mode 100644 src/services/docs/service.test.ts
 create mode 100644 src/services/docs/share-document.ts
 create mode 100644 src/services/docs/update-document.ts

diff --git a/src/repository/docs/documents.ts b/src/repository/docs/documents.ts
new file mode 100644
index 0000000..8381752
--- /dev/null
+++ b/src/repository/docs/documents.ts
@@ -0,0 +1,262 @@
+import { and, desc, eq, inArray, isNull, or } from "drizzle-orm";
+
+import {
+  documentShares,
+  documents,
+  documentVersions,
+  type Document,
+  type DocumentShare,
+  type DocumentVersion,
+  type NewDocument,
+  type NewDocumentShare,
+  type NewDocumentVersion,
+} from "@/db";
+import type { ApiContext } from "@/server/foundation/context";
+
+export type DocumentAccess = "owned" | "shared";
+
+export type DocumentListItem = Document & {
+  access: DocumentAccess;
+  latestVersion: DocumentVersion;
+};
+
+export type DocumentsRepository = {
+  createDocument(input: {
+    document: Omit<NewDocument, "id" | "createdAt" | "updatedAt" | "deletedAt">;
+    version: Pick<NewDocumentVersion, "html" | "createdByUserId">;
+  }): Promise<{ document: Document; version: DocumentVersion }>;
+  findDocumentById(id: string): Promise<Document | null>;
+  findLatestVersion(documentId: string): Promise<DocumentVersion | null>;
+  findVersion(
+    documentId: string,
+    versionNumber: number,
+  ): Promise<DocumentVersion | null>;
+  isSharedWithEmail(documentId: string, email: string): Promise<boolean>;
+  addVersion(input: {
+    documentId: string;
+    html: string;
+    createdByUserId: string;
+  }): Promise<{ document: Document; version: DocumentVersion } | null>;
+  upsertShares(input: {
+    documentId: string;
+    emails: string[];
+    sharedByUserId: string;
+  }): Promise<DocumentShare[]>;
+  listDocuments(input: {
+    ownerUserId: string;
+    sharedWithEmail: string | null;
+    access: "all" | "owned" | "shared";
+  }): Promise<DocumentListItem[]>;
+};
+
+type DocumentsDatabase = ApiContext["db"];
+
+export function createDocumentsRepository(db: DocumentsDatabase): DocumentsRepository {
+  return {
+    async createDocument(input) {
+      return db.transaction(async (tx) => {
+        const now = new Date();
+        const [document] = await tx
+          .insert(documents)
+          .values({
+            id: crypto.randomUUID(),
+            ...input.document,
+            createdAt: now,
+            updatedAt: now,
+            deletedAt: null,
+          })
+          .returning();
+
+        const [version] = await tx
+          .insert(documentVersions)
+          .values({
+            id: crypto.randomUUID(),
+            documentId: document.id,
+            versionNumber: 1,
+            html: input.version.html,
+            createdByUserId: input.version.createdByUserId,
+            createdAt: now,
+          })
+          .returning();
+
+        return { document, version };
+      });
+    },
+
+    async findDocumentById(id) {
+      const [document] = await db
+        .select()
+        .from(documents)
+        .where(and(eq(documents.id, id), isNull(documents.deletedAt)))
+        .limit(1);
+
+      return document ?? null;
+    },
+
+    async findLatestVersion(documentId) {
+      const [version] = await db
+        .select()
+        .from(documentVersions)
+        .where(eq(documentVersions.documentId, documentId))
+        .orderBy(desc(documentVersions.versionNumber))
+        .limit(1);
+
+      return version ?? null;
+    },
+
+    async findVersion(documentId, versionNumber) {
+      const [version] = await db
+        .select()
+        .from(documentVersions)
+        .where(
+          and(
+            eq(documentVersions.documentId, documentId),
+            eq(documentVersions.versionNumber, versionNumber),
+          ),
+        )
+        .limit(1);
+
+      return version ?? null;
+    },
+
+    async isSharedWithEmail(documentId, email) {
+      const [share] = await db
+        .select({ id: documentShares.id })
+        .from(documentShares)
+        .where(
+          and(
+            eq(documentShares.documentId, documentId),
+            eq(documentShares.sharedWithEmail, email),
+          ),
+        )
+        .limit(1);
+
+      return share !== undefined;
+    },
+
+    async addVersion(input) {
+      return db.transaction(async (tx) => {
+        const [document] = await tx
+          .select()
+          .from(documents)
+          .where(
+            and(eq(documents.id, input.documentId), isNull(documents.deletedAt)),
+          )
+          .limit(1);
+
+        if (!document) {
+          return null;
+        }
+
+        const [latestVersion] = await tx
+          .select()
+          .from(documentVersions)
+          .where(eq(documentVersions.documentId, input.documentId))
+          .orderBy(desc(documentVersions.versionNumber))
+          .limit(1);
+
+        const now = new Date();
+        const [version] = await tx
+          .insert(documentVersions)
+          .values({
+            id: crypto.randomUUID(),
+            documentId: input.documentId,
+            versionNumber: (latestVersion?.versionNumber ?? 0) + 1,
+            html: input.html,
+            createdByUserId: input.createdByUserId,
+            createdAt: now,
+          })
+          .returning();
+
+        const [updatedDocument] = await tx
+          .update(documents)
+          .set({ updatedAt: now })
+          .where(eq(documents.id, input.documentId))
+          .returning();
+
+        return { document: updatedDocument, version };
+      });
+    },
+
+    async upsertShares(input) {
+      if (input.emails.length > 0) {
+        await db
+          .insert(documentShares)
+          .values(
+            input.emails.map(
+              (email): NewDocumentShare => ({
+                id: crypto.randomUUID(),
+                documentId: input.documentId,
+                sharedWithEmail: email,
+                sharedByUserId: input.sharedByUserId,
+                createdAt: new Date(),
+              }),
+            ),
+          )
+          .onConflictDoNothing({
+            target: [documentShares.documentId, documentShares.sharedWithEmail],
+          });
+      }
+
+      return db
+        .select()
+        .from(documentShares)
+        .where(eq(documentShares.documentId, input.documentId));
+    },
+
+    async listDocuments(input) {
+      const ownedCondition = eq(documents.ownerUserId, input.ownerUserId);
+      const sharedDocumentIds =
+        input.sharedWithEmail === null
+          ? []
+          : await findSharedDocumentIds(db, input.sharedWithEmail);
+
+      const accessCondition =
+        input.access === "owned"
+          ? ownedCondition
+          : input.access === "shared"
+            ? sharedDocumentIds.length === 0
+              ? undefined
+              : inArray(documents.id, sharedDocumentIds)
+            : sharedDocumentIds.length === 0
+              ? ownedCondition
+              : or(ownedCondition, inArray(documents.id, sharedDocumentIds));
+
+      if (!accessCondition) {
+        return [];
+      }
+
+      const rows = await db
+        .select()
+        .from(documents)
+        .where(and(isNull(documents.deletedAt), accessCondition))
+        .orderBy(desc(documents.updatedAt));
+
+      const items: DocumentListItem[] = [];
+      for (const document of rows) {
+        const latestVersion = await this.findLatestVersion(document.id);
+        if (!latestVersion) {
+          continue;
+        }
+
+        items.push({
+          ...document,
+          access:
+            document.ownerUserId === input.ownerUserId ? "owned" : "shared",
+          latestVersion,
+        });
+      }
+
+      return items;
+    },
+  };
+}
+
+async function findSharedDocumentIds(db: DocumentsDatabase, email: string) {
+  const rows = await db
+    .select({ documentId: documentShares.documentId })
+    .from(documentShares)
+    .where(eq(documentShares.sharedWithEmail, email));
+
+  return rows.map((row) => row.documentId);
+}
diff --git a/src/services/docs/create-document.ts b/src/services/docs/create-document.ts
new file mode 100644
index 0000000..43e04cb
--- /dev/null
+++ b/src/services/docs/create-document.ts
@@ -0,0 +1,21 @@
+import { createDocumentsRepository, type DocumentsRepository } from "@/repository/docs/documents";
+import type { ApiContext } from "@/server/foundation/context";
+import type { CreateDocumentRequest } from "@/types/docs";
+
+export async function createDocument(
+  ctx: ApiContext,
+  input: CreateDocumentRequest,
+  repository: DocumentsRepository = createDocumentsRepository(ctx.db),
+) {
+  return repository.createDocument({
+    document: {
+      ownerUserId: ctx.user.id,
+      name: input.name,
+      description: input.description,
+    },
+    version: {
+      html: input.html,
+      createdByUserId: ctx.user.id,
+    },
+  });
+}
diff --git a/src/services/docs/get-document.ts b/src/services/docs/get-document.ts
new file mode 100644
index 0000000..84fb980
--- /dev/null
+++ b/src/services/docs/get-document.ts
@@ -0,0 +1,55 @@
+import {
+  createDocumentsRepository,
+  type DocumentAccess,
+  type DocumentsRepository,
+} from "@/repository/docs/documents";
+import type { ApiContext } from "@/server/foundation/context";
+import { forbiddenError, notFoundError } from "@/server/foundation/errors";
+import type { DocumentRouteParams, GetDocumentQuery } from "@/types/docs";
+
+export async function getDocument(
+  ctx: ApiContext,
+  params: DocumentRouteParams,
+  query: GetDocumentQuery,
+  repository: DocumentsRepository = createDocumentsRepository(ctx.db),
+) {
+  const document = await repository.findDocumentById(params.id);
+  if (!document) {
+    throw notFoundError("Document not found");
+  }
+
+  const access = await resolveReadAccess(ctx, repository, document);
+  if (!access) {
+    throw forbiddenError("Document access denied");
+  }
+
+  const version =
+    query.version === undefined
+      ? await repository.findLatestVersion(document.id)
+      : await repository.findVersion(document.id, query.version);
+
+  if (!version) {
+    throw notFoundError("Document version not found");
+  }
+
+  return { document, version, access };
+}
+
+async function resolveReadAccess(
+  ctx: ApiContext,
+  repository: DocumentsRepository,
+  document: { id: string; ownerUserId: string },
+): Promise<DocumentAccess | null> {
+  if (document.ownerUserId === ctx.user.id) {
+    return "owned";
+  }
+
+  if (
+    ctx.userEmail !== null &&
+    (await repository.isSharedWithEmail(document.id, ctx.userEmail))
+  ) {
+    return "shared";
+  }
+
+  return null;
+}
diff --git a/src/services/docs/list-documents.ts b/src/services/docs/list-documents.ts
new file mode 100644
index 0000000..4c01cc4
--- /dev/null
+++ b/src/services/docs/list-documents.ts
@@ -0,0 +1,17 @@
+import { createDocumentsRepository, type DocumentsRepository } from "@/repository/docs/documents";
+import type { ApiContext } from "@/server/foundation/context";
+import type { ListDocumentsQuery } from "@/types/docs";
+
+export async function listDocuments(
+  ctx: ApiContext,
+  query: ListDocumentsQuery,
+  repository: DocumentsRepository = createDocumentsRepository(ctx.db),
+) {
+  const documents = await repository.listDocuments({
+    ownerUserId: ctx.user.id,
+    sharedWithEmail: ctx.userEmail,
+    access: query.access,
+  });
+
+  return { documents };
+}
diff --git a/src/services/docs/service.test.ts b/src/services/docs/service.test.ts
new file mode 100644
index 0000000..0866c0f
--- /dev/null
+++ b/src/services/docs/service.test.ts
@@ -0,0 +1,391 @@
+import { beforeEach, describe, expect, it } from "vitest";
+
+import type { User } from "@/db";
+import type { ApiContext } from "@/server/foundation/context";
+import type { NewDocument, NewDocumentShare, NewDocumentVersion } from "@/types/docs";
+
+import { createDocument } from "./create-document";
+import { getDocument } from "./get-document";
+import { listDocuments } from "./list-documents";
+import { shareDocument } from "./share-document";
+import { updateDocument } from "./update-document";
+
+describe("docs services", () => {
+  let repo: MemoryDocumentsRepository;
+
+  beforeEach(() => {
+    repo = new MemoryDocumentsRepository();
+  });
+
+  it("creates a document with an initial version owned by the current user", async () => {
+    const ctx = apiContext("owner");
+
+    const result = await createDocument(
+      ctx,
+      { name: "Plan", description: null, html: "<h1>Plan</h1>" },
+      repo,
+    );
+
+    expect(result.document).toMatchObject({
+      id: expect.any(String),
+      ownerUserId: "owner",
+      name: "Plan",
+      description: null,
+      deletedAt: null,
+    });
+    expect(result.version).toMatchObject({
+      id: expect.any(String),
+      documentId: result.document.id,
+      versionNumber: 1,
+      html: "<h1>Plan</h1>",
+      createdByUserId: "owner",
+    });
+  });
+
+  it("gets the latest version when no version is requested", async () => {
+    const ctx = apiContext("owner");
+    const created = await seedDocument(ctx, "<p>v1</p>");
+    await updateDocument(ctx, { id: created.document.id }, { html: "<p>v2</p>" }, repo);
+
+    const result = await getDocument(ctx, { id: created.document.id }, {}, repo);
+
+    expect(result.version.versionNumber).toBe(2);
+    expect(result.version.html).toBe("<p>v2</p>");
+  });
+
+  it("gets a specific version when requested", async () => {
+    const ctx = apiContext("owner");
+    const created = await seedDocument(ctx, "<p>v1</p>");
+    await updateDocument(ctx, { id: created.document.id }, { html: "<p>v2</p>" }, repo);
+
+    const result = await getDocument(
+      ctx,
+      { id: created.document.id },
+      { version: 1 },
+      repo,
+    );
+
+    expect(result.version.versionNumber).toBe(1);
+    expect(result.version.html).toBe("<p>v1</p>");
+  });
+
+  it("allows a user with a shared primary email to read", async () => {
+    const ownerCtx = apiContext("owner");
+    const created = await seedDocument(ownerCtx, "<p>shared</p>");
+    await shareDocument(
+      ownerCtx,
+      { id: created.document.id },
+      { emails: ["reader@example.com"] },
+      repo,
+    );
+
+    const result = await getDocument(
+      apiContext("reader", "reader@example.com"),
+      { id: created.document.id },
+      {},
+      repo,
+    );
+
+    expect(result.document.id).toBe(created.document.id);
+    expect(result.access).toBe("shared");
+  });
+
+  it("does not allow a shared user to update", async () => {
+    const ownerCtx = apiContext("owner");
+    const created = await seedDocument(ownerCtx, "<p>shared</p>");
+    await shareDocument(
+      ownerCtx,
+      { id: created.document.id },
+      { emails: ["reader@example.com"] },
+      repo,
+    );
+
+    await expect(
+      updateDocument(
+        apiContext("reader", "reader@example.com"),
+        { id: created.document.id },
+        { html: "<p>edited</p>" },
+        repo,
+      ),
+    ).rejects.toMatchObject({ status: 403, code: "forbidden" });
+  });
+
+  it("lets the owner update and increments the version number", async () => {
+    const ctx = apiContext("owner");
+    const created = await seedDocument(ctx, "<p>v1</p>");
+
+    const updated = await updateDocument(
+      ctx,
+      { id: created.document.id },
+      { html: "<p>v2</p>" },
+      repo,
+    );
+
+    expect(updated.version.versionNumber).toBe(2);
+    expect(updated.version.html).toBe("<p>v2</p>");
+    expect(updated.document.updatedAt.getTime()).toBeGreaterThanOrEqual(
+      created.document.updatedAt.getTime(),
+    );
+  });
+
+  it("allows the owner or a shared user to share a document", async () => {
+    const ownerCtx = apiContext("owner");
+    const created = await seedDocument(ownerCtx, "<p>shared</p>");
+
+    const ownerShare = await shareDocument(
+      ownerCtx,
+      { id: created.document.id },
+      { emails: ["reader@example.com"] },
+      repo,
+    );
+    const readerShare = await shareDocument(
+      apiContext("reader", "reader@example.com"),
+      { id: created.document.id },
+      { emails: ["reviewer@example.com"] },
+      repo,
+    );
+
+    expect(ownerShare.shares.map((share) => share.sharedWithEmail)).toContain(
+      "reader@example.com",
+    );
+    expect(readerShare.shares.map((share) => share.sharedWithEmail)).toContain(
+      "reviewer@example.com",
+    );
+  });
+
+  it("lists all, owned, and shared documents for the current user", async () => {
+    const ctx = apiContext("owner", "owner@example.com");
+    const owned = await seedDocument(ctx, "<p>owned</p>", "Owned");
+    const shared = await seedDocument(apiContext("other"), "<p>shared</p>", "Shared");
+    await shareDocument(
+      apiContext("other"),
+      { id: shared.document.id },
+      { emails: ["owner@example.com"] },
+      repo,
+    );
+
+    await expect(listDocuments(ctx, { access: "owned" }, repo)).resolves.toMatchObject({
+      documents: [{ id: owned.document.id, access: "owned" }],
+    });
+    await expect(listDocuments(ctx, { access: "shared" }, repo)).resolves.toMatchObject({
+      documents: [{ id: shared.document.id, access: "shared" }],
+    });
+
+    const all = await listDocuments(ctx, { access: "all" }, repo);
+    expect(all.documents.map((document) => document.id).sort()).toEqual(
+      [owned.document.id, shared.document.id].sort(),
+    );
+  });
+
+  it("does not include shared documents when the user has no primary email", async () => {
+    const ownerlessEmailCtx = apiContext("owner", null);
+    const owned = await seedDocument(ownerlessEmailCtx, "<p>owned</p>", "Owned");
+    const shared = await seedDocument(apiContext("other"), "<p>shared</p>", "Shared");
+    await shareDocument(
+      apiContext("other"),
+      { id: shared.document.id },
+      { emails: ["owner@example.com"] },
+      repo,
+    );
+
+    const all = await listDocuments(ownerlessEmailCtx, { access: "all" }, repo);
+
+    expect(all.documents).toEqual([
+      expect.objectContaining({ id: owned.document.id, access: "owned" }),
+    ]);
+  });
+
+  async function seedDocument(
+    ctx: ApiContext,
+    html: string,
+    name = "Seed",
+  ) {
+    return createDocument(ctx, { name, description: null, html }, repo);
+  }
+});
+
+function apiContext(userId: string, email?: string | null): ApiContext {
+  const now = new Date("2026-06-12T00:00:00.000Z");
+  const primaryEmail = email === undefined ? `${userId}@example.com` : email;
+
+  return {
+    db: {} as ApiContext["db"],
+    requestId: `req_${userId}`,
+    user: {
+      id: userId,
+      clerkUserId: `clerk_${userId}`,
+      primaryEmail: primaryEmail,
+      firstName: null,
+      lastName: null,
+      imageUrl: null,
+      createdAt: now,
+      updatedAt: now,
+      deletedAt: null,
+    } satisfies User,
+    userEmail: primaryEmail,
+  };
+}
+
+type StoredDocument = NewDocument & { deletedAt: Date | null };
+type Access = "owned" | "shared";
+type DocumentListItem = StoredDocument & { access: Access; latestVersion: NewDocumentVersion };
+
+class MemoryDocumentsRepository {
+  private documents = new Map<string, StoredDocument>();
+  private versions = new Map<string, NewDocumentVersion[]>();
+  private shares = new Map<string, NewDocumentShare[]>();
+  private id = 0;
+
+  async createDocument(input: {
+    document: Omit<NewDocument, "id" | "createdAt" | "updatedAt" | "deletedAt">;
+    version: Pick<NewDocumentVersion, "html" | "createdByUserId">;
+  }) {
+    const now = new Date(Date.now() + this.id);
+    const document: StoredDocument = {
+      id: this.nextId("doc"),
+      ownerUserId: input.document.ownerUserId,
+      name: input.document.name,
+      description: input.document.description,
+      createdAt: now,
+      updatedAt: now,
+      deletedAt: null,
+    };
+    const version: NewDocumentVersion = {
+      id: this.nextId("ver"),
+      documentId: document.id,
+      versionNumber: 1,
+      html: input.version.html,
+      createdByUserId: input.version.createdByUserId,
+      createdAt: now,
+    };
+
+    this.documents.set(document.id, document);
+    this.versions.set(document.id, [version]);
+
+    return { document, version };
+  }
+
+  async findDocumentById(id: string) {
+    const document = this.documents.get(id);
+    return document?.deletedAt ? null : document ?? null;
+  }
+
+  async findLatestVersion(documentId: string) {
+    const versions = this.versions.get(documentId) ?? [];
+    return versions.at(-1) ?? null;
+  }
+
+  async findVersion(documentId: string, versionNumber: number) {
+    return (
+      this.versions
+        .get(documentId)
+        ?.find((version) => version.versionNumber === versionNumber) ?? null
+    );
+  }
+
+  async isSharedWithEmail(documentId: string, email: string) {
+    return (
+      this.shares
+        .get(documentId)
+        ?.some((share) => share.sharedWithEmail === email) ?? false
+    );
+  }
+
+  async addVersion(input: {
+    documentId: string;
+    html: string;
+    createdByUserId: string;
+  }) {
+    const document = this.documents.get(input.documentId);
+    if (!document || document.deletedAt) {
+      return null;
+    }
+
+    const now = new Date(Date.now() + this.id);
+    const versions = this.versions.get(input.documentId) ?? [];
+    const version: NewDocumentVersion = {
+      id: this.nextId("ver"),
+      documentId: input.documentId,
+      versionNumber: versions.length + 1,
+      html: input.html,
+      createdByUserId: input.createdByUserId,
+      createdAt: now,
+    };
+    const updatedDocument = { ...document, updatedAt: now };
+
+    versions.push(version);
+    this.versions.set(input.documentId, versions);
+    this.documents.set(input.documentId, updatedDocument);
+
+    return { document: updatedDocument, version };
+  }
+
+  async upsertShares(input: {
+    documentId: string;
+    emails: string[];
+    sharedByUserId: string;
+  }) {
+    const existing = this.shares.get(input.documentId) ?? [];
+    const now = new Date(Date.now() + this.id);
+    const added = input.emails
+      .filter(
+        (email) => !existing.some((share) => share.sharedWithEmail === email),
+      )
+      .map((email): NewDocumentShare => ({
+        id: this.nextId("share"),
+        documentId: input.documentId,
+        sharedWithEmail: email,
+        sharedByUserId: input.sharedByUserId,
+        createdAt: now,
+      }));
+
+    this.shares.set(input.documentId, [...existing, ...added]);
+    return this.shares.get(input.documentId) ?? [];
+  }
+
+  async listDocuments(input: {
+    ownerUserId: string;
+    sharedWithEmail: string | null;
+    access: "all" | "owned" | "shared";
+  }) {
+    const items: DocumentListItem[] = [];
+
+    for (const document of this.documents.values()) {
+      if (document.deletedAt) {
+        continue;
+      }
+
+      const isOwned = document.ownerUserId === input.ownerUserId;
+      const isShared =
+        input.sharedWithEmail === null
+          ? false
+          : await this.isSharedWithEmail(document.id, input.sharedWithEmail);
+
+      if (
+        (input.access === "owned" && !isOwned) ||
+        (input.access === "shared" && !isShared) ||
+        (input.access === "all" && !isOwned && !isShared)
+      ) {
+        continue;
+      }
+
+      const latestVersion = await this.findLatestVersion(document.id);
+      if (!latestVersion) {
+        continue;
+      }
+
+      items.push({
+        ...document,
+        access: isOwned ? "owned" : "shared",
+        latestVersion,
+      });
+    }
+
+    return items;
+  }
+
+  private nextId(prefix: string) {
+    this.id += 1;
+    return `${prefix}_${this.id}`;
+  }
+}
diff --git a/src/services/docs/share-document.ts b/src/services/docs/share-document.ts
new file mode 100644
index 0000000..05cc529
--- /dev/null
+++ b/src/services/docs/share-document.ts
@@ -0,0 +1,52 @@
+import {
+  createDocumentsRepository,
+  type DocumentAccess,
+  type DocumentsRepository,
+} from "@/repository/docs/documents";
+import type { ApiContext } from "@/server/foundation/context";
+import { forbiddenError, notFoundError } from "@/server/foundation/errors";
+import type { DocumentRouteParams, ShareDocumentRequest } from "@/types/docs";
+
+export async function shareDocument(
+  ctx: ApiContext,
+  params: DocumentRouteParams,
+  input: ShareDocumentRequest,
+  repository: DocumentsRepository = createDocumentsRepository(ctx.db),
+) {
+  const document = await repository.findDocumentById(params.id);
+  if (!document) {
+    throw notFoundError("Document not found");
+  }
+
+  const access = await resolveShareAccess(ctx, repository, document);
+  if (!access) {
+    throw forbiddenError("Document access denied");
+  }
+
+  const shares = await repository.upsertShares({
+    documentId: document.id,
+    emails: input.emails,
+    sharedByUserId: ctx.user.id,
+  });
+
+  return { document, shares, access };
+}
+
+async function resolveShareAccess(
+  ctx: ApiContext,
+  repository: DocumentsRepository,
+  document: { id: string; ownerUserId: string },
+): Promise<DocumentAccess | null> {
+  if (document.ownerUserId === ctx.user.id) {
+    return "owned";
+  }
+
+  if (
+    ctx.userEmail !== null &&
+    (await repository.isSharedWithEmail(document.id, ctx.userEmail))
+  ) {
+    return "shared";
+  }
+
+  return null;
+}
diff --git a/src/services/docs/update-document.ts b/src/services/docs/update-document.ts
new file mode 100644
index 0000000..c8b0b2d
--- /dev/null
+++ b/src/services/docs/update-document.ts
@@ -0,0 +1,32 @@
+import { createDocumentsRepository, type DocumentsRepository } from "@/repository/docs/documents";
+import type { ApiContext } from "@/server/foundation/context";
+import { forbiddenError, notFoundError } from "@/server/foundation/errors";
+import type { DocumentRouteParams, UpdateDocumentRequest } from "@/types/docs";
+
+export async function updateDocument(
+  ctx: ApiContext,
+  params: DocumentRouteParams,
+  input: UpdateDocumentRequest,
+  repository: DocumentsRepository = createDocumentsRepository(ctx.db),
+) {
+  const document = await repository.findDocumentById(params.id);
+  if (!document) {
+    throw notFoundError("Document not found");
+  }
+
+  if (document.ownerUserId !== ctx.user.id) {
+    throw forbiddenError("Only the document owner can update it");
+  }
+
+  const updated = await repository.addVersion({
+    documentId: document.id,
+    html: input.html,
+    createdByUserId: ctx.user.id,
+  });
+
+  if (!updated) {
+    throw notFoundError("Document not found");
+  }
+
+  return updated;
+}

From 26876e8fcaef7344e119eb3880d0847910db7c69 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 18:14:48 -0300
Subject: [PATCH 10/26] fix: satisfy api foundation typecheck

---
 src/server/foundation/context.ts | 6 +++---
 src/server/handlers/api.ts       | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/server/foundation/context.ts b/src/server/foundation/context.ts
index efa36a7..fd0e9bd 100644
--- a/src/server/foundation/context.ts
+++ b/src/server/foundation/context.ts
@@ -16,7 +16,7 @@ export type ApiContextResult =
   | { ok: true; ctx: ApiContext }
   | { ok: false; response: Response };
 
-type DbLike = Db & {
+type UserLookupDb = {
   query: {
     users: {
       findFirst(args: unknown): Promise<User | undefined | null>;
@@ -25,7 +25,7 @@ type DbLike = Db & {
 };
 
 export async function createApiContext(
-  database: DbLike = db as DbLike,
+  database: UserLookupDb = db as UserLookupDb,
   requestId = crypto.randomUUID(),
 ): Promise<ApiContextResult> {
   const session = await auth();
@@ -55,7 +55,7 @@ export async function createApiContext(
   return {
     ok: true,
     ctx: {
-      db: database,
+      db: database as Db,
       requestId,
       user,
       userEmail: normalizeEmail(user.primaryEmail),
diff --git a/src/server/handlers/api.ts b/src/server/handlers/api.ts
index e057f54..a9daba6 100644
--- a/src/server/handlers/api.ts
+++ b/src/server/handlers/api.ts
@@ -74,7 +74,7 @@ export function withApiHandler<TParams = unknown>(
     const url = new URL(request.url);
     let userId: string | undefined;
     let errorCode: string | undefined;
-    let response: Response;
+    let response: Response | undefined;
 
     try {
       const contextResult = await createApiContext(undefined, requestId);

From 6d1bd656edcf411bcc67abfd7598fdd0b063e71f Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 18:15:37 -0300
Subject: [PATCH 11/26] fix: return latest document version metadata

---
 src/services/docs/get-document.ts | 7 ++++---
 src/services/docs/service.test.ts | 1 +
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/src/services/docs/get-document.ts b/src/services/docs/get-document.ts
index 84fb980..db12261 100644
--- a/src/services/docs/get-document.ts
+++ b/src/services/docs/get-document.ts
@@ -23,16 +23,17 @@ export async function getDocument(
     throw forbiddenError("Document access denied");
   }
 
+  const latestVersion = await repository.findLatestVersion(document.id);
   const version =
     query.version === undefined
-      ? await repository.findLatestVersion(document.id)
+      ? latestVersion
       : await repository.findVersion(document.id, query.version);
 
-  if (!version) {
+  if (!version || !latestVersion) {
     throw notFoundError("Document version not found");
   }
 
-  return { document, version, access };
+  return { document, version, latestVersion, access };
 }
 
 async function resolveReadAccess(
diff --git a/src/services/docs/service.test.ts b/src/services/docs/service.test.ts
index 0866c0f..39e1e9d 100644
--- a/src/services/docs/service.test.ts
+++ b/src/services/docs/service.test.ts
@@ -67,6 +67,7 @@ describe("docs services", () => {
 
     expect(result.version.versionNumber).toBe(1);
     expect(result.version.html).toBe("<p>v1</p>");
+    expect(result.latestVersion.versionNumber).toBe(2);
   });
 
   it("allows a user with a shared primary email to read", async () => {

From 1ed7378db7a7e79fd090402d38ca581ab3358722 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 18:17:10 -0300
Subject: [PATCH 12/26] feat: add docs api route handlers

---
 src/app/api/docs/[id]/route.ts       |   6 +
 src/app/api/docs/route.ts            |   6 +
 src/app/api/docs/share/[id]/route.ts |   3 +
 src/server/handlers/docs.test.ts     | 200 +++++++++++++++++++++++++++
 src/server/handlers/docs.ts          | 124 +++++++++++++++++
 5 files changed, 339 insertions(+)
 create mode 100644 src/app/api/docs/[id]/route.ts
 create mode 100644 src/app/api/docs/route.ts
 create mode 100644 src/app/api/docs/share/[id]/route.ts
 create mode 100644 src/server/handlers/docs.test.ts
 create mode 100644 src/server/handlers/docs.ts

diff --git a/src/app/api/docs/[id]/route.ts b/src/app/api/docs/[id]/route.ts
new file mode 100644
index 0000000..291e465
--- /dev/null
+++ b/src/app/api/docs/[id]/route.ts
@@ -0,0 +1,6 @@
+export const runtime = "nodejs";
+
+export {
+  getDocumentHandler as GET,
+  updateDocumentHandler as PUT,
+} from "@/server/handlers/docs";
diff --git a/src/app/api/docs/route.ts b/src/app/api/docs/route.ts
new file mode 100644
index 0000000..9325800
--- /dev/null
+++ b/src/app/api/docs/route.ts
@@ -0,0 +1,6 @@
+export const runtime = "nodejs";
+
+export {
+  createDocumentHandler as POST,
+  listDocumentsHandler as GET,
+} from "@/server/handlers/docs";
diff --git a/src/app/api/docs/share/[id]/route.ts b/src/app/api/docs/share/[id]/route.ts
new file mode 100644
index 0000000..7d6a639
--- /dev/null
+++ b/src/app/api/docs/share/[id]/route.ts
@@ -0,0 +1,3 @@
+export const runtime = "nodejs";
+
+export { shareDocumentHandler as POST } from "@/server/handlers/docs";
diff --git a/src/server/handlers/docs.test.ts b/src/server/handlers/docs.test.ts
new file mode 100644
index 0000000..126893b
--- /dev/null
+++ b/src/server/handlers/docs.test.ts
@@ -0,0 +1,200 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import { forbiddenError } from "@/server/foundation/errors";
+
+const serviceMocks = vi.hoisted(() => ({
+  createDocument: vi.fn(),
+  getDocument: vi.fn(),
+  listDocuments: vi.fn(),
+  shareDocument: vi.fn(),
+  updateDocument: vi.fn(),
+}));
+
+vi.mock("@/server/foundation/context", () => ({
+  createApiContext: vi.fn().mockResolvedValue({
+    ok: true,
+    ctx: {
+      db: {},
+      requestId: "req_test",
+      user: { id: "user_1" },
+      userEmail: "ada@example.com",
+    },
+  }),
+}));
+
+vi.mock("@/server/foundation/logs", () => ({
+  logApiError: vi.fn(),
+  logApiRequest: vi.fn(),
+}));
+
+vi.mock("@/services/docs/create-document", () => ({
+  createDocument: serviceMocks.createDocument,
+}));
+
+vi.mock("@/services/docs/get-document", () => ({
+  getDocument: serviceMocks.getDocument,
+}));
+
+vi.mock("@/services/docs/list-documents", () => ({
+  listDocuments: serviceMocks.listDocuments,
+}));
+
+vi.mock("@/services/docs/share-document", () => ({
+  shareDocument: serviceMocks.shareDocument,
+}));
+
+vi.mock("@/services/docs/update-document", () => ({
+  updateDocument: serviceMocks.updateDocument,
+}));
+
+describe("docs HTTP handlers", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it("creates a document with normalized request input", async () => {
+    const now = new Date("2026-06-12T00:00:00.000Z");
+    serviceMocks.createDocument.mockResolvedValue({
+      document: {
+        id: "doc_1",
+        ownerUserId: "user_1",
+        name: "Report",
+        description: null,
+        createdAt: now,
+        updatedAt: now,
+      },
+      version: { versionNumber: 1 },
+    });
+
+    const { createDocumentHandler } = await import("./docs");
+    const response = await createDocumentHandler(
+      jsonRequest("https://app.test/api/docs", {
+        name: " Report ",
+        description: " ",
+        html: "<h1>Report</h1>",
+      }),
+    );
+
+    expect(response.status).toBe(201);
+    expect(serviceMocks.createDocument).toHaveBeenCalledWith(
+      expect.objectContaining({ user: expect.objectContaining({ id: "user_1" }) }),
+      { name: "Report", description: null, html: "<h1>Report</h1>" },
+    );
+    await expect(response.json()).resolves.toMatchObject({
+      id: "doc_1",
+      latestVersion: 1,
+    });
+  });
+
+  it("lists documents and rejects invalid access filters", async () => {
+    serviceMocks.listDocuments.mockResolvedValue({ documents: [] });
+
+    const { listDocumentsHandler } = await import("./docs");
+    const validResponse = await listDocumentsHandler(
+      new Request("https://app.test/api/docs?access=shared"),
+    );
+    const invalidResponse = await listDocumentsHandler(
+      new Request("https://app.test/api/docs?access=unknown"),
+    );
+
+    expect(validResponse.status).toBe(200);
+    expect(serviceMocks.listDocuments).toHaveBeenCalledWith(
+      expect.anything(),
+      { access: "shared" },
+    );
+    expect(invalidResponse.status).toBe(400);
+  });
+
+  it("gets a document by awaiting route params and defaulting to latest version", async () => {
+    const now = new Date("2026-06-12T00:00:00.000Z");
+    serviceMocks.getDocument.mockResolvedValue({
+      document: {
+        id: "doc_1",
+        ownerUserId: "user_1",
+        name: "Report",
+        description: "A report",
+        createdAt: now,
+        updatedAt: now,
+      },
+      version: {
+        versionNumber: 2,
+        html: "<p>v2</p>",
+        createdAt: now,
+      },
+      latestVersion: { versionNumber: 2 },
+    });
+
+    const { getDocumentHandler } = await import("./docs");
+    const response = await getDocumentHandler(
+      new Request("https://app.test/api/docs/doc_1"),
+      { params: Promise.resolve({ id: "doc_1" }) },
+    );
+
+    expect(response.status).toBe(200);
+    expect(serviceMocks.getDocument).toHaveBeenCalledWith(
+      expect.anything(),
+      { id: "doc_1" },
+      {},
+    );
+    await expect(response.json()).resolves.toMatchObject({
+      id: "doc_1",
+      version: 2,
+      latestVersion: 2,
+      html: "<p>v2</p>",
+    });
+  });
+
+  it("maps update forbidden errors to 403", async () => {
+    serviceMocks.updateDocument.mockRejectedValue(
+      forbiddenError("Only the document owner can update it"),
+    );
+
+    const { updateDocumentHandler } = await import("./docs");
+    const response = await updateDocumentHandler(
+      jsonRequest("https://app.test/api/docs/doc_1", { html: "<p>v2</p>" }, "PUT"),
+      { params: Promise.resolve({ id: "doc_1" }) },
+    );
+
+    expect(response.status).toBe(403);
+    await expect(response.json()).resolves.toMatchObject({
+      error: { code: "forbidden" },
+    });
+  });
+
+  it("shares a document with normalized email input", async () => {
+    serviceMocks.shareDocument.mockResolvedValue({
+      document: { id: "doc_1" },
+      shares: [
+        { sharedWithEmail: "reader@example.com" },
+        { sharedWithEmail: "reviewer@example.com" },
+      ],
+    });
+
+    const { shareDocumentHandler } = await import("./docs");
+    const response = await shareDocumentHandler(
+      jsonRequest("https://app.test/api/docs/share/doc_1", {
+        emails: [" Reader@Example.com ", "reader@example.com", "reviewer@example.com"],
+      }),
+      { params: Promise.resolve({ id: "doc_1" }) },
+    );
+
+    expect(response.status).toBe(200);
+    expect(serviceMocks.shareDocument).toHaveBeenCalledWith(
+      expect.anything(),
+      { id: "doc_1" },
+      { emails: ["reader@example.com", "reviewer@example.com"] },
+    );
+    await expect(response.json()).resolves.toEqual({
+      id: "doc_1",
+      sharedWith: ["reader@example.com", "reviewer@example.com"],
+    });
+  });
+});
+
+function jsonRequest(url: string, body: unknown, method = "POST") {
+  return new Request(url, {
+    method,
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify(body),
+  });
+}
diff --git a/src/server/handlers/docs.ts b/src/server/handlers/docs.ts
new file mode 100644
index 0000000..68f531b
--- /dev/null
+++ b/src/server/handlers/docs.ts
@@ -0,0 +1,124 @@
+import { createDocument } from "@/services/docs/create-document";
+import { getDocument } from "@/services/docs/get-document";
+import { listDocuments } from "@/services/docs/list-documents";
+import { shareDocument } from "@/services/docs/share-document";
+import { updateDocument } from "@/services/docs/update-document";
+import {
+  createDocumentRequestSchema,
+  documentRouteParamsSchema,
+  getDocumentQuerySchema,
+  listDocumentsQuerySchema,
+  shareDocumentRequestSchema,
+  updateDocumentRequestSchema,
+} from "@/types/docs";
+
+import {
+  jsonResponse,
+  parseJsonBody,
+  parseWithSchema,
+  searchParamsToObject,
+  withApiHandler,
+} from "./api";
+
+export const createDocumentHandler = withApiHandler(async ({ request, ctx }) => {
+  const input = parseWithSchema(
+    createDocumentRequestSchema,
+    await parseJsonBody(request),
+  );
+  const result = await createDocument(ctx, input);
+
+  return jsonResponse(toDocumentCreatedResponse(result), { status: 201 });
+});
+
+export const listDocumentsHandler = withApiHandler(async ({ request, ctx }) => {
+  const query = parseWithSchema(
+    listDocumentsQuerySchema,
+    searchParamsToObject(new URL(request.url).searchParams),
+  );
+  const result = await listDocuments(ctx, query);
+
+  return jsonResponse({
+    documents: result.documents.map((document) => ({
+      id: document.id,
+      name: document.name,
+      description: document.description,
+      access: document.access,
+      latestVersion: document.latestVersion.versionNumber,
+      ownerUserId: document.ownerUserId,
+      createdAt: document.createdAt,
+      updatedAt: document.updatedAt,
+    })),
+  });
+});
+
+export const getDocumentHandler = withApiHandler<{ id: string }>(
+  async ({ request, ctx, params }) => {
+    const routeParams = parseWithSchema(documentRouteParamsSchema, params);
+    const query = parseWithSchema(
+      getDocumentQuerySchema,
+      searchParamsToObject(new URL(request.url).searchParams),
+    );
+    const result = await getDocument(ctx, routeParams, query);
+
+    return jsonResponse({
+      id: result.document.id,
+      name: result.document.name,
+      description: result.document.description,
+      version: result.version.versionNumber,
+      latestVersion: result.latestVersion.versionNumber,
+      html: result.version.html,
+      ownerUserId: result.document.ownerUserId,
+      createdAt: result.document.createdAt,
+      updatedAt: result.document.updatedAt,
+      versionCreatedAt: result.version.createdAt,
+    });
+  },
+);
+
+export const updateDocumentHandler = withApiHandler<{ id: string }>(
+  async ({ request, ctx, params }) => {
+    const routeParams = parseWithSchema(documentRouteParamsSchema, params);
+    const input = parseWithSchema(
+      updateDocumentRequestSchema,
+      await parseJsonBody(request),
+    );
+    const result = await updateDocument(ctx, routeParams, input);
+
+    return jsonResponse({
+      id: result.document.id,
+      version: result.version.versionNumber,
+      latestVersion: result.version.versionNumber,
+      updatedAt: result.document.updatedAt,
+    });
+  },
+);
+
+export const shareDocumentHandler = withApiHandler<{ id: string }>(
+  async ({ request, ctx, params }) => {
+    const routeParams = parseWithSchema(documentRouteParamsSchema, params);
+    const input = parseWithSchema(
+      shareDocumentRequestSchema,
+      await parseJsonBody(request),
+    );
+    const result = await shareDocument(ctx, routeParams, input);
+
+    return jsonResponse({
+      id: result.document.id,
+      sharedWith: result.shares.map((share) => share.sharedWithEmail),
+    });
+  },
+);
+
+type CreateDocumentResult = Awaited<ReturnType<typeof createDocument>>;
+
+function toDocumentCreatedResponse(result: CreateDocumentResult) {
+  return {
+    id: result.document.id,
+    name: result.document.name,
+    description: result.document.description,
+    latestVersion: result.version.versionNumber,
+    ownerUserId: result.document.ownerUserId,
+    createdAt: result.document.createdAt,
+    updatedAt: result.document.updatedAt,
+  };
+}

From 572a33cbb8e36114225967040f74e5daea46974d Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 18:21:39 -0300
Subject: [PATCH 13/26] fix: harden docs sharing and version writes

---
 src/repository/docs/documents.ts     | 69 ++++++++++++++++------------
 src/server/handlers/docs.test.ts     |  1 +
 src/server/handlers/docs.ts          |  2 +-
 src/services/docs/service.test.ts    | 20 ++++++++
 src/services/docs/update-document.ts | 36 ++++++++++++++-
 5 files changed, 95 insertions(+), 33 deletions(-)

diff --git a/src/repository/docs/documents.ts b/src/repository/docs/documents.ts
index 8381752..bab5a26 100644
--- a/src/repository/docs/documents.ts
+++ b/src/repository/docs/documents.ts
@@ -12,6 +12,11 @@ import {
   type NewDocumentVersion,
 } from "@/db";
 import type { ApiContext } from "@/server/foundation/context";
+import {
+  newDocumentSchema,
+  newDocumentShareSchema,
+  newDocumentVersionSchema,
+} from "@/types/docs";
 
 export type DocumentAccess = "owned" | "shared";
 
@@ -56,27 +61,29 @@ export function createDocumentsRepository(db: DocumentsDatabase): DocumentsRepos
     async createDocument(input) {
       return db.transaction(async (tx) => {
         const now = new Date();
+        const newDocument = newDocumentSchema.parse({
+          id: crypto.randomUUID(),
+          ...input.document,
+          createdAt: now,
+          updatedAt: now,
+          deletedAt: null,
+        });
         const [document] = await tx
           .insert(documents)
-          .values({
-            id: crypto.randomUUID(),
-            ...input.document,
-            createdAt: now,
-            updatedAt: now,
-            deletedAt: null,
-          })
+          .values(newDocument)
           .returning();
 
+        const newVersion = newDocumentVersionSchema.parse({
+          id: crypto.randomUUID(),
+          documentId: document.id,
+          versionNumber: 1,
+          html: input.version.html,
+          createdByUserId: input.version.createdByUserId,
+          createdAt: now,
+        });
         const [version] = await tx
           .insert(documentVersions)
-          .values({
-            id: crypto.randomUUID(),
-            documentId: document.id,
-            versionNumber: 1,
-            html: input.version.html,
-            createdByUserId: input.version.createdByUserId,
-            createdAt: now,
-          })
+          .values(newVersion)
           .returning();
 
         return { document, version };
@@ -156,16 +163,17 @@ export function createDocumentsRepository(db: DocumentsDatabase): DocumentsRepos
           .limit(1);
 
         const now = new Date();
+        const newVersion = newDocumentVersionSchema.parse({
+          id: crypto.randomUUID(),
+          documentId: input.documentId,
+          versionNumber: (latestVersion?.versionNumber ?? 0) + 1,
+          html: input.html,
+          createdByUserId: input.createdByUserId,
+          createdAt: now,
+        });
         const [version] = await tx
           .insert(documentVersions)
-          .values({
-            id: crypto.randomUUID(),
-            documentId: input.documentId,
-            versionNumber: (latestVersion?.versionNumber ?? 0) + 1,
-            html: input.html,
-            createdByUserId: input.createdByUserId,
-            createdAt: now,
-          })
+          .values(newVersion)
           .returning();
 
         const [updatedDocument] = await tx
@@ -184,13 +192,14 @@ export function createDocumentsRepository(db: DocumentsDatabase): DocumentsRepos
           .insert(documentShares)
           .values(
             input.emails.map(
-              (email): NewDocumentShare => ({
-                id: crypto.randomUUID(),
-                documentId: input.documentId,
-                sharedWithEmail: email,
-                sharedByUserId: input.sharedByUserId,
-                createdAt: new Date(),
-              }),
+              (email): NewDocumentShare =>
+                newDocumentShareSchema.parse({
+                  id: crypto.randomUUID(),
+                  documentId: input.documentId,
+                  sharedWithEmail: email,
+                  sharedByUserId: input.sharedByUserId,
+                  createdAt: new Date(),
+                }),
             ),
           )
           .onConflictDoNothing({
diff --git a/src/server/handlers/docs.test.ts b/src/server/handlers/docs.test.ts
index 126893b..2fa0ab2 100644
--- a/src/server/handlers/docs.test.ts
+++ b/src/server/handlers/docs.test.ts
@@ -165,6 +165,7 @@ describe("docs HTTP handlers", () => {
     serviceMocks.shareDocument.mockResolvedValue({
       document: { id: "doc_1" },
       shares: [
+        { sharedWithEmail: "existing@example.com" },
         { sharedWithEmail: "reader@example.com" },
         { sharedWithEmail: "reviewer@example.com" },
       ],
diff --git a/src/server/handlers/docs.ts b/src/server/handlers/docs.ts
index 68f531b..2ce3326 100644
--- a/src/server/handlers/docs.ts
+++ b/src/server/handlers/docs.ts
@@ -104,7 +104,7 @@ export const shareDocumentHandler = withApiHandler<{ id: string }>(
 
     return jsonResponse({
       id: result.document.id,
-      sharedWith: result.shares.map((share) => share.sharedWithEmail),
+      sharedWith: input.emails,
     });
   },
 );
diff --git a/src/services/docs/service.test.ts b/src/services/docs/service.test.ts
index 39e1e9d..700000d 100644
--- a/src/services/docs/service.test.ts
+++ b/src/services/docs/service.test.ts
@@ -129,6 +129,26 @@ describe("docs services", () => {
     );
   });
 
+  it("maps duplicate version races to conflict errors", async () => {
+    const ctx = apiContext("owner");
+    const created = await seedDocument(ctx, "<p>v1</p>");
+    const conflictRepo = {
+      findDocumentById: repo.findDocumentById.bind(repo),
+      addVersion: async () => {
+        throw Object.assign(new Error("duplicate key"), { code: "23505" });
+      },
+    };
+
+    await expect(
+      updateDocument(
+        ctx,
+        { id: created.document.id },
+        { html: "<p>v2</p>" },
+        conflictRepo as never,
+      ),
+    ).rejects.toMatchObject({ status: 409, code: "conflict" });
+  });
+
   it("allows the owner or a shared user to share a document", async () => {
     const ownerCtx = apiContext("owner");
     const created = await seedDocument(ownerCtx, "<p>shared</p>");
diff --git a/src/services/docs/update-document.ts b/src/services/docs/update-document.ts
index c8b0b2d..fe4029c 100644
--- a/src/services/docs/update-document.ts
+++ b/src/services/docs/update-document.ts
@@ -1,6 +1,10 @@
 import { createDocumentsRepository, type DocumentsRepository } from "@/repository/docs/documents";
 import type { ApiContext } from "@/server/foundation/context";
-import { forbiddenError, notFoundError } from "@/server/foundation/errors";
+import {
+  conflictError,
+  forbiddenError,
+  notFoundError,
+} from "@/server/foundation/errors";
 import type { DocumentRouteParams, UpdateDocumentRequest } from "@/types/docs";
 
 export async function updateDocument(
@@ -18,7 +22,7 @@ export async function updateDocument(
     throw forbiddenError("Only the document owner can update it");
   }
 
-  const updated = await repository.addVersion({
+  const updated = await addVersionOrConflict(repository, {
     documentId: document.id,
     html: input.html,
     createdByUserId: ctx.user.id,
@@ -30,3 +34,31 @@ export async function updateDocument(
 
   return updated;
 }
+
+async function addVersionOrConflict(
+  repository: DocumentsRepository,
+  input: {
+    documentId: string;
+    html: string;
+    createdByUserId: string;
+  },
+) {
+  try {
+    return await repository.addVersion(input);
+  } catch (error) {
+    if (isUniqueViolation(error)) {
+      throw conflictError("Document version conflict");
+    }
+
+    throw error;
+  }
+}
+
+function isUniqueViolation(error: unknown): boolean {
+  return (
+    typeof error === "object" &&
+    error !== null &&
+    "code" in error &&
+    error.code === "23505"
+  );
+}

From 0068ad76900758800a435ac1103280f4870d3508 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 18:29:52 -0300
Subject: [PATCH 14/26] chore: add agent tooling config

---
 .agents/skills/shadcn/SKILL.md                | 267 +++++++++++++++
 .agents/skills/shadcn/agents/openai.yml       |   5 +
 .agents/skills/shadcn/assets/shadcn-small.png | Bin 0 -> 1049 bytes
 .agents/skills/shadcn/assets/shadcn.png       | Bin 0 -> 3852 bytes
 .agents/skills/shadcn/cli.md                  | 290 +++++++++++++++++
 .agents/skills/shadcn/customization.md        | 209 ++++++++++++
 .agents/skills/shadcn/evals/evals.json        |  47 +++
 .agents/skills/shadcn/mcp.md                  | 105 ++++++
 .agents/skills/shadcn/registry.md             | 277 ++++++++++++++++
 .agents/skills/shadcn/rules/base-vs-radix.md  | 306 ++++++++++++++++++
 .agents/skills/shadcn/rules/composition.md    | 195 +++++++++++
 .agents/skills/shadcn/rules/forms.md          | 192 +++++++++++
 .agents/skills/shadcn/rules/icons.md          | 101 ++++++
 .agents/skills/shadcn/rules/styling.md        | 162 ++++++++++
 .claude/skills/shadcn                         |   1 +
 .codex/config.toml                            |   3 +
 skills-lock.json                              |  11 +
 17 files changed, 2171 insertions(+)
 create mode 100644 .agents/skills/shadcn/SKILL.md
 create mode 100644 .agents/skills/shadcn/agents/openai.yml
 create mode 100644 .agents/skills/shadcn/assets/shadcn-small.png
 create mode 100644 .agents/skills/shadcn/assets/shadcn.png
 create mode 100644 .agents/skills/shadcn/cli.md
 create mode 100644 .agents/skills/shadcn/customization.md
 create mode 100644 .agents/skills/shadcn/evals/evals.json
 create mode 100644 .agents/skills/shadcn/mcp.md
 create mode 100644 .agents/skills/shadcn/registry.md
 create mode 100644 .agents/skills/shadcn/rules/base-vs-radix.md
 create mode 100644 .agents/skills/shadcn/rules/composition.md
 create mode 100644 .agents/skills/shadcn/rules/forms.md
 create mode 100644 .agents/skills/shadcn/rules/icons.md
 create mode 100644 .agents/skills/shadcn/rules/styling.md
 create mode 120000 .claude/skills/shadcn
 create mode 100644 .codex/config.toml
 create mode 100644 skills-lock.json

diff --git a/.agents/skills/shadcn/SKILL.md b/.agents/skills/shadcn/SKILL.md
new file mode 100644
index 0000000..dcdb754
--- /dev/null
+++ b/.agents/skills/shadcn/SKILL.md
@@ -0,0 +1,267 @@
+---
+name: shadcn
+description: Manages shadcn components and projects — adding, searching, fixing, debugging, styling, and composing UI. Provides project context, component docs, and usage examples. Applies when working with shadcn/ui, component registries, presets, --preset codes, or any project with a components.json file. Also triggers for "shadcn init", "create an app with --preset", or "switch to --preset".
+user-invocable: false
+allowed-tools: Bash(npx shadcn@latest *), Bash(pnpm dlx shadcn@latest *), Bash(bunx --bun shadcn@latest *)
+---
+
+# shadcn/ui
+
+A framework for building ui, components and design systems. Components are added as source code to the user's project via the CLI.
+
+> **IMPORTANT:** Run all CLI commands using the project's package runner: `npx shadcn@latest`, `pnpm dlx shadcn@latest`, or `bunx --bun shadcn@latest` — based on the project's `packageManager`. Examples below use `npx shadcn@latest` but substitute the correct runner for the project.
+
+## Current Project Context
+
+```json
+!`npx shadcn@latest info --json`
+```
+
+The JSON above contains the project config and installed components. Use `npx shadcn@latest docs <component>` to get documentation and example URLs for any component.
+
+## Principles
+
+1. **Use existing components first.** Use `npx shadcn@latest search` to check registries before writing custom UI. Check community registries too.
+2. **Compose, don't reinvent.** Settings page = Tabs + Card + form controls. Dashboard = Sidebar + Card + Chart + Table.
+3. **Use built-in variants before custom styles.** `variant="outline"`, `size="sm"`, etc.
+4. **Use semantic colors.** `bg-primary`, `text-muted-foreground` — never raw values like `bg-blue-500`.
+
+## Critical Rules
+
+These rules are **always enforced**. Each links to a file with Incorrect/Correct code pairs.
+
+### Styling & Tailwind → [styling.md](./rules/styling.md)
+
+- **`className` for layout, not styling.** Never override component colors or typography.
+- **No `space-x-*` or `space-y-*`.** Use `flex` with `gap-*`. For vertical stacks, `flex flex-col gap-*`.
+- **Use `size-*` when width and height are equal.** `size-10` not `w-10 h-10`.
+- **Use `truncate` shorthand.** Not `overflow-hidden text-ellipsis whitespace-nowrap`.
+- **No manual `dark:` color overrides.** Use semantic tokens (`bg-background`, `text-muted-foreground`).
+- **Use `cn()` for conditional classes.** Don't write manual template literal ternaries.
+- **No manual `z-index` on overlay components.** Dialog, Sheet, Popover, etc. handle their own stacking.
+
+### Forms & Inputs → [forms.md](./rules/forms.md)
+
+- **Forms use `FieldGroup` + `Field`.** Never use raw `div` with `space-y-*` or `grid gap-*` for form layout.
+- **`InputGroup` uses `InputGroupInput`/`InputGroupTextarea`.** Never raw `Input`/`Textarea` inside `InputGroup`.
+- **Buttons inside inputs use `InputGroup` + `InputGroupAddon`.**
+- **Option sets (2–7 choices) use `ToggleGroup`.** Don't loop `Button` with manual active state.
+- **`FieldSet` + `FieldLegend` for grouping related checkboxes/radios.** Don't use a `div` with a heading.
+- **Field validation uses `data-invalid` + `aria-invalid`.** `data-invalid` on `Field`, `aria-invalid` on the control. For disabled: `data-disabled` on `Field`, `disabled` on the control.
+
+### Component Structure → [composition.md](./rules/composition.md)
+
+- **Items always inside their Group.** `SelectItem` → `SelectGroup`. `DropdownMenuItem` → `DropdownMenuGroup`. `CommandItem` → `CommandGroup`.
+- **Use `asChild` (radix) or `render` (base) for custom triggers.** Check `base` field from `npx shadcn@latest info`. → [base-vs-radix.md](./rules/base-vs-radix.md)
+- **Dialog, Sheet, and Drawer always need a Title.** `DialogTitle`, `SheetTitle`, `DrawerTitle` required for accessibility. Use `className="sr-only"` if visually hidden.
+- **Use full Card composition.** `CardHeader`/`CardTitle`/`CardDescription`/`CardContent`/`CardFooter`. Don't dump everything in `CardContent`.
+- **Button has no `isPending`/`isLoading`.** Compose with `Spinner` + `data-icon` + `disabled`.
+- **`TabsTrigger` must be inside `TabsList`.** Never render triggers directly in `Tabs`.
+- **`Avatar` always needs `AvatarFallback`.** For when the image fails to load.
+
+### Use Components, Not Custom Markup → [composition.md](./rules/composition.md)
+
+- **Use existing components before custom markup.** Check if a component exists before writing a styled `div`.
+- **Callouts use `Alert`.** Don't build custom styled divs.
+- **Empty states use `Empty`.** Don't build custom empty state markup.
+- **Toast via `sonner`.** Use `toast()` from `sonner`.
+- **Use `Separator`** instead of `<hr>` or `<div className="border-t">`.
+- **Use `Skeleton`** for loading placeholders. No custom `animate-pulse` divs.
+- **Use `Badge`** instead of custom styled spans.
+
+### Icons → [icons.md](./rules/icons.md)
+
+- **Icons in `Button` use `data-icon`.** `data-icon="inline-start"` or `data-icon="inline-end"` on the icon.
+- **No sizing classes on icons inside components.** Components handle icon sizing via CSS. No `size-4` or `w-4 h-4`.
+- **Pass icons as objects, not string keys.** `icon={CheckIcon}`, not a string lookup.
+
+### CLI
+
+- **Never decode preset codes or build preset URLs manually.** Use `npx shadcn@latest preset decode <code>`, `preset url <code>`, or `preset open <code>`. For project-aware preset detection, use `npx shadcn@latest preset resolve`.
+- **Apply preset codes directly with the CLI.** Use `npx shadcn@latest apply <code>` for existing projects, or `npx shadcn@latest init --preset <code>` when initializing.
+
+## Key Patterns
+
+These are the most common patterns that differentiate correct shadcn/ui code. For edge cases, see the linked rule files above.
+
+```tsx
+// Form layout: FieldGroup + Field, not div + Label.
+<FieldGroup>
+  <Field>
+    <FieldLabel htmlFor="email">Email</FieldLabel>
+    <Input id="email" />
+  </Field>
+</FieldGroup>
+
+// Validation: data-invalid on Field, aria-invalid on the control.
+<Field data-invalid>
+  <FieldLabel>Email</FieldLabel>
+  <Input aria-invalid />
+  <FieldDescription>Invalid email.</FieldDescription>
+</Field>
+
+// Icons in buttons: data-icon, no sizing classes.
+<Button>
+  <SearchIcon data-icon="inline-start" />
+  Search
+</Button>
+
+// Spacing: gap-*, not space-y-*.
+<div className="flex flex-col gap-4">  // correct
+<div className="space-y-4">           // wrong
+
+// Equal dimensions: size-*, not w-* h-*.
+<Avatar className="size-10">   // correct
+<Avatar className="w-10 h-10"> // wrong
+
+// Status colors: Badge variants or semantic tokens, not raw colors.
+<Badge variant="secondary">+20.1%</Badge>    // correct
+<span className="text-emerald-600">+20.1%</span> // wrong
+```
+
+## Component Selection
+
+| Need                       | Use                                                                                                 |
+| -------------------------- | --------------------------------------------------------------------------------------------------- |
+| Button/action              | `Button` with appropriate variant                                                                   |
+| Form inputs                | `Input`, `Select`, `Combobox`, `Switch`, `Checkbox`, `RadioGroup`, `Textarea`, `InputOTP`, `Slider` |
+| Toggle between 2–5 options | `ToggleGroup` + `ToggleGroupItem`                                                                   |
+| Data display               | `Table`, `Card`, `Badge`, `Avatar`                                                                  |
+| Navigation                 | `Sidebar`, `NavigationMenu`, `Breadcrumb`, `Tabs`, `Pagination`                                     |
+| Overlays                   | `Dialog` (modal), `Sheet` (side panel), `Drawer` (bottom sheet), `AlertDialog` (confirmation)       |
+| Feedback                   | `sonner` (toast), `Alert`, `Progress`, `Skeleton`, `Spinner`                                        |
+| Command palette            | `Command` inside `Dialog`                                                                           |
+| Charts                     | `Chart` (wraps Recharts)                                                                            |
+| Layout                     | `Card`, `Separator`, `Resizable`, `ScrollArea`, `Accordion`, `Collapsible`                          |
+| Empty states               | `Empty`                                                                                             |
+| Menus                      | `DropdownMenu`, `ContextMenu`, `Menubar`                                                            |
+| Tooltips/info              | `Tooltip`, `HoverCard`, `Popover`                                                                   |
+
+## Key Fields
+
+The injected project context contains these key fields:
+
+- **`aliases`** → use the actual alias prefix for imports (e.g. `@/`, `~/`), never hardcode.
+- **`isRSC`** → when `true`, components using `useState`, `useEffect`, event handlers, or browser APIs need `"use client"` at the top of the file. Always reference this field when advising on the directive.
+- **`tailwindVersion`** → `"v4"` uses `@theme inline` blocks; `"v3"` uses `tailwind.config.js`.
+- **`tailwindCssFile`** → the global CSS file where custom CSS variables are defined. Always edit this file, never create a new one.
+- **`style`** → component visual treatment (e.g. `nova`, `vega`).
+- **`base`** → primitive library (`radix` or `base`). Affects component APIs and available props.
+- **`iconLibrary`** → determines icon imports. Use `lucide-react` for `lucide`, `@tabler/icons-react` for `tabler`, etc. Never assume `lucide-react`.
+- **`resolvedPaths`** → exact file-system destinations for components, utils, hooks, etc.
+- **`framework`** → routing and file conventions (e.g. Next.js App Router vs Vite SPA).
+- **`packageManager`** → use this for any non-shadcn dependency installs (e.g. `pnpm add date-fns` vs `npm install date-fns`).
+- **`preset`** → resolved preset code and values for the current project. Use `npx shadcn@latest preset resolve --json` when you only need preset information.
+
+See [cli.md — `info` command](./cli.md) for the full field reference.
+
+## Component Docs, Examples, and Usage
+
+Run `npx shadcn@latest docs <component>` to get the URLs for a component's documentation, examples, and API reference. Fetch these URLs to get the actual content.
+
+```bash
+npx shadcn@latest docs button dialog select
+```
+
+**When creating, fixing, debugging, or using a component, always run `npx shadcn@latest docs` and fetch the URLs first.** This ensures you're working with the correct API and usage patterns rather than guessing.
+
+## Workflow
+
+1. **Get project context** — already injected above. Run `npx shadcn@latest info` again if you need to refresh.
+2. **Check installed components first** — before running `add`, always check the `components` list from project context or list the `resolvedPaths.ui` directory. Don't import components that haven't been added, and don't re-add ones already installed.
+3. **Find components** — `npx shadcn@latest search`.
+4. **Get docs and examples** — run `npx shadcn@latest docs <component>` to get URLs, then fetch them. Use `npx shadcn@latest view` to browse registry items you haven't installed. To preview changes to installed components, use `npx shadcn@latest add --diff`.
+5. **Install or update** — `npx shadcn@latest add`. When updating existing components, use `--dry-run` and `--diff` to preview changes first (see [Updating Components](#updating-components) below).
+6. **Fix imports in third-party components** — After adding components from community registries (e.g. `@bundui`, `@magicui`), check the added non-UI files for hardcoded import paths like `@/components/ui/...`. These won't match the project's actual aliases. Use `npx shadcn@latest info` to get the correct `ui` alias (e.g. `@workspace/ui/components`) and rewrite the imports accordingly. The CLI rewrites imports for its own UI files, but third-party registry components may use default paths that don't match the project.
+7. **Review added components** — After adding a component or block from any registry, **always read the added files and verify they are correct**. Check for missing sub-components (e.g. `SelectItem` without `SelectGroup`), missing imports, incorrect composition, or violations of the [Critical Rules](#critical-rules). Also replace any icon imports with the project's `iconLibrary` from the project context (e.g. if the registry item uses `lucide-react` but the project uses `hugeicons`, swap the imports and icon names accordingly). Fix all issues before moving on.
+8. **Registry must be explicit** — When the user asks to add a block or component, **do not guess the registry**. If no registry is specified (e.g. user says "add a login block" without specifying `@shadcn`, `@tailark`, `owner/repo`, etc.), ask which registry to use. Never default to a registry on behalf of the user.
+9. **Switching presets** — Ask the user first: **overwrite**, **partial**, **merge**, or **skip**?
+   - **Inspect current preset**: `npx shadcn@latest preset resolve`. Use `--json` when you need structured values.
+   - **Inspect incoming preset**: `npx shadcn@latest preset decode <code>`. Use `preset url <code>` or `preset open <code>` to share or open the preset builder.
+   - **Overwrite**: `npx shadcn@latest apply <code>`. Overwrites detected components, fonts, and CSS variables.
+   - **Partial**: `npx shadcn@latest apply <code> --only theme,font`. Updates only the selected preset parts without reinstalling UI components. Supported values are `theme` and `font`; comma-separated combinations are allowed. `icon` is intentionally not supported, because icon changes may require full component reinstall and transforms.
+   - **Merge**: `npx shadcn@latest init --preset <code> --force --no-reinstall`, then run `npx shadcn@latest info` to list installed components, then for each installed component use `--dry-run` and `--diff` to [smart merge](#updating-components) it individually.
+   - **Skip**: `npx shadcn@latest init --preset <code> --force --no-reinstall`. Only updates config and CSS, leaves components as-is.
+   - **Important**: Always run preset commands inside the user's project directory. `apply` only works in an existing project with a `components.json` file. The CLI automatically preserves the current base (`base` vs `radix`) from `components.json`. If you must use a scratch/temp directory (e.g. for `--dry-run` comparisons), pass `--base <current-base>` explicitly — preset codes do not encode the base.
+
+## Updating Components
+
+When the user asks to update a component from upstream while keeping their local changes, use `--dry-run` and `--diff` to intelligently merge. **NEVER fetch raw files from GitHub manually — always use the CLI.**
+
+1. Run `npx shadcn@latest add <component> --dry-run` to see all files that would be affected.
+2. For each file, run `npx shadcn@latest add <component> --diff <file>` to see what changed upstream vs local.
+3. Decide per file based on the diff:
+   - No local changes → safe to overwrite.
+   - Has local changes → read the local file, analyze the diff, and apply upstream updates while preserving local modifications.
+   - User says "just update everything" → use `--overwrite`, but confirm first.
+4. **Never use `--overwrite` without the user's explicit approval.**
+
+## Quick Reference
+
+```bash
+# Create a new project.
+npx shadcn@latest init --name my-app --preset base-nova
+npx shadcn@latest init --name my-app --preset a2r6bw --template vite
+
+# Create a monorepo project.
+npx shadcn@latest init --name my-app --preset base-nova --monorepo
+npx shadcn@latest init --name my-app --preset base-nova --template next --monorepo
+
+# Initialize existing project.
+npx shadcn@latest init --preset base-nova
+npx shadcn@latest init --defaults  # shortcut: --template=next --preset=nova (base style implied)
+
+# Apply a preset to an existing project.
+npx shadcn@latest apply a2r6bw
+npx shadcn@latest apply a2r6bw --only theme
+npx shadcn@latest apply a2r6bw --only font
+npx shadcn@latest apply a2r6bw --only theme,font
+
+# Inspect preset codes and project preset state.
+npx shadcn@latest preset decode a2r6bw
+npx shadcn@latest preset url a2r6bw
+npx shadcn@latest preset open a2r6bw
+npx shadcn@latest preset resolve
+npx shadcn@latest preset resolve --json
+
+# Add components.
+npx shadcn@latest add button card dialog
+npx shadcn@latest add @magicui/shimmer-button
+npx shadcn@latest add owner/repo/item
+npx shadcn@latest add --all
+
+# Preview changes before adding/updating.
+npx shadcn@latest add button --dry-run
+npx shadcn@latest add button --diff button.tsx
+npx shadcn@latest add @acme/form --view button.tsx
+npx shadcn@latest add owner/repo/item --dry-run
+
+# Search registries.
+npx shadcn@latest search @shadcn -q "sidebar"
+npx shadcn@latest search @tailark -q "stats"
+npx shadcn@latest search owner/repo -q "login"
+npx shadcn@latest search                          # all configured registries
+npx shadcn@latest search @shadcn -q "menu" -t ui  # filter by item type
+
+# Get component docs and example URLs.
+npx shadcn@latest docs button dialog select
+
+# View registry item details (for items not yet installed).
+npx shadcn@latest view @shadcn/button
+npx shadcn@latest view owner/repo/item
+```
+
+**Named presets:** `nova`, `vega`, `maia`, `lyra`, `mira`, `luma`
+**Templates:** `next`, `vite`, `start`, `react-router`, `astro` (all support `--monorepo`) and `laravel` (not supported for monorepo)
+**Preset codes:** Version-prefixed base62 strings (e.g. `a2r6bw` or `b0`), from [ui.shadcn.com](https://ui.shadcn.com).
+
+## Detailed References
+
+- [rules/forms.md](./rules/forms.md) — FieldGroup, Field, InputGroup, ToggleGroup, FieldSet, validation states
+- [rules/composition.md](./rules/composition.md) — Groups, overlays, Card, Tabs, Avatar, Alert, Empty, Toast, Separator, Skeleton, Badge, Button loading
+- [rules/icons.md](./rules/icons.md) — data-icon, icon sizing, passing icons as objects
+- [rules/styling.md](./rules/styling.md) — Semantic colors, variants, className, spacing, size, truncate, dark mode, cn(), z-index
+- [rules/base-vs-radix.md](./rules/base-vs-radix.md) — asChild vs render, Select, ToggleGroup, Slider, Accordion
+- [cli.md](./cli.md) — Commands, flags, presets, templates
+- [registry.md](./registry.md) — Authoring source registries, `include`, item definitions, dependencies, GitHub registry rules
+- [customization.md](./customization.md) — Theming, CSS variables, extending components
diff --git a/.agents/skills/shadcn/agents/openai.yml b/.agents/skills/shadcn/agents/openai.yml
new file mode 100644
index 0000000..ab636da
--- /dev/null
+++ b/.agents/skills/shadcn/agents/openai.yml
@@ -0,0 +1,5 @@
+interface:
+  display_name: "shadcn/ui"
+  short_description: "Manages shadcn/ui components — adding, searching, fixing, debugging, styling, and composing UI."
+  icon_small: "./assets/shadcn-small.png"
+  icon_large: "./assets/shadcn.png"
diff --git a/.agents/skills/shadcn/assets/shadcn-small.png b/.agents/skills/shadcn/assets/shadcn-small.png
new file mode 100644
index 0000000000000000000000000000000000000000..547154b97f2298335159c23eec1dac0d147a1246
GIT binary patch
literal 1049
zcmeAS@N?(olHy`uVBq!ia0vp^0wB!61|;P_|4#%`Ea{HEjtmSN`?>!lvI6-E$sR$z
z3=CCj3=9n|3=F@3LJcn%7)lKo7+xhXFj&oCU=S~uvn$XBDAAG{;hE;^%b*2hb1<+n
z3NbJPS&Tr)z$nE4G7ZRL@M4sPvx68lplX;H7}_%#SfFa6fHVkr05M1pgl1mAh%j*h
z6I`{x0%imor0saV%ts)_S>O>_%)r1c48n{Iv*t(uO^eJ7i71Ki^|4CM&(%vz$xlkv
ztH><?>0+>{umUo3Q%e#RDspr3imfVamB1>jfNYSkzLEl1NlCV?QiN}Sf^&XRs)CuG
zfu4bq9hZWFf=y9MnpKdC8&o@xXRDM^Qc_^0uU}qXu2*iXmtT~wZ)j<0sc&GUZ)Btk
zRH0j3nOBlnp_^B%3^4>|j!SBBa#3bMNoIbY0?6FNr2NtnTO}osMQ{LdXGvxn!lt}p
zsJDO~)CbAv8|oS8!_5Y2wE>A*`4?rT0&NDFZ)a!&R*518wZ}#uWI2*!AU*|)0=;U-
zWup%dHajlKxQFb(K%V94;uvBfm>Yb$>yU#$kCbgiC(9RwrlwA(rsW(``(6H=zq@!*
zUB_~Trk_lTdxPh$yxDTsVY&L;b+6{tRm^+d+gl^OQcCIBok=%y)Vhx@dR1ceL3r{0
z9=2<T8PCbDj&`^)?ex;kU#n~lo#I)_5>nMXx8DxEkhL{v?(>~8{qDBkfB!u-iDB`|
z-5d%Ae82YI%n8Zg9$mRN?o-|V)V*=5b-R>a>}P2{=pcK^B(&B-W{C#Z!Q%b*ueK>n
zK6ymYLRneebCKDSzcqHEHFopo-mkH{zIkt2Z0^086Tko7%N)NxoZYSDM1jSUwPpuS
zSeq*wzrC2D(tq4pZ#s9QP@Cd8Q^wW3*2cL_519?*;#4`B;+ei#o;C{Kkamm3Jooa;
zE$3K-+c<XL^^3mRb7)KA?z?$<rN$GhuI);+aV)T!yF}-7*y?}XGRHSI)!uJkXLGpe
zXPB}zgA)hWG3&>(6ShTjelW_B*W<jDG@o&iK`yu3wXb#(3Sv$UO&_-iKl{~_wK>5o
zcS6z34IR5C-SIF8m(lui^IOy!-~We?b1?PSGniCYR=ZyR^%<1lJzf1=);T3K0RU@N
BSy=!8

literal 0
HcmV?d00001

diff --git a/.agents/skills/shadcn/assets/shadcn.png b/.agents/skills/shadcn/assets/shadcn.png
new file mode 100644
index 0000000000000000000000000000000000000000..b7b6814acc25073e5f48099b1fd3f70c47bfb1c3
GIT binary patch
literal 3852
zcmY*c2{@Ep*nY=Y1|x&SAZEs{m}!)<%wS9yONAB@M)rMZgo-eODf<#aqEe(qiK0X#
zjeV<7Sz@e_J-dH=Uw_~KpZ7ZNbD!tj&;6X|T<3bv^<F!1%t(Mwf)4-y0g^G%l5L%L
zI)t13ru?{Zl5IHM^v(4F;8`O7h9ehyjBqlxGzWl73IGsJ2Y@xUD|{RP0x<wENd^F|
zOaKt0<WySduqWs))+ASRb3lcSApjRh7yz>oi2VQ{31CN!jQ|sn<X>zFQu@Q;0Du?|
zfb$Q>hHZD6F}v@?{A<B^p#K!}IR3Jo^T7Y%ov?2ar3AL&r5K;R008_VI~@dM<%qM@
z&U&1*rdpeuX*v1%s5v_Oop(_S_Mz-V0Xo52Z0O@cbwmXFc>7+^3dW)SVQ8`OjvI|a
z{6nF7;ZWA*ClCgH0WJs)HH;bth37*c5IO<Qu3DBv!$0Bd5f0@}rBbxe=%An=wIFph
zzW_J%0ZmO!GzN>tVpZ7;)e9lMRL5Xd-wU$;iu|t*(dB|ufCq)@;pdCk(RDoU7f8jS
zP&<kKwtv@2^>F<!lkbH;Ww8rH@64bNsA155wb`LMJ6^5h0Uj>w%scw{13LdO|DW$q
z9v$>f^8d4#e=GgR%Ptkqr-S~xZFoMo{SXfTK;ub7{gc6<X*&`_)O3$|Ou+uJklY8)
zcT0454lN`*#7o+(9=@Yw;wLGkw>41VugDjPn7=AJBO!*mUKucc{7ey~li!vybaIkF
z8OboYVX%y|2%P`k*m&i}s=eW8)0q&YJ<-thLrc)HZ?6uc7Fd!$(lWSvH;?Y^+|N2q
z(lz!>Ip|<{_a4CnLN%GIxW|*Sl|;4c3?=Q>z5fWEEtp(&BzeAccRS{zf9!64+SAA{
zhe+CT7U8Ox1UUnilJqweOM{d}_w6-|yz}dA=-R7yHrxs|(MLR_`U=AC%0V#PpIuxs
z`__xodV3Bl2ayP^m8isMu4iD<`=4UURtHBPsaLp81r-f3$(4vZbRPd}*>wTo@@?zp
zjl1KkifF5p%-V<}MTk3`()wm7qcMd8<14WE>Y_YwjB;{Zt!@vJbH&pu!Ye!p{1kAj
zlRg2pkl)WBbyj>3e<$)@mP?WW<fV<KEpqLiUQ)biEt@hetL@Amjucjkez;ZBJ84#v
zl^$7<E5@_ER}$4j8uL}TE?5i!yu?8xGAnvq=>}W-c;_(UQ(}=MJLED9F^U*P1KWxu
z1h@&s1?M0%ax_P5Qb><iRxB)$RS+oLQsSAN*b~`PtDv9cPkXS1k7>kkPKEH=OKGZn
z&-@5MD^|kk?Hzkfz8h$8#{$$OjAyr!+uGtp>ns1^oS7Nlv6k$^tzTdIb%jUtI8F3t
zL;LuqJ<IKowdZUN3}~+@L$x(iIod%_w0-&xmL@iQeGlCOa-kh_7aeX$3`(+p6Fjuv
z{!LGB)#aC^mzF%omZrY6#!DW~xiHoW_a1G&IsE3zYA4jOJk*rjmQ-B$_0sa<H4(+i
zQnxmZfraiOtC`n9zc{B-K9;chD+8PCs>7-@4UI|Q)HN=Ap;dAmuZY4c&XphavC{kl
z)mMY6L)S-94;V|YT3TA7<CLxL_b9l`!U$Le^Q@6%|A|idAHIxPjeCIQ+bgT*ANuyc
z@nB@?UVY2#Jq?>U^;uvS0W!$W`JIb@kNAm0@IKVWJ@R_jgX6wlUd5V%pHIn;=Z~px
z-B_MFLx+ldzTQUp5C<RDxxCyggw1(u`!Wly8XVJln4;#qINs5E-#ptaWPXIHForKp
zZa4ZaLcrcTqwUm?5U8c4g-RW25Fay$7Hr^%+57Cv^IKE#pH!GIBk%pgs|#bIsmO%>
zkXaznhH18TytzOgD%$iMnLiAtjvnHLkM;?P*3ZFb#cbY&ZF*|R;4V4$85DZMQ#T@|
zxuMMPg?cl|hNJ$2S&%fLErMQSzCnzc_QGh3x@I8V&Omf&=_n+EaC}tft^`)^W5-=1
z0bbJ#wK8+=zNaz-V{U?NtJp&%IDd9-xIut--<c-|L->L}@gU{E>B&ym$vT2@wEZq-
zzDqmDf)Cr-aZ-5KIYF!Elcq_X%?qXsg}Yhp=^bebcZ-Ucd$p+US;P}(@VrR4_<ix~
zed6~E6}jAU9S9Ih%lyaXai@w;!^wrRM^W=6NW^oYz8|?fU)#bN8$yH<imt53ZBP?=
zy;&V4FN3Een47<du7j5{J5%wKOa|1NG%Z3%8o|@c+S9c>fy6!qx?X)%SIi+LRsDR`
zQ8+xRd{In4WLlVjoy5ElKt%?Ykr)cH*G}0^tE=$(#0W?l)_9MV89|sem>Y}t&?fGt
zo3o0sdsG9?JhC1-KM}e*&zeb*H$7Jo<z?K_AU}TDGZq#`Ix@STU_03`T<~Ulh{raU
zvM7x%8>D&0z#=2sH725JmGV`WoVb86exi5p^Lm{B5BlZRd6(bKH`QmJ*u8#(j6IH1
zFf;Li5iqsV=V^irlzzwVJ$xXwz?I8y`i+t-g0?n77Ie}-fBp1{)&Dm1Yk^Fb=7rI4
zAD)SQRv9=Xr%G{qI!<cqI%|3PVv9j_gQ<*e*w4mNn`o$w6+8)7e4S!ePEUe<4O%N~
z5QOk%9`Z`(k=PG#6w~WFw321#NNL4qo@QNeSKTV#_pLPn7D<;*r@9x18j54O+Z=fs
zlA-2A8LMQ0U9rCgs)KB8Y@o_<+;!CY!nSC3iQ1tXSkm{l!PH5XUS8Pba_W$xzF*gQ
zz2>)}>rf;lzG))%89I~zF)R~&_Ur)%0>4+7bxbBknHT`^+jNFe%p=t<=q}3W1Y-u+
zi-cN{V#+HsEEB8UQsUt1uE991MvN%&V?(0Mcb~82H!ori&rLm~Xyf>i#u_t=rzHA3
zu?NRljnv7YU;T&V#(OVE$+=^@kaXvs%C3f78E(k$IyZ`)N$NYtLMfphBkV|oSI}7N
zEpFrKnA*jL!k5P(%)+Sl^e>hI@Y}jqmvb~@RD`9$!9Jpu-Wf2Cq?hfV{ghuo&AG>9
zcvC><e+m(>&o43J*WfyXuRWV)Y0~9;i68pPyv&~-%Y<I0!{TfpK1Olkjx}A*@0Z{u
zahvPEvoC&rbk-@r^p<7_|IV2opH0bHoPZx$T8VIc8m|rhZObT!rX<%67chkhN#68w
zsnVjl<DBIcXm=kzkqVRjv{L^kK+-H?leb&m2=cB(wD0+53EDi5d_za0$niR!HXUte
zz_G-H)$+GYA~jMX*5RaP^%re<E^@%d-2+xQq+H!acT-##+1jBc0J0IY441k;u5SFw
z;bqkHBm^n0afSO`UP2zaEmVVGYiOmM0^)y|0Lww6H|F~vrk*?~%0g;zaNV|GK2*J{
z;scMnZ)_;M^4|My0HIxb&KPQ7yKNh|64k`gHyx)TUZ{?ls>sp}xCY)|oF5?x{w~aS
zfx&5VFU)gcnMk*q%=jkB9w_qQ)x=v#1Q^_3`uyEfKiD4y$vaOR4n4IpvQmyNXK%#R
zU|XV~4Bq=Kr7Zp3#hdF5_MgA#yL-jJ4E5*j2?mhMq17{mD#6f?!#-b>@HA&~uECub
zF2reQA9f>OHLzqeZhi$%7fW!n^Y3_Y{C0vfQs0?a(Pcz7Opuz;(9n>$6)c9L`((v~
z@R1+M2kRN}mDuKCk=od(UwR?y%hUbEv$dC0BD&Ir<X;r1jl6LS8>;03<NBaoV`GM?
z7U2BHZmhNSrSyHW^wYIRb-p=75AKZ$OM*lz$TngM(CHmg_N8BXdp)Sh&ZQQkw6!wu
z7^OI{+qeQt2%ei)aIe#_FHreaCJ@CnxL5mPvs5vYtPN(pNO(0=ra;5fysQo#H1mip
zN`L`O81;K)ps%g1?QNbk&`0*wQ#F>Mf&|A#ZFtn&*mnkH8>2w0+imbwLLU77q!A=W
ztt$OR$b#$dkIAwM*ZWG{5*zUPkBN$42Kxe)AYe9DV+?(A^_|<XDjm0fXnqok<d;{b
z%;#i}qr=A;r|(S-r)8+xx-!1AZ`p7VeMdW#`{|*CnY6^mxv*_6CzhBl7wssSl!L(h
zmXUFhyqEG*J7`AS37Cz0;eJ5hxtr`h6)yoAz?~)3>IoJLzRGKlbpb%n=PVmB`nxX<
z)_}Tpg&IoX;4<0!ksDY9f>*dl`c}zSl!(+ujG#<&yu3AEKR)zVKTaK88*+ma)}3)G
zx460(7TNMTz(t&DUv)`7lj(r=`!?>~Q}XW3w-sipV!{Trr8`zsvu9NEK9)zO0>v3D
zOs=r|`OyjAS{Ea@UIRrr2Y7A?5+5}R4RpF)ee5^F-dhvP6MKyO`kNB4jGC{-$x}`x
zXmpAxVV=WR{>!zDxoq7#DN+_BWG_PRr?$Sa(XT@zUL`HuM{I4bZSuo97aF&7tL@4P
zO59)SaLA2ZMU3dO5>=P)GiqcIBUy4A2h_IC-7+IROG<+Qqczgo-JyHw-!h2%h8#$y
zr;y4>z2<GzwHX@hBQv*o!|4Dn%<ok4St4LPe7h34{gY{O+sE=f=zEoB<I(4_pl7~f
zk8tl+xK@khgv00JSg4n@s1L!i5ST}JMSBs|xWcq^K+f@89VPna6(mzO{Mar+`1aG3
zEqUJP2;IuV9D}@DzbrrSVia4>J1R4+`7o>#OWA2iiS1m8)q6A}u3d7VBk<Gjr%_L#
z{N|h(V#5RXpJ&|yE?x27KwTSjg49t?TbuEUoL4`wt9hfxG4qal^Vu(oU*3XSxrM?{
z^Tq0OkfK<N_1s55B4mS{gBKajwsQIyvnZQrO+x4(+0db|A32dFr_{-JeZD5R#=;?E
zu~d$)q@d0978AVhlTfHmb@yS@HBx6{N|szpYPV8Rk}$`sTOCN=*m7%-zR?FyNPVL6
bl=;?Gl_4rhKv9*v^N&Y5dW`slK#u$$5&4lY

literal 0
HcmV?d00001

diff --git a/.agents/skills/shadcn/cli.md b/.agents/skills/shadcn/cli.md
new file mode 100644
index 0000000..8a1d195
--- /dev/null
+++ b/.agents/skills/shadcn/cli.md
@@ -0,0 +1,290 @@
+# shadcn CLI Reference
+
+Configuration is read from `components.json`.
+
+> **IMPORTANT:** Always run commands using the project's package runner: `npx shadcn@latest`, `pnpm dlx shadcn@latest`, or `bunx --bun shadcn@latest`. Check `packageManager` from project context to choose the right one. Examples below use `npx shadcn@latest` but substitute the correct runner for the project.
+
+> **IMPORTANT:** Only use the flags documented below. Do not invent or guess flags — if a flag isn't listed here, it doesn't exist. The CLI auto-detects the package manager from the project's lockfile; there is no `--package-manager` flag.
+
+## Contents
+
+- Commands: init, apply, add (dry-run, smart merge), search, view, docs, info, build
+- Templates: next, vite, start, react-router, astro
+- Presets: named, code, URL formats and fields
+- Switching presets
+
+---
+
+## Commands
+
+### `init` — Initialize or create a project
+
+```bash
+npx shadcn@latest init [components...] [options]
+```
+
+Initializes shadcn/ui in an existing project or creates a new project (when `--name` is provided). Optionally installs components in the same step.
+
+| Flag                    | Short | Description                                               | Default |
+| ----------------------- | ----- | --------------------------------------------------------- | ------- |
+| `--template <template>` | `-t`  | Template (next, start, vite, next-monorepo, react-router) | —       |
+| `--preset [name]`       | `-p`  | Preset configuration (named, code, or URL)                | —       |
+| `--yes`                 | `-y`  | Skip confirmation prompt                                  | `true`  |
+| `--defaults`            | `-d`  | Use defaults (`--template=next --preset=base-nova`)       | `false` |
+| `--force`               | `-f`  | Force overwrite existing configuration                    | `false` |
+| `--cwd <cwd>`           | `-c`  | Working directory                                         | current |
+| `--name <name>`         | `-n`  | Name for new project                                      | —       |
+| `--silent`              | `-s`  | Mute output                                               | `false` |
+| `--rtl`                 |       | Enable RTL support                                        | —       |
+| `--reinstall`           |       | Re-install existing UI components                         | `false` |
+| `--monorepo`            |       | Scaffold a monorepo project                               | —       |
+| `--no-monorepo`         |       | Skip the monorepo prompt                                  | —       |
+
+`npx shadcn@latest create` is an alias for `npx shadcn@latest init`.
+
+### `apply` — Apply a preset to an existing project
+
+```bash
+npx shadcn@latest apply [preset] [options]
+```
+
+Applies a preset to an existing project, overwriting preset-driven config, fonts, CSS variables, and detected UI components.
+
+| Flag                | Short | Description                                | Default |
+| ------------------- | ----- | ------------------------------------------ | ------- |
+| `--preset <preset>` | —     | Preset configuration (named, code, or URL) | —       |
+| `--yes`             | `-y`  | Skip confirmation prompt                   | `false` |
+| `--cwd <cwd>`       | `-c`  | Working directory                          | current |
+| `--silent`          | `-s`  | Mute output                                | `false` |
+
+`[preset]` is a shorthand for `--preset <preset>`. If both are provided, they must match.
+If no preset is provided, the CLI offers to open the custom preset builder on `ui.shadcn.com/create`.
+
+### `add` — Add components
+
+> **IMPORTANT:** To compare local components against upstream or to preview changes, ALWAYS use `npx shadcn@latest add <component> --dry-run`, `--diff`, or `--view`. NEVER fetch raw files from GitHub or other sources manually. The CLI handles registry resolution, file paths, and CSS diffing automatically.
+
+```bash
+npx shadcn@latest add [components...] [options]
+```
+
+Accepts component names, registry-prefixed names (`@magicui/shimmer-button`),
+GitHub item addresses (`owner/repo/item`), URLs, or local paths.
+
+| Flag            | Short | Description                                                                                                          | Default |
+| --------------- | ----- | -------------------------------------------------------------------------------------------------------------------- | ------- |
+| `--yes`         | `-y`  | Skip confirmation prompt                                                                                             | `false` |
+| `--overwrite`   | `-o`  | Overwrite existing files                                                                                             | `false` |
+| `--cwd <cwd>`   | `-c`  | Working directory                                                                                                    | current |
+| `--all`         | `-a`  | Add all available components                                                                                         | `false` |
+| `--path <path>` | `-p`  | Target path for the component                                                                                        | —       |
+| `--silent`      | `-s`  | Mute output                                                                                                          | `false` |
+| `--dry-run`     |       | Preview all changes without writing files                                                                            | `false` |
+| `--diff [path]` |       | Show diffs. Without a path, shows the first 5 files. With a path, shows that file only (implies `--dry-run`)         | —       |
+| `--view [path]` |       | Show file contents. Without a path, shows the first 5 files. With a path, shows that file only (implies `--dry-run`) | —       |
+
+#### Dry-Run Mode
+
+Use `--dry-run` to preview what `add` would do without writing any files. `--diff` and `--view` both imply `--dry-run`.
+
+```bash
+# Preview all changes.
+npx shadcn@latest add button --dry-run
+
+# Show diffs for all files (top 5).
+npx shadcn@latest add button --diff
+
+# Show the diff for a specific file.
+npx shadcn@latest add button --diff button.tsx
+
+# Show contents for all files (top 5).
+npx shadcn@latest add button --view
+
+# Show the full content of a specific file.
+npx shadcn@latest add button --view button.tsx
+
+# Works with URLs too.
+npx shadcn@latest add https://api.npoint.io/abc123 --dry-run
+
+# Works with public GitHub registries too.
+npx shadcn@latest add owner/repo/item --dry-run
+
+# CSS diffs.
+npx shadcn@latest add button --diff globals.css
+```
+
+**When to use dry-run:**
+
+- When the user asks "what files will this add?" or "what will this change?" — use `--dry-run`.
+- Before overwriting existing components — use `--diff` to preview the changes first.
+- When the user wants to inspect component source code without installing — use `--view`.
+- When checking what CSS changes would be made to `globals.css` — use `--diff globals.css`.
+- When the user asks to review or audit third-party registry code before installing — use `--view` to inspect the source.
+
+> **`npx shadcn@latest add --dry-run` vs `npx shadcn@latest view`:** Prefer `npx shadcn@latest add --dry-run/--diff/--view` over `npx shadcn@latest view` when the user wants to preview changes to their project. `npx shadcn@latest view` only shows raw registry metadata. `npx shadcn@latest add --dry-run` shows exactly what would happen in the user's project: resolved file paths, diffs against existing files, and CSS updates. Use `npx shadcn@latest view` only when the user wants to browse registry info without a project context.
+
+#### Smart Merge from Upstream
+
+See [Updating Components in SKILL.md](./SKILL.md#updating-components) for the full workflow.
+
+### `search` — Search registries
+
+```bash
+npx shadcn@latest search [registries...] [options]
+```
+
+Fuzzy search across registries. Also aliased as `npx shadcn@latest list`.
+Supports namespaces (`@acme`), public GitHub registry sources (`owner/repo`),
+and registry catalog URLs. Without `-q`, lists all items. When no registries are
+passed, searches every registry configured in `components.json`.
+
+| Flag                | Short | Description                                       | Default |
+| ------------------- | ----- | ------------------------------------------------- | ------- |
+| `--query <query>`   | `-q`  | Search query                                      | —       |
+| `--type <type>`     | `-t`  | Filter by item type (e.g. `ui`, `block`, `hook`); comma-separated | —       |
+| `--limit <number>`  | `-l`  | Max items to display                              | `100`   |
+| `--offset <number>` | `-o`  | Items to skip                                     | `0`     |
+| `--json`            |       | Output as JSON                                    | `false` |
+| `--cwd <cwd>`       | `-c`  | Working directory                                 | current |
+
+### `view` — View item details
+
+```bash
+npx shadcn@latest view <items...> [options]
+```
+
+Displays item info including file contents. Examples:
+`npx shadcn@latest view @shadcn/button`,
+`npx shadcn@latest view owner/repo/item`.
+
+### `docs` — Get component documentation URLs
+
+```bash
+npx shadcn@latest docs <components...> [options]
+```
+
+Outputs resolved URLs for component documentation, examples, and API references. Accepts one or more component names. Fetch the URLs to get the actual content.
+
+Example output for `npx shadcn@latest docs input button`:
+
+```
+base  radix
+
+input
+  docs      https://ui.shadcn.com/docs/components/radix/input
+  examples  https://raw.githubusercontent.com/.../examples/input-example.tsx
+
+button
+  docs      https://ui.shadcn.com/docs/components/radix/button
+  examples  https://raw.githubusercontent.com/.../examples/button-example.tsx
+```
+
+Some components include an `api` link to the underlying library (e.g. `cmdk` for the command component).
+
+### `diff` — Check for updates
+
+Do not use this command. Use `npx shadcn@latest add --diff` instead.
+
+### `info` — Project information
+
+```bash
+npx shadcn@latest info [options]
+```
+
+Displays project info and `components.json` configuration. Run this first to discover the project's framework, aliases, Tailwind version, and resolved paths.
+
+| Flag          | Short | Description       | Default |
+| ------------- | ----- | ----------------- | ------- |
+| `--cwd <cwd>` | `-c`  | Working directory | current |
+
+**Project Info fields:**
+
+| Field                | Type      | Meaning                                                            |
+| -------------------- | --------- | ------------------------------------------------------------------ |
+| `framework`          | `string`  | Detected framework (`next`, `vite`, `react-router`, `start`, etc.) |
+| `frameworkVersion`   | `string`  | Framework version (e.g. `15.2.4`)                                  |
+| `isSrcDir`           | `boolean` | Whether the project uses a `src/` directory                        |
+| `isRSC`              | `boolean` | Whether React Server Components are enabled                        |
+| `isTsx`              | `boolean` | Whether the project uses TypeScript                                |
+| `tailwindVersion`    | `string`  | `"v3"` or `"v4"`                                                   |
+| `tailwindConfigFile` | `string`  | Path to the Tailwind config file                                   |
+| `tailwindCssFile`    | `string`  | Path to the global CSS file                                        |
+| `aliasPrefix`        | `string`  | Import alias prefix (e.g. `@`, `~`, `@/`)                          |
+| `packageManager`     | `string`  | Detected package manager (`npm`, `pnpm`, `yarn`, `bun`)            |
+
+**Components.json fields:**
+
+| Field                | Type      | Meaning                                                                                    |
+| -------------------- | --------- | ------------------------------------------------------------------------------------------ |
+| `base`               | `string`  | Primitive library (`radix` or `base`) — determines component APIs and available props      |
+| `style`              | `string`  | Visual style (e.g. `nova`, `vega`)                                                         |
+| `rsc`                | `boolean` | RSC flag from config                                                                       |
+| `tsx`                | `boolean` | TypeScript flag                                                                            |
+| `tailwind.config`    | `string`  | Tailwind config path                                                                       |
+| `tailwind.css`       | `string`  | Global CSS path — this is where custom CSS variables go                                    |
+| `iconLibrary`        | `string`  | Icon library — determines icon import package (e.g. `lucide-react`, `@tabler/icons-react`) |
+| `aliases.components` | `string`  | Component import alias (e.g. `@/components`)                                               |
+| `aliases.utils`      | `string`  | Utils import alias (e.g. `@/lib/utils`)                                                    |
+| `aliases.ui`         | `string`  | UI component alias (e.g. `@/components/ui`)                                                |
+| `aliases.lib`        | `string`  | Lib alias (e.g. `@/lib`)                                                                   |
+| `aliases.hooks`      | `string`  | Hooks alias (e.g. `@/hooks`)                                                               |
+| `resolvedPaths`      | `object`  | Absolute file-system paths for each alias                                                  |
+| `registries`         | `object`  | Configured custom registries                                                               |
+
+**Links fields:**
+
+The `info` output includes a **Links** section with templated URLs for component docs, source, and examples. For resolved URLs, use `npx shadcn@latest docs <component>` instead.
+
+### `build` — Build a custom registry
+
+```bash
+npx shadcn@latest build [registry] [options]
+```
+
+Builds `registry.json` into individual JSON files for distribution. Default input: `./registry.json`, default output: `./public/r`.
+
+For authoring rules, `include`, item definitions, `registryDependencies`, and
+GitHub registry behavior, see [registry.md](./registry.md).
+
+| Flag              | Short | Description       | Default      |
+| ----------------- | ----- | ----------------- | ------------ |
+| `--output <path>` | `-o`  | Output directory  | `./public/r` |
+| `--cwd <cwd>`     | `-c`  | Working directory | current      |
+
+---
+
+## Templates
+
+| Value          | Framework      | Monorepo support |
+| -------------- | -------------- | ---------------- |
+| `next`         | Next.js        | Yes              |
+| `vite`         | Vite           | Yes              |
+| `start`        | TanStack Start | Yes              |
+| `react-router` | React Router   | Yes              |
+| `astro`        | Astro          | Yes              |
+| `laravel`      | Laravel        | No               |
+
+All templates support monorepo scaffolding via the `--monorepo` flag. When passed, the CLI uses a monorepo-specific template directory (e.g. `next-monorepo`, `vite-monorepo`). When neither `--monorepo` nor `--no-monorepo` is passed, the CLI prompts interactively. Laravel does not support monorepo scaffolding.
+
+---
+
+## Presets
+
+Three ways to specify a preset via `--preset`:
+
+1. **Named:** `--preset nova` or `--preset lyra`
+2. **Code:** `--preset a2r6bw` (version-prefixed base62 string, e.g. `a2r6bw` or `b0`)
+3. **URL:** `--preset "https://ui.shadcn.com/init?base=radix&style=nova&..."`
+
+> **IMPORTANT:** Never try to decode, fetch, or resolve preset codes manually. Preset codes are opaque — pass them directly to `npx shadcn@latest init --preset <code>` and let the CLI handle resolution.
+> Use `npx shadcn@latest apply --preset <code>` when overwriting an existing project's preset.
+
+## Switching Presets
+
+Ask the user first: **overwrite**, **merge**, or **skip** existing components?
+
+- **Overwrite / Re-install** → `npx shadcn@latest apply --preset <code>`. Overwrites all detected component files with the new preset styles. Use when the user hasn't customized components.
+- **Merge** → `npx shadcn@latest init --preset <code> --force --no-reinstall`, then run `npx shadcn@latest info` to get the list of installed components and use the [smart merge workflow](./SKILL.md#updating-components) to update them one by one, preserving local changes. Use when the user has customized components.
+- **Skip** → `npx shadcn@latest init --preset <code> --force --no-reinstall`. Only updates config and CSS variables, leaves existing components as-is.
+
+Always run preset commands inside the user's project directory. `apply` only works in an existing project with a `components.json` file. The CLI automatically preserves the current base (`base` vs `radix`) from `components.json`. If you must use a scratch/temp directory (e.g. for `--dry-run` comparisons), pass `--base <current-base>` explicitly — preset codes do not encode the base.
diff --git a/.agents/skills/shadcn/customization.md b/.agents/skills/shadcn/customization.md
new file mode 100644
index 0000000..16954f5
--- /dev/null
+++ b/.agents/skills/shadcn/customization.md
@@ -0,0 +1,209 @@
+# Customization & Theming
+
+Components reference semantic CSS variable tokens. Change the variables to change every component.
+
+## Contents
+
+- How it works (CSS variables → Tailwind utilities → components)
+- Color variables and OKLCH format
+- Dark mode setup
+- Changing the theme (presets, CSS variables)
+- Adding custom colors (Tailwind v3 and v4)
+- Border radius
+- Customizing components (variants, className, wrappers)
+- Checking for updates
+
+---
+
+## How It Works
+
+1. CSS variables defined in `:root` (light) and `.dark` (dark mode).
+2. Tailwind maps them to utilities: `bg-primary`, `text-muted-foreground`, etc.
+3. Components use these utilities — changing a variable changes all components that reference it.
+
+---
+
+## Color Variables
+
+Every color follows the `name` / `name-foreground` convention. The base variable is for backgrounds, `-foreground` is for text/icons on that background.
+
+| Variable                                     | Purpose                          |
+| -------------------------------------------- | -------------------------------- |
+| `--background` / `--foreground`              | Page background and default text |
+| `--card` / `--card-foreground`               | Card surfaces                    |
+| `--primary` / `--primary-foreground`         | Primary buttons and actions      |
+| `--secondary` / `--secondary-foreground`     | Secondary actions                |
+| `--muted` / `--muted-foreground`             | Muted/disabled states            |
+| `--accent` / `--accent-foreground`           | Hover and accent states          |
+| `--destructive` / `--destructive-foreground` | Error and destructive actions    |
+| `--border`                                   | Default border color             |
+| `--input`                                    | Form input borders               |
+| `--ring`                                     | Focus ring color                 |
+| `--chart-1` through `--chart-5`              | Chart/data visualization         |
+| `--sidebar-*`                                | Sidebar-specific colors          |
+| `--surface` / `--surface-foreground`         | Secondary surface                |
+
+Colors use OKLCH: `--primary: oklch(0.205 0 0)` where values are lightness (0–1), chroma (0 = gray), and hue (0–360).
+
+---
+
+## Dark Mode
+
+Class-based toggle via `.dark` on the root element. In Next.js, use `next-themes`:
+
+```tsx
+import { ThemeProvider } from "next-themes"
+
+<ThemeProvider attribute="class" defaultTheme="system" enableSystem>
+  {children}
+</ThemeProvider>
+```
+
+---
+
+## Changing the Theme
+
+```bash
+# Apply a preset code from ui.shadcn.com.
+npx shadcn@latest apply --preset a2r6bw
+
+# Positional shorthand also works.
+npx shadcn@latest apply a2r6bw
+
+# Switch to a named preset and overwrite existing components.
+npx shadcn@latest apply --preset nova
+
+# Preserve existing components instead.
+npx shadcn@latest init --preset nova --force --no-reinstall
+
+# Use a custom theme URL.
+npx shadcn@latest apply --preset "https://ui.shadcn.com/init?base=radix&style=nova&theme=blue&..."
+```
+
+Or edit CSS variables directly in `globals.css`.
+
+---
+
+## Adding Custom Colors
+
+Add variables to the file at `tailwindCssFile` from `npx shadcn@latest info` (typically `globals.css`). Never create a new CSS file for this.
+
+```css
+/* 1. Define in the global CSS file. */
+:root {
+  --warning: oklch(0.84 0.16 84);
+  --warning-foreground: oklch(0.28 0.07 46);
+}
+.dark {
+  --warning: oklch(0.41 0.11 46);
+  --warning-foreground: oklch(0.99 0.02 95);
+}
+```
+
+```css
+/* 2a. Register with Tailwind v4 (@theme inline). */
+@theme inline {
+  --color-warning: var(--warning);
+  --color-warning-foreground: var(--warning-foreground);
+}
+```
+
+When `tailwindVersion` is `"v3"` (check via `npx shadcn@latest info`), register in `tailwind.config.js` instead:
+
+```js
+// 2b. Register with Tailwind v3 (tailwind.config.js).
+module.exports = {
+  theme: {
+    extend: {
+      colors: {
+        warning: "oklch(var(--warning) / <alpha-value>)",
+        "warning-foreground":
+          "oklch(var(--warning-foreground) / <alpha-value>)",
+      },
+    },
+  },
+}
+```
+
+```tsx
+// 3. Use in components.
+<div className="bg-warning text-warning-foreground">Warning</div>
+```
+
+---
+
+## Border Radius
+
+`--radius` controls border radius globally. Components derive values from it (`rounded-lg` = `var(--radius)`, `rounded-md` = `calc(var(--radius) - 2px)`).
+
+---
+
+## Customizing Components
+
+See also: [rules/styling.md](./rules/styling.md) for Incorrect/Correct examples.
+
+Prefer these approaches in order:
+
+### 1. Built-in variants
+
+```tsx
+<Button variant="outline" size="sm">
+  Click
+</Button>
+```
+
+### 2. Tailwind classes via `className`
+
+```tsx
+<Card className="mx-auto max-w-md">...</Card>
+```
+
+### 3. Add a new variant
+
+Edit the component source to add a variant via `cva`:
+
+```tsx
+// components/ui/button.tsx
+warning: "bg-warning text-warning-foreground hover:bg-warning/90",
+```
+
+### 4. Wrapper components
+
+Compose shadcn/ui primitives into higher-level components:
+
+```tsx
+export function ConfirmDialog({ title, description, onConfirm, children }) {
+  return (
+    <AlertDialog>
+      <AlertDialogTrigger asChild>{children}</AlertDialogTrigger>
+      <AlertDialogContent>
+        <AlertDialogHeader>
+          <AlertDialogTitle>{title}</AlertDialogTitle>
+          <AlertDialogDescription>{description}</AlertDialogDescription>
+        </AlertDialogHeader>
+        <AlertDialogFooter>
+          <AlertDialogCancel>Cancel</AlertDialogCancel>
+          <AlertDialogAction onClick={onConfirm}>Confirm</AlertDialogAction>
+        </AlertDialogFooter>
+      </AlertDialogContent>
+    </AlertDialog>
+  )
+}
+```
+
+---
+
+## Checking for Updates
+
+```bash
+npx shadcn@latest add button --diff
+```
+
+To preview exactly what would change before updating, use `--dry-run` and `--diff`:
+
+```bash
+npx shadcn@latest add button --dry-run        # see all affected files
+npx shadcn@latest add button --diff button.tsx # see the diff for a specific file
+```
+
+See [Updating Components in SKILL.md](./SKILL.md#updating-components) for the full smart merge workflow.
diff --git a/.agents/skills/shadcn/evals/evals.json b/.agents/skills/shadcn/evals/evals.json
new file mode 100644
index 0000000..0df77e4
--- /dev/null
+++ b/.agents/skills/shadcn/evals/evals.json
@@ -0,0 +1,47 @@
+{
+  "skill_name": "shadcn",
+  "evals": [
+    {
+      "id": 1,
+      "prompt": "I'm building a Next.js app with shadcn/ui (base-nova preset, lucide icons). Create a settings form component with fields for: full name, email address, and notification preferences (email, SMS, push notifications as toggle options). Add validation states for required fields.",
+      "expected_output": "A React component using FieldGroup, Field, ToggleGroup, data-invalid/aria-invalid validation, gap-* spacing, and semantic colors.",
+      "files": [],
+      "expectations": [
+        "Uses FieldGroup and Field components for form layout instead of raw div with space-y",
+        "Uses Switch for independent on/off notification toggles (not looping Button with manual active state)",
+        "Uses data-invalid on Field and aria-invalid on the input control for validation states",
+        "Uses gap-* (e.g. gap-4, gap-6) instead of space-y-* or space-x-* for spacing",
+        "Uses semantic color tokens (e.g. bg-background, text-muted-foreground, text-destructive) instead of raw colors like bg-red-500",
+        "No manual dark: color overrides"
+      ]
+    },
+    {
+      "id": 2,
+      "prompt": "Create a dialog component for editing a user profile. It should have the user's avatar at the top, input fields for name and bio, and Save/Cancel buttons with appropriate icons. Using shadcn/ui with radix-nova preset and tabler icons.",
+      "expected_output": "A React component with DialogTitle, Avatar+AvatarFallback, data-icon on icon buttons, no icon sizing classes, tabler icon imports.",
+      "files": [],
+      "expectations": [
+        "Includes DialogTitle for accessibility (visible or with sr-only class)",
+        "Avatar component includes AvatarFallback",
+        "Icons on buttons use the data-icon attribute (data-icon=\"inline-start\" or data-icon=\"inline-end\")",
+        "No sizing classes on icons inside components (no size-4, w-4, h-4, etc.)",
+        "Uses tabler icons (@tabler/icons-react) instead of lucide-react",
+        "Uses asChild for custom triggers (radix preset)"
+      ]
+    },
+    {
+      "id": 3,
+      "prompt": "Create a dashboard component that shows 4 stat cards in a grid. Each card has a title, large number, percentage change badge, and a loading skeleton state. Using shadcn/ui with base-nova preset and lucide icons.",
+      "expected_output": "A React component with full Card composition, Skeleton for loading, Badge for changes, semantic colors, gap-* spacing.",
+      "files": [],
+      "expectations": [
+        "Uses full Card composition with CardHeader, CardTitle, CardContent (not dumping everything into CardContent)",
+        "Uses Skeleton component for loading placeholders instead of custom animate-pulse divs",
+        "Uses Badge component for percentage change instead of custom styled spans",
+        "Uses semantic color tokens instead of raw color values like bg-green-500 or text-red-600",
+        "Uses gap-* instead of space-y-* or space-x-* for spacing",
+        "Uses size-* when width and height are equal instead of separate w-* h-*"
+      ]
+    }
+  ]
+}
diff --git a/.agents/skills/shadcn/mcp.md b/.agents/skills/shadcn/mcp.md
new file mode 100644
index 0000000..6539dda
--- /dev/null
+++ b/.agents/skills/shadcn/mcp.md
@@ -0,0 +1,105 @@
+# shadcn MCP Server
+
+The CLI includes an MCP server that lets AI assistants search, browse, view, and install items from registries.
+
+---
+
+## Setup
+
+```bash
+shadcn mcp        # start the MCP server (stdio)
+shadcn mcp init   # write config for your editor
+```
+
+Editor config files:
+
+| Editor      | Config file                     |
+| ----------- | ------------------------------- |
+| Claude Code | `.mcp.json`                     |
+| Cursor      | `.cursor/mcp.json`              |
+| VS Code     | `.vscode/mcp.json`              |
+| OpenCode    | `opencode.json`                 |
+| Codex       | `~/.codex/config.toml` (manual) |
+
+---
+
+## Tools
+
+> **Tip:** MCP tools handle registry operations (search, view, install). For project configuration (aliases, framework, Tailwind version), use `npx shadcn@latest info` — there is no MCP equivalent.
+
+### `shadcn:get_project_registries`
+
+Returns registry names from `components.json`. Errors if no `components.json` exists.
+
+**Input:** none
+
+### `shadcn:list_items_in_registries`
+
+Lists all items from one or more registries. Registries can be configured
+namespaces such as `@acme`, public GitHub sources such as `owner/repo`, or
+registry catalog URLs. Omit `registries` to list from every registry configured
+in `components.json`.
+
+**Input:** `registries` (string[], optional — omit for all configured), `types` (string[], optional — e.g. `["ui", "block"]`), `limit` (number, optional, defaults to 100), `offset` (number, optional)
+
+### `shadcn:search_items_in_registries`
+
+Fuzzy search across registries. Registries can be configured namespaces, public
+GitHub sources, or registry catalog URLs. Omit `registries` to search every
+registry configured in `components.json` — e.g. "find me a hero" across all
+configured registries.
+
+**Input:** `registries` (string[], optional — omit for all configured), `query` (string), `types` (string[], optional — e.g. `["ui", "block"]`), `limit` (number, optional, defaults to 100), `offset` (number, optional)
+
+### `shadcn:view_items_in_registries`
+
+View item details including full file contents.
+
+**Input:** `items` (string[]) — e.g.
+`["@shadcn/button", "@shadcn/card", "owner/repo/item"]`
+
+### `shadcn:get_item_examples_from_registries`
+
+Find usage examples and demos with source code. Omit `registries` to search
+every registry configured in `components.json`.
+
+**Input:** `registries` (string[], optional — omit for all configured), `query` (string) — e.g. `"accordion-demo"`, `"button example"`
+
+### `shadcn:get_add_command_for_items`
+
+Returns the CLI install command.
+
+**Input:** `items` (string[]) — e.g. `["@shadcn/button"]`
+
+### `shadcn:get_audit_checklist`
+
+Returns a checklist for verifying components (imports, deps, lint, TypeScript).
+
+**Input:** none
+
+---
+
+## Configuring Registries
+
+Namespaced and authenticated registries are set in `components.json`. The
+`@shadcn` registry is always built-in. Public GitHub registries can also be used
+directly as `owner/repo` registry sources when the repository has a root
+`registry.json`; they do not need `components.json` configuration.
+
+```json
+{
+  "registries": {
+    "@acme": "https://acme.com/r/{name}.json",
+    "@private": {
+      "url": "https://private.com/r/{name}.json",
+      "headers": { "Authorization": "Bearer ${MY_TOKEN}" }
+    }
+  }
+}
+```
+
+- Names must start with `@`.
+- URLs must contain `{name}`.
+- `${VAR}` references are resolved from environment variables.
+
+Community registry index: `https://ui.shadcn.com/r/registries.json`
diff --git a/.agents/skills/shadcn/registry.md b/.agents/skills/shadcn/registry.md
new file mode 100644
index 0000000..5369468
--- /dev/null
+++ b/.agents/skills/shadcn/registry.md
@@ -0,0 +1,277 @@
+# Registry Authoring and Addresses
+
+Use this reference when the user wants to create, fix, publish, or reason about
+a shadcn registry.
+
+## Mental Model
+
+A registry has two forms:
+
+- **Source registry**: an authored `registry.json` in a project or repository.
+  It may use `include` and file paths that point at source files.
+- **Built registry**: generated JSON files served to CLI consumers, usually
+  from `public/r`. Use `npx shadcn@latest build` to create this form.
+
+The CLI installer consumes registry item payloads. A source registry is a way to
+author those payloads from real files.
+
+Registry items are not limited to React components. They can distribute
+components, hooks, utilities, design tokens, pages, config files, docs, rules,
+workflows, templates, MCP files, and other project files.
+
+## Root `registry.json`
+
+The root registry file should define registry metadata and either `items` or
+`include`.
+
+```json
+{
+  "$schema": "https://ui.shadcn.com/schema/registry.json",
+  "name": "acme",
+  "homepage": "https://acme.com",
+  "items": [
+    {
+      "name": "absolute-url",
+      "type": "registry:lib",
+      "title": "Absolute URL",
+      "description": "A utility to turn any path into an absolute URL.",
+      "files": [
+        {
+          "path": "lib/absolute-url.ts",
+          "type": "registry:lib"
+        }
+      ]
+    }
+  ]
+}
+```
+
+Root registry rules:
+
+- Root `registry.json` must include `name` and `homepage`.
+- `items` is an array of registry item definitions.
+- `include` may be used to split the source registry into multiple files.
+- Included registry files may omit `name` and `homepage`.
+
+## Include
+
+Use `include` to keep large registries modular.
+
+```json
+{
+  "$schema": "https://ui.shadcn.com/schema/registry.json",
+  "name": "acme",
+  "homepage": "https://acme.com",
+  "include": ["registry/ui/registry.json", "registry/blocks/registry.json"]
+}
+```
+
+Include rules:
+
+- Include paths are relative to the `registry.json` that declares them.
+- Include paths must explicitly point to a `registry.json` file.
+- Do not use remote URLs, absolute paths, or parent traversal (`..`).
+- Item file paths are relative to the registry file that declares the item.
+- Duplicate item names fail across the resolved registry.
+
+Example included file:
+
+```json
+{
+  "items": [
+    {
+      "name": "button",
+      "type": "registry:ui",
+      "files": [
+        {
+          "path": "button.tsx",
+          "type": "registry:ui"
+        }
+      ]
+    }
+  ]
+}
+```
+
+If this file is at `registry/ui/registry.json`, then `button.tsx` is read from
+`registry/ui/button.tsx`, and the built item path is emitted relative to the
+root registry.
+
+## Item Definitions
+
+Common item fields:
+
+```json
+{
+  "name": "login-form",
+  "type": "registry:block",
+  "title": "Login Form",
+  "description": "A login form with email and password fields.",
+  "dependencies": ["zod"],
+  "registryDependencies": ["button", "input", "label"],
+  "files": [
+    {
+      "path": "blocks/login-form.tsx",
+      "type": "registry:block"
+    }
+  ],
+  "cssVars": {
+    "light": {
+      "brand": "oklch(0.62 0.18 250)"
+    },
+    "dark": {
+      "brand": "oklch(0.72 0.16 250)"
+    }
+  }
+}
+```
+
+Important fields:
+
+- `name`: the installable item name. It is not necessarily a file path.
+- `type`: one of the registry item types, such as `registry:ui`,
+  `registry:block`, `registry:lib`, `registry:hook`, `registry:file`,
+  `registry:page`, `registry:theme`, `registry:style`, `registry:font`, or
+  `registry:item`.
+- `files`: source files copied or generated by the item.
+- `dependencies`: npm runtime dependencies.
+- `devDependencies`: npm development dependencies.
+- `registryDependencies`: other registry items required by this item.
+- `cssVars`, `css`, `tailwind`, `envVars`, and `docs`: optional install-time
+  additions.
+
+File rules:
+
+- File paths are relative to the declaring `registry.json`.
+- `registry:file` and `registry:page` files require a `target`.
+- Do not use remote file URLs in source registry file paths.
+- Keep source files copy-pasteable: no hidden app-only imports.
+
+## Registry Dependencies
+
+`registryDependencies` entries are item addresses, not file paths.
+
+```json
+{
+  "name": "login-form",
+  "type": "registry:block",
+  "registryDependencies": ["button", "@acme/input", "acme/ui/card#v1.2.0"],
+  "files": [
+    {
+      "path": "blocks/login-form.tsx",
+      "type": "registry:block"
+    }
+  ]
+}
+```
+
+Dependency rules:
+
+- Bare names such as `"button"` mean official shadcn items.
+- Bare names never mean same-registry or same-repository items.
+- Namespaced dependencies use `@namespace/item-name`.
+- GitHub dependencies use `owner/repo/item-name`.
+- Pin GitHub dependencies with `owner/repo/item-name#ref` when needed.
+- Refs are not inherited. If `owner/repo/foo#v2` depends on `bar` from the same
+  repo at `v2`, write `owner/repo/bar#v2`.
+- Do not use relative dependencies such as `"./bar"`.
+
+## Address Schemes
+
+When reasoning about a registry item string, classify it first.
+
+| Address                             | Scheme    | Meaning                                                      |
+| ----------------------------------- | --------- | ------------------------------------------------------------ |
+| `button`                            | shadcn    | Official shadcn item named `button`.                         |
+| `@acme/button`                      | namespace | Item `button` from configured registry `@acme`.              |
+| `@acme/ui/button`                   | namespace | Item `ui/button` from configured registry `@acme`.           |
+| `https://example.com/r/button.json` | url       | Built registry item JSON at that URL.                        |
+| `./button.json`                     | file      | Built registry item JSON on disk.                            |
+| `acme/ui/button`                    | github    | Item `button` from GitHub repo `acme/ui`.                    |
+| `acme/ui/forms/login#main`          | github    | Item `forms/login` from GitHub repo `acme/ui` at ref `main`. |
+
+For namespace and GitHub addresses, slashful item names are allowed and are item
+names, not file paths. Addresses ending in `.json` keep file-address
+precedence, so `acme/ui/data/schema.json` is treated as a file path, not a
+GitHub item address.
+
+## GitHub Registries
+
+A public GitHub repository can act as a source registry when it has a root
+`registry.json`.
+
+```txt
+owner/repo/item-name[#ref]
+```
+
+Rules:
+
+- The first two path segments are GitHub owner and repo.
+- All remaining path segments are the registry item name.
+- The source entrypoint is always root `registry.json`.
+- GitHub registries are source registries consumed directly by the CLI. They do
+  not require `shadcn build` or generated item JSON files.
+- `include` follows the same source-registry rules as local registries.
+- Currently, GitHub addresses support public `github.com` repositories only.
+- Private repos and GitHub Enterprise require explicit product decisions.
+
+When implementing GitHub registry fetching, resolve refs to a commit SHA before
+reading source files. Do not read moving refs directly from
+`raw.githubusercontent.com`, because branch-like refs can be cached for several
+minutes.
+
+Preferred flow:
+
+```txt
+owner/repo[#ref]
+  -> resolve ref with git ls-remote
+  -> commit SHA
+  -> read https://raw.githubusercontent.com/{owner}/{repo}/{sha}/registry.json
+  -> read includes and item files from the same SHA
+```
+
+This keeps a command on one consistent repository snapshot.
+
+Full 40-character commit SHAs are already stable and can be used directly.
+Branches, tags, and short refs require Git so the CLI can resolve them to a
+commit SHA first.
+
+## Build and Verify
+
+Use the CLI to build source registries:
+
+```bash
+npx shadcn@latest build
+npx shadcn@latest build registry.json --output public/r
+```
+
+Use CLI commands to inspect the result:
+
+```bash
+npx shadcn@latest list @acme
+npx shadcn@latest search @acme -q "login"
+npx shadcn@latest view @acme/login-form
+npx shadcn@latest add @acme/login-form --dry-run
+npx shadcn@latest registry validate ./registry.json
+```
+
+Use GitHub addresses directly for public GitHub registries:
+
+```bash
+npx shadcn@latest list owner/repo
+npx shadcn@latest search owner/repo -q "login"
+npx shadcn@latest view owner/repo/item
+npx shadcn@latest add owner/repo/item --dry-run
+npx shadcn@latest registry validate owner/repo
+```
+
+When working on registry implementation in the shadcn/ui codebase:
+
+- Keep address parsing pure and testable.
+- Do not add side effects to validators.
+- Preserve existing behavior for official shadcn, namespace, URL, and file
+  schemes.
+- Add tests for address parsing, source loading, dependency resolution, list,
+  search, view, and add paths.
+- Prefer small source-reader abstractions over a plugin system until there are
+  multiple real providers.
diff --git a/.agents/skills/shadcn/rules/base-vs-radix.md b/.agents/skills/shadcn/rules/base-vs-radix.md
new file mode 100644
index 0000000..c1ed7d1
--- /dev/null
+++ b/.agents/skills/shadcn/rules/base-vs-radix.md
@@ -0,0 +1,306 @@
+# Base vs Radix
+
+API differences between `base` and `radix`. Check the `base` field from `npx shadcn@latest info`.
+
+## Contents
+
+- Composition: asChild vs render
+- Button / trigger as non-button element
+- Select (items prop, placeholder, positioning, multiple, object values)
+- ToggleGroup (type vs multiple)
+- Slider (scalar vs array)
+- Accordion (type and defaultValue)
+
+---
+
+## Composition: asChild (radix) vs render (base)
+
+Radix uses `asChild` to replace the default element. Base uses `render`. Don't wrap triggers in extra elements.
+
+**Incorrect:**
+
+```tsx
+<DialogTrigger>
+  <div>
+    <Button>Open</Button>
+  </div>
+</DialogTrigger>
+```
+
+**Correct (radix):**
+
+```tsx
+<DialogTrigger asChild>
+  <Button>Open</Button>
+</DialogTrigger>
+```
+
+**Correct (base):**
+
+```tsx
+<DialogTrigger render={<Button />}>Open</DialogTrigger>
+```
+
+This applies to all trigger and close components: `DialogTrigger`, `SheetTrigger`, `AlertDialogTrigger`, `DropdownMenuTrigger`, `PopoverTrigger`, `TooltipTrigger`, `CollapsibleTrigger`, `DialogClose`, `SheetClose`, `NavigationMenuLink`, `BreadcrumbLink`, `SidebarMenuButton`, `Badge`, `Item`.
+
+---
+
+## Button / trigger as non-button element (base only)
+
+When `render` changes an element to a non-button (`<a>`, `<span>`), add `nativeButton={false}`.
+
+**Incorrect (base):** missing `nativeButton={false}`.
+
+```tsx
+<Button render={<a href="/docs" />}>Read the docs</Button>
+```
+
+**Correct (base):**
+
+```tsx
+<Button render={<a href="/docs" />} nativeButton={false}>
+  Read the docs
+</Button>
+```
+
+**Correct (radix):**
+
+```tsx
+<Button asChild>
+  <a href="/docs">Read the docs</a>
+</Button>
+```
+
+Same for triggers whose `render` is not a `Button`:
+
+```tsx
+// base.
+<PopoverTrigger render={<InputGroupAddon />} nativeButton={false}>
+  Pick date
+</PopoverTrigger>
+```
+
+---
+
+## Select
+
+**items prop (base only).** Base requires an `items` prop on the root. Radix uses inline JSX only.
+
+**Incorrect (base):**
+
+```tsx
+<Select>
+  <SelectTrigger><SelectValue placeholder="Select a fruit" /></SelectTrigger>
+</Select>
+```
+
+**Correct (base):**
+
+```tsx
+const items = [
+  { label: "Select a fruit", value: null },
+  { label: "Apple", value: "apple" },
+  { label: "Banana", value: "banana" },
+]
+
+<Select items={items}>
+  <SelectTrigger>
+    <SelectValue />
+  </SelectTrigger>
+  <SelectContent>
+    <SelectGroup>
+      {items.map((item) => (
+        <SelectItem key={item.value} value={item.value}>{item.label}</SelectItem>
+      ))}
+    </SelectGroup>
+  </SelectContent>
+</Select>
+```
+
+**Correct (radix):**
+
+```tsx
+<Select>
+  <SelectTrigger>
+    <SelectValue placeholder="Select a fruit" />
+  </SelectTrigger>
+  <SelectContent>
+    <SelectGroup>
+      <SelectItem value="apple">Apple</SelectItem>
+      <SelectItem value="banana">Banana</SelectItem>
+    </SelectGroup>
+  </SelectContent>
+</Select>
+```
+
+**Placeholder.** Base uses a `{ value: null }` item in the items array. Radix uses `<SelectValue placeholder="...">`.
+
+**Content positioning.** Base uses `alignItemWithTrigger`. Radix uses `position`.
+
+```tsx
+// base.
+<SelectContent alignItemWithTrigger={false} side="bottom">
+
+// radix.
+<SelectContent position="popper">
+```
+
+---
+
+## Select — multiple selection and object values (base only)
+
+Base supports `multiple`, render-function children on `SelectValue`, and object values with `itemToStringValue`. Radix is single-select with string values only.
+
+**Correct (base — multiple selection):**
+
+```tsx
+<Select items={items} multiple defaultValue={[]}>
+  <SelectTrigger>
+    <SelectValue>
+      {(value: string[]) => value.length === 0 ? "Select fruits" : `${value.length} selected`}
+    </SelectValue>
+  </SelectTrigger>
+  ...
+</Select>
+```
+
+**Correct (base — object values):**
+
+```tsx
+<Select defaultValue={plans[0]} itemToStringValue={(plan) => plan.name}>
+  <SelectTrigger>
+    <SelectValue>{(value) => value.name}</SelectValue>
+  </SelectTrigger>
+  ...
+</Select>
+```
+
+---
+
+## ToggleGroup
+
+Base uses a `multiple` boolean prop. Radix uses `type="single"` or `type="multiple"`.
+
+**Incorrect (base):**
+
+```tsx
+<ToggleGroup type="single" defaultValue="daily">
+  <ToggleGroupItem value="daily">Daily</ToggleGroupItem>
+</ToggleGroup>
+```
+
+**Correct (base):**
+
+```tsx
+// Single (no prop needed), defaultValue is always an array.
+<ToggleGroup defaultValue={["daily"]} spacing={2}>
+  <ToggleGroupItem value="daily">Daily</ToggleGroupItem>
+  <ToggleGroupItem value="weekly">Weekly</ToggleGroupItem>
+</ToggleGroup>
+
+// Multi-selection.
+<ToggleGroup multiple>
+  <ToggleGroupItem value="bold">Bold</ToggleGroupItem>
+  <ToggleGroupItem value="italic">Italic</ToggleGroupItem>
+</ToggleGroup>
+```
+
+**Correct (radix):**
+
+```tsx
+// Single, defaultValue is a string.
+<ToggleGroup type="single" defaultValue="daily" spacing={2}>
+  <ToggleGroupItem value="daily">Daily</ToggleGroupItem>
+  <ToggleGroupItem value="weekly">Weekly</ToggleGroupItem>
+</ToggleGroup>
+
+// Multi-selection.
+<ToggleGroup type="multiple">
+  <ToggleGroupItem value="bold">Bold</ToggleGroupItem>
+  <ToggleGroupItem value="italic">Italic</ToggleGroupItem>
+</ToggleGroup>
+```
+
+**Controlled single value:**
+
+```tsx
+// base — wrap/unwrap arrays.
+const [value, setValue] = React.useState("normal")
+<ToggleGroup value={[value]} onValueChange={(v) => setValue(v[0])}>
+
+// radix — plain string.
+const [value, setValue] = React.useState("normal")
+<ToggleGroup type="single" value={value} onValueChange={setValue}>
+```
+
+---
+
+## Slider
+
+Base accepts a plain number for a single thumb. Radix always requires an array.
+
+**Incorrect (base):**
+
+```tsx
+<Slider defaultValue={[50]} max={100} step={1} />
+```
+
+**Correct (base):**
+
+```tsx
+<Slider defaultValue={50} max={100} step={1} />
+```
+
+**Correct (radix):**
+
+```tsx
+<Slider defaultValue={[50]} max={100} step={1} />
+```
+
+Both use arrays for range sliders. Controlled `onValueChange` in base may need a cast:
+
+```tsx
+// base.
+const [value, setValue] = React.useState([0.3, 0.7])
+<Slider value={value} onValueChange={(v) => setValue(v as number[])} />
+
+// radix.
+const [value, setValue] = React.useState([0.3, 0.7])
+<Slider value={value} onValueChange={setValue} />
+```
+
+---
+
+## Accordion
+
+Radix requires `type="single"` or `type="multiple"` and supports `collapsible`. `defaultValue` is a string. Base uses no `type` prop, uses `multiple` boolean, and `defaultValue` is always an array.
+
+**Incorrect (base):**
+
+```tsx
+<Accordion type="single" collapsible defaultValue="item-1">
+  <AccordionItem value="item-1">...</AccordionItem>
+</Accordion>
+```
+
+**Correct (base):**
+
+```tsx
+<Accordion defaultValue={["item-1"]}>
+  <AccordionItem value="item-1">...</AccordionItem>
+</Accordion>
+
+// Multi-select.
+<Accordion multiple defaultValue={["item-1", "item-2"]}>
+  <AccordionItem value="item-1">...</AccordionItem>
+  <AccordionItem value="item-2">...</AccordionItem>
+</Accordion>
+```
+
+**Correct (radix):**
+
+```tsx
+<Accordion type="single" collapsible defaultValue="item-1">
+  <AccordionItem value="item-1">...</AccordionItem>
+</Accordion>
+```
diff --git a/.agents/skills/shadcn/rules/composition.md b/.agents/skills/shadcn/rules/composition.md
new file mode 100644
index 0000000..0e10583
--- /dev/null
+++ b/.agents/skills/shadcn/rules/composition.md
@@ -0,0 +1,195 @@
+# Component Composition
+
+## Contents
+
+- Items always inside their Group component
+- Callouts use Alert
+- Empty states use Empty component
+- Toast notifications use sonner
+- Choosing between overlay components
+- Dialog, Sheet, and Drawer always need a Title
+- Card structure
+- Button has no isPending or isLoading prop
+- TabsTrigger must be inside TabsList
+- Avatar always needs AvatarFallback
+- Use Separator instead of raw hr or border divs
+- Use Skeleton for loading placeholders
+- Use Badge instead of custom styled spans
+
+---
+
+## Items always inside their Group component
+
+Never render items directly inside the content container.
+
+**Incorrect:**
+
+```tsx
+<SelectContent>
+  <SelectItem value="apple">Apple</SelectItem>
+  <SelectItem value="banana">Banana</SelectItem>
+</SelectContent>
+```
+
+**Correct:**
+
+```tsx
+<SelectContent>
+  <SelectGroup>
+    <SelectItem value="apple">Apple</SelectItem>
+    <SelectItem value="banana">Banana</SelectItem>
+  </SelectGroup>
+</SelectContent>
+```
+
+This applies to all group-based components:
+
+| Item | Group |
+|------|-------|
+| `SelectItem`, `SelectLabel` | `SelectGroup` |
+| `DropdownMenuItem`, `DropdownMenuLabel`, `DropdownMenuSub` | `DropdownMenuGroup` |
+| `MenubarItem` | `MenubarGroup` |
+| `ContextMenuItem` | `ContextMenuGroup` |
+| `CommandItem` | `CommandGroup` |
+
+---
+
+## Callouts use Alert
+
+```tsx
+<Alert>
+  <AlertTitle>Warning</AlertTitle>
+  <AlertDescription>Something needs attention.</AlertDescription>
+</Alert>
+```
+
+---
+
+## Empty states use Empty component
+
+```tsx
+<Empty>
+  <EmptyHeader>
+    <EmptyMedia variant="icon"><FolderIcon /></EmptyMedia>
+    <EmptyTitle>No projects yet</EmptyTitle>
+    <EmptyDescription>Get started by creating a new project.</EmptyDescription>
+  </EmptyHeader>
+  <EmptyContent>
+    <Button>Create Project</Button>
+  </EmptyContent>
+</Empty>
+```
+
+---
+
+## Toast notifications use sonner
+
+```tsx
+import { toast } from "sonner"
+
+toast.success("Changes saved.")
+toast.error("Something went wrong.")
+toast("File deleted.", {
+  action: { label: "Undo", onClick: () => undoDelete() },
+})
+```
+
+---
+
+## Choosing between overlay components
+
+| Use case | Component |
+|----------|-----------|
+| Focused task that requires input | `Dialog` |
+| Destructive action confirmation | `AlertDialog` |
+| Side panel with details or filters | `Sheet` |
+| Mobile-first bottom panel | `Drawer` |
+| Quick info on hover | `HoverCard` |
+| Small contextual content on click | `Popover` |
+
+---
+
+## Dialog, Sheet, and Drawer always need a Title
+
+`DialogTitle`, `SheetTitle`, `DrawerTitle` are required for accessibility. Use `className="sr-only"` if visually hidden.
+
+```tsx
+<DialogContent>
+  <DialogHeader>
+    <DialogTitle>Edit Profile</DialogTitle>
+    <DialogDescription>Update your profile.</DialogDescription>
+  </DialogHeader>
+  ...
+</DialogContent>
+```
+
+---
+
+## Card structure
+
+Use full composition — don't dump everything into `CardContent`:
+
+```tsx
+<Card>
+  <CardHeader>
+    <CardTitle>Team Members</CardTitle>
+    <CardDescription>Manage your team.</CardDescription>
+  </CardHeader>
+  <CardContent>...</CardContent>
+  <CardFooter>
+    <Button>Invite</Button>
+  </CardFooter>
+</Card>
+```
+
+---
+
+## Button has no isPending or isLoading prop
+
+Compose with `Spinner` + `data-icon` + `disabled`:
+
+```tsx
+<Button disabled>
+  <Spinner data-icon="inline-start" />
+  Saving...
+</Button>
+```
+
+---
+
+## TabsTrigger must be inside TabsList
+
+Never render `TabsTrigger` directly inside `Tabs` — always wrap in `TabsList`:
+
+```tsx
+<Tabs defaultValue="account">
+  <TabsList>
+    <TabsTrigger value="account">Account</TabsTrigger>
+    <TabsTrigger value="password">Password</TabsTrigger>
+  </TabsList>
+  <TabsContent value="account">...</TabsContent>
+</Tabs>
+```
+
+---
+
+## Avatar always needs AvatarFallback
+
+Always include `AvatarFallback` for when the image fails to load:
+
+```tsx
+<Avatar>
+  <AvatarImage src="/avatar.png" alt="User" />
+  <AvatarFallback>JD</AvatarFallback>
+</Avatar>
+```
+
+---
+
+## Use existing components instead of custom markup
+
+| Instead of | Use |
+|---|---|
+| `<hr>` or `<div className="border-t">` | `<Separator />` |
+| `<div className="animate-pulse">` with styled divs | `<Skeleton className="h-4 w-3/4" />` |
+| `<span className="rounded-full bg-green-100 ...">` | `<Badge variant="secondary">` |
diff --git a/.agents/skills/shadcn/rules/forms.md b/.agents/skills/shadcn/rules/forms.md
new file mode 100644
index 0000000..f451e2f
--- /dev/null
+++ b/.agents/skills/shadcn/rules/forms.md
@@ -0,0 +1,192 @@
+# Forms & Inputs
+
+## Contents
+
+- Forms use FieldGroup + Field
+- InputGroup requires InputGroupInput/InputGroupTextarea
+- Buttons inside inputs use InputGroup + InputGroupAddon
+- Option sets (2–7 choices) use ToggleGroup
+- FieldSet + FieldLegend for grouping related fields
+- Field validation and disabled states
+
+---
+
+## Forms use FieldGroup + Field
+
+Always use `FieldGroup` + `Field` — never raw `div` with `space-y-*`:
+
+```tsx
+<FieldGroup>
+  <Field>
+    <FieldLabel htmlFor="email">Email</FieldLabel>
+    <Input id="email" type="email" />
+  </Field>
+  <Field>
+    <FieldLabel htmlFor="password">Password</FieldLabel>
+    <Input id="password" type="password" />
+  </Field>
+</FieldGroup>
+```
+
+Use `Field orientation="horizontal"` for settings pages. Use `FieldLabel className="sr-only"` for visually hidden labels.
+
+**Choosing form controls:**
+
+- Simple text input → `Input`
+- Dropdown with predefined options → `Select`
+- Searchable dropdown → `Combobox`
+- Native HTML select (no JS) → `native-select`
+- Boolean toggle → `Switch` (for settings) or `Checkbox` (for forms)
+- Single choice from few options → `RadioGroup`
+- Toggle between 2–5 options → `ToggleGroup` + `ToggleGroupItem`
+- OTP/verification code → `InputOTP`
+- Multi-line text → `Textarea`
+
+---
+
+## InputGroup requires InputGroupInput/InputGroupTextarea
+
+Never use raw `Input` or `Textarea` inside an `InputGroup`.
+
+**Incorrect:**
+
+```tsx
+<InputGroup>
+  <Input placeholder="Search..." />
+</InputGroup>
+```
+
+**Correct:**
+
+```tsx
+import { InputGroup, InputGroupInput } from "@/components/ui/input-group"
+
+<InputGroup>
+  <InputGroupInput placeholder="Search..." />
+</InputGroup>
+```
+
+---
+
+## Buttons inside inputs use InputGroup + InputGroupAddon
+
+Never place a `Button` directly inside or adjacent to an `Input` with custom positioning.
+
+**Incorrect:**
+
+```tsx
+<div className="relative">
+  <Input placeholder="Search..." className="pr-10" />
+  <Button className="absolute right-0 top-0" size="icon">
+    <SearchIcon />
+  </Button>
+</div>
+```
+
+**Correct:**
+
+```tsx
+import { InputGroup, InputGroupInput, InputGroupAddon } from "@/components/ui/input-group"
+
+<InputGroup>
+  <InputGroupInput placeholder="Search..." />
+  <InputGroupAddon>
+    <Button size="icon">
+      <SearchIcon data-icon="inline-start" />
+    </Button>
+  </InputGroupAddon>
+</InputGroup>
+```
+
+---
+
+## Option sets (2–7 choices) use ToggleGroup
+
+Don't manually loop `Button` components with active state.
+
+**Incorrect:**
+
+```tsx
+const [selected, setSelected] = useState("daily")
+
+<div className="flex gap-2">
+  {["daily", "weekly", "monthly"].map((option) => (
+    <Button
+      key={option}
+      variant={selected === option ? "default" : "outline"}
+      onClick={() => setSelected(option)}
+    >
+      {option}
+    </Button>
+  ))}
+</div>
+```
+
+**Correct:**
+
+```tsx
+import { ToggleGroup, ToggleGroupItem } from "@/components/ui/toggle-group"
+
+<ToggleGroup spacing={2}>
+  <ToggleGroupItem value="daily">Daily</ToggleGroupItem>
+  <ToggleGroupItem value="weekly">Weekly</ToggleGroupItem>
+  <ToggleGroupItem value="monthly">Monthly</ToggleGroupItem>
+</ToggleGroup>
+```
+
+Combine with `Field` for labelled toggle groups:
+
+```tsx
+<Field orientation="horizontal">
+  <FieldTitle id="theme-label">Theme</FieldTitle>
+  <ToggleGroup aria-labelledby="theme-label" spacing={2}>
+    <ToggleGroupItem value="light">Light</ToggleGroupItem>
+    <ToggleGroupItem value="dark">Dark</ToggleGroupItem>
+    <ToggleGroupItem value="system">System</ToggleGroupItem>
+  </ToggleGroup>
+</Field>
+```
+
+> **Note:** `defaultValue` and `type`/`multiple` props differ between base and radix. See [base-vs-radix.md](./base-vs-radix.md#togglegroup).
+
+---
+
+## FieldSet + FieldLegend for grouping related fields
+
+Use `FieldSet` + `FieldLegend` for related checkboxes, radios, or switches — not `div` with a heading:
+
+```tsx
+<FieldSet>
+  <FieldLegend variant="label">Preferences</FieldLegend>
+  <FieldDescription>Select all that apply.</FieldDescription>
+  <FieldGroup className="gap-3">
+    <Field orientation="horizontal">
+      <Checkbox id="dark" />
+      <FieldLabel htmlFor="dark" className="font-normal">Dark mode</FieldLabel>
+    </Field>
+  </FieldGroup>
+</FieldSet>
+```
+
+---
+
+## Field validation and disabled states
+
+Both attributes are needed — `data-invalid`/`data-disabled` styles the field (label, description), while `aria-invalid`/`disabled` styles the control.
+
+```tsx
+// Invalid.
+<Field data-invalid>
+  <FieldLabel htmlFor="email">Email</FieldLabel>
+  <Input id="email" aria-invalid />
+  <FieldDescription>Invalid email address.</FieldDescription>
+</Field>
+
+// Disabled.
+<Field data-disabled>
+  <FieldLabel htmlFor="email">Email</FieldLabel>
+  <Input id="email" disabled />
+</Field>
+```
+
+Works for all controls: `Input`, `Textarea`, `Select`, `Checkbox`, `RadioGroupItem`, `Switch`, `Slider`, `NativeSelect`, `InputOTP`.
diff --git a/.agents/skills/shadcn/rules/icons.md b/.agents/skills/shadcn/rules/icons.md
new file mode 100644
index 0000000..bba8102
--- /dev/null
+++ b/.agents/skills/shadcn/rules/icons.md
@@ -0,0 +1,101 @@
+# Icons
+
+**Always use the project's configured `iconLibrary` for imports.** Check the `iconLibrary` field from project context: `lucide` → `lucide-react`, `tabler` → `@tabler/icons-react`, etc. Never assume `lucide-react`.
+
+---
+
+## Icons in Button use data-icon attribute
+
+Add `data-icon="inline-start"` (prefix) or `data-icon="inline-end"` (suffix) to the icon. No sizing classes on the icon.
+
+**Incorrect:**
+
+```tsx
+<Button>
+  <SearchIcon className="mr-2 size-4" />
+  Search
+</Button>
+```
+
+**Correct:**
+
+```tsx
+<Button>
+  <SearchIcon data-icon="inline-start"/>
+  Search
+</Button>
+
+<Button>
+  Next
+  <ArrowRightIcon data-icon="inline-end"/>
+</Button>
+```
+
+---
+
+## No sizing classes on icons inside components
+
+Components handle icon sizing via CSS. Don't add `size-4`, `w-4 h-4`, or other sizing classes to icons inside `Button`, `DropdownMenuItem`, `Alert`, `Sidebar*`, or other shadcn components. Unless the user explicitly asks for custom icon sizes.
+
+**Incorrect:**
+
+```tsx
+<Button>
+  <SearchIcon className="size-4" data-icon="inline-start" />
+  Search
+</Button>
+
+<DropdownMenuItem>
+  <SettingsIcon className="mr-2 size-4" />
+  Settings
+</DropdownMenuItem>
+```
+
+**Correct:**
+
+```tsx
+<Button>
+  <SearchIcon data-icon="inline-start" />
+  Search
+</Button>
+
+<DropdownMenuItem>
+  <SettingsIcon />
+  Settings
+</DropdownMenuItem>
+```
+
+---
+
+## Pass icons as component objects, not string keys
+
+Use `icon={CheckIcon}`, not a string key to a lookup map.
+
+**Incorrect:**
+
+```tsx
+const iconMap = {
+  check: CheckIcon,
+  alert: AlertIcon,
+}
+
+function StatusBadge({ icon }: { icon: string }) {
+  const Icon = iconMap[icon]
+  return <Icon />
+}
+
+<StatusBadge icon="check" />
+```
+
+**Correct:**
+
+```tsx
+// Import from the project's configured iconLibrary (e.g. lucide-react, @tabler/icons-react).
+import { CheckIcon } from "lucide-react"
+
+function StatusBadge({ icon: Icon }: { icon: React.ComponentType }) {
+  return <Icon />
+}
+
+<StatusBadge icon={CheckIcon} />
+```
diff --git a/.agents/skills/shadcn/rules/styling.md b/.agents/skills/shadcn/rules/styling.md
new file mode 100644
index 0000000..38d4732
--- /dev/null
+++ b/.agents/skills/shadcn/rules/styling.md
@@ -0,0 +1,162 @@
+# Styling & Customization
+
+See [customization.md](../customization.md) for theming, CSS variables, and adding custom colors.
+
+## Contents
+
+- Semantic colors
+- Built-in variants first
+- className for layout only
+- No space-x-* / space-y-*
+- Prefer size-* over w-* h-* when equal
+- Prefer truncate shorthand
+- No manual dark: color overrides
+- Use cn() for conditional classes
+- No manual z-index on overlay components
+
+---
+
+## Semantic colors
+
+**Incorrect:**
+
+```tsx
+<div className="bg-blue-500 text-white">
+  <p className="text-gray-600">Secondary text</p>
+</div>
+```
+
+**Correct:**
+
+```tsx
+<div className="bg-primary text-primary-foreground">
+  <p className="text-muted-foreground">Secondary text</p>
+</div>
+```
+
+---
+
+## No raw color values for status/state indicators
+
+For positive, negative, or status indicators, use Badge variants, semantic tokens like `text-destructive`, or define custom CSS variables — don't reach for raw Tailwind colors.
+
+**Incorrect:**
+
+```tsx
+<span className="text-emerald-600">+20.1%</span>
+<span className="text-green-500">Active</span>
+<span className="text-red-600">-3.2%</span>
+```
+
+**Correct:**
+
+```tsx
+<Badge variant="secondary">+20.1%</Badge>
+<Badge>Active</Badge>
+<span className="text-destructive">-3.2%</span>
+```
+
+If you need a success/positive color that doesn't exist as a semantic token, use a Badge variant or ask the user about adding a custom CSS variable to the theme (see [customization.md](../customization.md)).
+
+---
+
+## Built-in variants first
+
+**Incorrect:**
+
+```tsx
+<Button className="border border-input bg-transparent hover:bg-accent">
+  Click me
+</Button>
+```
+
+**Correct:**
+
+```tsx
+<Button variant="outline">Click me</Button>
+```
+
+---
+
+## className for layout only
+
+Use `className` for layout (e.g. `max-w-md`, `mx-auto`, `mt-4`), **not** for overriding component colors or typography. To change colors, use semantic tokens, built-in variants, or CSS variables.
+
+**Incorrect:**
+
+```tsx
+<Card className="bg-blue-100 text-blue-900 font-bold">
+  <CardContent>Dashboard</CardContent>
+</Card>
+```
+
+**Correct:**
+
+```tsx
+<Card className="max-w-md mx-auto">
+  <CardContent>Dashboard</CardContent>
+</Card>
+```
+
+To customize a component's appearance, prefer these approaches in order:
+1. **Built-in variants** — `variant="outline"`, `variant="destructive"`, etc.
+2. **Semantic color tokens** — `bg-primary`, `text-muted-foreground`.
+3. **CSS variables** — define custom colors in the global CSS file (see [customization.md](../customization.md)).
+
+---
+
+## No space-x-* / space-y-*
+
+Use `gap-*` instead. `space-y-4` → `flex flex-col gap-4`. `space-x-2` → `flex gap-2`.
+
+```tsx
+<div className="flex flex-col gap-4">
+  <Input />
+  <Input />
+  <Button>Submit</Button>
+</div>
+```
+
+---
+
+## Prefer size-* over w-* h-* when equal
+
+`size-10` not `w-10 h-10`. Applies to icons, avatars, skeletons, etc.
+
+---
+
+## Prefer truncate shorthand
+
+`truncate` not `overflow-hidden text-ellipsis whitespace-nowrap`.
+
+---
+
+## No manual dark: color overrides
+
+Use semantic tokens — they handle light/dark via CSS variables. `bg-background text-foreground` not `bg-white dark:bg-gray-950`.
+
+---
+
+## Use cn() for conditional classes
+
+Use the `cn()` utility from the project for conditional or merged class names. Don't write manual ternaries in className strings.
+
+**Incorrect:**
+
+```tsx
+<div className={`flex items-center ${isActive ? "bg-primary text-primary-foreground" : "bg-muted"}`}>
+```
+
+**Correct:**
+
+```tsx
+import { cn } from "@/lib/utils"
+
+<div className={cn("flex items-center", isActive ? "bg-primary text-primary-foreground" : "bg-muted")}>
+```
+
+---
+
+## No manual z-index on overlay components
+
+`Dialog`, `Sheet`, `Drawer`, `AlertDialog`, `DropdownMenu`, `Popover`, `Tooltip`, `HoverCard` handle their own stacking. Never add `z-50` or `z-[999]`.
diff --git a/.claude/skills/shadcn b/.claude/skills/shadcn
new file mode 120000
index 0000000..8d5af6f
--- /dev/null
+++ b/.claude/skills/shadcn
@@ -0,0 +1 @@
+../../.agents/skills/shadcn
\ No newline at end of file
diff --git a/.codex/config.toml b/.codex/config.toml
new file mode 100644
index 0000000..1c3c708
--- /dev/null
+++ b/.codex/config.toml
@@ -0,0 +1,3 @@
+[mcp_servers.shadcn]
+command = "npx"
+args = ["shadcn@latest", "mcp"]
diff --git a/skills-lock.json b/skills-lock.json
new file mode 100644
index 0000000..68c6e60
--- /dev/null
+++ b/skills-lock.json
@@ -0,0 +1,11 @@
+{
+  "version": 1,
+  "skills": {
+    "shadcn": {
+      "source": "shadcn/ui",
+      "sourceType": "github",
+      "skillPath": "skills/shadcn/SKILL.md",
+      "computedHash": "ac9d0d69caac7de1d1e5647f3db3bcd2f13af355d6b3a78780fbf7fc80e8dca0"
+    }
+  }
+}

From 0d8feb28d0ab6ff8bafad6bc0be7289b008b5464 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Fri, 12 Jun 2026 19:10:10 -0300
Subject: [PATCH 15/26] refactor: address docs api review feedback

---
 .../plans/2026-06-12-docs-api-endpoints.md    |  54 ++-
 .../2026-06-12-docs-api-versioning-design.md  |   5 +-
 ...an.sql => 0001_create_document_tables.sql} |   3 +-
 drizzle/meta/0001_snapshot.json               |   9 +-
 drizzle/meta/_journal.json                    |   4 +-
 src/db/schema.test.ts                         |  42 ++
 src/db/schema.ts                              |   6 +
 src/repository/docs/add-version.ts            |  54 +++
 src/repository/docs/create-document.ts        |  43 ++
 src/repository/docs/documents.ts              | 271 ------------
 src/repository/docs/find-document-by-id.ts    |  15 +
 src/repository/docs/find-latest-version.ts    |  19 +
 src/repository/docs/find-version.ts           |  24 +
 src/repository/docs/ids.ts                    |  36 ++
 src/repository/docs/is-shared-with-email.ts   |  24 +
 src/repository/docs/list-documents.ts         |  94 ++++
 src/repository/docs/types.ts                  |  42 ++
 src/repository/docs/upsert-shares.ts          |  41 ++
 src/server/foundation/context.test.ts         |   4 +-
 src/server/foundation/context.ts              |  24 +-
 src/server/foundation/email.ts                |   4 +
 src/server/foundation/errors.ts               |  54 ++-
 src/server/foundation/logs.ts                 |  35 +-
 src/server/foundation/responses.ts            |  21 +
 src/server/handlers/api.test.ts               |   8 +-
 src/server/handlers/api.ts                    | 144 ++----
 src/server/handlers/docs.test.ts              |  30 +-
 src/server/handlers/docs.ts                   | 129 +-----
 src/server/handlers/docs/create-document.ts   |  30 ++
 src/server/handlers/docs/get-document.ts      |  33 ++
 src/server/handlers/docs/list-documents.ts    |  30 ++
 src/server/handlers/docs/share-document.ts    |  25 ++
 src/server/handlers/docs/update-document.ts   |  27 ++
 src/server/handlers/error-code.ts             |   9 +
 src/server/handlers/query.ts                  |   3 +
 src/server/handlers/request-body.ts           |   9 +
 src/server/handlers/request-id.ts             |   7 +
 src/server/handlers/response.ts               |   1 +
 src/server/handlers/types.ts                  |   7 +
 src/server/handlers/validation.ts             |  20 +
 src/services/docs/create-document.test.ts     |  35 ++
 src/services/docs/create-document.ts          |   5 +-
 src/services/docs/db-errors.ts                |   8 +
 src/services/docs/get-document.test.ts        |  73 ++++
 src/services/docs/get-document.ts             |  38 +-
 src/services/docs/list-documents.test.ts      |  45 ++
 src/services/docs/list-documents.ts           |   5 +-
 src/services/docs/resolve-access.ts           |  21 +
 src/services/docs/service.test.ts             | 412 ------------------
 src/services/docs/share-document.test.ts      |  59 +++
 src/services/docs/share-document.ts           |  35 +-
 src/services/docs/test-helpers.ts             |  60 +++
 src/services/docs/update-document.test.ts     |  65 +++
 src/services/docs/update-document.ts          |  23 +-
 src/types/docs.test.ts                        | 170 --------
 src/types/docs.ts                             |  15 +-
 56 files changed, 1232 insertions(+), 1277 deletions(-)
 rename drizzle/{0001_wide_flatman.sql => 0001_create_document_tables.sql} (91%)
 create mode 100644 src/repository/docs/add-version.ts
 create mode 100644 src/repository/docs/create-document.ts
 delete mode 100644 src/repository/docs/documents.ts
 create mode 100644 src/repository/docs/find-document-by-id.ts
 create mode 100644 src/repository/docs/find-latest-version.ts
 create mode 100644 src/repository/docs/find-version.ts
 create mode 100644 src/repository/docs/ids.ts
 create mode 100644 src/repository/docs/is-shared-with-email.ts
 create mode 100644 src/repository/docs/list-documents.ts
 create mode 100644 src/repository/docs/types.ts
 create mode 100644 src/repository/docs/upsert-shares.ts
 create mode 100644 src/server/foundation/email.ts
 create mode 100644 src/server/foundation/responses.ts
 create mode 100644 src/server/handlers/docs/create-document.ts
 create mode 100644 src/server/handlers/docs/get-document.ts
 create mode 100644 src/server/handlers/docs/list-documents.ts
 create mode 100644 src/server/handlers/docs/share-document.ts
 create mode 100644 src/server/handlers/docs/update-document.ts
 create mode 100644 src/server/handlers/error-code.ts
 create mode 100644 src/server/handlers/query.ts
 create mode 100644 src/server/handlers/request-body.ts
 create mode 100644 src/server/handlers/request-id.ts
 create mode 100644 src/server/handlers/response.ts
 create mode 100644 src/server/handlers/types.ts
 create mode 100644 src/server/handlers/validation.ts
 create mode 100644 src/services/docs/create-document.test.ts
 create mode 100644 src/services/docs/db-errors.ts
 create mode 100644 src/services/docs/get-document.test.ts
 create mode 100644 src/services/docs/list-documents.test.ts
 create mode 100644 src/services/docs/resolve-access.ts
 delete mode 100644 src/services/docs/service.test.ts
 create mode 100644 src/services/docs/share-document.test.ts
 create mode 100644 src/services/docs/test-helpers.ts
 create mode 100644 src/services/docs/update-document.test.ts
 delete mode 100644 src/types/docs.test.ts

diff --git a/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md b/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md
index 54f387d..900163d 100644
--- a/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md
+++ b/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md
@@ -10,7 +10,7 @@
 
 ---
 
-### Task 1: Database Schema And Migration
+## Task 1: Database Schema And Migration
 
 **Files:**
 - Modify: `src/db/schema.ts`
@@ -60,11 +60,10 @@ Run: `bun run db:generate`
 
 Expected: a new migration creates the three tables and indexes.
 
-### Task 2: Document Types And Zod Contracts
+## Task 2: Document Types And Zod Contracts
 
 **Files:**
 - Create: `src/types/docs.ts`
-- Create: `src/types/docs.test.ts`
 
 - [ ] **Step 1: Add failing contract tests**
 
@@ -114,8 +113,8 @@ describe("docs contracts", () => {
   it("validates normalized DB share inserts", () => {
     expect(() =>
       newDocumentShareSchema.parse({
-        id: "share_1",
-        documentId: "doc_1",
+        id: "01HZXJK8JHX7QY9N7K6X8Y2W0B",
+        documentId: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
         sharedWithEmail: "Reader@Example.com",
         sharedByUserId: "user_1",
         createdAt: new Date(),
@@ -127,7 +126,7 @@ describe("docs contracts", () => {
 
 - [ ] **Step 2: Verify tests fail**
 
-Run: `bun run test src/types/docs.test.ts`
+Run: `bun run typecheck`
 
 Expected: fail because `src/types/docs.ts` does not exist.
 
@@ -137,11 +136,11 @@ Create `src/types/docs.ts` with Zod schemas for request bodies, query strings, r
 
 - [ ] **Step 4: Verify contracts pass**
 
-Run: `bun run test src/types/docs.test.ts`
+Run: `bun run typecheck`
 
 Expected: pass.
 
-### Task 3: API Foundation And Context
+## Task 3: API Foundation And Context
 
 **Files:**
 - Create: `src/server/foundation/errors.ts`
@@ -158,11 +157,11 @@ Write tests that prove:
 ```ts
 // context.test.ts
 // - unauthenticated Clerk auth returns a 401 Response
-// - authenticated Clerk user without local active row returns a 409 Response
+// - authenticated Clerk user without local active row returns a 403 Response
 // - active local user returns ctx.user, ctx.userEmail, and ctx.db
 
 // api.test.ts
-// - withApiHandler converts ApiError into the expected JSON error response
+// - withApiHandler converts API error objects into the expected JSON error response
 // - withApiHandler converts unexpected errors into generic 500 JSON
 // - parseJsonBody returns validation_error for malformed JSON
 // - parseWithSchema does not include submitted HTML in validation details
@@ -182,16 +181,13 @@ Implement:
 
 ```ts
 // errors.ts
-export class ApiError extends Error {
-  constructor(
-    public readonly status: number,
-    public readonly code: string,
-    message: string,
-    public readonly details?: unknown,
-  ) {
-    super(message);
-  }
-}
+export type ApiError = {
+  kind: "api_error";
+  status: number;
+  code: string;
+  message: string;
+  details?: unknown;
+};
 ```
 
 Add helper constructors for validation, unauthorized, forbidden, not found, conflict, and internal errors. Implement `logs.ts` as a thin wrapper around `console.info` and `console.error`. Implement `context.ts` with `createApiContext(database = db)` and `auth()` from Clerk. Implement `api.ts` with JSON response helpers, request id extraction, safe JSON parsing, Zod parsing, and `withApiHandler`.
@@ -202,16 +198,16 @@ Run: `bun run test src/server/foundation/context.test.ts src/server/handlers/api
 
 Expected: pass.
 
-### Task 4: Repository And Services
+## Task 4: Repository And Services
 
 **Files:**
-- Create: `src/repository/docs/documents.ts`
+- Create: focused files under `src/repository/docs/*.ts`
 - Create: `src/services/docs/create-document.ts`
 - Create: `src/services/docs/get-document.ts`
 - Create: `src/services/docs/list-documents.ts`
 - Create: `src/services/docs/share-document.ts`
 - Create: `src/services/docs/update-document.ts`
-- Create: `src/services/docs/service.test.ts`
+- Create: one test file per service under `src/services/docs/*.test.ts`
 
 - [ ] **Step 1: Add failing service tests**
 
@@ -231,17 +227,17 @@ Create service tests using an in-memory repository fake. Cover:
 
 - [ ] **Step 2: Verify service tests fail**
 
-Run: `bun run test src/services/docs/service.test.ts`
+Run: `bun run test src/services/docs`
 
 Expected: fail because services do not exist.
 
 - [ ] **Step 3: Implement services**
 
-Services should accept `{ db, user, userEmail }` from `ApiContext`, create a repository with `createDocumentsRepository(db)`, enforce authorization, and throw `ApiError` for expected failures. `updateDocument` should call a repository transaction that computes the next version and inserts the new immutable version.
+Services should accept `{ db, user, userEmail }` from `ApiContext`, call focused repository functions, enforce authorization, and throw API error objects for expected failures. `updateDocument` should call a repository transaction that computes the next version and inserts the new immutable version.
 
 - [ ] **Step 4: Implement repository**
 
-Implement Drizzle queries in `src/repository/docs/documents.ts`. Include:
+Implement focused Drizzle query files under `src/repository/docs`. Include:
 
 ```ts
 createDocumentWithInitialVersion(input)
@@ -256,11 +252,11 @@ Use `onConflictDoNothing` for idempotent share inserts.
 
 - [ ] **Step 5: Verify services pass**
 
-Run: `bun run test src/services/docs/service.test.ts`
+Run: `bun run test src/services/docs`
 
 Expected: pass.
 
-### Task 5: HTTP Handlers And Next Route Adapters
+## Task 5: HTTP Handlers And Next Route Adapters
 
 **Files:**
 - Create: `src/server/handlers/docs.ts`
@@ -311,7 +307,7 @@ Run: `bun run test src/server/handlers/docs.test.ts`
 
 Expected: pass.
 
-### Task 6: Final Verification
+## Task 6: Final Verification
 
 **Files:**
 - All touched implementation and test files.
diff --git a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
index d6d80e2..7948e0e 100644
--- a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
+++ b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
@@ -72,6 +72,7 @@ Suggested files:
 ```txt
 src/server/handlers/api.ts
 src/server/handlers/docs.ts
+src/server/handlers/docs/*.ts
 src/server/foundation/context.ts
 src/server/foundation/errors.ts
 src/server/foundation/logs.ts
@@ -457,11 +458,11 @@ src/services/docs/get-document.ts
 src/services/docs/list-documents.ts
 src/services/docs/share-document.ts
 src/services/docs/update-document.ts
-src/repository/docs/documents.ts
+src/repository/docs/*.ts
 src/types/docs.ts
 ```
 
-Files under `src/repository/docs` should contain database queries. Files under `src/services/docs` should contain authorization and document workflows that are easier to test without Route Handler boilerplate. `src/server/handlers/docs.ts` should parse HTTP inputs and call the document services. The `src/app/api/docs/**/route.ts` files should stay thin and export the matching Next.js Route Handler methods from `src/server/handlers/docs.ts`.
+Files under `src/repository/docs` should contain focused database queries. Files under `src/services/docs` should contain authorization and document workflows that are easier to test without Route Handler boilerplate. Files under `src/server/handlers/docs` should parse HTTP inputs and call the document services. The `src/app/api/docs/**/route.ts` files should stay thin and export the matching Next.js Route Handler methods.
 
 ## Testing
 
diff --git a/drizzle/0001_wide_flatman.sql b/drizzle/0001_create_document_tables.sql
similarity index 91%
rename from drizzle/0001_wide_flatman.sql
rename to drizzle/0001_create_document_tables.sql
index d9a98df..8be7a92 100644
--- a/drizzle/0001_wide_flatman.sql
+++ b/drizzle/0001_create_document_tables.sql
@@ -32,6 +32,7 @@ ALTER TABLE "document_versions" ADD CONSTRAINT "document_versions_created_by_use
 ALTER TABLE "documents" ADD CONSTRAINT "documents_owner_user_id_users_id_fk" FOREIGN KEY ("owner_user_id") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
 CREATE UNIQUE INDEX "document_shares_document_id_email_unique" ON "document_shares" USING btree ("document_id","shared_with_email");--> statement-breakpoint
 CREATE INDEX "document_shares_shared_with_email_idx" ON "document_shares" USING btree ("shared_with_email");--> statement-breakpoint
+ALTER TABLE "document_shares" ADD CONSTRAINT "document_shares_shared_with_email_normalized_check" CHECK ("document_shares"."shared_with_email" = lower(trim("document_shares"."shared_with_email")));--> statement-breakpoint
 CREATE UNIQUE INDEX "document_versions_document_id_version_unique" ON "document_versions" USING btree ("document_id","version_number");--> statement-breakpoint
 CREATE INDEX "document_versions_document_id_created_at_idx" ON "document_versions" USING btree ("document_id","created_at");--> statement-breakpoint
-CREATE INDEX "documents_owner_user_id_idx" ON "documents" USING btree ("owner_user_id");
\ No newline at end of file
+CREATE INDEX "documents_owner_user_id_idx" ON "documents" USING btree ("owner_user_id");
diff --git a/drizzle/meta/0001_snapshot.json b/drizzle/meta/0001_snapshot.json
index 2426a17..ae3eca6 100644
--- a/drizzle/meta/0001_snapshot.json
+++ b/drizzle/meta/0001_snapshot.json
@@ -108,7 +108,12 @@
       "compositePrimaryKeys": {},
       "uniqueConstraints": {},
       "policies": {},
-      "checkConstraints": {},
+      "checkConstraints": {
+        "document_shares_shared_with_email_normalized_check": {
+          "name": "document_shares_shared_with_email_normalized_check",
+          "value": "\"document_shares\".\"shared_with_email\" = lower(trim(\"document_shares\".\"shared_with_email\"))"
+        }
+      },
       "isRLSEnabled": false
     },
     "public.document_versions": {
@@ -425,4 +430,4 @@
     "schemas": {},
     "tables": {}
   }
-}
\ No newline at end of file
+}
diff --git a/drizzle/meta/_journal.json b/drizzle/meta/_journal.json
index f2b6342..a16c73a 100644
--- a/drizzle/meta/_journal.json
+++ b/drizzle/meta/_journal.json
@@ -13,8 +13,8 @@
       "idx": 1,
       "version": "7",
       "when": 1781298395771,
-      "tag": "0001_wide_flatman",
+      "tag": "0001_create_document_tables",
       "breakpoints": true
     }
   ]
-}
\ No newline at end of file
+}
diff --git a/src/db/schema.test.ts b/src/db/schema.test.ts
index e71f63f..f09d0f1 100644
--- a/src/db/schema.test.ts
+++ b/src/db/schema.test.ts
@@ -1,5 +1,6 @@
 import { describe, expect, it } from "vitest";
 import { getTableColumns, getTableName } from "drizzle-orm";
+import { getTableConfig } from "drizzle-orm/pg-core";
 
 import * as schema from "./schema";
 
@@ -29,6 +30,30 @@ function expectColumn(
   expect(column.columnType).toBe(expected.columnType);
 }
 
+function expectIndex(
+  table: TableExport,
+  expected: { name: string; unique: boolean; columns: string[] },
+) {
+  const index = getTableConfig(table).indexes.find(
+    (candidate) => candidate.config.name === expected.name,
+  );
+
+  expect(index?.config.unique).toBe(expected.unique);
+  expect(index?.config.columns.map((column) => "name" in column ? column.name : undefined)).toEqual(
+    expected.columns,
+  );
+}
+
+function expectForeignKey(table: TableExport, name: string) {
+  expect(
+    getTableConfig(table).foreignKeys.map((foreignKey) => foreignKey.getName()),
+  ).toContain(name);
+}
+
+function expectCheck(table: TableExport, name: string) {
+  expect(getTableConfig(table).checks.map((check) => check.name)).toContain(name);
+}
+
 describe("document schema", () => {
   it("exports documents with required columns", () => {
     const columns = expectTableExport("documents", "documents");
@@ -72,6 +97,7 @@ describe("document schema", () => {
   });
 
   it("exports documentVersions with required columns", () => {
+    const table = schema.documentVersions as TableExport;
     const columns = expectTableExport("documentVersions", "document_versions");
 
     expectColumn(columns.id, {
@@ -105,9 +131,17 @@ describe("document schema", () => {
       notNull: true,
       columnType: "PgTimestamp",
     });
+    expectIndex(table, {
+      name: "document_versions_document_id_version_unique",
+      unique: true,
+      columns: ["document_id", "version_number"],
+    });
+    expectForeignKey(table, "document_versions_document_id_documents_id_fk");
+    expectForeignKey(table, "document_versions_created_by_user_id_users_id_fk");
   });
 
   it("exports documentShares with required columns", () => {
+    const table = schema.documentShares as TableExport;
     const columns = expectTableExport("documentShares", "document_shares");
 
     expectColumn(columns.id, {
@@ -136,5 +170,13 @@ describe("document schema", () => {
       notNull: true,
       columnType: "PgTimestamp",
     });
+    expectIndex(table, {
+      name: "document_shares_document_id_email_unique",
+      unique: true,
+      columns: ["document_id", "shared_with_email"],
+    });
+    expectForeignKey(table, "document_shares_document_id_documents_id_fk");
+    expectForeignKey(table, "document_shares_shared_by_user_id_users_id_fk");
+    expectCheck(table, "document_shares_shared_with_email_normalized_check");
   });
 });
diff --git a/src/db/schema.ts b/src/db/schema.ts
index 77e1be2..b1c09f9 100644
--- a/src/db/schema.ts
+++ b/src/db/schema.ts
@@ -1,4 +1,6 @@
+import { sql } from "drizzle-orm";
 import {
+  check,
   index,
   integer,
   pgTable,
@@ -104,6 +106,10 @@ export const documentShares = pgTable(
       table.sharedWithEmail,
     ),
     index("document_shares_shared_with_email_idx").on(table.sharedWithEmail),
+    check(
+      "document_shares_shared_with_email_normalized_check",
+      sql`${table.sharedWithEmail} = lower(trim(${table.sharedWithEmail}))`,
+    ),
   ],
 );
 
diff --git a/src/repository/docs/add-version.ts b/src/repository/docs/add-version.ts
new file mode 100644
index 0000000..ab84637
--- /dev/null
+++ b/src/repository/docs/add-version.ts
@@ -0,0 +1,54 @@
+import { and, desc, eq, isNull } from "drizzle-orm";
+
+import { documentVersions, documents } from "@/db";
+import { newDocumentVersionSchema } from "@/types/docs";
+
+import { createUlid } from "./ids";
+import type { AddVersionInput, DocumentsDatabase } from "./types";
+
+export async function addDocumentVersion(
+  db: DocumentsDatabase,
+  input: AddVersionInput,
+) {
+  return db.transaction(async (tx) => {
+    const [document] = await tx
+      .select()
+      .from(documents)
+      .where(and(eq(documents.id, input.documentId), isNull(documents.deletedAt)))
+      .for("update")
+      .limit(1);
+
+    if (!document) {
+      return null;
+    }
+
+    const [latestVersion] = await tx
+      .select()
+      .from(documentVersions)
+      .where(eq(documentVersions.documentId, input.documentId))
+      .orderBy(desc(documentVersions.versionNumber))
+      .limit(1);
+
+    const now = new Date();
+    const newVersion = newDocumentVersionSchema.parse({
+      id: createUlid(),
+      documentId: input.documentId,
+      versionNumber: (latestVersion?.versionNumber ?? 0) + 1,
+      html: input.html,
+      createdByUserId: input.createdByUserId,
+      createdAt: now,
+    });
+    const [version] = await tx
+      .insert(documentVersions)
+      .values(newVersion)
+      .returning();
+
+    const [updatedDocument] = await tx
+      .update(documents)
+      .set({ updatedAt: now })
+      .where(eq(documents.id, input.documentId))
+      .returning();
+
+    return { document: updatedDocument, version };
+  });
+}
diff --git a/src/repository/docs/create-document.ts b/src/repository/docs/create-document.ts
new file mode 100644
index 0000000..2d26976
--- /dev/null
+++ b/src/repository/docs/create-document.ts
@@ -0,0 +1,43 @@
+import { documentVersions, documents } from "@/db";
+import {
+  newDocumentSchema,
+  newDocumentVersionSchema,
+} from "@/types/docs";
+
+import { createUlid } from "./ids";
+import type { CreateDocumentInput, DocumentsDatabase } from "./types";
+
+export async function createDocumentRecord(
+  db: DocumentsDatabase,
+  input: CreateDocumentInput,
+) {
+  return db.transaction(async (tx) => {
+    const now = new Date();
+    const newDocument = newDocumentSchema.parse({
+      id: createUlid(),
+      ...input.document,
+      createdAt: now,
+      updatedAt: now,
+      deletedAt: null,
+    });
+    const [document] = await tx
+      .insert(documents)
+      .values(newDocument)
+      .returning();
+
+    const newVersion = newDocumentVersionSchema.parse({
+      id: createUlid(),
+      documentId: document.id,
+      versionNumber: 1,
+      html: input.version.html,
+      createdByUserId: input.version.createdByUserId,
+      createdAt: now,
+    });
+    const [version] = await tx
+      .insert(documentVersions)
+      .values(newVersion)
+      .returning();
+
+    return { document, version };
+  });
+}
diff --git a/src/repository/docs/documents.ts b/src/repository/docs/documents.ts
deleted file mode 100644
index bab5a26..0000000
--- a/src/repository/docs/documents.ts
+++ /dev/null
@@ -1,271 +0,0 @@
-import { and, desc, eq, inArray, isNull, or } from "drizzle-orm";
-
-import {
-  documentShares,
-  documents,
-  documentVersions,
-  type Document,
-  type DocumentShare,
-  type DocumentVersion,
-  type NewDocument,
-  type NewDocumentShare,
-  type NewDocumentVersion,
-} from "@/db";
-import type { ApiContext } from "@/server/foundation/context";
-import {
-  newDocumentSchema,
-  newDocumentShareSchema,
-  newDocumentVersionSchema,
-} from "@/types/docs";
-
-export type DocumentAccess = "owned" | "shared";
-
-export type DocumentListItem = Document & {
-  access: DocumentAccess;
-  latestVersion: DocumentVersion;
-};
-
-export type DocumentsRepository = {
-  createDocument(input: {
-    document: Omit<NewDocument, "id" | "createdAt" | "updatedAt" | "deletedAt">;
-    version: Pick<NewDocumentVersion, "html" | "createdByUserId">;
-  }): Promise<{ document: Document; version: DocumentVersion }>;
-  findDocumentById(id: string): Promise<Document | null>;
-  findLatestVersion(documentId: string): Promise<DocumentVersion | null>;
-  findVersion(
-    documentId: string,
-    versionNumber: number,
-  ): Promise<DocumentVersion | null>;
-  isSharedWithEmail(documentId: string, email: string): Promise<boolean>;
-  addVersion(input: {
-    documentId: string;
-    html: string;
-    createdByUserId: string;
-  }): Promise<{ document: Document; version: DocumentVersion } | null>;
-  upsertShares(input: {
-    documentId: string;
-    emails: string[];
-    sharedByUserId: string;
-  }): Promise<DocumentShare[]>;
-  listDocuments(input: {
-    ownerUserId: string;
-    sharedWithEmail: string | null;
-    access: "all" | "owned" | "shared";
-  }): Promise<DocumentListItem[]>;
-};
-
-type DocumentsDatabase = ApiContext["db"];
-
-export function createDocumentsRepository(db: DocumentsDatabase): DocumentsRepository {
-  return {
-    async createDocument(input) {
-      return db.transaction(async (tx) => {
-        const now = new Date();
-        const newDocument = newDocumentSchema.parse({
-          id: crypto.randomUUID(),
-          ...input.document,
-          createdAt: now,
-          updatedAt: now,
-          deletedAt: null,
-        });
-        const [document] = await tx
-          .insert(documents)
-          .values(newDocument)
-          .returning();
-
-        const newVersion = newDocumentVersionSchema.parse({
-          id: crypto.randomUUID(),
-          documentId: document.id,
-          versionNumber: 1,
-          html: input.version.html,
-          createdByUserId: input.version.createdByUserId,
-          createdAt: now,
-        });
-        const [version] = await tx
-          .insert(documentVersions)
-          .values(newVersion)
-          .returning();
-
-        return { document, version };
-      });
-    },
-
-    async findDocumentById(id) {
-      const [document] = await db
-        .select()
-        .from(documents)
-        .where(and(eq(documents.id, id), isNull(documents.deletedAt)))
-        .limit(1);
-
-      return document ?? null;
-    },
-
-    async findLatestVersion(documentId) {
-      const [version] = await db
-        .select()
-        .from(documentVersions)
-        .where(eq(documentVersions.documentId, documentId))
-        .orderBy(desc(documentVersions.versionNumber))
-        .limit(1);
-
-      return version ?? null;
-    },
-
-    async findVersion(documentId, versionNumber) {
-      const [version] = await db
-        .select()
-        .from(documentVersions)
-        .where(
-          and(
-            eq(documentVersions.documentId, documentId),
-            eq(documentVersions.versionNumber, versionNumber),
-          ),
-        )
-        .limit(1);
-
-      return version ?? null;
-    },
-
-    async isSharedWithEmail(documentId, email) {
-      const [share] = await db
-        .select({ id: documentShares.id })
-        .from(documentShares)
-        .where(
-          and(
-            eq(documentShares.documentId, documentId),
-            eq(documentShares.sharedWithEmail, email),
-          ),
-        )
-        .limit(1);
-
-      return share !== undefined;
-    },
-
-    async addVersion(input) {
-      return db.transaction(async (tx) => {
-        const [document] = await tx
-          .select()
-          .from(documents)
-          .where(
-            and(eq(documents.id, input.documentId), isNull(documents.deletedAt)),
-          )
-          .limit(1);
-
-        if (!document) {
-          return null;
-        }
-
-        const [latestVersion] = await tx
-          .select()
-          .from(documentVersions)
-          .where(eq(documentVersions.documentId, input.documentId))
-          .orderBy(desc(documentVersions.versionNumber))
-          .limit(1);
-
-        const now = new Date();
-        const newVersion = newDocumentVersionSchema.parse({
-          id: crypto.randomUUID(),
-          documentId: input.documentId,
-          versionNumber: (latestVersion?.versionNumber ?? 0) + 1,
-          html: input.html,
-          createdByUserId: input.createdByUserId,
-          createdAt: now,
-        });
-        const [version] = await tx
-          .insert(documentVersions)
-          .values(newVersion)
-          .returning();
-
-        const [updatedDocument] = await tx
-          .update(documents)
-          .set({ updatedAt: now })
-          .where(eq(documents.id, input.documentId))
-          .returning();
-
-        return { document: updatedDocument, version };
-      });
-    },
-
-    async upsertShares(input) {
-      if (input.emails.length > 0) {
-        await db
-          .insert(documentShares)
-          .values(
-            input.emails.map(
-              (email): NewDocumentShare =>
-                newDocumentShareSchema.parse({
-                  id: crypto.randomUUID(),
-                  documentId: input.documentId,
-                  sharedWithEmail: email,
-                  sharedByUserId: input.sharedByUserId,
-                  createdAt: new Date(),
-                }),
-            ),
-          )
-          .onConflictDoNothing({
-            target: [documentShares.documentId, documentShares.sharedWithEmail],
-          });
-      }
-
-      return db
-        .select()
-        .from(documentShares)
-        .where(eq(documentShares.documentId, input.documentId));
-    },
-
-    async listDocuments(input) {
-      const ownedCondition = eq(documents.ownerUserId, input.ownerUserId);
-      const sharedDocumentIds =
-        input.sharedWithEmail === null
-          ? []
-          : await findSharedDocumentIds(db, input.sharedWithEmail);
-
-      const accessCondition =
-        input.access === "owned"
-          ? ownedCondition
-          : input.access === "shared"
-            ? sharedDocumentIds.length === 0
-              ? undefined
-              : inArray(documents.id, sharedDocumentIds)
-            : sharedDocumentIds.length === 0
-              ? ownedCondition
-              : or(ownedCondition, inArray(documents.id, sharedDocumentIds));
-
-      if (!accessCondition) {
-        return [];
-      }
-
-      const rows = await db
-        .select()
-        .from(documents)
-        .where(and(isNull(documents.deletedAt), accessCondition))
-        .orderBy(desc(documents.updatedAt));
-
-      const items: DocumentListItem[] = [];
-      for (const document of rows) {
-        const latestVersion = await this.findLatestVersion(document.id);
-        if (!latestVersion) {
-          continue;
-        }
-
-        items.push({
-          ...document,
-          access:
-            document.ownerUserId === input.ownerUserId ? "owned" : "shared",
-          latestVersion,
-        });
-      }
-
-      return items;
-    },
-  };
-}
-
-async function findSharedDocumentIds(db: DocumentsDatabase, email: string) {
-  const rows = await db
-    .select({ documentId: documentShares.documentId })
-    .from(documentShares)
-    .where(eq(documentShares.sharedWithEmail, email));
-
-  return rows.map((row) => row.documentId);
-}
diff --git a/src/repository/docs/find-document-by-id.ts b/src/repository/docs/find-document-by-id.ts
new file mode 100644
index 0000000..540c38c
--- /dev/null
+++ b/src/repository/docs/find-document-by-id.ts
@@ -0,0 +1,15 @@
+import { and, eq, isNull } from "drizzle-orm";
+
+import { documents } from "@/db";
+
+import type { DocumentsDatabase } from "./types";
+
+export async function findDocumentById(db: DocumentsDatabase, id: string) {
+  const [document] = await db
+    .select()
+    .from(documents)
+    .where(and(eq(documents.id, id), isNull(documents.deletedAt)))
+    .limit(1);
+
+  return document ?? null;
+}
diff --git a/src/repository/docs/find-latest-version.ts b/src/repository/docs/find-latest-version.ts
new file mode 100644
index 0000000..177829a
--- /dev/null
+++ b/src/repository/docs/find-latest-version.ts
@@ -0,0 +1,19 @@
+import { desc, eq } from "drizzle-orm";
+
+import { documentVersions } from "@/db";
+
+import type { DocumentsDatabase } from "./types";
+
+export async function findLatestVersion(
+  db: DocumentsDatabase,
+  documentId: string,
+) {
+  const [version] = await db
+    .select()
+    .from(documentVersions)
+    .where(eq(documentVersions.documentId, documentId))
+    .orderBy(desc(documentVersions.versionNumber))
+    .limit(1);
+
+  return version ?? null;
+}
diff --git a/src/repository/docs/find-version.ts b/src/repository/docs/find-version.ts
new file mode 100644
index 0000000..d71b011
--- /dev/null
+++ b/src/repository/docs/find-version.ts
@@ -0,0 +1,24 @@
+import { and, eq } from "drizzle-orm";
+
+import { documentVersions } from "@/db";
+
+import type { DocumentsDatabase } from "./types";
+
+export async function findVersion(
+  db: DocumentsDatabase,
+  documentId: string,
+  versionNumber: number,
+) {
+  const [version] = await db
+    .select()
+    .from(documentVersions)
+    .where(
+      and(
+        eq(documentVersions.documentId, documentId),
+        eq(documentVersions.versionNumber, versionNumber),
+      ),
+    )
+    .limit(1);
+
+  return version ?? null;
+}
diff --git a/src/repository/docs/ids.ts b/src/repository/docs/ids.ts
new file mode 100644
index 0000000..08c5059
--- /dev/null
+++ b/src/repository/docs/ids.ts
@@ -0,0 +1,36 @@
+const crockfordBase32 = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+const base = BigInt(32);
+const byteShift = BigInt(8);
+
+export function createUlid(now = Date.now()): string {
+  const bytes = crypto.getRandomValues(new Uint8Array(10));
+
+  return encodeTime(now) + encodeRandom(bytes);
+}
+
+function encodeTime(now: number): string {
+  let value = BigInt(now);
+  let output = "";
+
+  for (let index = 0; index < 10; index += 1) {
+    output = crockfordBase32[Number(value % base)] + output;
+    value /= base;
+  }
+
+  return output;
+}
+
+function encodeRandom(bytes: Uint8Array): string {
+  let value = BigInt(0);
+  for (const byte of bytes) {
+    value = (value << byteShift) | BigInt(byte);
+  }
+
+  let output = "";
+  for (let index = 0; index < 16; index += 1) {
+    output = crockfordBase32[Number(value % base)] + output;
+    value /= base;
+  }
+
+  return output;
+}
diff --git a/src/repository/docs/is-shared-with-email.ts b/src/repository/docs/is-shared-with-email.ts
new file mode 100644
index 0000000..7b3c01a
--- /dev/null
+++ b/src/repository/docs/is-shared-with-email.ts
@@ -0,0 +1,24 @@
+import { and, eq } from "drizzle-orm";
+
+import { documentShares } from "@/db";
+
+import type { DocumentsDatabase } from "./types";
+
+export async function isSharedWithEmail(
+  db: DocumentsDatabase,
+  documentId: string,
+  email: string,
+) {
+  const [share] = await db
+    .select({ id: documentShares.id })
+    .from(documentShares)
+    .where(
+      and(
+        eq(documentShares.documentId, documentId),
+        eq(documentShares.sharedWithEmail, email),
+      ),
+    )
+    .limit(1);
+
+  return share !== undefined;
+}
diff --git a/src/repository/docs/list-documents.ts b/src/repository/docs/list-documents.ts
new file mode 100644
index 0000000..b312152
--- /dev/null
+++ b/src/repository/docs/list-documents.ts
@@ -0,0 +1,94 @@
+import { and, desc, eq, inArray, isNull, or } from "drizzle-orm";
+
+import { documentShares, documents, documentVersions } from "@/db";
+
+import type {
+  DocumentListItem,
+  DocumentsDatabase,
+  ListDocumentsInput,
+} from "./types";
+
+export async function listAccessibleDocuments(
+  db: DocumentsDatabase,
+  input: ListDocumentsInput,
+): Promise<DocumentListItem[]> {
+  const ownedCondition = eq(documents.ownerUserId, input.ownerUserId);
+  const sharedDocumentIds =
+    input.sharedWithEmail === null
+      ? []
+      : await findSharedDocumentIds(db, input.sharedWithEmail);
+
+  const accessCondition =
+    input.access === "owned"
+      ? ownedCondition
+      : input.access === "shared"
+        ? sharedDocumentIds.length === 0
+          ? undefined
+          : inArray(documents.id, sharedDocumentIds)
+        : sharedDocumentIds.length === 0
+          ? ownedCondition
+          : or(ownedCondition, inArray(documents.id, sharedDocumentIds));
+
+  if (!accessCondition) {
+    return [];
+  }
+
+  const rows = await db
+    .select()
+    .from(documents)
+    .where(and(isNull(documents.deletedAt), accessCondition))
+    .orderBy(desc(documents.updatedAt));
+
+  const latestVersions = await findLatestVersionsForDocuments(
+    db,
+    rows.map((document) => document.id),
+  );
+
+  return rows.flatMap((document) => {
+    const latestVersion = latestVersions.get(document.id);
+
+    if (!latestVersion) {
+      return [];
+    }
+
+    return {
+      ...document,
+      access: document.ownerUserId === input.ownerUserId ? "owned" : "shared",
+      latestVersion,
+    };
+  });
+}
+
+async function findSharedDocumentIds(db: DocumentsDatabase, email: string) {
+  const rows = await db
+    .select({ documentId: documentShares.documentId })
+    .from(documentShares)
+    .where(eq(documentShares.sharedWithEmail, email));
+
+  return rows.map((row) => row.documentId);
+}
+
+async function findLatestVersionsForDocuments(
+  db: DocumentsDatabase,
+  documentIds: string[],
+) {
+  if (documentIds.length === 0) {
+    return new Map();
+  }
+
+  const rows = await db
+    .select()
+    .from(documentVersions)
+    .where(inArray(documentVersions.documentId, documentIds))
+    .orderBy(desc(documentVersions.versionNumber));
+
+  const latestVersions = new Map<string, (typeof rows)[number]>();
+
+  for (const version of rows) {
+    if (!latestVersions.has(version.documentId)) {
+      latestVersions.set(version.documentId, version);
+    }
+  }
+
+  return latestVersions;
+}
diff --git a/src/repository/docs/types.ts b/src/repository/docs/types.ts
new file mode 100644
index 0000000..d62489e
--- /dev/null
+++ b/src/repository/docs/types.ts
@@ -0,0 +1,42 @@
+import type {
+  Document,
+  DocumentShare,
+  DocumentVersion,
+  NewDocument,
+  NewDocumentVersion,
+} from "@/db";
+import type { ApiContext } from "@/server/foundation/context";
+
+export type DocumentsDatabase = ApiContext["db"];
+
+export type DocumentAccess = "owned" | "shared";
+
+export type DocumentListItem = Document & {
+  access: DocumentAccess;
+  latestVersion: DocumentVersion;
+};
+
+export type CreateDocumentInput = {
+  document: Omit<NewDocument, "id" | "createdAt" | "updatedAt" | "deletedAt">;
+  version: Pick<NewDocumentVersion, "html" | "createdByUserId">;
+};
+
+export type AddVersionInput = {
+  documentId: string;
+  html: string;
+  createdByUserId: string;
+};
+
+export type ShareDocumentInput = {
+  documentId: string;
+  emails: string[];
+  sharedByUserId: string;
+};
+
+export type ListDocumentsInput = {
+  ownerUserId: string;
+  sharedWithEmail: string | null;
+  access: "all" | "owned" | "shared";
+};
+
+export type ShareDocumentResult = DocumentShare[];
diff --git a/src/repository/docs/upsert-shares.ts b/src/repository/docs/upsert-shares.ts
new file mode 100644
index 0000000..4c089c7
--- /dev/null
+++ b/src/repository/docs/upsert-shares.ts
@@ -0,0 +1,41 @@
+import { eq } from "drizzle-orm";
+
+import { documentShares, type NewDocumentShare } from "@/db";
+import { newDocumentShareSchema } from "@/types/docs";
+
+import { createUlid } from "./ids";
+import type {
+  DocumentsDatabase,
+  ShareDocumentInput,
+  ShareDocumentResult,
+} from "./types";
+
+export async function upsertDocumentShares(
+  db: DocumentsDatabase,
+  input: ShareDocumentInput,
+): Promise<ShareDocumentResult> {
+  if (input.emails.length > 0) {
+    await db
+      .insert(documentShares)
+      .values(
+        input.emails.map(
+          (email): NewDocumentShare =>
+            newDocumentShareSchema.parse({
+              id: createUlid(),
+              documentId: input.documentId,
+              sharedWithEmail: email,
+              sharedByUserId: input.sharedByUserId,
+              createdAt: new Date(),
+            }),
+        ),
+      )
+      .onConflictDoNothing({
+        target: [documentShares.documentId, documentShares.sharedWithEmail],
+      });
+  }
+
+  return db
+    .select()
+    .from(documentShares)
+    .where(eq(documentShares.documentId, input.documentId));
+}
diff --git a/src/server/foundation/context.test.ts b/src/server/foundation/context.test.ts
index 09d3e47..68a0bfc 100644
--- a/src/server/foundation/context.test.ts
+++ b/src/server/foundation/context.test.ts
@@ -26,7 +26,7 @@ describe("createApiContext", () => {
     }
   });
 
-  it("returns 409 when the Clerk user has no active local user row", async () => {
+  it("returns 403 when the Clerk user has no active local user row", async () => {
     const { auth } = await import("@clerk/nextjs/server");
     vi.mocked(auth).mockResolvedValue({ userId: "clerk_123" } as never);
 
@@ -35,7 +35,7 @@ describe("createApiContext", () => {
 
     expect(result.ok).toBe(false);
     if (!result.ok) {
-      expect(result.response.status).toBe(409);
+      expect(result.response.status).toBe(403);
       await expect(result.response.json()).resolves.toMatchObject({
         error: { code: "user_not_synced" },
       });
diff --git a/src/server/foundation/context.ts b/src/server/foundation/context.ts
index fd0e9bd..4c24fd6 100644
--- a/src/server/foundation/context.ts
+++ b/src/server/foundation/context.ts
@@ -2,6 +2,10 @@ import { auth } from "@clerk/nextjs/server";
 import { and, eq, isNull } from "drizzle-orm";
 
 import { db, type User, users } from "@/db";
+import { normalizeEmail } from "@/server/foundation/email";
+import { apiErrorResponse } from "@/server/foundation/responses";
+
+import { forbiddenError, unauthorizedError } from "./errors";
 
 type Db = typeof db;
 
@@ -33,7 +37,7 @@ export async function createApiContext(
   if (!session.userId) {
     return {
       ok: false,
-      response: errorResponse("unauthorized", "Authentication required", 401),
+      response: apiErrorResponse(unauthorizedError()),
     };
   }
 
@@ -44,10 +48,11 @@ export async function createApiContext(
   if (!user) {
     return {
       ok: false,
-      response: errorResponse(
-        "user_not_synced",
-        "Authenticated user has not been synchronized yet",
-        409,
+      response: apiErrorResponse(
+        forbiddenError(
+          "Authenticated user has not been synchronized yet",
+          "user_not_synced",
+        ),
       ),
     };
   }
@@ -62,12 +67,3 @@ export async function createApiContext(
     },
   };
 }
-
-function normalizeEmail(email: string | null): string | null {
-  const normalized = email?.trim().toLowerCase();
-  return normalized === "" ? null : normalized ?? null;
-}
-
-function errorResponse(code: string, message: string, status: number): Response {
-  return Response.json({ error: { code, message } }, { status });
-}
diff --git a/src/server/foundation/email.ts b/src/server/foundation/email.ts
new file mode 100644
index 0000000..180512b
--- /dev/null
+++ b/src/server/foundation/email.ts
@@ -0,0 +1,4 @@
+export function normalizeEmail(email: string | null): string | null {
+  const normalized = email?.trim().toLowerCase();
+  return normalized === "" ? null : normalized ?? null;
+}
diff --git a/src/server/foundation/errors.ts b/src/server/foundation/errors.ts
index 3dc3422..f13724a 100644
--- a/src/server/foundation/errors.ts
+++ b/src/server/foundation/errors.ts
@@ -7,38 +7,58 @@ export type ApiErrorCode =
   | "user_not_synced"
   | "internal_error";
 
-export class ApiError extends Error {
-  constructor(
-    public readonly status: number,
-    public readonly code: ApiErrorCode,
-    message: string,
-    public readonly details?: unknown,
-  ) {
-    super(message);
-    this.name = "ApiError";
-  }
+export type ApiError = {
+  kind: "api_error";
+  status: number;
+  code: ApiErrorCode;
+  message: string;
+  details?: unknown;
+};
+
+export function apiError(
+  status: number,
+  code: ApiErrorCode,
+  message: string,
+  details?: unknown,
+): ApiError {
+  return {
+    kind: "api_error",
+    status,
+    code,
+    message,
+    ...(details === undefined ? {} : { details }),
+  };
+}
+
+export function isApiError(error: unknown): error is ApiError {
+  return (
+    typeof error === "object" &&
+    error !== null &&
+    "kind" in error &&
+    error.kind === "api_error"
+  );
 }
 
 export function validationError(message = "Invalid request", details?: unknown) {
-  return new ApiError(400, "validation_error", message, details);
+  return apiError(400, "validation_error", message, details);
 }
 
 export function unauthorizedError(message = "Authentication required") {
-  return new ApiError(401, "unauthorized", message);
+  return apiError(401, "unauthorized", message);
 }
 
-export function forbiddenError(message = "Forbidden") {
-  return new ApiError(403, "forbidden", message);
+export function forbiddenError(message = "Forbidden", code: ApiErrorCode = "forbidden") {
+  return apiError(403, code, message);
 }
 
 export function notFoundError(message = "Not found") {
-  return new ApiError(404, "not_found", message);
+  return apiError(404, "not_found", message);
 }
 
 export function conflictError(message = "Conflict", code: ApiErrorCode = "conflict") {
-  return new ApiError(409, code, message);
+  return apiError(409, code, message);
 }
 
 export function internalError(message = "Internal server error") {
-  return new ApiError(500, "internal_error", message);
+  return apiError(500, "internal_error", message);
 }
diff --git a/src/server/foundation/logs.ts b/src/server/foundation/logs.ts
index 3677c82..23c803d 100644
--- a/src/server/foundation/logs.ts
+++ b/src/server/foundation/logs.ts
@@ -1,26 +1,31 @@
-type ApiLogFields = {
+type ApiLogOutcome = "success" | "error";
+
+export type ApiLogEvent = {
+  event: "api_request";
+  timestamp: string;
+  service: "shareable-docs";
   requestId: string;
   method: string;
   pathname: string;
   status: number;
+  outcome: ApiLogOutcome;
   durationMs: number;
   userId?: string;
-  errorCode?: string;
+  error?: {
+    code: string;
+    type: string;
+  };
 };
 
-export function logApiRequest(fields: ApiLogFields): void {
-  console.info("api_request", fields);
+export function logApiRequest(fields: Omit<ApiLogEvent, "event" | "timestamp" | "service">): void {
+  console.info({
+    event: "api_request",
+    timestamp: new Date().toISOString(),
+    service: "shareable-docs",
+    ...fields,
+  } satisfies ApiLogEvent);
 }
 
-export function logApiError(
-  error: unknown,
-  fields: Omit<ApiLogFields, "status" | "durationMs"> & {
-    status?: number;
-    durationMs?: number;
-  },
-): void {
-  console.error("api_error", {
-    ...fields,
-    errorName: error instanceof Error ? error.name : "UnknownError",
-  });
+export function getErrorType(error: unknown): string {
+  return error instanceof Error ? error.name : typeof error;
 }
diff --git a/src/server/foundation/responses.ts b/src/server/foundation/responses.ts
new file mode 100644
index 0000000..2656f87
--- /dev/null
+++ b/src/server/foundation/responses.ts
@@ -0,0 +1,21 @@
+import type { ApiError } from "./errors";
+
+export function jsonResponse(
+  body: unknown,
+  init: ResponseInit = {},
+): Response {
+  return Response.json(body, init);
+}
+
+export function apiErrorResponse(error: ApiError): Response {
+  return jsonResponse(
+    {
+      error: {
+        code: error.code,
+        message: error.message,
+        ...(error.details === undefined ? {} : { details: error.details }),
+      },
+    },
+    { status: error.status },
+  );
+}
diff --git a/src/server/handlers/api.test.ts b/src/server/handlers/api.test.ts
index 6b8ec82..23e52f2 100644
--- a/src/server/handlers/api.test.ts
+++ b/src/server/handlers/api.test.ts
@@ -1,7 +1,7 @@
 import { describe, expect, it, vi } from "vitest";
 import { z } from "zod";
 
-import { ApiError } from "@/server/foundation/errors";
+import { forbiddenError } from "@/server/foundation/errors";
 
 vi.mock("@/server/foundation/context", () => ({
   createApiContext: vi.fn().mockResolvedValue({
@@ -16,15 +16,15 @@ vi.mock("@/server/foundation/context", () => ({
 }));
 
 vi.mock("@/server/foundation/logs", () => ({
-  logApiError: vi.fn(),
+  getErrorType: vi.fn(() => "Error"),
   logApiRequest: vi.fn(),
 }));
 
 describe("API handler foundation", () => {
-  it("converts ApiError into a JSON error response", async () => {
+  it("converts API errors into a JSON error response", async () => {
     const { withApiHandler } = await import("./api");
     const handler = withApiHandler(async () => {
-      throw new ApiError(403, "forbidden", "Forbidden");
+      throw forbiddenError("Forbidden");
     });
 
     const response = await handler(new Request("https://app.test/api/docs"));
diff --git a/src/server/handlers/api.ts b/src/server/handlers/api.ts
index a9daba6..7a5e559 100644
--- a/src/server/handlers/api.ts
+++ b/src/server/handlers/api.ts
@@ -1,69 +1,11 @@
-import { ZodError, type ZodType } from "zod";
+import { createApiContext } from "@/server/foundation/context";
+import { isApiError } from "@/server/foundation/errors";
+import { getErrorType, logApiRequest } from "@/server/foundation/logs";
 
-import { createApiContext, type ApiContext } from "@/server/foundation/context";
-import { ApiError, validationError } from "@/server/foundation/errors";
-import { logApiError, logApiRequest } from "@/server/foundation/logs";
-
-type JsonResponseOptions = {
-  status?: number;
-  headers?: HeadersInit;
-};
-
-export type ApiHandler<TParams = unknown> = (input: {
-  request: Request;
-  ctx: ApiContext;
-  params: TParams;
-}) => Promise<Response>;
-
-export function jsonResponse(
-  body: unknown,
-  options: JsonResponseOptions = {},
-): Response {
-  return Response.json(body, {
-    status: options.status ?? 200,
-    headers: options.headers,
-  });
-}
-
-export function jsonErrorResponse(
-  code: string,
-  message: string,
-  status: number,
-  details?: unknown,
-): Response {
-  return jsonResponse(
-    {
-      error: {
-        code,
-        message,
-        ...(details === undefined ? {} : { details }),
-      },
-    },
-    { status },
-  );
-}
-
-export async function parseJsonBody(request: Request): Promise<unknown> {
-  try {
-    return await request.json();
-  } catch {
-    throw validationError("Malformed JSON");
-  }
-}
-
-export function parseWithSchema<T>(schema: ZodType<T>, value: unknown): T {
-  const result = schema.safeParse(value);
-
-  if (result.success) {
-    return result.data;
-  }
-
-  throw validationError("Invalid request", toSafeZodDetails(result.error));
-}
-
-export function searchParamsToObject(searchParams: URLSearchParams) {
-  return Object.fromEntries(searchParams.entries());
-}
+import { readErrorCode } from "./error-code";
+import { getRequestId } from "./request-id";
+import { apiErrorResponse } from "./response";
+import type { ApiHandler } from "./types";
 
 export function withApiHandler<TParams = unknown>(
   handler: ApiHandler<TParams>,
@@ -73,7 +15,12 @@ export function withApiHandler<TParams = unknown>(
     const requestId = getRequestId(request);
     const url = new URL(request.url);
     let userId: string | undefined;
-    let errorCode: string | undefined;
+    let error:
+      | {
+          code: string;
+          type: string;
+        }
+      | undefined;
     let response: Response | undefined;
 
     try {
@@ -81,7 +28,8 @@ export function withApiHandler<TParams = unknown>(
 
       if (!contextResult.ok) {
         response = contextResult.response;
-        errorCode = await readErrorCode(response);
+        const code = await readErrorCode(response);
+        error = code ? { code, type: "ApiError" } : undefined;
         return response;
       }
 
@@ -93,31 +41,20 @@ export function withApiHandler<TParams = unknown>(
         params: params as TParams,
       });
       return response;
-    } catch (error) {
-      if (error instanceof ApiError) {
-        errorCode = error.code;
-        response = jsonErrorResponse(
-          error.code,
-          error.message,
-          error.status,
-          error.details,
-        );
+    } catch (caught) {
+      if (isApiError(caught)) {
+        error = { code: caught.code, type: "ApiError" };
+        response = apiErrorResponse(caught);
         return response;
       }
 
-      errorCode = "internal_error";
-      logApiError(error, {
-        requestId,
-        method: request.method,
-        pathname: url.pathname,
-        userId,
-        errorCode,
+      error = { code: "internal_error", type: getErrorType(caught) };
+      response = apiErrorResponse({
+        kind: "api_error",
+        code: "internal_error",
+        message: "Internal server error",
+        status: 500,
       });
-      response = jsonErrorResponse(
-        "internal_error",
-        "Internal server error",
-        500,
-      );
       return response;
     } finally {
       const status = response?.status ?? 500;
@@ -126,35 +63,16 @@ export function withApiHandler<TParams = unknown>(
         method: request.method,
         pathname: url.pathname,
         status,
+        outcome: status >= 400 ? "error" : "success",
         durationMs: Math.round(performance.now() - startedAt),
         userId,
-        errorCode,
+        error,
       });
     }
   };
 }
 
-function getRequestId(request: Request): string {
-  return (
-    request.headers.get("x-request-id") ??
-    request.headers.get("x-vercel-id") ??
-    crypto.randomUUID()
-  );
-}
-
-function toSafeZodDetails(error: ZodError) {
-  return error.issues.map((issue) => ({
-    path: issue.path.map(String),
-    message: issue.message,
-  }));
-}
-
-async function readErrorCode(response: Response): Promise<string | undefined> {
-  try {
-    const clone = response.clone();
-    const body = (await clone.json()) as { error?: { code?: string } };
-    return body.error?.code;
-  } catch {
-    return undefined;
-  }
-}
+export { parseJsonBody } from "./request-body";
+export { searchParamsToObject } from "./query";
+export { jsonResponse } from "./response";
+export { parseWithSchema } from "./validation";
diff --git a/src/server/handlers/docs.test.ts b/src/server/handlers/docs.test.ts
index 2fa0ab2..dc24749 100644
--- a/src/server/handlers/docs.test.ts
+++ b/src/server/handlers/docs.test.ts
@@ -23,7 +23,7 @@ vi.mock("@/server/foundation/context", () => ({
 }));
 
 vi.mock("@/server/foundation/logs", () => ({
-  logApiError: vi.fn(),
+  getErrorType: vi.fn(() => "Error"),
   logApiRequest: vi.fn(),
 }));
 
@@ -56,7 +56,7 @@ describe("docs HTTP handlers", () => {
     const now = new Date("2026-06-12T00:00:00.000Z");
     serviceMocks.createDocument.mockResolvedValue({
       document: {
-        id: "doc_1",
+        id: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
         ownerUserId: "user_1",
         name: "Report",
         description: null,
@@ -81,7 +81,7 @@ describe("docs HTTP handlers", () => {
       { name: "Report", description: null, html: "<h1>Report</h1>" },
     );
     await expect(response.json()).resolves.toMatchObject({
-      id: "doc_1",
+      id: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
       latestVersion: 1,
     });
   });
@@ -109,7 +109,7 @@ describe("docs HTTP handlers", () => {
     const now = new Date("2026-06-12T00:00:00.000Z");
     serviceMocks.getDocument.mockResolvedValue({
       document: {
-        id: "doc_1",
+        id: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
         ownerUserId: "user_1",
         name: "Report",
         description: "A report",
@@ -126,18 +126,18 @@ describe("docs HTTP handlers", () => {
 
     const { getDocumentHandler } = await import("./docs");
     const response = await getDocumentHandler(
-      new Request("https://app.test/api/docs/doc_1"),
-      { params: Promise.resolve({ id: "doc_1" }) },
+      new Request("https://app.test/api/docs/01HZXJK8JHX7QY9N7K6X8Y2W0A"),
+      { params: Promise.resolve({ id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" }) },
     );
 
     expect(response.status).toBe(200);
     expect(serviceMocks.getDocument).toHaveBeenCalledWith(
       expect.anything(),
-      { id: "doc_1" },
+      { id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" },
       {},
     );
     await expect(response.json()).resolves.toMatchObject({
-      id: "doc_1",
+      id: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
       version: 2,
       latestVersion: 2,
       html: "<p>v2</p>",
@@ -151,8 +151,8 @@ describe("docs HTTP handlers", () => {
 
     const { updateDocumentHandler } = await import("./docs");
     const response = await updateDocumentHandler(
-      jsonRequest("https://app.test/api/docs/doc_1", { html: "<p>v2</p>" }, "PUT"),
-      { params: Promise.resolve({ id: "doc_1" }) },
+      jsonRequest("https://app.test/api/docs/01HZXJK8JHX7QY9N7K6X8Y2W0A", { html: "<p>v2</p>" }, "PUT"),
+      { params: Promise.resolve({ id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" }) },
     );
 
     expect(response.status).toBe(403);
@@ -163,7 +163,7 @@ describe("docs HTTP handlers", () => {
 
   it("shares a document with normalized email input", async () => {
     serviceMocks.shareDocument.mockResolvedValue({
-      document: { id: "doc_1" },
+      document: { id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" },
       shares: [
         { sharedWithEmail: "existing@example.com" },
         { sharedWithEmail: "reader@example.com" },
@@ -173,20 +173,20 @@ describe("docs HTTP handlers", () => {
 
     const { shareDocumentHandler } = await import("./docs");
     const response = await shareDocumentHandler(
-      jsonRequest("https://app.test/api/docs/share/doc_1", {
+      jsonRequest("https://app.test/api/docs/share/01HZXJK8JHX7QY9N7K6X8Y2W0A", {
         emails: [" Reader@Example.com ", "reader@example.com", "reviewer@example.com"],
       }),
-      { params: Promise.resolve({ id: "doc_1" }) },
+      { params: Promise.resolve({ id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" }) },
     );
 
     expect(response.status).toBe(200);
     expect(serviceMocks.shareDocument).toHaveBeenCalledWith(
       expect.anything(),
-      { id: "doc_1" },
+      { id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" },
       { emails: ["reader@example.com", "reviewer@example.com"] },
     );
     await expect(response.json()).resolves.toEqual({
-      id: "doc_1",
+      id: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
       sharedWith: ["reader@example.com", "reviewer@example.com"],
     });
   });
diff --git a/src/server/handlers/docs.ts b/src/server/handlers/docs.ts
index 2ce3326..d27b81b 100644
--- a/src/server/handlers/docs.ts
+++ b/src/server/handlers/docs.ts
@@ -1,124 +1,5 @@
-import { createDocument } from "@/services/docs/create-document";
-import { getDocument } from "@/services/docs/get-document";
-import { listDocuments } from "@/services/docs/list-documents";
-import { shareDocument } from "@/services/docs/share-document";
-import { updateDocument } from "@/services/docs/update-document";
-import {
-  createDocumentRequestSchema,
-  documentRouteParamsSchema,
-  getDocumentQuerySchema,
-  listDocumentsQuerySchema,
-  shareDocumentRequestSchema,
-  updateDocumentRequestSchema,
-} from "@/types/docs";
-
-import {
-  jsonResponse,
-  parseJsonBody,
-  parseWithSchema,
-  searchParamsToObject,
-  withApiHandler,
-} from "./api";
-
-export const createDocumentHandler = withApiHandler(async ({ request, ctx }) => {
-  const input = parseWithSchema(
-    createDocumentRequestSchema,
-    await parseJsonBody(request),
-  );
-  const result = await createDocument(ctx, input);
-
-  return jsonResponse(toDocumentCreatedResponse(result), { status: 201 });
-});
-
-export const listDocumentsHandler = withApiHandler(async ({ request, ctx }) => {
-  const query = parseWithSchema(
-    listDocumentsQuerySchema,
-    searchParamsToObject(new URL(request.url).searchParams),
-  );
-  const result = await listDocuments(ctx, query);
-
-  return jsonResponse({
-    documents: result.documents.map((document) => ({
-      id: document.id,
-      name: document.name,
-      description: document.description,
-      access: document.access,
-      latestVersion: document.latestVersion.versionNumber,
-      ownerUserId: document.ownerUserId,
-      createdAt: document.createdAt,
-      updatedAt: document.updatedAt,
-    })),
-  });
-});
-
-export const getDocumentHandler = withApiHandler<{ id: string }>(
-  async ({ request, ctx, params }) => {
-    const routeParams = parseWithSchema(documentRouteParamsSchema, params);
-    const query = parseWithSchema(
-      getDocumentQuerySchema,
-      searchParamsToObject(new URL(request.url).searchParams),
-    );
-    const result = await getDocument(ctx, routeParams, query);
-
-    return jsonResponse({
-      id: result.document.id,
-      name: result.document.name,
-      description: result.document.description,
-      version: result.version.versionNumber,
-      latestVersion: result.latestVersion.versionNumber,
-      html: result.version.html,
-      ownerUserId: result.document.ownerUserId,
-      createdAt: result.document.createdAt,
-      updatedAt: result.document.updatedAt,
-      versionCreatedAt: result.version.createdAt,
-    });
-  },
-);
-
-export const updateDocumentHandler = withApiHandler<{ id: string }>(
-  async ({ request, ctx, params }) => {
-    const routeParams = parseWithSchema(documentRouteParamsSchema, params);
-    const input = parseWithSchema(
-      updateDocumentRequestSchema,
-      await parseJsonBody(request),
-    );
-    const result = await updateDocument(ctx, routeParams, input);
-
-    return jsonResponse({
-      id: result.document.id,
-      version: result.version.versionNumber,
-      latestVersion: result.version.versionNumber,
-      updatedAt: result.document.updatedAt,
-    });
-  },
-);
-
-export const shareDocumentHandler = withApiHandler<{ id: string }>(
-  async ({ request, ctx, params }) => {
-    const routeParams = parseWithSchema(documentRouteParamsSchema, params);
-    const input = parseWithSchema(
-      shareDocumentRequestSchema,
-      await parseJsonBody(request),
-    );
-    const result = await shareDocument(ctx, routeParams, input);
-
-    return jsonResponse({
-      id: result.document.id,
-      sharedWith: input.emails,
-    });
-  },
-);
-
-type CreateDocumentResult = Awaited<ReturnType<typeof createDocument>>;
-
-function toDocumentCreatedResponse(result: CreateDocumentResult) {
-  return {
-    id: result.document.id,
-    name: result.document.name,
-    description: result.document.description,
-    latestVersion: result.version.versionNumber,
-    ownerUserId: result.document.ownerUserId,
-    createdAt: result.document.createdAt,
-    updatedAt: result.document.updatedAt,
-  };
-}
+export { createDocumentHandler } from "./docs/create-document";
+export { getDocumentHandler } from "./docs/get-document";
+export { listDocumentsHandler } from "./docs/list-documents";
+export { shareDocumentHandler } from "./docs/share-document";
+export { updateDocumentHandler } from "./docs/update-document";
diff --git a/src/server/handlers/docs/create-document.ts b/src/server/handlers/docs/create-document.ts
new file mode 100644
index 0000000..5b3ea15
--- /dev/null
+++ b/src/server/handlers/docs/create-document.ts
@@ -0,0 +1,30 @@
+import { createDocument } from "@/services/docs/create-document";
+import { createDocumentRequestSchema } from "@/types/docs";
+
+import {
+  jsonResponse,
+  parseJsonBody,
+  parseWithSchema,
+  withApiHandler,
+} from "../api";
+
+export const createDocumentHandler = withApiHandler(async ({ request, ctx }) => {
+  const input = parseWithSchema(
+    createDocumentRequestSchema,
+    await parseJsonBody(request),
+  );
+  const result = await createDocument(ctx, input);
+
+  return jsonResponse(
+    {
+      id: result.document.id,
+      name: result.document.name,
+      description: result.document.description,
+      latestVersion: result.version.versionNumber,
+      ownerUserId: result.document.ownerUserId,
+      createdAt: result.document.createdAt,
+      updatedAt: result.document.updatedAt,
+    },
+    { status: 201 },
+  );
+});
diff --git a/src/server/handlers/docs/get-document.ts b/src/server/handlers/docs/get-document.ts
new file mode 100644
index 0000000..a47eb5d
--- /dev/null
+++ b/src/server/handlers/docs/get-document.ts
@@ -0,0 +1,33 @@
+import { getDocument } from "@/services/docs/get-document";
+import { documentRouteParamsSchema, getDocumentQuerySchema } from "@/types/docs";
+
+import {
+  jsonResponse,
+  parseWithSchema,
+  searchParamsToObject,
+  withApiHandler,
+} from "../api";
+
+export const getDocumentHandler = withApiHandler<{ id: string }>(
+  async ({ request, ctx, params }) => {
+    const routeParams = parseWithSchema(documentRouteParamsSchema, params);
+    const query = parseWithSchema(
+      getDocumentQuerySchema,
+      searchParamsToObject(new URL(request.url).searchParams),
+    );
+    const result = await getDocument(ctx, routeParams, query);
+
+    return jsonResponse({
+      id: result.document.id,
+      name: result.document.name,
+      description: result.document.description,
+      version: result.version.versionNumber,
+      latestVersion: result.latestVersion.versionNumber,
+      html: result.version.html,
+      ownerUserId: result.document.ownerUserId,
+      createdAt: result.document.createdAt,
+      updatedAt: result.document.updatedAt,
+      versionCreatedAt: result.version.createdAt,
+    });
+  },
+);
diff --git a/src/server/handlers/docs/list-documents.ts b/src/server/handlers/docs/list-documents.ts
new file mode 100644
index 0000000..0f33d3a
--- /dev/null
+++ b/src/server/handlers/docs/list-documents.ts
@@ -0,0 +1,30 @@
+import { listDocuments } from "@/services/docs/list-documents";
+import { listDocumentsQuerySchema } from "@/types/docs";
+
+import {
+  jsonResponse,
+  parseWithSchema,
+  searchParamsToObject,
+  withApiHandler,
+} from "../api";
+
+export const listDocumentsHandler = withApiHandler(async ({ request, ctx }) => {
+  const query = parseWithSchema(
+    listDocumentsQuerySchema,
+    searchParamsToObject(new URL(request.url).searchParams),
+  );
+  const result = await listDocuments(ctx, query);
+
+  return jsonResponse({
+    documents: result.documents.map((document) => ({
+      id: document.id,
+      name: document.name,
+      description: document.description,
+      access: document.access,
+      latestVersion: document.latestVersion.versionNumber,
+      ownerUserId: document.ownerUserId,
+      createdAt: document.createdAt,
+      updatedAt: document.updatedAt,
+    })),
+  });
+});
diff --git a/src/server/handlers/docs/share-document.ts b/src/server/handlers/docs/share-document.ts
new file mode 100644
index 0000000..6e9274c
--- /dev/null
+++ b/src/server/handlers/docs/share-document.ts
@@ -0,0 +1,25 @@
+import { shareDocument } from "@/services/docs/share-document";
+import { documentRouteParamsSchema, shareDocumentRequestSchema } from "@/types/docs";
+
+import {
+  jsonResponse,
+  parseJsonBody,
+  parseWithSchema,
+  withApiHandler,
+} from "../api";
+
+export const shareDocumentHandler = withApiHandler<{ id: string }>(
+  async ({ request, ctx, params }) => {
+    const routeParams = parseWithSchema(documentRouteParamsSchema, params);
+    const input = parseWithSchema(
+      shareDocumentRequestSchema,
+      await parseJsonBody(request),
+    );
+    const result = await shareDocument(ctx, routeParams, input);
+
+    return jsonResponse({
+      id: result.document.id,
+      sharedWith: input.emails,
+    });
+  },
+);
diff --git a/src/server/handlers/docs/update-document.ts b/src/server/handlers/docs/update-document.ts
new file mode 100644
index 0000000..f950dfb
--- /dev/null
+++ b/src/server/handlers/docs/update-document.ts
@@ -0,0 +1,27 @@
+import { updateDocument } from "@/services/docs/update-document";
+import { documentRouteParamsSchema, updateDocumentRequestSchema } from "@/types/docs";
+
+import {
+  jsonResponse,
+  parseJsonBody,
+  parseWithSchema,
+  withApiHandler,
+} from "../api";
+
+export const updateDocumentHandler = withApiHandler<{ id: string }>(
+  async ({ request, ctx, params }) => {
+    const routeParams = parseWithSchema(documentRouteParamsSchema, params);
+    const input = parseWithSchema(
+      updateDocumentRequestSchema,
+      await parseJsonBody(request),
+    );
+    const result = await updateDocument(ctx, routeParams, input);
+
+    return jsonResponse({
+      id: result.document.id,
+      version: result.version.versionNumber,
+      latestVersion: result.version.versionNumber,
+      updatedAt: result.document.updatedAt,
+    });
+  },
+);
diff --git a/src/server/handlers/error-code.ts b/src/server/handlers/error-code.ts
new file mode 100644
index 0000000..abdeed7
--- /dev/null
+++ b/src/server/handlers/error-code.ts
@@ -0,0 +1,9 @@
+export async function readErrorCode(response: Response): Promise<string | undefined> {
+  try {
+    const clone = response.clone();
+    const body = (await clone.json()) as { error?: { code?: string } };
+    return body.error?.code;
+  } catch {
+    return undefined;
+  }
+}
diff --git a/src/server/handlers/query.ts b/src/server/handlers/query.ts
new file mode 100644
index 0000000..447d50a
--- /dev/null
+++ b/src/server/handlers/query.ts
@@ -0,0 +1,3 @@
+export function searchParamsToObject(searchParams: URLSearchParams) {
+  return Object.fromEntries(searchParams.entries());
+}
diff --git a/src/server/handlers/request-body.ts b/src/server/handlers/request-body.ts
new file mode 100644
index 0000000..e5a7fa0
--- /dev/null
+++ b/src/server/handlers/request-body.ts
@@ -0,0 +1,9 @@
+import { validationError } from "@/server/foundation/errors";
+
+export async function parseJsonBody(request: Request): Promise<unknown> {
+  try {
+    return await request.json();
+  } catch {
+    throw validationError("Malformed JSON");
+  }
+}
diff --git a/src/server/handlers/request-id.ts b/src/server/handlers/request-id.ts
new file mode 100644
index 0000000..3d734b2
--- /dev/null
+++ b/src/server/handlers/request-id.ts
@@ -0,0 +1,7 @@
+export function getRequestId(request: Request): string {
+  return (
+    request.headers.get("x-request-id") ??
+    request.headers.get("x-vercel-id") ??
+    crypto.randomUUID()
+  );
+}
diff --git a/src/server/handlers/response.ts b/src/server/handlers/response.ts
new file mode 100644
index 0000000..494e4d1
--- /dev/null
+++ b/src/server/handlers/response.ts
@@ -0,0 +1 @@
+export { apiErrorResponse, jsonResponse } from "@/server/foundation/responses";
diff --git a/src/server/handlers/types.ts b/src/server/handlers/types.ts
new file mode 100644
index 0000000..2ca0ce2
--- /dev/null
+++ b/src/server/handlers/types.ts
@@ -0,0 +1,7 @@
+import type { ApiContext } from "@/server/foundation/context";
+
+export type ApiHandler<TParams = unknown> = (input: {
+  request: Request;
+  ctx: ApiContext;
+  params: TParams;
+}) => Promise<Response>;
diff --git a/src/server/handlers/validation.ts b/src/server/handlers/validation.ts
new file mode 100644
index 0000000..e437296
--- /dev/null
+++ b/src/server/handlers/validation.ts
@@ -0,0 +1,20 @@
+import { ZodError, type ZodType } from "zod";
+
+import { validationError } from "@/server/foundation/errors";
+
+export function parseWithSchema<T>(schema: ZodType<T>, value: unknown): T {
+  const result = schema.safeParse(value);
+
+  if (result.success) {
+    return result.data;
+  }
+
+  throw validationError("Invalid request", toSafeZodDetails(result.error));
+}
+
+export function toSafeZodDetails(error: ZodError) {
+  return error.issues.map((issue) => ({
+    path: issue.path.map(String),
+    message: issue.message,
+  }));
+}
diff --git a/src/services/docs/create-document.test.ts b/src/services/docs/create-document.test.ts
new file mode 100644
index 0000000..cab2d4f
--- /dev/null
+++ b/src/services/docs/create-document.test.ts
@@ -0,0 +1,35 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { apiContext, document, version } from "./test-helpers";
+
+const repository = vi.hoisted(() => ({
+  createDocumentRecord: vi.fn(),
+}));
+
+vi.mock("@/repository/docs/create-document", () => repository);
+
+describe("createDocument", () => {
+  it("creates a document with an initial version owned by the current user", async () => {
+    const created = { document: document(), version: version() };
+    repository.createDocumentRecord.mockResolvedValue(created);
+
+    const { createDocument } = await import("./create-document");
+    const result = await createDocument(
+      apiContext("owner"),
+      { name: "Plan", description: null, html: "<h1>Plan</h1>" },
+    );
+
+    expect(repository.createDocumentRecord).toHaveBeenCalledWith(expect.anything(), {
+      document: {
+        ownerUserId: "owner",
+        name: "Plan",
+        description: null,
+      },
+      version: {
+        html: "<h1>Plan</h1>",
+        createdByUserId: "owner",
+      },
+    });
+    expect(result).toBe(created);
+  });
+});
diff --git a/src/services/docs/create-document.ts b/src/services/docs/create-document.ts
index 43e04cb..1eb518f 100644
--- a/src/services/docs/create-document.ts
+++ b/src/services/docs/create-document.ts
@@ -1,13 +1,12 @@
-import { createDocumentsRepository, type DocumentsRepository } from "@/repository/docs/documents";
+import { createDocumentRecord } from "@/repository/docs/create-document";
 import type { ApiContext } from "@/server/foundation/context";
 import type { CreateDocumentRequest } from "@/types/docs";
 
 export async function createDocument(
   ctx: ApiContext,
   input: CreateDocumentRequest,
-  repository: DocumentsRepository = createDocumentsRepository(ctx.db),
 ) {
-  return repository.createDocument({
+  return createDocumentRecord(ctx.db, {
     document: {
       ownerUserId: ctx.user.id,
       name: input.name,
diff --git a/src/services/docs/db-errors.ts b/src/services/docs/db-errors.ts
new file mode 100644
index 0000000..b771bac
--- /dev/null
+++ b/src/services/docs/db-errors.ts
@@ -0,0 +1,8 @@
+export function isUniqueViolation(error: unknown): boolean {
+  return (
+    typeof error === "object" &&
+    error !== null &&
+    "code" in error &&
+    error.code === "23505"
+  );
+}
diff --git a/src/services/docs/get-document.test.ts b/src/services/docs/get-document.test.ts
new file mode 100644
index 0000000..93ff514
--- /dev/null
+++ b/src/services/docs/get-document.test.ts
@@ -0,0 +1,73 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { apiContext, document, version } from "./test-helpers";
+
+const repository = vi.hoisted(() => ({
+  findDocumentById: vi.fn(),
+  findLatestVersion: vi.fn(),
+  findVersion: vi.fn(),
+  isSharedWithEmail: vi.fn(),
+}));
+
+vi.mock("@/repository/docs/find-document-by-id", () => ({
+  findDocumentById: repository.findDocumentById,
+}));
+vi.mock("@/repository/docs/find-latest-version", () => ({
+  findLatestVersion: repository.findLatestVersion,
+}));
+vi.mock("@/repository/docs/find-version", () => ({
+  findVersion: repository.findVersion,
+}));
+vi.mock("@/repository/docs/is-shared-with-email", () => ({
+  isSharedWithEmail: repository.isSharedWithEmail,
+}));
+
+describe("getDocument", () => {
+  it("gets the latest version when no version is requested", async () => {
+    const foundDocument = document();
+    const latestVersion = version({ versionNumber: 2, html: "<p>v2</p>" });
+    repository.findDocumentById.mockResolvedValue(foundDocument);
+    repository.findLatestVersion.mockResolvedValue(latestVersion);
+
+    const { getDocument } = await import("./get-document");
+    const result = await getDocument(apiContext("owner"), { id: foundDocument.id }, {});
+
+    expect(result.version).toBe(latestVersion);
+    expect(repository.findVersion).not.toHaveBeenCalled();
+  });
+
+  it("gets a specific version and still returns latest version metadata", async () => {
+    const foundDocument = document();
+    const requestedVersion = version({ versionNumber: 1, html: "<p>v1</p>" });
+    const latestVersion = version({ versionNumber: 2, html: "<p>v2</p>" });
+    repository.findDocumentById.mockResolvedValue(foundDocument);
+    repository.findLatestVersion.mockResolvedValue(latestVersion);
+    repository.findVersion.mockResolvedValue(requestedVersion);
+
+    const { getDocument } = await import("./get-document");
+    const result = await getDocument(
+      apiContext("owner"),
+      { id: foundDocument.id },
+      { version: 1 },
+    );
+
+    expect(result.version).toBe(requestedVersion);
+    expect(result.latestVersion).toBe(latestVersion);
+  });
+
+  it("allows a user with a shared primary email to read", async () => {
+    const foundDocument = document({ ownerUserId: "owner" });
+    repository.findDocumentById.mockResolvedValue(foundDocument);
+    repository.findLatestVersion.mockResolvedValue(version());
+    repository.isSharedWithEmail.mockResolvedValue(true);
+
+    const { getDocument } = await import("./get-document");
+    const result = await getDocument(
+      apiContext("reader", "reader@example.com"),
+      { id: foundDocument.id },
+      {},
+    );
+
+    expect(result.access).toBe("shared");
+  });
+});
diff --git a/src/services/docs/get-document.ts b/src/services/docs/get-document.ts
index db12261..9a6782a 100644
--- a/src/services/docs/get-document.ts
+++ b/src/services/docs/get-document.ts
@@ -1,33 +1,32 @@
-import {
-  createDocumentsRepository,
-  type DocumentAccess,
-  type DocumentsRepository,
-} from "@/repository/docs/documents";
+import { findDocumentById } from "@/repository/docs/find-document-by-id";
+import { findLatestVersion } from "@/repository/docs/find-latest-version";
+import { findVersion } from "@/repository/docs/find-version";
 import type { ApiContext } from "@/server/foundation/context";
 import { forbiddenError, notFoundError } from "@/server/foundation/errors";
 import type { DocumentRouteParams, GetDocumentQuery } from "@/types/docs";
 
+import { resolveDocumentAccess } from "./resolve-access";
+
 export async function getDocument(
   ctx: ApiContext,
   params: DocumentRouteParams,
   query: GetDocumentQuery,
-  repository: DocumentsRepository = createDocumentsRepository(ctx.db),
 ) {
-  const document = await repository.findDocumentById(params.id);
+  const document = await findDocumentById(ctx.db, params.id);
   if (!document) {
     throw notFoundError("Document not found");
   }
 
-  const access = await resolveReadAccess(ctx, repository, document);
+  const access = await resolveDocumentAccess(ctx, document);
   if (!access) {
     throw forbiddenError("Document access denied");
   }
 
-  const latestVersion = await repository.findLatestVersion(document.id);
+  const latestVersion = await findLatestVersion(ctx.db, document.id);
   const version =
     query.version === undefined
       ? latestVersion
-      : await repository.findVersion(document.id, query.version);
+      : await findVersion(ctx.db, document.id, query.version);
 
   if (!version || !latestVersion) {
     throw notFoundError("Document version not found");
@@ -35,22 +34,3 @@ export async function getDocument(
 
   return { document, version, latestVersion, access };
 }
-
-async function resolveReadAccess(
-  ctx: ApiContext,
-  repository: DocumentsRepository,
-  document: { id: string; ownerUserId: string },
-): Promise<DocumentAccess | null> {
-  if (document.ownerUserId === ctx.user.id) {
-    return "owned";
-  }
-
-  if (
-    ctx.userEmail !== null &&
-    (await repository.isSharedWithEmail(document.id, ctx.userEmail))
-  ) {
-    return "shared";
-  }
-
-  return null;
-}
diff --git a/src/services/docs/list-documents.test.ts b/src/services/docs/list-documents.test.ts
new file mode 100644
index 0000000..784b1fc
--- /dev/null
+++ b/src/services/docs/list-documents.test.ts
@@ -0,0 +1,45 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { apiContext, document, version } from "./test-helpers";
+
+const repository = vi.hoisted(() => ({
+  listAccessibleDocuments: vi.fn(),
+}));
+
+vi.mock("@/repository/docs/list-documents", () => repository);
+
+describe("listDocuments", () => {
+  it("lists documents with the requested access filter", async () => {
+    const documents = [
+      { ...document(), access: "owned", latestVersion: version() },
+    ];
+    repository.listAccessibleDocuments.mockResolvedValue(documents);
+
+    const { listDocuments } = await import("./list-documents");
+    const result = await listDocuments(apiContext("owner", "owner@example.com"), {
+      access: "owned",
+    });
+
+    expect(repository.listAccessibleDocuments).toHaveBeenCalledWith(
+      expect.anything(),
+      {
+        ownerUserId: "owner",
+        sharedWithEmail: "owner@example.com",
+        access: "owned",
+      },
+    );
+    expect(result).toEqual({ documents });
+  });
+
+  it("passes null email through so shared rows are excluded by repository", async () => {
+    repository.listAccessibleDocuments.mockResolvedValue([]);
+
+    const { listDocuments } = await import("./list-documents");
+    await listDocuments(apiContext("owner", null), { access: "all" });
+
+    expect(repository.listAccessibleDocuments).toHaveBeenCalledWith(
+      expect.anything(),
+      expect.objectContaining({ sharedWithEmail: null }),
+    );
+  });
+});
diff --git a/src/services/docs/list-documents.ts b/src/services/docs/list-documents.ts
index 4c01cc4..bcf682b 100644
--- a/src/services/docs/list-documents.ts
+++ b/src/services/docs/list-documents.ts
@@ -1,13 +1,12 @@
-import { createDocumentsRepository, type DocumentsRepository } from "@/repository/docs/documents";
+import { listAccessibleDocuments } from "@/repository/docs/list-documents";
 import type { ApiContext } from "@/server/foundation/context";
 import type { ListDocumentsQuery } from "@/types/docs";
 
 export async function listDocuments(
   ctx: ApiContext,
   query: ListDocumentsQuery,
-  repository: DocumentsRepository = createDocumentsRepository(ctx.db),
 ) {
-  const documents = await repository.listDocuments({
+  const documents = await listAccessibleDocuments(ctx.db, {
     ownerUserId: ctx.user.id,
     sharedWithEmail: ctx.userEmail,
     access: query.access,
diff --git a/src/services/docs/resolve-access.ts b/src/services/docs/resolve-access.ts
new file mode 100644
index 0000000..1f5d126
--- /dev/null
+++ b/src/services/docs/resolve-access.ts
@@ -0,0 +1,21 @@
+import { isSharedWithEmail } from "@/repository/docs/is-shared-with-email";
+import type { DocumentAccess } from "@/repository/docs/types";
+import type { ApiContext } from "@/server/foundation/context";
+
+export async function resolveDocumentAccess(
+  ctx: ApiContext,
+  document: { id: string; ownerUserId: string },
+): Promise<DocumentAccess | null> {
+  if (document.ownerUserId === ctx.user.id) {
+    return "owned";
+  }
+
+  if (
+    ctx.userEmail !== null &&
+    (await isSharedWithEmail(ctx.db, document.id, ctx.userEmail))
+  ) {
+    return "shared";
+  }
+
+  return null;
+}
diff --git a/src/services/docs/service.test.ts b/src/services/docs/service.test.ts
deleted file mode 100644
index 700000d..0000000
--- a/src/services/docs/service.test.ts
+++ /dev/null
@@ -1,412 +0,0 @@
-import { beforeEach, describe, expect, it } from "vitest";
-
-import type { User } from "@/db";
-import type { ApiContext } from "@/server/foundation/context";
-import type { NewDocument, NewDocumentShare, NewDocumentVersion } from "@/types/docs";
-
-import { createDocument } from "./create-document";
-import { getDocument } from "./get-document";
-import { listDocuments } from "./list-documents";
-import { shareDocument } from "./share-document";
-import { updateDocument } from "./update-document";
-
-describe("docs services", () => {
-  let repo: MemoryDocumentsRepository;
-
-  beforeEach(() => {
-    repo = new MemoryDocumentsRepository();
-  });
-
-  it("creates a document with an initial version owned by the current user", async () => {
-    const ctx = apiContext("owner");
-
-    const result = await createDocument(
-      ctx,
-      { name: "Plan", description: null, html: "<h1>Plan</h1>" },
-      repo,
-    );
-
-    expect(result.document).toMatchObject({
-      id: expect.any(String),
-      ownerUserId: "owner",
-      name: "Plan",
-      description: null,
-      deletedAt: null,
-    });
-    expect(result.version).toMatchObject({
-      id: expect.any(String),
-      documentId: result.document.id,
-      versionNumber: 1,
-      html: "<h1>Plan</h1>",
-      createdByUserId: "owner",
-    });
-  });
-
-  it("gets the latest version when no version is requested", async () => {
-    const ctx = apiContext("owner");
-    const created = await seedDocument(ctx, "<p>v1</p>");
-    await updateDocument(ctx, { id: created.document.id }, { html: "<p>v2</p>" }, repo);
-
-    const result = await getDocument(ctx, { id: created.document.id }, {}, repo);
-
-    expect(result.version.versionNumber).toBe(2);
-    expect(result.version.html).toBe("<p>v2</p>");
-  });
-
-  it("gets a specific version when requested", async () => {
-    const ctx = apiContext("owner");
-    const created = await seedDocument(ctx, "<p>v1</p>");
-    await updateDocument(ctx, { id: created.document.id }, { html: "<p>v2</p>" }, repo);
-
-    const result = await getDocument(
-      ctx,
-      { id: created.document.id },
-      { version: 1 },
-      repo,
-    );
-
-    expect(result.version.versionNumber).toBe(1);
-    expect(result.version.html).toBe("<p>v1</p>");
-    expect(result.latestVersion.versionNumber).toBe(2);
-  });
-
-  it("allows a user with a shared primary email to read", async () => {
-    const ownerCtx = apiContext("owner");
-    const created = await seedDocument(ownerCtx, "<p>shared</p>");
-    await shareDocument(
-      ownerCtx,
-      { id: created.document.id },
-      { emails: ["reader@example.com"] },
-      repo,
-    );
-
-    const result = await getDocument(
-      apiContext("reader", "reader@example.com"),
-      { id: created.document.id },
-      {},
-      repo,
-    );
-
-    expect(result.document.id).toBe(created.document.id);
-    expect(result.access).toBe("shared");
-  });
-
-  it("does not allow a shared user to update", async () => {
-    const ownerCtx = apiContext("owner");
-    const created = await seedDocument(ownerCtx, "<p>shared</p>");
-    await shareDocument(
-      ownerCtx,
-      { id: created.document.id },
-      { emails: ["reader@example.com"] },
-      repo,
-    );
-
-    await expect(
-      updateDocument(
-        apiContext("reader", "reader@example.com"),
-        { id: created.document.id },
-        { html: "<p>edited</p>" },
-        repo,
-      ),
-    ).rejects.toMatchObject({ status: 403, code: "forbidden" });
-  });
-
-  it("lets the owner update and increments the version number", async () => {
-    const ctx = apiContext("owner");
-    const created = await seedDocument(ctx, "<p>v1</p>");
-
-    const updated = await updateDocument(
-      ctx,
-      { id: created.document.id },
-      { html: "<p>v2</p>" },
-      repo,
-    );
-
-    expect(updated.version.versionNumber).toBe(2);
-    expect(updated.version.html).toBe("<p>v2</p>");
-    expect(updated.document.updatedAt.getTime()).toBeGreaterThanOrEqual(
-      created.document.updatedAt.getTime(),
-    );
-  });
-
-  it("maps duplicate version races to conflict errors", async () => {
-    const ctx = apiContext("owner");
-    const created = await seedDocument(ctx, "<p>v1</p>");
-    const conflictRepo = {
-      findDocumentById: repo.findDocumentById.bind(repo),
-      addVersion: async () => {
-        throw Object.assign(new Error("duplicate key"), { code: "23505" });
-      },
-    };
-
-    await expect(
-      updateDocument(
-        ctx,
-        { id: created.document.id },
-        { html: "<p>v2</p>" },
-        conflictRepo as never,
-      ),
-    ).rejects.toMatchObject({ status: 409, code: "conflict" });
-  });
-
-  it("allows the owner or a shared user to share a document", async () => {
-    const ownerCtx = apiContext("owner");
-    const created = await seedDocument(ownerCtx, "<p>shared</p>");
-
-    const ownerShare = await shareDocument(
-      ownerCtx,
-      { id: created.document.id },
-      { emails: ["reader@example.com"] },
-      repo,
-    );
-    const readerShare = await shareDocument(
-      apiContext("reader", "reader@example.com"),
-      { id: created.document.id },
-      { emails: ["reviewer@example.com"] },
-      repo,
-    );
-
-    expect(ownerShare.shares.map((share) => share.sharedWithEmail)).toContain(
-      "reader@example.com",
-    );
-    expect(readerShare.shares.map((share) => share.sharedWithEmail)).toContain(
-      "reviewer@example.com",
-    );
-  });
-
-  it("lists all, owned, and shared documents for the current user", async () => {
-    const ctx = apiContext("owner", "owner@example.com");
-    const owned = await seedDocument(ctx, "<p>owned</p>", "Owned");
-    const shared = await seedDocument(apiContext("other"), "<p>shared</p>", "Shared");
-    await shareDocument(
-      apiContext("other"),
-      { id: shared.document.id },
-      { emails: ["owner@example.com"] },
-      repo,
-    );
-
-    await expect(listDocuments(ctx, { access: "owned" }, repo)).resolves.toMatchObject({
-      documents: [{ id: owned.document.id, access: "owned" }],
-    });
-    await expect(listDocuments(ctx, { access: "shared" }, repo)).resolves.toMatchObject({
-      documents: [{ id: shared.document.id, access: "shared" }],
-    });
-
-    const all = await listDocuments(ctx, { access: "all" }, repo);
-    expect(all.documents.map((document) => document.id).sort()).toEqual(
-      [owned.document.id, shared.document.id].sort(),
-    );
-  });
-
-  it("does not include shared documents when the user has no primary email", async () => {
-    const ownerlessEmailCtx = apiContext("owner", null);
-    const owned = await seedDocument(ownerlessEmailCtx, "<p>owned</p>", "Owned");
-    const shared = await seedDocument(apiContext("other"), "<p>shared</p>", "Shared");
-    await shareDocument(
-      apiContext("other"),
-      { id: shared.document.id },
-      { emails: ["owner@example.com"] },
-      repo,
-    );
-
-    const all = await listDocuments(ownerlessEmailCtx, { access: "all" }, repo);
-
-    expect(all.documents).toEqual([
-      expect.objectContaining({ id: owned.document.id, access: "owned" }),
-    ]);
-  });
-
-  async function seedDocument(
-    ctx: ApiContext,
-    html: string,
-    name = "Seed",
-  ) {
-    return createDocument(ctx, { name, description: null, html }, repo);
-  }
-});
-
-function apiContext(userId: string, email?: string | null): ApiContext {
-  const now = new Date("2026-06-12T00:00:00.000Z");
-  const primaryEmail = email === undefined ? `${userId}@example.com` : email;
-
-  return {
-    db: {} as ApiContext["db"],
-    requestId: `req_${userId}`,
-    user: {
-      id: userId,
-      clerkUserId: `clerk_${userId}`,
-      primaryEmail: primaryEmail,
-      firstName: null,
-      lastName: null,
-      imageUrl: null,
-      createdAt: now,
-      updatedAt: now,
-      deletedAt: null,
-    } satisfies User,
-    userEmail: primaryEmail,
-  };
-}
-
-type StoredDocument = NewDocument & { deletedAt: Date | null };
-type Access = "owned" | "shared";
-type DocumentListItem = StoredDocument & { access: Access; latestVersion: NewDocumentVersion };
-
-class MemoryDocumentsRepository {
-  private documents = new Map<string, StoredDocument>();
-  private versions = new Map<string, NewDocumentVersion[]>();
-  private shares = new Map<string, NewDocumentShare[]>();
-  private id = 0;
-
-  async createDocument(input: {
-    document: Omit<NewDocument, "id" | "createdAt" | "updatedAt" | "deletedAt">;
-    version: Pick<NewDocumentVersion, "html" | "createdByUserId">;
-  }) {
-    const now = new Date(Date.now() + this.id);
-    const document: StoredDocument = {
-      id: this.nextId("doc"),
-      ownerUserId: input.document.ownerUserId,
-      name: input.document.name,
-      description: input.document.description,
-      createdAt: now,
-      updatedAt: now,
-      deletedAt: null,
-    };
-    const version: NewDocumentVersion = {
-      id: this.nextId("ver"),
-      documentId: document.id,
-      versionNumber: 1,
-      html: input.version.html,
-      createdByUserId: input.version.createdByUserId,
-      createdAt: now,
-    };
-
-    this.documents.set(document.id, document);
-    this.versions.set(document.id, [version]);
-
-    return { document, version };
-  }
-
-  async findDocumentById(id: string) {
-    const document = this.documents.get(id);
-    return document?.deletedAt ? null : document ?? null;
-  }
-
-  async findLatestVersion(documentId: string) {
-    const versions = this.versions.get(documentId) ?? [];
-    return versions.at(-1) ?? null;
-  }
-
-  async findVersion(documentId: string, versionNumber: number) {
-    return (
-      this.versions
-        .get(documentId)
-        ?.find((version) => version.versionNumber === versionNumber) ?? null
-    );
-  }
-
-  async isSharedWithEmail(documentId: string, email: string) {
-    return (
-      this.shares
-        .get(documentId)
-        ?.some((share) => share.sharedWithEmail === email) ?? false
-    );
-  }
-
-  async addVersion(input: {
-    documentId: string;
-    html: string;
-    createdByUserId: string;
-  }) {
-    const document = this.documents.get(input.documentId);
-    if (!document || document.deletedAt) {
-      return null;
-    }
-
-    const now = new Date(Date.now() + this.id);
-    const versions = this.versions.get(input.documentId) ?? [];
-    const version: NewDocumentVersion = {
-      id: this.nextId("ver"),
-      documentId: input.documentId,
-      versionNumber: versions.length + 1,
-      html: input.html,
-      createdByUserId: input.createdByUserId,
-      createdAt: now,
-    };
-    const updatedDocument = { ...document, updatedAt: now };
-
-    versions.push(version);
-    this.versions.set(input.documentId, versions);
-    this.documents.set(input.documentId, updatedDocument);
-
-    return { document: updatedDocument, version };
-  }
-
-  async upsertShares(input: {
-    documentId: string;
-    emails: string[];
-    sharedByUserId: string;
-  }) {
-    const existing = this.shares.get(input.documentId) ?? [];
-    const now = new Date(Date.now() + this.id);
-    const added = input.emails
-      .filter(
-        (email) => !existing.some((share) => share.sharedWithEmail === email),
-      )
-      .map((email): NewDocumentShare => ({
-        id: this.nextId("share"),
-        documentId: input.documentId,
-        sharedWithEmail: email,
-        sharedByUserId: input.sharedByUserId,
-        createdAt: now,
-      }));
-
-    this.shares.set(input.documentId, [...existing, ...added]);
-    return this.shares.get(input.documentId) ?? [];
-  }
-
-  async listDocuments(input: {
-    ownerUserId: string;
-    sharedWithEmail: string | null;
-    access: "all" | "owned" | "shared";
-  }) {
-    const items: DocumentListItem[] = [];
-
-    for (const document of this.documents.values()) {
-      if (document.deletedAt) {
-        continue;
-      }
-
-      const isOwned = document.ownerUserId === input.ownerUserId;
-      const isShared =
-        input.sharedWithEmail === null
-          ? false
-          : await this.isSharedWithEmail(document.id, input.sharedWithEmail);
-
-      if (
-        (input.access === "owned" && !isOwned) ||
-        (input.access === "shared" && !isShared) ||
-        (input.access === "all" && !isOwned && !isShared)
-      ) {
-        continue;
-      }
-
-      const latestVersion = await this.findLatestVersion(document.id);
-      if (!latestVersion) {
-        continue;
-      }
-
-      items.push({
-        ...document,
-        access: isOwned ? "owned" : "shared",
-        latestVersion,
-      });
-    }
-
-    return items;
-  }
-
-  private nextId(prefix: string) {
-    this.id += 1;
-    return `${prefix}_${this.id}`;
-  }
-}
diff --git a/src/services/docs/share-document.test.ts b/src/services/docs/share-document.test.ts
new file mode 100644
index 0000000..465d01a
--- /dev/null
+++ b/src/services/docs/share-document.test.ts
@@ -0,0 +1,59 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { apiContext, document } from "./test-helpers";
+
+const repository = vi.hoisted(() => ({
+  findDocumentById: vi.fn(),
+  isSharedWithEmail: vi.fn(),
+  upsertDocumentShares: vi.fn(),
+}));
+
+vi.mock("@/repository/docs/find-document-by-id", () => ({
+  findDocumentById: repository.findDocumentById,
+}));
+vi.mock("@/repository/docs/is-shared-with-email", () => ({
+  isSharedWithEmail: repository.isSharedWithEmail,
+}));
+vi.mock("@/repository/docs/upsert-shares", () => ({
+  upsertDocumentShares: repository.upsertDocumentShares,
+}));
+
+describe("shareDocument", () => {
+  it("allows the owner to share a document", async () => {
+    const foundDocument = document();
+    repository.findDocumentById.mockResolvedValue(foundDocument);
+    repository.upsertDocumentShares.mockResolvedValue([
+      { sharedWithEmail: "reader@example.com" },
+    ]);
+
+    const { shareDocument } = await import("./share-document");
+    const result = await shareDocument(
+      apiContext("owner"),
+      { id: foundDocument.id },
+      { emails: ["reader@example.com"] },
+    );
+
+    expect(repository.upsertDocumentShares).toHaveBeenCalledWith(expect.anything(), {
+      documentId: foundDocument.id,
+      emails: ["reader@example.com"],
+      sharedByUserId: "owner",
+    });
+    expect(result.access).toBe("owned");
+  });
+
+  it("allows a shared user to share a document", async () => {
+    const foundDocument = document({ ownerUserId: "owner" });
+    repository.findDocumentById.mockResolvedValue(foundDocument);
+    repository.isSharedWithEmail.mockResolvedValue(true);
+    repository.upsertDocumentShares.mockResolvedValue([]);
+
+    const { shareDocument } = await import("./share-document");
+    const result = await shareDocument(
+      apiContext("reader", "reader@example.com"),
+      { id: foundDocument.id },
+      { emails: ["reviewer@example.com"] },
+    );
+
+    expect(result.access).toBe("shared");
+  });
+});
diff --git a/src/services/docs/share-document.ts b/src/services/docs/share-document.ts
index 05cc529..91a1ab1 100644
--- a/src/services/docs/share-document.ts
+++ b/src/services/docs/share-document.ts
@@ -1,29 +1,27 @@
-import {
-  createDocumentsRepository,
-  type DocumentAccess,
-  type DocumentsRepository,
-} from "@/repository/docs/documents";
+import { findDocumentById } from "@/repository/docs/find-document-by-id";
+import { upsertDocumentShares } from "@/repository/docs/upsert-shares";
 import type { ApiContext } from "@/server/foundation/context";
 import { forbiddenError, notFoundError } from "@/server/foundation/errors";
 import type { DocumentRouteParams, ShareDocumentRequest } from "@/types/docs";
 
+import { resolveDocumentAccess } from "./resolve-access";
+
 export async function shareDocument(
   ctx: ApiContext,
   params: DocumentRouteParams,
   input: ShareDocumentRequest,
-  repository: DocumentsRepository = createDocumentsRepository(ctx.db),
 ) {
-  const document = await repository.findDocumentById(params.id);
+  const document = await findDocumentById(ctx.db, params.id);
   if (!document) {
     throw notFoundError("Document not found");
   }
 
-  const access = await resolveShareAccess(ctx, repository, document);
+  const access = await resolveDocumentAccess(ctx, document);
   if (!access) {
     throw forbiddenError("Document access denied");
   }
 
-  const shares = await repository.upsertShares({
+  const shares = await upsertDocumentShares(ctx.db, {
     documentId: document.id,
     emails: input.emails,
     sharedByUserId: ctx.user.id,
@@ -31,22 +29,3 @@ export async function shareDocument(
 
   return { document, shares, access };
 }
-
-async function resolveShareAccess(
-  ctx: ApiContext,
-  repository: DocumentsRepository,
-  document: { id: string; ownerUserId: string },
-): Promise<DocumentAccess | null> {
-  if (document.ownerUserId === ctx.user.id) {
-    return "owned";
-  }
-
-  if (
-    ctx.userEmail !== null &&
-    (await repository.isSharedWithEmail(document.id, ctx.userEmail))
-  ) {
-    return "shared";
-  }
-
-  return null;
-}
diff --git a/src/services/docs/test-helpers.ts b/src/services/docs/test-helpers.ts
new file mode 100644
index 0000000..8429bdb
--- /dev/null
+++ b/src/services/docs/test-helpers.ts
@@ -0,0 +1,60 @@
+import type { User } from "@/db";
+import type { ApiContext } from "@/server/foundation/context";
+
+export function apiContext(userId: string, email?: string | null): ApiContext {
+  const now = new Date("2026-06-12T00:00:00.000Z");
+  const primaryEmail = email === undefined ? `${userId}@example.com` : email;
+
+  return {
+    db: {} as ApiContext["db"],
+    requestId: `req_${userId}`,
+    user: {
+      id: userId,
+      clerkUserId: `clerk_${userId}`,
+      primaryEmail,
+      firstName: null,
+      lastName: null,
+      imageUrl: null,
+      createdAt: now,
+      updatedAt: now,
+      deletedAt: null,
+    } satisfies User,
+    userEmail: primaryEmail,
+  };
+}
+
+export function document(overrides: Partial<{
+  id: string;
+  ownerUserId: string;
+  name: string;
+  description: string | null;
+}> = {}) {
+  const now = new Date("2026-06-12T00:00:00.000Z");
+
+  return {
+    id: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
+    ownerUserId: "owner",
+    name: "Report",
+    description: null,
+    createdAt: now,
+    updatedAt: now,
+    deletedAt: null,
+    ...overrides,
+  };
+}
+
+export function version(overrides: Partial<{
+  documentId: string;
+  versionNumber: number;
+  html: string;
+}> = {}) {
+  return {
+    id: "01HZXJK8JHX7QY9N7K6X8Y2W0B",
+    documentId: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
+    versionNumber: 1,
+    html: "<p>v1</p>",
+    createdByUserId: "owner",
+    createdAt: new Date("2026-06-12T00:00:00.000Z"),
+    ...overrides,
+  };
+}
diff --git a/src/services/docs/update-document.test.ts b/src/services/docs/update-document.test.ts
new file mode 100644
index 0000000..92e5204
--- /dev/null
+++ b/src/services/docs/update-document.test.ts
@@ -0,0 +1,65 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { apiContext, document, version } from "./test-helpers";
+
+const repository = vi.hoisted(() => ({
+  addDocumentVersion: vi.fn(),
+  findDocumentById: vi.fn(),
+}));
+
+vi.mock("@/repository/docs/add-version", () => ({
+  addDocumentVersion: repository.addDocumentVersion,
+}));
+vi.mock("@/repository/docs/find-document-by-id", () => ({
+  findDocumentById: repository.findDocumentById,
+}));
+
+describe("updateDocument", () => {
+  it("lets the owner update and increments the version number", async () => {
+    const foundDocument = document();
+    const updated = {
+      document: foundDocument,
+      version: version({ versionNumber: 2, html: "<p>v2</p>" }),
+    };
+    repository.findDocumentById.mockResolvedValue(foundDocument);
+    repository.addDocumentVersion.mockResolvedValue(updated);
+
+    const { updateDocument } = await import("./update-document");
+    const result = await updateDocument(
+      apiContext("owner"),
+      { id: foundDocument.id },
+      { html: "<p>v2</p>" },
+    );
+
+    expect(result).toBe(updated);
+  });
+
+  it("does not allow a shared user to update", async () => {
+    repository.findDocumentById.mockResolvedValue(document({ ownerUserId: "owner" }));
+
+    const { updateDocument } = await import("./update-document");
+    await expect(
+      updateDocument(
+        apiContext("reader", "reader@example.com"),
+        { id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" },
+        { html: "<p>edited</p>" },
+      ),
+    ).rejects.toMatchObject({ status: 403, code: "forbidden" });
+  });
+
+  it("maps duplicate version races to conflict errors", async () => {
+    repository.findDocumentById.mockResolvedValue(document());
+    repository.addDocumentVersion.mockRejectedValue(
+      Object.assign(new Error("duplicate key"), { code: "23505" }),
+    );
+
+    const { updateDocument } = await import("./update-document");
+    await expect(
+      updateDocument(
+        apiContext("owner"),
+        { id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" },
+        { html: "<p>v2</p>" },
+      ),
+    ).rejects.toMatchObject({ status: 409, code: "conflict" });
+  });
+});
diff --git a/src/services/docs/update-document.ts b/src/services/docs/update-document.ts
index fe4029c..fd99fd9 100644
--- a/src/services/docs/update-document.ts
+++ b/src/services/docs/update-document.ts
@@ -1,4 +1,5 @@
-import { createDocumentsRepository, type DocumentsRepository } from "@/repository/docs/documents";
+import { addDocumentVersion } from "@/repository/docs/add-version";
+import { findDocumentById } from "@/repository/docs/find-document-by-id";
 import type { ApiContext } from "@/server/foundation/context";
 import {
   conflictError,
@@ -7,13 +8,14 @@ import {
 } from "@/server/foundation/errors";
 import type { DocumentRouteParams, UpdateDocumentRequest } from "@/types/docs";
 
+import { isUniqueViolation } from "./db-errors";
+
 export async function updateDocument(
   ctx: ApiContext,
   params: DocumentRouteParams,
   input: UpdateDocumentRequest,
-  repository: DocumentsRepository = createDocumentsRepository(ctx.db),
 ) {
-  const document = await repository.findDocumentById(params.id);
+  const document = await findDocumentById(ctx.db, params.id);
   if (!document) {
     throw notFoundError("Document not found");
   }
@@ -22,7 +24,7 @@ export async function updateDocument(
     throw forbiddenError("Only the document owner can update it");
   }
 
-  const updated = await addVersionOrConflict(repository, {
+  const updated = await addVersionOrConflict(ctx, {
     documentId: document.id,
     html: input.html,
     createdByUserId: ctx.user.id,
@@ -36,7 +38,7 @@ export async function updateDocument(
 }
 
 async function addVersionOrConflict(
-  repository: DocumentsRepository,
+  ctx: ApiContext,
   input: {
     documentId: string;
     html: string;
@@ -44,7 +46,7 @@ async function addVersionOrConflict(
   },
 ) {
   try {
-    return await repository.addVersion(input);
+    return await addDocumentVersion(ctx.db, input);
   } catch (error) {
     if (isUniqueViolation(error)) {
       throw conflictError("Document version conflict");
@@ -53,12 +55,3 @@ async function addVersionOrConflict(
     throw error;
   }
 }
-
-function isUniqueViolation(error: unknown): boolean {
-  return (
-    typeof error === "object" &&
-    error !== null &&
-    "code" in error &&
-    error.code === "23505"
-  );
-}
diff --git a/src/types/docs.test.ts b/src/types/docs.test.ts
deleted file mode 100644
index cab3a2b..0000000
--- a/src/types/docs.test.ts
+++ /dev/null
@@ -1,170 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import {
-  createDocumentRequestSchema,
-  documentRouteParamsSchema,
-  getDocumentQuerySchema,
-  listDocumentsQuerySchema,
-  newDocumentSchema,
-  newDocumentShareSchema,
-  newDocumentVersionSchema,
-  shareDocumentRequestSchema,
-  updateDocumentRequestSchema,
-} from "./docs";
-
-describe("docs contracts", () => {
-  it("normalizes create document input", () => {
-    expect(
-      createDocumentRequestSchema.parse({
-        name: "  Report  ",
-        description: "  ",
-        html: "<h1>Report</h1>",
-      }),
-    ).toEqual({
-      name: "Report",
-      description: null,
-      html: "<h1>Report</h1>",
-    });
-
-    expect(
-      createDocumentRequestSchema.parse({
-        name: "Report",
-        description: null,
-        html: "<p>Body</p>",
-      }),
-    ).toEqual({ name: "Report", description: null, html: "<p>Body</p>" });
-  });
-
-  it("rejects empty create and update content", () => {
-    expect(() =>
-      createDocumentRequestSchema.parse({ name: "   ", html: "<p>Body</p>" }),
-    ).toThrow();
-
-    expect(() =>
-      createDocumentRequestSchema.parse({ name: "Report", html: "" }),
-    ).toThrow();
-
-    expect(() => updateDocumentRequestSchema.parse({ html: "" })).toThrow();
-  });
-
-  it("parses route params, versions, and list filters", () => {
-    expect(documentRouteParamsSchema.parse({ id: "doc_1" })).toEqual({
-      id: "doc_1",
-    });
-    expect(() => documentRouteParamsSchema.parse({ id: "" })).toThrow();
-
-    expect(getDocumentQuerySchema.parse({ version: "2" })).toEqual({
-      version: 2,
-    });
-    expect(getDocumentQuerySchema.parse({})).toEqual({});
-    expect(() => getDocumentQuerySchema.parse({ version: "0" })).toThrow();
-    expect(() => getDocumentQuerySchema.parse({ version: "1.5" })).toThrow();
-
-    expect(listDocumentsQuerySchema.parse({})).toEqual({ access: "all" });
-    expect(listDocumentsQuerySchema.parse({ access: "shared" })).toEqual({
-      access: "shared",
-    });
-    expect(() =>
-      listDocumentsQuerySchema.parse({ access: "unknown" }),
-    ).toThrow();
-  });
-
-  it("normalizes and deduplicates share emails", () => {
-    expect(
-      shareDocumentRequestSchema.parse({
-        emails: [
-          " Reader@Example.com ",
-          "reader@example.com",
-          "reviewer@example.com",
-        ],
-      }),
-    ).toEqual({
-      emails: ["reader@example.com", "reviewer@example.com"],
-    });
-
-    expect(() => shareDocumentRequestSchema.parse({ emails: [] })).toThrow();
-    expect(() =>
-      shareDocumentRequestSchema.parse({ emails: ["not-an-email"] }),
-    ).toThrow();
-  });
-
-  it("validates DB insert objects", () => {
-    const createdAt = new Date("2026-06-12T00:00:00.000Z");
-
-    expect(
-      newDocumentSchema.parse({
-        id: "doc_1",
-        ownerUserId: "user_1",
-        name: "Report",
-        description: null,
-        createdAt,
-        updatedAt: createdAt,
-      }),
-    ).toEqual({
-      id: "doc_1",
-      ownerUserId: "user_1",
-      name: "Report",
-      description: null,
-      createdAt,
-      updatedAt: createdAt,
-    });
-
-    expect(
-      newDocumentVersionSchema.parse({
-        id: "version_1",
-        documentId: "doc_1",
-        versionNumber: 1,
-        html: "<p>Body</p>",
-        createdByUserId: "user_1",
-        createdAt,
-      }),
-    ).toEqual({
-      id: "version_1",
-      documentId: "doc_1",
-      versionNumber: 1,
-      html: "<p>Body</p>",
-      createdByUserId: "user_1",
-      createdAt,
-    });
-
-    expect(
-      newDocumentShareSchema.parse({
-        id: "share_1",
-        documentId: "doc_1",
-        sharedWithEmail: "reader@example.com",
-        sharedByUserId: "user_1",
-        createdAt,
-      }),
-    ).toEqual({
-      id: "share_1",
-      documentId: "doc_1",
-      sharedWithEmail: "reader@example.com",
-      sharedByUserId: "user_1",
-      createdAt,
-    });
-  });
-
-  it("rejects non-normalized DB share emails", () => {
-    const createdAt = new Date("2026-06-12T00:00:00.000Z");
-
-    expect(() =>
-      newDocumentShareSchema.parse({
-        id: "share_1",
-        documentId: "doc_1",
-        sharedWithEmail: "Reader@Example.com",
-        sharedByUserId: "user_1",
-        createdAt,
-      }),
-    ).toThrow();
-
-    expect(() =>
-      newDocumentShareSchema.parse({
-        id: "share_1",
-        documentId: "doc_1",
-        sharedWithEmail: " reader@example.com ",
-        sharedByUserId: "user_1",
-        createdAt,
-      }),
-    ).toThrow();
-  });
-});
diff --git a/src/types/docs.ts b/src/types/docs.ts
index 2a2e4c9..9cb0320 100644
--- a/src/types/docs.ts
+++ b/src/types/docs.ts
@@ -8,6 +8,9 @@ const nonEmptyTrimmedStringSchema = z
 const nonEmptyStringSchema = z.string().min(1, "Required");
 
 const dateSchema = z.date();
+const ulidSchema = z
+  .string()
+  .regex(/^[0-9A-HJKMNP-TV-Z]{26}$/, "Invalid ULID");
 
 const normalizedEmailSchema = z.string().trim().toLowerCase().email();
 
@@ -59,12 +62,12 @@ export const shareDocumentRequestSchema = z.object({
 });
 
 export const documentRouteParamsSchema = z.object({
-  id: nonEmptyStringSchema,
+  id: ulidSchema,
 });
 
 export const newDocumentSchema = z
   .object({
-    id: nonEmptyStringSchema,
+    id: ulidSchema,
     ownerUserId: nonEmptyStringSchema,
     name: nonEmptyTrimmedStringSchema,
     description: nullishDescriptionSchema,
@@ -76,8 +79,8 @@ export const newDocumentSchema = z
 
 export const newDocumentVersionSchema = z
   .object({
-    id: nonEmptyStringSchema,
-    documentId: nonEmptyStringSchema,
+    id: ulidSchema,
+    documentId: ulidSchema,
     versionNumber: z.number().int().positive(),
     html: nonEmptyStringSchema,
     createdByUserId: nonEmptyStringSchema,
@@ -87,8 +90,8 @@ export const newDocumentVersionSchema = z
 
 export const newDocumentShareSchema = z
   .object({
-    id: nonEmptyStringSchema,
-    documentId: nonEmptyStringSchema,
+    id: ulidSchema,
+    documentId: ulidSchema,
     sharedWithEmail: storedEmailSchema,
     sharedByUserId: nonEmptyStringSchema,
     createdAt: dateSchema,

From 8e7d1996395d92a90d1bf45ba2ecb8cf21aedea3 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Tue, 16 Jun 2026 17:47:18 -0300
Subject: [PATCH 16/26] refactor: address docs api review comments

---
 .../plans/2026-06-12-docs-api-endpoints.md    | 22 ++---
 .../2026-06-12-docs-api-versioning-design.md  | 26 ++---
 drizzle/0001_create_document_tables.sql       |  5 +-
 drizzle/meta/0001_snapshot.json               |  2 +-
 src/db/schema.ts                              |  2 +-
 src/repository/docs/list-documents.ts         | 94 -------------------
 src/server/foundation/context.ts              | 19 ++--
 src/server/foundation/email.test.ts           | 11 +++
 src/server/foundation/errors.test.ts          | 29 ++++++
 src/server/foundation/errors.ts               | 14 ++-
 src/server/foundation/logs.test.ts            | 37 ++++++++
 src/server/foundation/responses.test.ts       | 22 +++++
 src/server/foundation/ulid.test.ts            | 15 +++
 .../docs/ids.ts => server/foundation/ulid.ts} |  0
 src/server/handlers/docs.test.ts              | 10 +-
 .../handlers/docs/create-document.test.ts     | 52 ++++++++++
 src/server/handlers/docs/create-document.ts   |  2 +-
 src/server/handlers/docs/get-document.test.ts | 53 +++++++++++
 src/server/handlers/docs/get-document.ts      |  2 +-
 .../handlers/docs/list-documents.test.ts      | 44 +++++++++
 src/server/handlers/docs/list-documents.ts    |  2 +-
 .../handlers/docs/share-document.test.ts      | 51 ++++++++++
 src/server/handlers/docs/share-document.ts    |  2 +-
 .../handlers/docs/update-document.test.ts     | 52 ++++++++++
 src/server/handlers/docs/update-document.ts   |  2 +-
 src/server/handlers/error-code.test.ts        | 13 +++
 src/server/handlers/query.test.ts             | 14 +++
 src/server/handlers/query.ts                  | 20 +++-
 src/server/handlers/request-body.test.ts      | 15 +++
 src/server/handlers/request-id.test.ts        | 14 +++
 src/server/handlers/response.test.ts          | 17 ++++
 src/server/handlers/validation.test.ts        | 27 ++++++
 .../repositories/docs/add-version.test.ts     | 28 ++++++
 .../repositories}/docs/add-version.ts         |  5 +-
 .../repositories/docs/create-document.test.ts | 27 ++++++
 .../repositories}/docs/create-document.ts     |  5 +-
 .../docs/find-document-by-id.test.ts          | 25 +++++
 .../repositories}/docs/find-document-by-id.ts |  3 +-
 .../docs/find-latest-version.test.ts          | 27 ++++++
 .../repositories}/docs/find-latest-version.ts |  3 +-
 ...find-latest-versions-for-documents.test.ts | 33 +++++++
 .../find-latest-versions-for-documents.ts     | 29 ++++++
 .../docs/find-shared-document-ids.test.ts     | 20 ++++
 .../docs/find-shared-document-ids.ts          | 16 ++++
 .../repositories/docs/find-version.test.ts    | 25 +++++
 .../repositories}/docs/find-version.ts        |  3 +-
 .../docs/is-shared-with-email.test.ts         | 23 +++++
 .../docs/is-shared-with-email.ts              |  3 +-
 .../repositories/docs/list-documents.test.ts  | 45 +++++++++
 .../repositories/docs/list-documents.ts       | 66 +++++++++++++
 .../repositories/docs/upsert-shares.test.ts   | 28 ++++++
 .../repositories}/docs/upsert-shares.ts       |  5 +-
 .../find-active-user-by-clerk-id.test.ts      | 19 ++++
 .../users/find-active-user-by-clerk-id.ts     | 20 ++++
 .../services/docs/create-document.test.ts     |  2 +-
 .../services/docs/create-document.ts          |  2 +-
 src/server/services/docs/db-errors.test.ts    | 11 +++
 src/{ => server}/services/docs/db-errors.ts   |  0
 .../services/docs/get-document.test.ts        |  8 +-
 .../services/docs/get-document.ts             |  6 +-
 .../services/docs/list-documents.test.ts      |  2 +-
 .../services/docs/list-documents.ts           |  2 +-
 .../services/docs/resolve-access.test.ts      | 30 ++++++
 .../services/docs/resolve-access.ts           |  4 +-
 .../services/docs/share-document.test.ts      |  6 +-
 .../services/docs/share-document.ts           |  4 +-
 .../services/docs/test-helpers.ts             |  0
 .../services/docs/update-document.test.ts     |  4 +-
 .../services/docs/update-document.ts          |  4 +-
 .../types.ts => types/docs-repository.ts}     |  0
 70 files changed, 1044 insertions(+), 189 deletions(-)
 delete mode 100644 src/repository/docs/list-documents.ts
 create mode 100644 src/server/foundation/email.test.ts
 create mode 100644 src/server/foundation/errors.test.ts
 create mode 100644 src/server/foundation/logs.test.ts
 create mode 100644 src/server/foundation/responses.test.ts
 create mode 100644 src/server/foundation/ulid.test.ts
 rename src/{repository/docs/ids.ts => server/foundation/ulid.ts} (100%)
 create mode 100644 src/server/handlers/docs/create-document.test.ts
 create mode 100644 src/server/handlers/docs/get-document.test.ts
 create mode 100644 src/server/handlers/docs/list-documents.test.ts
 create mode 100644 src/server/handlers/docs/share-document.test.ts
 create mode 100644 src/server/handlers/docs/update-document.test.ts
 create mode 100644 src/server/handlers/error-code.test.ts
 create mode 100644 src/server/handlers/query.test.ts
 create mode 100644 src/server/handlers/request-body.test.ts
 create mode 100644 src/server/handlers/request-id.test.ts
 create mode 100644 src/server/handlers/response.test.ts
 create mode 100644 src/server/handlers/validation.test.ts
 create mode 100644 src/server/repositories/docs/add-version.test.ts
 rename src/{repository => server/repositories}/docs/add-version.ts (91%)
 create mode 100644 src/server/repositories/docs/create-document.test.ts
 rename src/{repository => server/repositories}/docs/create-document.ts (87%)
 create mode 100644 src/server/repositories/docs/find-document-by-id.test.ts
 rename src/{repository => server/repositories}/docs/find-document-by-id.ts (83%)
 create mode 100644 src/server/repositories/docs/find-latest-version.test.ts
 rename src/{repository => server/repositories}/docs/find-latest-version.ts (85%)
 create mode 100644 src/server/repositories/docs/find-latest-versions-for-documents.test.ts
 create mode 100644 src/server/repositories/docs/find-latest-versions-for-documents.ts
 create mode 100644 src/server/repositories/docs/find-shared-document-ids.test.ts
 create mode 100644 src/server/repositories/docs/find-shared-document-ids.ts
 create mode 100644 src/server/repositories/docs/find-version.test.ts
 rename src/{repository => server/repositories}/docs/find-version.ts (87%)
 create mode 100644 src/server/repositories/docs/is-shared-with-email.test.ts
 rename src/{repository => server/repositories}/docs/is-shared-with-email.ts (87%)
 create mode 100644 src/server/repositories/docs/list-documents.test.ts
 create mode 100644 src/server/repositories/docs/list-documents.ts
 create mode 100644 src/server/repositories/docs/upsert-shares.test.ts
 rename src/{repository => server/repositories}/docs/upsert-shares.ts (92%)
 create mode 100644 src/server/repositories/users/find-active-user-by-clerk-id.test.ts
 create mode 100644 src/server/repositories/users/find-active-user-by-clerk-id.ts
 rename src/{ => server}/services/docs/create-document.test.ts (93%)
 rename src/{ => server}/services/docs/create-document.ts (84%)
 create mode 100644 src/server/services/docs/db-errors.test.ts
 rename src/{ => server}/services/docs/db-errors.ts (100%)
 rename src/{ => server}/services/docs/get-document.test.ts (90%)
 rename src/{ => server}/services/docs/get-document.ts (81%)
 rename src/{ => server}/services/docs/list-documents.test.ts (95%)
 rename src/{ => server}/services/docs/list-documents.ts (82%)
 create mode 100644 src/server/services/docs/resolve-access.test.ts
 rename src/{ => server}/services/docs/resolve-access.ts (74%)
 rename src/{ => server}/services/docs/share-document.test.ts (90%)
 rename src/{ => server}/services/docs/share-document.ts (83%)
 rename src/{ => server}/services/docs/test-helpers.ts (100%)
 rename src/{ => server}/services/docs/update-document.test.ts (94%)
 rename src/{ => server}/services/docs/update-document.ts (88%)
 rename src/{repository/docs/types.ts => types/docs-repository.ts} (100%)

diff --git a/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md b/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md
index 900163d..8b33a2a 100644
--- a/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md
+++ b/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md
@@ -4,7 +4,7 @@
 
 **Goal:** Build versioned HTML document APIs with shared endpoint foundation, authenticated API context, Drizzle persistence, Zod contracts, and tests.
 
-**Architecture:** Next.js `src/app/api/**/route.ts` files stay thin and delegate to HTTP handlers in `src/server/handlers/docs.ts`. Generic API infrastructure lives in `src/server/foundation` and `src/server/handlers/api.ts`; business rules live in `src/services/docs`; Drizzle queries live in `src/repository/docs`; Zod contracts and shared document types live in `src/types/docs.ts`.
+**Architecture:** Next.js `src/app/api/**/route.ts` files stay thin and delegate to HTTP handlers in `src/server/handlers/docs.ts`. Generic API infrastructure lives in `src/server/foundation` and `src/server/handlers/api.ts`; business rules live in `src/server/services/docs`; Drizzle queries live in `src/server/repositories/docs`; Zod contracts and shared document types live in `src/types/docs.ts`.
 
 **Tech Stack:** Next.js 16 Route Handlers, Clerk, Drizzle ORM, Postgres, Zod 4, Vitest, Bun.
 
@@ -201,13 +201,13 @@ Expected: pass.
 ## Task 4: Repository And Services
 
 **Files:**
-- Create: focused files under `src/repository/docs/*.ts`
-- Create: `src/services/docs/create-document.ts`
-- Create: `src/services/docs/get-document.ts`
-- Create: `src/services/docs/list-documents.ts`
-- Create: `src/services/docs/share-document.ts`
-- Create: `src/services/docs/update-document.ts`
-- Create: one test file per service under `src/services/docs/*.test.ts`
+- Create: focused files under `src/server/repositories/docs/*.ts`
+- Create: `src/server/services/docs/create-document.ts`
+- Create: `src/server/services/docs/get-document.ts`
+- Create: `src/server/services/docs/list-documents.ts`
+- Create: `src/server/services/docs/share-document.ts`
+- Create: `src/server/services/docs/update-document.ts`
+- Create: one test file per service under `src/server/services/docs/*.test.ts`
 
 - [ ] **Step 1: Add failing service tests**
 
@@ -227,7 +227,7 @@ Create service tests using an in-memory repository fake. Cover:
 
 - [ ] **Step 2: Verify service tests fail**
 
-Run: `bun run test src/services/docs`
+Run: `bun run test src/server/services/docs`
 
 Expected: fail because services do not exist.
 
@@ -237,7 +237,7 @@ Services should accept `{ db, user, userEmail }` from `ApiContext`, call focused
 
 - [ ] **Step 4: Implement repository**
 
-Implement focused Drizzle query files under `src/repository/docs`. Include:
+Implement focused Drizzle query files under `src/server/repositories/docs`. Include:
 
 ```ts
 createDocumentWithInitialVersion(input)
@@ -252,7 +252,7 @@ Use `onConflictDoNothing` for idempotent share inserts.
 
 - [ ] **Step 5: Verify services pass**
 
-Run: `bun run test src/services/docs`
+Run: `bun run test src/server/services/docs`
 
 Expected: pass.
 
diff --git a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
index 7948e0e..a049580 100644
--- a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
+++ b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
@@ -40,7 +40,7 @@ The helper should build an `ApiContext` for every protected API request. It shou
 - Load the active local `users` row by `clerkUserId`.
 - Normalize and expose the local user's primary email when present.
 - Return a clear `401` response when no Clerk session exists.
-- Return a clear `409` response when a Clerk session exists but the local user row has not been synchronized yet.
+- Return a clear `403` response when a Clerk session exists but the local user row has not been synchronized yet.
 - Expose the local user as `ctx.user`.
 - Expose the local user's normalized primary email as `ctx.userEmail`.
 - Expose the Drizzle database handle as `ctx.db`.
@@ -126,7 +126,7 @@ Endpoint files should not duplicate try/catch blocks for JSON parsing or Zod for
 
 Next.js route files and HTTP handlers should not import the global database directly. They should receive `ctx.db` from `ApiContext` and pass it into repositories or services. This makes tests easier and keeps database access consistent.
 
-Repository modules under `src/repository/docs` should own Drizzle queries. Service modules under `src/services/docs` should own business rules and transaction orchestration. Handler files under `src/server/handlers` should only compose the API foundation, request contracts, and service calls. Next route files under `src/app/api` should only export the corresponding handler functions required by Next.js.
+Repository modules under `src/server/repositories/docs` should own Drizzle queries. Service modules under `src/server/services/docs` should own business rules and transaction orchestration. Handler files under `src/server/handlers` should only compose the API foundation, request contracts, and service calls. Next route files under `src/app/api` should only export the corresponding handler functions required by Next.js.
 
 ### Logging
 
@@ -408,7 +408,7 @@ Sharing is document-level. A shared email can read every existing and future ver
 ## Authorization Rules
 
 - Unauthenticated requests return `401`.
-- Authenticated requests without a local `users` row return `409`.
+- Authenticated requests without a local `users` row return `403`.
 - Owners can read, update, list, and share their documents.
 - Shared users can read, list, and share documents shared with their primary email.
 - Shared users cannot update documents.
@@ -435,7 +435,7 @@ Recommended status codes:
 - `401`: missing Clerk session.
 - `403`: authenticated user lacks access.
 - `404`: document or version not found.
-- `409`: local user has not been synchronized yet, or a concurrent version insert conflicts after retry handling.
+- `409`: a concurrent version insert conflicts after retry handling.
 - `500`: unexpected server/database error.
 
 Validation errors should not echo submitted HTML.
@@ -453,16 +453,16 @@ src/server/handlers/docs.ts
 src/server/foundation/context.ts
 src/server/foundation/errors.ts
 src/server/foundation/logs.ts
-src/services/docs/create-document.ts
-src/services/docs/get-document.ts
-src/services/docs/list-documents.ts
-src/services/docs/share-document.ts
-src/services/docs/update-document.ts
-src/repository/docs/*.ts
+src/server/services/docs/create-document.ts
+src/server/services/docs/get-document.ts
+src/server/services/docs/list-documents.ts
+src/server/services/docs/share-document.ts
+src/server/services/docs/update-document.ts
+src/server/repositories/docs/*.ts
 src/types/docs.ts
 ```
 
-Files under `src/repository/docs` should contain focused database queries. Files under `src/services/docs` should contain authorization and document workflows that are easier to test without Route Handler boilerplate. Files under `src/server/handlers/docs` should parse HTTP inputs and call the document services. The `src/app/api/docs/**/route.ts` files should stay thin and export the matching Next.js Route Handler methods.
+Files under `src/server/repositories/docs` should contain focused database queries. Files under `src/server/services/docs` should contain authorization and document workflows that are easier to test without Route Handler boilerplate. Files under `src/server/handlers/docs` should parse HTTP inputs and call the document services. The `src/app/api/docs/**/route.ts` files should stay thin and export the matching Next.js Route Handler methods.
 
 ## Testing
 
@@ -479,7 +479,7 @@ Test the contract layer:
 Test the API context helper:
 
 - Returns `401` when Clerk has no authenticated user.
-- Returns `409` when a Clerk user exists but no active local user row exists.
+- Returns `403` when a Clerk user exists but no active local user row exists.
 - Returns `ApiContext` with local user and normalized email when present.
 
 Test the API foundation:
@@ -519,7 +519,7 @@ Test HTTP handlers with mocked service/context dependencies where useful:
 5. Add the shared handler wrapper, response helpers, and request parsing under `src/server/handlers`.
 6. Add Zod contracts and document types in `src/types/docs.ts`.
 7. Add repository and service tests before implementation.
-8. Add repository and service implementation under `src/repository/docs` and `src/services/docs`.
+8. Add repository and service implementation under `src/server/repositories/docs` and `src/server/services/docs`.
 9. Add handler tests before each handler implementation.
 10. Add thin Next.js Route Handlers in `src/app/api/docs/**/route.ts` that delegate to `src/server/handlers/docs.ts`.
 11. Run `bun run test`, `bun run typecheck`, and `bun run lint`.
diff --git a/drizzle/0001_create_document_tables.sql b/drizzle/0001_create_document_tables.sql
index 8be7a92..4d62a49 100644
--- a/drizzle/0001_create_document_tables.sql
+++ b/drizzle/0001_create_document_tables.sql
@@ -32,7 +32,10 @@ ALTER TABLE "document_versions" ADD CONSTRAINT "document_versions_created_by_use
 ALTER TABLE "documents" ADD CONSTRAINT "documents_owner_user_id_users_id_fk" FOREIGN KEY ("owner_user_id") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
 CREATE UNIQUE INDEX "document_shares_document_id_email_unique" ON "document_shares" USING btree ("document_id","shared_with_email");--> statement-breakpoint
 CREATE INDEX "document_shares_shared_with_email_idx" ON "document_shares" USING btree ("shared_with_email");--> statement-breakpoint
-ALTER TABLE "document_shares" ADD CONSTRAINT "document_shares_shared_with_email_normalized_check" CHECK ("document_shares"."shared_with_email" = lower(trim("document_shares"."shared_with_email")));--> statement-breakpoint
+ALTER TABLE "document_shares" ADD CONSTRAINT "document_shares_shared_with_email_normalized_check" CHECK (
+  "document_shares"."shared_with_email" = lower(trim("document_shares"."shared_with_email"))
+  AND length(trim("document_shares"."shared_with_email")) > 0
+);--> statement-breakpoint
 CREATE UNIQUE INDEX "document_versions_document_id_version_unique" ON "document_versions" USING btree ("document_id","version_number");--> statement-breakpoint
 CREATE INDEX "document_versions_document_id_created_at_idx" ON "document_versions" USING btree ("document_id","created_at");--> statement-breakpoint
 CREATE INDEX "documents_owner_user_id_idx" ON "documents" USING btree ("owner_user_id");
diff --git a/drizzle/meta/0001_snapshot.json b/drizzle/meta/0001_snapshot.json
index ae3eca6..1a626b9 100644
--- a/drizzle/meta/0001_snapshot.json
+++ b/drizzle/meta/0001_snapshot.json
@@ -111,7 +111,7 @@
       "checkConstraints": {
         "document_shares_shared_with_email_normalized_check": {
           "name": "document_shares_shared_with_email_normalized_check",
-          "value": "\"document_shares\".\"shared_with_email\" = lower(trim(\"document_shares\".\"shared_with_email\"))"
+          "value": "\"document_shares\".\"shared_with_email\" = lower(trim(\"document_shares\".\"shared_with_email\")) and length(trim(\"document_shares\".\"shared_with_email\")) > 0"
         }
       },
       "isRLSEnabled": false
diff --git a/src/db/schema.ts b/src/db/schema.ts
index b1c09f9..8ec0923 100644
--- a/src/db/schema.ts
+++ b/src/db/schema.ts
@@ -108,7 +108,7 @@ export const documentShares = pgTable(
     index("document_shares_shared_with_email_idx").on(table.sharedWithEmail),
     check(
       "document_shares_shared_with_email_normalized_check",
-      sql`${table.sharedWithEmail} = lower(trim(${table.sharedWithEmail}))`,
+      sql`${table.sharedWithEmail} = lower(trim(${table.sharedWithEmail})) and length(trim(${table.sharedWithEmail})) > 0`,
     ),
   ],
 );
diff --git a/src/repository/docs/list-documents.ts b/src/repository/docs/list-documents.ts
deleted file mode 100644
index b312152..0000000
--- a/src/repository/docs/list-documents.ts
+++ /dev/null
@@ -1,94 +0,0 @@
-import { and, desc, eq, inArray, isNull, or } from "drizzle-orm";
-
-import { documentShares, documents, documentVersions } from "@/db";
-
-import type {
-  DocumentListItem,
-  DocumentsDatabase,
-  ListDocumentsInput,
-} from "./types";
-
-export async function listAccessibleDocuments(
-  db: DocumentsDatabase,
-  input: ListDocumentsInput,
-): Promise<DocumentListItem[]> {
-  const ownedCondition = eq(documents.ownerUserId, input.ownerUserId);
-  const sharedDocumentIds =
-    input.sharedWithEmail === null
-      ? []
-      : await findSharedDocumentIds(db, input.sharedWithEmail);
-
-  const accessCondition =
-    input.access === "owned"
-      ? ownedCondition
-      : input.access === "shared"
-        ? sharedDocumentIds.length === 0
-          ? undefined
-          : inArray(documents.id, sharedDocumentIds)
-        : sharedDocumentIds.length === 0
-          ? ownedCondition
-          : or(ownedCondition, inArray(documents.id, sharedDocumentIds));
-
-  if (!accessCondition) {
-    return [];
-  }
-
-  const rows = await db
-    .select()
-    .from(documents)
-    .where(and(isNull(documents.deletedAt), accessCondition))
-    .orderBy(desc(documents.updatedAt));
-
-  const latestVersions = await findLatestVersionsForDocuments(
-    db,
-    rows.map((document) => document.id),
-  );
-
-  return rows.flatMap((document) => {
-    const latestVersion = latestVersions.get(document.id);
-
-    if (!latestVersion) {
-      return [];
-    }
-
-    return {
-      ...document,
-      access: document.ownerUserId === input.ownerUserId ? "owned" : "shared",
-      latestVersion,
-    };
-  });
-}
-
-async function findSharedDocumentIds(db: DocumentsDatabase, email: string) {
-  const rows = await db
-    .select({ documentId: documentShares.documentId })
-    .from(documentShares)
-    .where(eq(documentShares.sharedWithEmail, email));
-
-  return rows.map((row) => row.documentId);
-}
-
-async function findLatestVersionsForDocuments(
-  db: DocumentsDatabase,
-  documentIds: string[],
-) {
-  if (documentIds.length === 0) {
-    return new Map();
-  }
-
-  const rows = await db
-    .select()
-    .from(documentVersions)
-    .where(inArray(documentVersions.documentId, documentIds))
-    .orderBy(desc(documentVersions.versionNumber));
-
-  const latestVersions = new Map<string, (typeof rows)[number]>();
-
-  for (const version of rows) {
-    if (!latestVersions.has(version.documentId)) {
-      latestVersions.set(version.documentId, version);
-    }
-  }
-
-  return latestVersions;
-}
diff --git a/src/server/foundation/context.ts b/src/server/foundation/context.ts
index 4c24fd6..cc9730a 100644
--- a/src/server/foundation/context.ts
+++ b/src/server/foundation/context.ts
@@ -1,8 +1,11 @@
 import { auth } from "@clerk/nextjs/server";
-import { and, eq, isNull } from "drizzle-orm";
 
-import { db, type User, users } from "@/db";
+import { db, type User } from "@/db";
 import { normalizeEmail } from "@/server/foundation/email";
+import {
+  findActiveUserByClerkId,
+  type UserLookupDb,
+} from "@/server/repositories/users/find-active-user-by-clerk-id";
 import { apiErrorResponse } from "@/server/foundation/responses";
 
 import { forbiddenError, unauthorizedError } from "./errors";
@@ -20,14 +23,6 @@ export type ApiContextResult =
   | { ok: true; ctx: ApiContext }
   | { ok: false; response: Response };
 
-type UserLookupDb = {
-  query: {
-    users: {
-      findFirst(args: unknown): Promise<User | undefined | null>;
-    };
-  };
-};
-
 export async function createApiContext(
   database: UserLookupDb = db as UserLookupDb,
   requestId = crypto.randomUUID(),
@@ -41,9 +36,7 @@ export async function createApiContext(
     };
   }
 
-  const user = await database.query.users.findFirst({
-    where: and(eq(users.clerkUserId, session.userId), isNull(users.deletedAt)),
-  });
+  const user = await findActiveUserByClerkId(database, session.userId);
 
   if (!user) {
     return {
diff --git a/src/server/foundation/email.test.ts b/src/server/foundation/email.test.ts
new file mode 100644
index 0000000..dc46183
--- /dev/null
+++ b/src/server/foundation/email.test.ts
@@ -0,0 +1,11 @@
+import { describe, expect, it } from "vitest";
+
+import { normalizeEmail } from "./email";
+
+describe("normalizeEmail", () => {
+  it("normalizes emails and treats blanks as null", () => {
+    expect(normalizeEmail(" Ada@Example.com ")).toBe("ada@example.com");
+    expect(normalizeEmail(" ")).toBeNull();
+    expect(normalizeEmail(null)).toBeNull();
+  });
+});
diff --git a/src/server/foundation/errors.test.ts b/src/server/foundation/errors.test.ts
new file mode 100644
index 0000000..af2a4f8
--- /dev/null
+++ b/src/server/foundation/errors.test.ts
@@ -0,0 +1,29 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  apiError,
+  conflictError,
+  forbiddenError,
+  internalError,
+  isApiError,
+  notFoundError,
+  unauthorizedError,
+  validationError,
+} from "./errors";
+
+describe("API errors", () => {
+  it("creates functional API error objects", () => {
+    expect(validationError()).toMatchObject({ status: 400, code: "validation_error" });
+    expect(unauthorizedError()).toMatchObject({ status: 401, code: "unauthorized" });
+    expect(forbiddenError()).toMatchObject({ status: 403, code: "forbidden" });
+    expect(notFoundError()).toMatchObject({ status: 404, code: "not_found" });
+    expect(conflictError()).toMatchObject({ status: 409, code: "conflict" });
+    expect(internalError()).toMatchObject({ status: 500, code: "internal_error" });
+  });
+
+  it("only accepts complete API error shapes", () => {
+    expect(isApiError(apiError(403, "forbidden", "Nope"))).toBe(true);
+    expect(isApiError({ kind: "api_error" })).toBe(false);
+    expect(isApiError(new Error("boom"))).toBe(false);
+  });
+});
diff --git a/src/server/foundation/errors.ts b/src/server/foundation/errors.ts
index f13724a..ca117e0 100644
--- a/src/server/foundation/errors.ts
+++ b/src/server/foundation/errors.ts
@@ -31,11 +31,17 @@ export function apiError(
 }
 
 export function isApiError(error: unknown): error is ApiError {
+  if (typeof error !== "object" || error === null) {
+    return false;
+  }
+
+  const candidate = error as Record<string, unknown>;
+
   return (
-    typeof error === "object" &&
-    error !== null &&
-    "kind" in error &&
-    error.kind === "api_error"
+    candidate.kind === "api_error" &&
+    typeof candidate.status === "number" &&
+    typeof candidate.code === "string" &&
+    typeof candidate.message === "string"
   );
 }
 
diff --git a/src/server/foundation/logs.test.ts b/src/server/foundation/logs.test.ts
new file mode 100644
index 0000000..e0638b5
--- /dev/null
+++ b/src/server/foundation/logs.test.ts
@@ -0,0 +1,37 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import { getErrorType, logApiRequest } from "./logs";
+
+describe("API logs", () => {
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  it("emits one structured event for an API request", () => {
+    const info = vi.spyOn(console, "info").mockImplementation(() => {});
+
+    logApiRequest({
+      requestId: "req_1",
+      method: "GET",
+      pathname: "/api/docs",
+      status: 200,
+      outcome: "success",
+      durationMs: 12,
+      userId: "user_1",
+    });
+
+    expect(info).toHaveBeenCalledWith(
+      expect.objectContaining({
+        event: "api_request",
+        service: "shareable-docs",
+        requestId: "req_1",
+        userId: "user_1",
+      }),
+    );
+  });
+
+  it("classifies thrown values for logs", () => {
+    expect(getErrorType(new TypeError("bad"))).toBe("TypeError");
+    expect(getErrorType("bad")).toBe("string");
+  });
+});
diff --git a/src/server/foundation/responses.test.ts b/src/server/foundation/responses.test.ts
new file mode 100644
index 0000000..ca56167
--- /dev/null
+++ b/src/server/foundation/responses.test.ts
@@ -0,0 +1,22 @@
+import { describe, expect, it } from "vitest";
+
+import { forbiddenError } from "./errors";
+import { apiErrorResponse, jsonResponse } from "./responses";
+
+describe("response helpers", () => {
+  it("creates JSON responses", async () => {
+    const response = jsonResponse({ ok: true }, { status: 201 });
+
+    expect(response.status).toBe(201);
+    await expect(response.json()).resolves.toEqual({ ok: true });
+  });
+
+  it("serializes API errors without leaking extra fields", async () => {
+    const response = apiErrorResponse(forbiddenError("Denied"));
+
+    expect(response.status).toBe(403);
+    await expect(response.json()).resolves.toEqual({
+      error: { code: "forbidden", message: "Denied" },
+    });
+  });
+});
diff --git a/src/server/foundation/ulid.test.ts b/src/server/foundation/ulid.test.ts
new file mode 100644
index 0000000..bfd7211
--- /dev/null
+++ b/src/server/foundation/ulid.test.ts
@@ -0,0 +1,15 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { createUlid } from "./ulid";
+
+describe("createUlid", () => {
+  it("creates a 26-character Crockford base32 id", () => {
+    vi.spyOn(crypto, "getRandomValues").mockImplementation((array) => {
+      const bytes = array as Uint8Array;
+      bytes.fill(1);
+      return array;
+    });
+
+    expect(createUlid(0)).toMatch(/^[0-9A-HJKMNP-TV-Z]{26}$/);
+  });
+});
diff --git a/src/repository/docs/ids.ts b/src/server/foundation/ulid.ts
similarity index 100%
rename from src/repository/docs/ids.ts
rename to src/server/foundation/ulid.ts
diff --git a/src/server/handlers/docs.test.ts b/src/server/handlers/docs.test.ts
index dc24749..cfdf7e2 100644
--- a/src/server/handlers/docs.test.ts
+++ b/src/server/handlers/docs.test.ts
@@ -27,23 +27,23 @@ vi.mock("@/server/foundation/logs", () => ({
   logApiRequest: vi.fn(),
 }));
 
-vi.mock("@/services/docs/create-document", () => ({
+vi.mock("@/server/services/docs/create-document", () => ({
   createDocument: serviceMocks.createDocument,
 }));
 
-vi.mock("@/services/docs/get-document", () => ({
+vi.mock("@/server/services/docs/get-document", () => ({
   getDocument: serviceMocks.getDocument,
 }));
 
-vi.mock("@/services/docs/list-documents", () => ({
+vi.mock("@/server/services/docs/list-documents", () => ({
   listDocuments: serviceMocks.listDocuments,
 }));
 
-vi.mock("@/services/docs/share-document", () => ({
+vi.mock("@/server/services/docs/share-document", () => ({
   shareDocument: serviceMocks.shareDocument,
 }));
 
-vi.mock("@/services/docs/update-document", () => ({
+vi.mock("@/server/services/docs/update-document", () => ({
   updateDocument: serviceMocks.updateDocument,
 }));
 
diff --git a/src/server/handlers/docs/create-document.test.ts b/src/server/handlers/docs/create-document.test.ts
new file mode 100644
index 0000000..bca6bb5
--- /dev/null
+++ b/src/server/handlers/docs/create-document.test.ts
@@ -0,0 +1,52 @@
+import { describe, expect, it, vi } from "vitest";
+
+const ctx = { db: {}, user: { id: "user_1" }, userEmail: "ada@example.com" };
+const service = vi.hoisted(() => ({ createDocument: vi.fn() }));
+
+vi.mock("@/server/services/docs/create-document", () => service);
+vi.mock("../api", async () => {
+  const actual = await vi.importActual<typeof import("../api")>("../api");
+  return {
+    ...actual,
+    withApiHandler:
+      (handler: (input: { request: Request; ctx: typeof ctx }) => Promise<Response>) =>
+      (request: Request) =>
+        handler({ request, ctx }),
+  };
+});
+
+describe("createDocumentHandler", () => {
+  it("creates a document from normalized request input", async () => {
+    const now = new Date("2026-06-12T00:00:00.000Z");
+    service.createDocument.mockResolvedValue({
+      document: {
+        id: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
+        ownerUserId: "user_1",
+        name: "Report",
+        description: null,
+        createdAt: now,
+        updatedAt: now,
+      },
+      version: { versionNumber: 1 },
+    });
+
+    const { createDocumentHandler } = await import("./create-document");
+    const response = await createDocumentHandler(
+      jsonRequest({ name: " Report ", description: " ", html: "<h1>Report</h1>" }),
+    );
+
+    expect(response.status).toBe(201);
+    expect(service.createDocument).toHaveBeenCalledWith(ctx, {
+      name: "Report",
+      description: null,
+      html: "<h1>Report</h1>",
+    });
+  });
+});
+
+function jsonRequest(body: unknown) {
+  return new Request("https://app.test/api/docs", {
+    method: "POST",
+    body: JSON.stringify(body),
+  });
+}
diff --git a/src/server/handlers/docs/create-document.ts b/src/server/handlers/docs/create-document.ts
index 5b3ea15..474b2d9 100644
--- a/src/server/handlers/docs/create-document.ts
+++ b/src/server/handlers/docs/create-document.ts
@@ -1,4 +1,4 @@
-import { createDocument } from "@/services/docs/create-document";
+import { createDocument } from "@/server/services/docs/create-document";
 import { createDocumentRequestSchema } from "@/types/docs";
 
 import {
diff --git a/src/server/handlers/docs/get-document.test.ts b/src/server/handlers/docs/get-document.test.ts
new file mode 100644
index 0000000..7037163
--- /dev/null
+++ b/src/server/handlers/docs/get-document.test.ts
@@ -0,0 +1,53 @@
+import { describe, expect, it, vi } from "vitest";
+
+const ctx = { db: {}, user: { id: "user_1" }, userEmail: "ada@example.com" };
+const service = vi.hoisted(() => ({ getDocument: vi.fn() }));
+
+vi.mock("@/server/services/docs/get-document", () => service);
+vi.mock("../api", async () => {
+  const actual = await vi.importActual<typeof import("../api")>("../api");
+  return {
+    ...actual,
+    withApiHandler:
+      (
+        handler: (input: {
+          request: Request;
+          ctx: typeof ctx;
+          params: { id: string };
+        }) => Promise<Response>,
+      ) =>
+      async (request: Request, routeContext: { params: Promise<{ id: string }> }) =>
+        handler({ request, ctx, params: await routeContext.params }),
+  };
+});
+
+describe("getDocumentHandler", () => {
+  it("passes route params and query to the service", async () => {
+    const now = new Date("2026-06-12T00:00:00.000Z");
+    service.getDocument.mockResolvedValue({
+      document: {
+        id: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
+        ownerUserId: "user_1",
+        name: "Report",
+        description: null,
+        createdAt: now,
+        updatedAt: now,
+      },
+      version: { versionNumber: 1, html: "<p>v1</p>", createdAt: now },
+      latestVersion: { versionNumber: 2 },
+    });
+
+    const { getDocumentHandler } = await import("./get-document");
+    const response = await getDocumentHandler(
+      new Request("https://app.test/api/docs/01HZXJK8JHX7QY9N7K6X8Y2W0A?version=1"),
+      { params: Promise.resolve({ id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" }) },
+    );
+
+    expect(response.status).toBe(200);
+    expect(service.getDocument).toHaveBeenCalledWith(
+      ctx,
+      { id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" },
+      { version: 1 },
+    );
+  });
+});
diff --git a/src/server/handlers/docs/get-document.ts b/src/server/handlers/docs/get-document.ts
index a47eb5d..c9e0069 100644
--- a/src/server/handlers/docs/get-document.ts
+++ b/src/server/handlers/docs/get-document.ts
@@ -1,4 +1,4 @@
-import { getDocument } from "@/services/docs/get-document";
+import { getDocument } from "@/server/services/docs/get-document";
 import { documentRouteParamsSchema, getDocumentQuerySchema } from "@/types/docs";
 
 import {
diff --git a/src/server/handlers/docs/list-documents.test.ts b/src/server/handlers/docs/list-documents.test.ts
new file mode 100644
index 0000000..72eed2e
--- /dev/null
+++ b/src/server/handlers/docs/list-documents.test.ts
@@ -0,0 +1,44 @@
+import { describe, expect, it, vi } from "vitest";
+
+const ctx = { db: {}, user: { id: "user_1" }, userEmail: "ada@example.com" };
+const service = vi.hoisted(() => ({ listDocuments: vi.fn() }));
+
+vi.mock("@/server/services/docs/list-documents", () => service);
+vi.mock("../api", async () => {
+  const actual = await vi.importActual<typeof import("../api")>("../api");
+  return {
+    ...actual,
+    withApiHandler:
+      (handler: (input: { request: Request; ctx: typeof ctx }) => Promise<Response>) =>
+      (request: Request) =>
+        handler({ request, ctx }),
+  };
+});
+
+describe("listDocumentsHandler", () => {
+  it("lists documents with the access filter", async () => {
+    const now = new Date("2026-06-12T00:00:00.000Z");
+    service.listDocuments.mockResolvedValue({
+      documents: [
+        {
+          id: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
+          ownerUserId: "user_1",
+          name: "Report",
+          description: null,
+          access: "owned",
+          latestVersion: { versionNumber: 1 },
+          createdAt: now,
+          updatedAt: now,
+        },
+      ],
+    });
+
+    const { listDocumentsHandler } = await import("./list-documents");
+    const response = await listDocumentsHandler(
+      new Request("https://app.test/api/docs?access=owned"),
+    );
+
+    expect(response.status).toBe(200);
+    expect(service.listDocuments).toHaveBeenCalledWith(ctx, { access: "owned" });
+  });
+});
diff --git a/src/server/handlers/docs/list-documents.ts b/src/server/handlers/docs/list-documents.ts
index 0f33d3a..552f106 100644
--- a/src/server/handlers/docs/list-documents.ts
+++ b/src/server/handlers/docs/list-documents.ts
@@ -1,4 +1,4 @@
-import { listDocuments } from "@/services/docs/list-documents";
+import { listDocuments } from "@/server/services/docs/list-documents";
 import { listDocumentsQuerySchema } from "@/types/docs";
 
 import {
diff --git a/src/server/handlers/docs/share-document.test.ts b/src/server/handlers/docs/share-document.test.ts
new file mode 100644
index 0000000..38a2ecd
--- /dev/null
+++ b/src/server/handlers/docs/share-document.test.ts
@@ -0,0 +1,51 @@
+import { describe, expect, it, vi } from "vitest";
+
+const ctx = { db: {}, user: { id: "user_1" }, userEmail: "ada@example.com" };
+const service = vi.hoisted(() => ({ shareDocument: vi.fn() }));
+
+vi.mock("@/server/services/docs/share-document", () => service);
+vi.mock("../api", async () => {
+  const actual = await vi.importActual<typeof import("../api")>("../api");
+  return {
+    ...actual,
+    withApiHandler:
+      (
+        handler: (input: {
+          request: Request;
+          ctx: typeof ctx;
+          params: { id: string };
+        }) => Promise<Response>,
+      ) =>
+      async (request: Request, routeContext: { params: Promise<{ id: string }> }) =>
+        handler({ request, ctx, params: await routeContext.params }),
+  };
+});
+
+describe("shareDocumentHandler", () => {
+  it("normalizes and dedupes share emails", async () => {
+    service.shareDocument.mockResolvedValue({
+      document: { id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" },
+      shares: [],
+    });
+
+    const { shareDocumentHandler } = await import("./share-document");
+    const response = await shareDocumentHandler(
+      jsonRequest({ emails: [" Reader@Example.com ", "reader@example.com"] }),
+      { params: Promise.resolve({ id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" }) },
+    );
+
+    expect(response.status).toBe(200);
+    expect(service.shareDocument).toHaveBeenCalledWith(
+      ctx,
+      { id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" },
+      { emails: ["reader@example.com"] },
+    );
+  });
+});
+
+function jsonRequest(body: unknown) {
+  return new Request("https://app.test/api/docs/share/01HZXJK8JHX7QY9N7K6X8Y2W0A", {
+    method: "POST",
+    body: JSON.stringify(body),
+  });
+}
diff --git a/src/server/handlers/docs/share-document.ts b/src/server/handlers/docs/share-document.ts
index 6e9274c..41a6204 100644
--- a/src/server/handlers/docs/share-document.ts
+++ b/src/server/handlers/docs/share-document.ts
@@ -1,4 +1,4 @@
-import { shareDocument } from "@/services/docs/share-document";
+import { shareDocument } from "@/server/services/docs/share-document";
 import { documentRouteParamsSchema, shareDocumentRequestSchema } from "@/types/docs";
 
 import {
diff --git a/src/server/handlers/docs/update-document.test.ts b/src/server/handlers/docs/update-document.test.ts
new file mode 100644
index 0000000..e6d3514
--- /dev/null
+++ b/src/server/handlers/docs/update-document.test.ts
@@ -0,0 +1,52 @@
+import { describe, expect, it, vi } from "vitest";
+
+const ctx = { db: {}, user: { id: "user_1" }, userEmail: "ada@example.com" };
+const service = vi.hoisted(() => ({ updateDocument: vi.fn() }));
+
+vi.mock("@/server/services/docs/update-document", () => service);
+vi.mock("../api", async () => {
+  const actual = await vi.importActual<typeof import("../api")>("../api");
+  return {
+    ...actual,
+    withApiHandler:
+      (
+        handler: (input: {
+          request: Request;
+          ctx: typeof ctx;
+          params: { id: string };
+        }) => Promise<Response>,
+      ) =>
+      async (request: Request, routeContext: { params: Promise<{ id: string }> }) =>
+        handler({ request, ctx, params: await routeContext.params }),
+  };
+});
+
+describe("updateDocumentHandler", () => {
+  it("creates a new document version", async () => {
+    const updatedAt = new Date("2026-06-12T00:00:00.000Z");
+    service.updateDocument.mockResolvedValue({
+      document: { id: "01HZXJK8JHX7QY9N7K6X8Y2W0A", updatedAt },
+      version: { versionNumber: 2 },
+    });
+
+    const { updateDocumentHandler } = await import("./update-document");
+    const response = await updateDocumentHandler(
+      jsonRequest({ html: "<p>v2</p>" }),
+      { params: Promise.resolve({ id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" }) },
+    );
+
+    expect(response.status).toBe(200);
+    expect(service.updateDocument).toHaveBeenCalledWith(
+      ctx,
+      { id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" },
+      { html: "<p>v2</p>" },
+    );
+  });
+});
+
+function jsonRequest(body: unknown) {
+  return new Request("https://app.test/api/docs/01HZXJK8JHX7QY9N7K6X8Y2W0A", {
+    method: "PUT",
+    body: JSON.stringify(body),
+  });
+}
diff --git a/src/server/handlers/docs/update-document.ts b/src/server/handlers/docs/update-document.ts
index f950dfb..3e1f4bd 100644
--- a/src/server/handlers/docs/update-document.ts
+++ b/src/server/handlers/docs/update-document.ts
@@ -1,4 +1,4 @@
-import { updateDocument } from "@/services/docs/update-document";
+import { updateDocument } from "@/server/services/docs/update-document";
 import { documentRouteParamsSchema, updateDocumentRequestSchema } from "@/types/docs";
 
 import {
diff --git a/src/server/handlers/error-code.test.ts b/src/server/handlers/error-code.test.ts
new file mode 100644
index 0000000..7df02d4
--- /dev/null
+++ b/src/server/handlers/error-code.test.ts
@@ -0,0 +1,13 @@
+import { describe, expect, it } from "vitest";
+
+import { readErrorCode } from "./error-code";
+
+describe("readErrorCode", () => {
+  it("reads error code from JSON responses and ignores invalid bodies", async () => {
+    await expect(
+      readErrorCode(Response.json({ error: { code: "forbidden" } })),
+    ).resolves.toBe("forbidden");
+
+    await expect(readErrorCode(new Response("not json"))).resolves.toBeUndefined();
+  });
+});
diff --git a/src/server/handlers/query.test.ts b/src/server/handlers/query.test.ts
new file mode 100644
index 0000000..0492ef1
--- /dev/null
+++ b/src/server/handlers/query.test.ts
@@ -0,0 +1,14 @@
+import { describe, expect, it } from "vitest";
+
+import { searchParamsToObject } from "./query";
+
+describe("searchParamsToObject", () => {
+  it("preserves duplicate query parameters", () => {
+    const params = new URLSearchParams("access=owned&access=shared&version=1");
+
+    expect(searchParamsToObject(params)).toEqual({
+      access: ["owned", "shared"],
+      version: "1",
+    });
+  });
+});
diff --git a/src/server/handlers/query.ts b/src/server/handlers/query.ts
index 447d50a..5488871 100644
--- a/src/server/handlers/query.ts
+++ b/src/server/handlers/query.ts
@@ -1,3 +1,19 @@
-export function searchParamsToObject(searchParams: URLSearchParams) {
-  return Object.fromEntries(searchParams.entries());
+export function searchParamsToObject(
+  searchParams: URLSearchParams,
+): Record<string, string | string[]> {
+  const output: Record<string, string | string[]> = {};
+
+  for (const [key, value] of searchParams.entries()) {
+    const existing = output[key];
+
+    if (existing === undefined) {
+      output[key] = value;
+    } else if (Array.isArray(existing)) {
+      existing.push(value);
+    } else {
+      output[key] = [existing, value];
+    }
+  }
+
+  return output;
 }
diff --git a/src/server/handlers/request-body.test.ts b/src/server/handlers/request-body.test.ts
new file mode 100644
index 0000000..f7f033d
--- /dev/null
+++ b/src/server/handlers/request-body.test.ts
@@ -0,0 +1,15 @@
+import { describe, expect, it } from "vitest";
+
+import { parseJsonBody } from "./request-body";
+
+describe("parseJsonBody", () => {
+  it("parses JSON and maps malformed bodies to validation errors", async () => {
+    await expect(
+      parseJsonBody(new Request("https://app.test", { method: "POST", body: "{\"ok\":true}" })),
+    ).resolves.toEqual({ ok: true });
+
+    await expect(
+      parseJsonBody(new Request("https://app.test", { method: "POST", body: "{" })),
+    ).rejects.toMatchObject({ status: 400, code: "validation_error" });
+  });
+});
diff --git a/src/server/handlers/request-id.test.ts b/src/server/handlers/request-id.test.ts
new file mode 100644
index 0000000..aa00c57
--- /dev/null
+++ b/src/server/handlers/request-id.test.ts
@@ -0,0 +1,14 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { getRequestId } from "./request-id";
+
+describe("getRequestId", () => {
+  it("prefers request id headers before generating a new id", () => {
+    expect(
+      getRequestId(new Request("https://app.test", { headers: { "x-request-id": "req_1" } })),
+    ).toBe("req_1");
+
+    vi.spyOn(crypto, "randomUUID").mockReturnValue("generated");
+    expect(getRequestId(new Request("https://app.test"))).toBe("generated");
+  });
+});
diff --git a/src/server/handlers/response.test.ts b/src/server/handlers/response.test.ts
new file mode 100644
index 0000000..a26fed3
--- /dev/null
+++ b/src/server/handlers/response.test.ts
@@ -0,0 +1,17 @@
+import { describe, expect, it } from "vitest";
+
+import { apiErrorResponse, jsonResponse } from "./response";
+
+describe("handler response exports", () => {
+  it("re-exports foundation response helpers", async () => {
+    await expect(jsonResponse({ ok: true }).json()).resolves.toEqual({ ok: true });
+    expect(
+      apiErrorResponse({
+        kind: "api_error",
+        status: 404,
+        code: "not_found",
+        message: "Missing",
+      }).status,
+    ).toBe(404);
+  });
+});
diff --git a/src/server/handlers/validation.test.ts b/src/server/handlers/validation.test.ts
new file mode 100644
index 0000000..0fad425
--- /dev/null
+++ b/src/server/handlers/validation.test.ts
@@ -0,0 +1,27 @@
+import { describe, expect, it } from "vitest";
+import { z } from "zod";
+
+import { parseWithSchema, toSafeZodDetails } from "./validation";
+
+describe("validation helpers", () => {
+  it("returns parsed values or throws sanitized details", () => {
+    expect(parseWithSchema(z.object({ name: z.string() }), { name: "Ada" })).toEqual({
+      name: "Ada",
+    });
+
+    expect(() =>
+      parseWithSchema(z.object({ name: z.string().min(1) }), { name: "" }),
+    ).toThrow(expect.objectContaining({ code: "validation_error" }));
+  });
+
+  it("converts zod issues into path and message only", () => {
+    const result = z.object({ name: z.string().min(1) }).safeParse({ name: "" });
+
+    expect(result.success).toBe(false);
+    if (!result.success) {
+      expect(toSafeZodDetails(result.error)).toEqual([
+        { path: ["name"], message: expect.any(String) },
+      ]);
+    }
+  });
+});
diff --git a/src/server/repositories/docs/add-version.test.ts b/src/server/repositories/docs/add-version.test.ts
new file mode 100644
index 0000000..d8f1918
--- /dev/null
+++ b/src/server/repositories/docs/add-version.test.ts
@@ -0,0 +1,28 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+import { addDocumentVersion } from "./add-version";
+
+describe("addDocumentVersion", () => {
+  it("returns null when the document does not exist", async () => {
+    const chain = {
+      from: vi.fn(() => chain),
+      where: vi.fn(() => chain),
+      for: vi.fn(() => chain),
+      limit: vi.fn(async () => []),
+    };
+    const tx = { select: vi.fn(() => chain) };
+    const db = {
+      transaction: vi.fn((callback) => callback(tx)),
+    } as unknown as DocumentsDatabase;
+
+    await expect(
+      addDocumentVersion(db, {
+        documentId: "doc_1",
+        html: "<p>v2</p>",
+        createdByUserId: "owner",
+      }),
+    ).resolves.toBeNull();
+  });
+});
diff --git a/src/repository/docs/add-version.ts b/src/server/repositories/docs/add-version.ts
similarity index 91%
rename from src/repository/docs/add-version.ts
rename to src/server/repositories/docs/add-version.ts
index ab84637..f7457ab 100644
--- a/src/repository/docs/add-version.ts
+++ b/src/server/repositories/docs/add-version.ts
@@ -1,10 +1,9 @@
 import { and, desc, eq, isNull } from "drizzle-orm";
 
 import { documentVersions, documents } from "@/db";
+import { createUlid } from "@/server/foundation/ulid";
 import { newDocumentVersionSchema } from "@/types/docs";
-
-import { createUlid } from "./ids";
-import type { AddVersionInput, DocumentsDatabase } from "./types";
+import type { AddVersionInput, DocumentsDatabase } from "@/types/docs-repository";
 
 export async function addDocumentVersion(
   db: DocumentsDatabase,
diff --git a/src/server/repositories/docs/create-document.test.ts b/src/server/repositories/docs/create-document.test.ts
new file mode 100644
index 0000000..ac12d4e
--- /dev/null
+++ b/src/server/repositories/docs/create-document.test.ts
@@ -0,0 +1,27 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+import { createDocumentRecord } from "./create-document";
+
+describe("createDocumentRecord", () => {
+  it("creates a document and its initial version in one transaction", async () => {
+    const values = vi.fn((value) => ({ returning: vi.fn(async () => [value]) }));
+    const tx = { insert: vi.fn(() => ({ values })) };
+    const db = {
+      transaction: vi.fn((callback) => callback(tx)),
+    } as unknown as DocumentsDatabase;
+
+    const result = await createDocumentRecord(db, {
+      document: { ownerUserId: "owner", name: "Doc", description: null },
+      version: { html: "<p>v1</p>", createdByUserId: "owner" },
+    });
+
+    expect(tx.insert).toHaveBeenCalledTimes(2);
+    expect(result.version).toMatchObject({
+      documentId: result.document.id,
+      versionNumber: 1,
+      html: "<p>v1</p>",
+    });
+  });
+});
diff --git a/src/repository/docs/create-document.ts b/src/server/repositories/docs/create-document.ts
similarity index 87%
rename from src/repository/docs/create-document.ts
rename to src/server/repositories/docs/create-document.ts
index 2d26976..160cf0f 100644
--- a/src/repository/docs/create-document.ts
+++ b/src/server/repositories/docs/create-document.ts
@@ -1,11 +1,10 @@
 import { documentVersions, documents } from "@/db";
+import { createUlid } from "@/server/foundation/ulid";
 import {
   newDocumentSchema,
   newDocumentVersionSchema,
 } from "@/types/docs";
-
-import { createUlid } from "./ids";
-import type { CreateDocumentInput, DocumentsDatabase } from "./types";
+import type { CreateDocumentInput, DocumentsDatabase } from "@/types/docs-repository";
 
 export async function createDocumentRecord(
   db: DocumentsDatabase,
diff --git a/src/server/repositories/docs/find-document-by-id.test.ts b/src/server/repositories/docs/find-document-by-id.test.ts
new file mode 100644
index 0000000..4efeb23
--- /dev/null
+++ b/src/server/repositories/docs/find-document-by-id.test.ts
@@ -0,0 +1,25 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+import { findDocumentById } from "./find-document-by-id";
+
+describe("findDocumentById", () => {
+  it("returns the first active document or null", async () => {
+    const document = { id: "doc_1" };
+    const chain = selectLimitChain([document]);
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+
+    await expect(findDocumentById(db, "doc_1")).resolves.toBe(document);
+    expect(chain.limit).toHaveBeenCalledWith(1);
+  });
+});
+
+function selectLimitChain(rows: unknown[]) {
+  const chain = {
+    from: vi.fn(() => chain),
+    where: vi.fn(() => chain),
+    limit: vi.fn(async () => rows),
+  };
+  return chain;
+}
diff --git a/src/repository/docs/find-document-by-id.ts b/src/server/repositories/docs/find-document-by-id.ts
similarity index 83%
rename from src/repository/docs/find-document-by-id.ts
rename to src/server/repositories/docs/find-document-by-id.ts
index 540c38c..5105311 100644
--- a/src/repository/docs/find-document-by-id.ts
+++ b/src/server/repositories/docs/find-document-by-id.ts
@@ -1,8 +1,7 @@
 import { and, eq, isNull } from "drizzle-orm";
 
 import { documents } from "@/db";
-
-import type { DocumentsDatabase } from "./types";
+import type { DocumentsDatabase } from "@/types/docs-repository";
 
 export async function findDocumentById(db: DocumentsDatabase, id: string) {
   const [document] = await db
diff --git a/src/server/repositories/docs/find-latest-version.test.ts b/src/server/repositories/docs/find-latest-version.test.ts
new file mode 100644
index 0000000..bdfe11c
--- /dev/null
+++ b/src/server/repositories/docs/find-latest-version.test.ts
@@ -0,0 +1,27 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+import { findLatestVersion } from "./find-latest-version";
+
+describe("findLatestVersion", () => {
+  it("returns the highest ordered version row or null", async () => {
+    const version = { id: "version_2", versionNumber: 2 };
+    const chain = selectOrderedLimitChain([version]);
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+
+    await expect(findLatestVersion(db, "doc_1")).resolves.toBe(version);
+    expect(chain.orderBy).toHaveBeenCalledTimes(1);
+    expect(chain.limit).toHaveBeenCalledWith(1);
+  });
+});
+
+function selectOrderedLimitChain(rows: unknown[]) {
+  const chain = {
+    from: vi.fn(() => chain),
+    where: vi.fn(() => chain),
+    orderBy: vi.fn(() => chain),
+    limit: vi.fn(async () => rows),
+  };
+  return chain;
+}
diff --git a/src/repository/docs/find-latest-version.ts b/src/server/repositories/docs/find-latest-version.ts
similarity index 85%
rename from src/repository/docs/find-latest-version.ts
rename to src/server/repositories/docs/find-latest-version.ts
index 177829a..4477cd6 100644
--- a/src/repository/docs/find-latest-version.ts
+++ b/src/server/repositories/docs/find-latest-version.ts
@@ -1,8 +1,7 @@
 import { desc, eq } from "drizzle-orm";
 
 import { documentVersions } from "@/db";
-
-import type { DocumentsDatabase } from "./types";
+import type { DocumentsDatabase } from "@/types/docs-repository";
 
 export async function findLatestVersion(
   db: DocumentsDatabase,
diff --git a/src/server/repositories/docs/find-latest-versions-for-documents.test.ts b/src/server/repositories/docs/find-latest-versions-for-documents.test.ts
new file mode 100644
index 0000000..0c40d32
--- /dev/null
+++ b/src/server/repositories/docs/find-latest-versions-for-documents.test.ts
@@ -0,0 +1,33 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+import { findLatestVersionsForDocuments } from "./find-latest-versions-for-documents";
+
+describe("findLatestVersionsForDocuments", () => {
+  it("returns an empty map without querying when no ids are provided", async () => {
+    const db = { select: vi.fn() } as unknown as DocumentsDatabase;
+
+    await expect(findLatestVersionsForDocuments(db, [])).resolves.toEqual(new Map());
+    expect(db.select).not.toHaveBeenCalled();
+  });
+
+  it("keeps the first ordered version per document", async () => {
+    const rows = [
+      { id: "v2", documentId: "doc_1", versionNumber: 2 },
+      { id: "v1", documentId: "doc_1", versionNumber: 1 },
+      { id: "other", documentId: "doc_2", versionNumber: 1 },
+    ];
+    const chain = {
+      from: vi.fn(() => chain),
+      where: vi.fn(() => chain),
+      orderBy: vi.fn(async () => rows),
+    };
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+
+    const latest = await findLatestVersionsForDocuments(db, ["doc_1", "doc_2"]);
+
+    expect(latest.get("doc_1")).toBe(rows[0]);
+    expect(latest.get("doc_2")).toBe(rows[2]);
+  });
+});
diff --git a/src/server/repositories/docs/find-latest-versions-for-documents.ts b/src/server/repositories/docs/find-latest-versions-for-documents.ts
new file mode 100644
index 0000000..2bd10bf
--- /dev/null
+++ b/src/server/repositories/docs/find-latest-versions-for-documents.ts
@@ -0,0 +1,29 @@
+import { desc, inArray } from "drizzle-orm";
+
+import { documentVersions } from "@/db";
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+export async function findLatestVersionsForDocuments(
+  db: DocumentsDatabase,
+  documentIds: string[],
+) {
+  if (documentIds.length === 0) {
+    return new Map();
+  }
+
+  const rows = await db
+    .select()
+    .from(documentVersions)
+    .where(inArray(documentVersions.documentId, documentIds))
+    .orderBy(desc(documentVersions.versionNumber));
+
+  const latestVersions = new Map<string, (typeof rows)[number]>();
+
+  for (const version of rows) {
+    if (!latestVersions.has(version.documentId)) {
+      latestVersions.set(version.documentId, version);
+    }
+  }
+
+  return latestVersions;
+}
diff --git a/src/server/repositories/docs/find-shared-document-ids.test.ts b/src/server/repositories/docs/find-shared-document-ids.test.ts
new file mode 100644
index 0000000..aaa3ec8
--- /dev/null
+++ b/src/server/repositories/docs/find-shared-document-ids.test.ts
@@ -0,0 +1,20 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+import { findSharedDocumentIds } from "./find-shared-document-ids";
+
+describe("findSharedDocumentIds", () => {
+  it("returns document ids shared with an email", async () => {
+    const chain = {
+      from: vi.fn(() => chain),
+      where: vi.fn(async () => [{ documentId: "doc_1" }, { documentId: "doc_2" }]),
+    };
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+
+    await expect(findSharedDocumentIds(db, "reader@example.com")).resolves.toEqual([
+      "doc_1",
+      "doc_2",
+    ]);
+  });
+});
diff --git a/src/server/repositories/docs/find-shared-document-ids.ts b/src/server/repositories/docs/find-shared-document-ids.ts
new file mode 100644
index 0000000..7f452ab
--- /dev/null
+++ b/src/server/repositories/docs/find-shared-document-ids.ts
@@ -0,0 +1,16 @@
+import { eq } from "drizzle-orm";
+
+import { documentShares } from "@/db";
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+export async function findSharedDocumentIds(
+  db: DocumentsDatabase,
+  email: string,
+) {
+  const rows = await db
+    .select({ documentId: documentShares.documentId })
+    .from(documentShares)
+    .where(eq(documentShares.sharedWithEmail, email));
+
+  return rows.map((row) => row.documentId);
+}
diff --git a/src/server/repositories/docs/find-version.test.ts b/src/server/repositories/docs/find-version.test.ts
new file mode 100644
index 0000000..98017a5
--- /dev/null
+++ b/src/server/repositories/docs/find-version.test.ts
@@ -0,0 +1,25 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+import { findVersion } from "./find-version";
+
+describe("findVersion", () => {
+  it("returns a specific version or null", async () => {
+    const version = { id: "version_1", versionNumber: 1 };
+    const chain = selectLimitChain([version]);
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+
+    await expect(findVersion(db, "doc_1", 1)).resolves.toBe(version);
+    expect(chain.limit).toHaveBeenCalledWith(1);
+  });
+});
+
+function selectLimitChain(rows: unknown[]) {
+  const chain = {
+    from: vi.fn(() => chain),
+    where: vi.fn(() => chain),
+    limit: vi.fn(async () => rows),
+  };
+  return chain;
+}
diff --git a/src/repository/docs/find-version.ts b/src/server/repositories/docs/find-version.ts
similarity index 87%
rename from src/repository/docs/find-version.ts
rename to src/server/repositories/docs/find-version.ts
index d71b011..2b545b0 100644
--- a/src/repository/docs/find-version.ts
+++ b/src/server/repositories/docs/find-version.ts
@@ -1,8 +1,7 @@
 import { and, eq } from "drizzle-orm";
 
 import { documentVersions } from "@/db";
-
-import type { DocumentsDatabase } from "./types";
+import type { DocumentsDatabase } from "@/types/docs-repository";
 
 export async function findVersion(
   db: DocumentsDatabase,
diff --git a/src/server/repositories/docs/is-shared-with-email.test.ts b/src/server/repositories/docs/is-shared-with-email.test.ts
new file mode 100644
index 0000000..90151da
--- /dev/null
+++ b/src/server/repositories/docs/is-shared-with-email.test.ts
@@ -0,0 +1,23 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+import { isSharedWithEmail } from "./is-shared-with-email";
+
+describe("isSharedWithEmail", () => {
+  it("returns whether a share row exists", async () => {
+    const chain = selectLimitChain([{ id: "share_1" }]);
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+
+    await expect(isSharedWithEmail(db, "doc_1", "reader@example.com")).resolves.toBe(true);
+  });
+});
+
+function selectLimitChain(rows: unknown[]) {
+  const chain = {
+    from: vi.fn(() => chain),
+    where: vi.fn(() => chain),
+    limit: vi.fn(async () => rows),
+  };
+  return chain;
+}
diff --git a/src/repository/docs/is-shared-with-email.ts b/src/server/repositories/docs/is-shared-with-email.ts
similarity index 87%
rename from src/repository/docs/is-shared-with-email.ts
rename to src/server/repositories/docs/is-shared-with-email.ts
index 7b3c01a..993ee7a 100644
--- a/src/repository/docs/is-shared-with-email.ts
+++ b/src/server/repositories/docs/is-shared-with-email.ts
@@ -1,8 +1,7 @@
 import { and, eq } from "drizzle-orm";
 
 import { documentShares } from "@/db";
-
-import type { DocumentsDatabase } from "./types";
+import type { DocumentsDatabase } from "@/types/docs-repository";
 
 export async function isSharedWithEmail(
   db: DocumentsDatabase,
diff --git a/src/server/repositories/docs/list-documents.test.ts b/src/server/repositories/docs/list-documents.test.ts
new file mode 100644
index 0000000..c429a34
--- /dev/null
+++ b/src/server/repositories/docs/list-documents.test.ts
@@ -0,0 +1,45 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+const helpers = vi.hoisted(() => ({
+  findLatestVersionsForDocuments: vi.fn(),
+  findSharedDocumentIds: vi.fn(),
+}));
+
+vi.mock("./find-latest-versions-for-documents", () => ({
+  findLatestVersionsForDocuments: helpers.findLatestVersionsForDocuments,
+}));
+vi.mock("./find-shared-document-ids", () => ({
+  findSharedDocumentIds: helpers.findSharedDocumentIds,
+}));
+
+describe("listAccessibleDocuments", () => {
+  it("lists accessible documents with latest versions", async () => {
+    const document = {
+      id: "doc_1",
+      ownerUserId: "owner",
+      updatedAt: new Date("2026-06-12T00:00:00.000Z"),
+    };
+    const version = { documentId: "doc_1", versionNumber: 1 };
+    const chain = {
+      from: vi.fn(() => chain),
+      where: vi.fn(() => chain),
+      orderBy: vi.fn(async () => [document]),
+    };
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+    helpers.findSharedDocumentIds.mockResolvedValue(["doc_2"]);
+    helpers.findLatestVersionsForDocuments.mockResolvedValue(
+      new Map([["doc_1", version]]),
+    );
+
+    const { listAccessibleDocuments } = await import("./list-documents");
+    const result = await listAccessibleDocuments(db, {
+      ownerUserId: "owner",
+      sharedWithEmail: "owner@example.com",
+      access: "all",
+    });
+
+    expect(result).toEqual([{ ...document, access: "owned", latestVersion: version }]);
+  });
+});
diff --git a/src/server/repositories/docs/list-documents.ts b/src/server/repositories/docs/list-documents.ts
new file mode 100644
index 0000000..951396d
--- /dev/null
+++ b/src/server/repositories/docs/list-documents.ts
@@ -0,0 +1,66 @@
+import { and, desc, eq, inArray, isNull, or } from "drizzle-orm";
+
+import { documents } from "@/db";
+import type {
+  DocumentListItem,
+  DocumentsDatabase,
+  ListDocumentsInput,
+} from "@/types/docs-repository";
+
+import { findLatestVersionsForDocuments } from "./find-latest-versions-for-documents";
+import { findSharedDocumentIds } from "./find-shared-document-ids";
+
+export async function listAccessibleDocuments(
+  db: DocumentsDatabase,
+  input: ListDocumentsInput,
+): Promise<DocumentListItem[]> {
+  const ownedCondition = eq(documents.ownerUserId, input.ownerUserId);
+  const sharedDocumentIds =
+    input.sharedWithEmail === null
+      ? []
+      : await findSharedDocumentIds(db, input.sharedWithEmail);
+
+  let accessCondition;
+
+  if (input.access === "owned") {
+    accessCondition = ownedCondition;
+  } else if (input.access === "shared") {
+    accessCondition =
+      sharedDocumentIds.length === 0
+        ? undefined
+        : inArray(documents.id, sharedDocumentIds);
+  } else if (sharedDocumentIds.length === 0) {
+    accessCondition = ownedCondition;
+  } else {
+    accessCondition = or(ownedCondition, inArray(documents.id, sharedDocumentIds));
+  }
+
+  if (!accessCondition) {
+    return [];
+  }
+
+  const rows = await db
+    .select()
+    .from(documents)
+    .where(and(isNull(documents.deletedAt), accessCondition))
+    .orderBy(desc(documents.updatedAt));
+
+  const latestVersions = await findLatestVersionsForDocuments(
+    db,
+    rows.map((document) => document.id),
+  );
+
+  return rows.flatMap((document) => {
+    const latestVersion = latestVersions.get(document.id);
+
+    if (!latestVersion) {
+      return [];
+    }
+
+    return {
+      ...document,
+      access: document.ownerUserId === input.ownerUserId ? "owned" : "shared",
+      latestVersion,
+    };
+  });
+}
diff --git a/src/server/repositories/docs/upsert-shares.test.ts b/src/server/repositories/docs/upsert-shares.test.ts
new file mode 100644
index 0000000..faa4e7c
--- /dev/null
+++ b/src/server/repositories/docs/upsert-shares.test.ts
@@ -0,0 +1,28 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { DocumentsDatabase } from "@/types/docs-repository";
+
+import { upsertDocumentShares } from "./upsert-shares";
+
+describe("upsertDocumentShares", () => {
+  it("returns current shares without inserting when there are no new emails", async () => {
+    const shares = [{ sharedWithEmail: "reader@example.com" }];
+    const chain = {
+      from: vi.fn(() => chain),
+      where: vi.fn(async () => shares),
+    };
+    const db = {
+      insert: vi.fn(),
+      select: vi.fn(() => chain),
+    } as unknown as DocumentsDatabase;
+
+    await expect(
+      upsertDocumentShares(db, {
+        documentId: "doc_1",
+        emails: [],
+        sharedByUserId: "owner",
+      }),
+    ).resolves.toBe(shares);
+    expect(db.insert).not.toHaveBeenCalled();
+  });
+});
diff --git a/src/repository/docs/upsert-shares.ts b/src/server/repositories/docs/upsert-shares.ts
similarity index 92%
rename from src/repository/docs/upsert-shares.ts
rename to src/server/repositories/docs/upsert-shares.ts
index 4c089c7..4ccf343 100644
--- a/src/repository/docs/upsert-shares.ts
+++ b/src/server/repositories/docs/upsert-shares.ts
@@ -1,14 +1,13 @@
 import { eq } from "drizzle-orm";
 
 import { documentShares, type NewDocumentShare } from "@/db";
+import { createUlid } from "@/server/foundation/ulid";
 import { newDocumentShareSchema } from "@/types/docs";
-
-import { createUlid } from "./ids";
 import type {
   DocumentsDatabase,
   ShareDocumentInput,
   ShareDocumentResult,
-} from "./types";
+} from "@/types/docs-repository";
 
 export async function upsertDocumentShares(
   db: DocumentsDatabase,
diff --git a/src/server/repositories/users/find-active-user-by-clerk-id.test.ts b/src/server/repositories/users/find-active-user-by-clerk-id.test.ts
new file mode 100644
index 0000000..b4991b1
--- /dev/null
+++ b/src/server/repositories/users/find-active-user-by-clerk-id.test.ts
@@ -0,0 +1,19 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { findActiveUserByClerkId, type UserLookupDb } from "./find-active-user-by-clerk-id";
+
+describe("findActiveUserByClerkId", () => {
+  it("returns the active user for a Clerk id", async () => {
+    const user = { id: "user_1" };
+    const db = {
+      query: {
+        users: {
+          findFirst: vi.fn(async () => user),
+        },
+      },
+    } as unknown as UserLookupDb;
+
+    await expect(findActiveUserByClerkId(db, "clerk_1")).resolves.toBe(user);
+    expect(db.query.users.findFirst).toHaveBeenCalledTimes(1);
+  });
+});
diff --git a/src/server/repositories/users/find-active-user-by-clerk-id.ts b/src/server/repositories/users/find-active-user-by-clerk-id.ts
new file mode 100644
index 0000000..87fae9e
--- /dev/null
+++ b/src/server/repositories/users/find-active-user-by-clerk-id.ts
@@ -0,0 +1,20 @@
+import { and, eq, isNull } from "drizzle-orm";
+
+import { users, type User } from "@/db";
+
+export type UserLookupDb = {
+  query: {
+    users: {
+      findFirst(args: unknown): Promise<User | undefined | null>;
+    };
+  };
+};
+
+export async function findActiveUserByClerkId(
+  db: UserLookupDb,
+  clerkUserId: string,
+) {
+  return db.query.users.findFirst({
+    where: and(eq(users.clerkUserId, clerkUserId), isNull(users.deletedAt)),
+  });
+}
diff --git a/src/services/docs/create-document.test.ts b/src/server/services/docs/create-document.test.ts
similarity index 93%
rename from src/services/docs/create-document.test.ts
rename to src/server/services/docs/create-document.test.ts
index cab2d4f..9f5b73a 100644
--- a/src/services/docs/create-document.test.ts
+++ b/src/server/services/docs/create-document.test.ts
@@ -6,7 +6,7 @@ const repository = vi.hoisted(() => ({
   createDocumentRecord: vi.fn(),
 }));
 
-vi.mock("@/repository/docs/create-document", () => repository);
+vi.mock("@/server/repositories/docs/create-document", () => repository);
 
 describe("createDocument", () => {
   it("creates a document with an initial version owned by the current user", async () => {
diff --git a/src/services/docs/create-document.ts b/src/server/services/docs/create-document.ts
similarity index 84%
rename from src/services/docs/create-document.ts
rename to src/server/services/docs/create-document.ts
index 1eb518f..3a2053f 100644
--- a/src/services/docs/create-document.ts
+++ b/src/server/services/docs/create-document.ts
@@ -1,4 +1,4 @@
-import { createDocumentRecord } from "@/repository/docs/create-document";
+import { createDocumentRecord } from "@/server/repositories/docs/create-document";
 import type { ApiContext } from "@/server/foundation/context";
 import type { CreateDocumentRequest } from "@/types/docs";
 
diff --git a/src/server/services/docs/db-errors.test.ts b/src/server/services/docs/db-errors.test.ts
new file mode 100644
index 0000000..7b6de70
--- /dev/null
+++ b/src/server/services/docs/db-errors.test.ts
@@ -0,0 +1,11 @@
+import { describe, expect, it } from "vitest";
+
+import { isUniqueViolation } from "./db-errors";
+
+describe("isUniqueViolation", () => {
+  it("detects Postgres unique violation errors", () => {
+    expect(isUniqueViolation({ code: "23505" })).toBe(true);
+    expect(isUniqueViolation({ code: "23503" })).toBe(false);
+    expect(isUniqueViolation(new Error("duplicate"))).toBe(false);
+  });
+});
diff --git a/src/services/docs/db-errors.ts b/src/server/services/docs/db-errors.ts
similarity index 100%
rename from src/services/docs/db-errors.ts
rename to src/server/services/docs/db-errors.ts
diff --git a/src/services/docs/get-document.test.ts b/src/server/services/docs/get-document.test.ts
similarity index 90%
rename from src/services/docs/get-document.test.ts
rename to src/server/services/docs/get-document.test.ts
index 93ff514..1268abb 100644
--- a/src/services/docs/get-document.test.ts
+++ b/src/server/services/docs/get-document.test.ts
@@ -9,16 +9,16 @@ const repository = vi.hoisted(() => ({
   isSharedWithEmail: vi.fn(),
 }));
 
-vi.mock("@/repository/docs/find-document-by-id", () => ({
+vi.mock("@/server/repositories/docs/find-document-by-id", () => ({
   findDocumentById: repository.findDocumentById,
 }));
-vi.mock("@/repository/docs/find-latest-version", () => ({
+vi.mock("@/server/repositories/docs/find-latest-version", () => ({
   findLatestVersion: repository.findLatestVersion,
 }));
-vi.mock("@/repository/docs/find-version", () => ({
+vi.mock("@/server/repositories/docs/find-version", () => ({
   findVersion: repository.findVersion,
 }));
-vi.mock("@/repository/docs/is-shared-with-email", () => ({
+vi.mock("@/server/repositories/docs/is-shared-with-email", () => ({
   isSharedWithEmail: repository.isSharedWithEmail,
 }));
 
diff --git a/src/services/docs/get-document.ts b/src/server/services/docs/get-document.ts
similarity index 81%
rename from src/services/docs/get-document.ts
rename to src/server/services/docs/get-document.ts
index 9a6782a..98e9cf6 100644
--- a/src/services/docs/get-document.ts
+++ b/src/server/services/docs/get-document.ts
@@ -1,6 +1,6 @@
-import { findDocumentById } from "@/repository/docs/find-document-by-id";
-import { findLatestVersion } from "@/repository/docs/find-latest-version";
-import { findVersion } from "@/repository/docs/find-version";
+import { findDocumentById } from "@/server/repositories/docs/find-document-by-id";
+import { findLatestVersion } from "@/server/repositories/docs/find-latest-version";
+import { findVersion } from "@/server/repositories/docs/find-version";
 import type { ApiContext } from "@/server/foundation/context";
 import { forbiddenError, notFoundError } from "@/server/foundation/errors";
 import type { DocumentRouteParams, GetDocumentQuery } from "@/types/docs";
diff --git a/src/services/docs/list-documents.test.ts b/src/server/services/docs/list-documents.test.ts
similarity index 95%
rename from src/services/docs/list-documents.test.ts
rename to src/server/services/docs/list-documents.test.ts
index 784b1fc..dd53222 100644
--- a/src/services/docs/list-documents.test.ts
+++ b/src/server/services/docs/list-documents.test.ts
@@ -6,7 +6,7 @@ const repository = vi.hoisted(() => ({
   listAccessibleDocuments: vi.fn(),
 }));
 
-vi.mock("@/repository/docs/list-documents", () => repository);
+vi.mock("@/server/repositories/docs/list-documents", () => repository);
 
 describe("listDocuments", () => {
   it("lists documents with the requested access filter", async () => {
diff --git a/src/services/docs/list-documents.ts b/src/server/services/docs/list-documents.ts
similarity index 82%
rename from src/services/docs/list-documents.ts
rename to src/server/services/docs/list-documents.ts
index bcf682b..9e74bc5 100644
--- a/src/services/docs/list-documents.ts
+++ b/src/server/services/docs/list-documents.ts
@@ -1,4 +1,4 @@
-import { listAccessibleDocuments } from "@/repository/docs/list-documents";
+import { listAccessibleDocuments } from "@/server/repositories/docs/list-documents";
 import type { ApiContext } from "@/server/foundation/context";
 import type { ListDocumentsQuery } from "@/types/docs";
 
diff --git a/src/server/services/docs/resolve-access.test.ts b/src/server/services/docs/resolve-access.test.ts
new file mode 100644
index 0000000..742a55d
--- /dev/null
+++ b/src/server/services/docs/resolve-access.test.ts
@@ -0,0 +1,30 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { apiContext, document } from "./test-helpers";
+
+const repository = vi.hoisted(() => ({
+  isSharedWithEmail: vi.fn(),
+}));
+
+vi.mock("@/server/repositories/docs/is-shared-with-email", () => repository);
+
+describe("resolveDocumentAccess", () => {
+  it("resolves owner access without checking shares", async () => {
+    const { resolveDocumentAccess } = await import("./resolve-access");
+
+    await expect(resolveDocumentAccess(apiContext("owner"), document())).resolves.toBe("owned");
+    expect(repository.isSharedWithEmail).not.toHaveBeenCalled();
+  });
+
+  it("resolves shared access by normalized context email", async () => {
+    repository.isSharedWithEmail.mockResolvedValue(true);
+    const { resolveDocumentAccess } = await import("./resolve-access");
+
+    await expect(
+      resolveDocumentAccess(
+        apiContext("reader", "reader@example.com"),
+        document({ ownerUserId: "owner" }),
+      ),
+    ).resolves.toBe("shared");
+  });
+});
diff --git a/src/services/docs/resolve-access.ts b/src/server/services/docs/resolve-access.ts
similarity index 74%
rename from src/services/docs/resolve-access.ts
rename to src/server/services/docs/resolve-access.ts
index 1f5d126..deb3637 100644
--- a/src/services/docs/resolve-access.ts
+++ b/src/server/services/docs/resolve-access.ts
@@ -1,6 +1,6 @@
-import { isSharedWithEmail } from "@/repository/docs/is-shared-with-email";
-import type { DocumentAccess } from "@/repository/docs/types";
+import { isSharedWithEmail } from "@/server/repositories/docs/is-shared-with-email";
 import type { ApiContext } from "@/server/foundation/context";
+import type { DocumentAccess } from "@/types/docs-repository";
 
 export async function resolveDocumentAccess(
   ctx: ApiContext,
diff --git a/src/services/docs/share-document.test.ts b/src/server/services/docs/share-document.test.ts
similarity index 90%
rename from src/services/docs/share-document.test.ts
rename to src/server/services/docs/share-document.test.ts
index 465d01a..50e6909 100644
--- a/src/services/docs/share-document.test.ts
+++ b/src/server/services/docs/share-document.test.ts
@@ -8,13 +8,13 @@ const repository = vi.hoisted(() => ({
   upsertDocumentShares: vi.fn(),
 }));
 
-vi.mock("@/repository/docs/find-document-by-id", () => ({
+vi.mock("@/server/repositories/docs/find-document-by-id", () => ({
   findDocumentById: repository.findDocumentById,
 }));
-vi.mock("@/repository/docs/is-shared-with-email", () => ({
+vi.mock("@/server/repositories/docs/is-shared-with-email", () => ({
   isSharedWithEmail: repository.isSharedWithEmail,
 }));
-vi.mock("@/repository/docs/upsert-shares", () => ({
+vi.mock("@/server/repositories/docs/upsert-shares", () => ({
   upsertDocumentShares: repository.upsertDocumentShares,
 }));
 
diff --git a/src/services/docs/share-document.ts b/src/server/services/docs/share-document.ts
similarity index 83%
rename from src/services/docs/share-document.ts
rename to src/server/services/docs/share-document.ts
index 91a1ab1..664eb35 100644
--- a/src/services/docs/share-document.ts
+++ b/src/server/services/docs/share-document.ts
@@ -1,5 +1,5 @@
-import { findDocumentById } from "@/repository/docs/find-document-by-id";
-import { upsertDocumentShares } from "@/repository/docs/upsert-shares";
+import { findDocumentById } from "@/server/repositories/docs/find-document-by-id";
+import { upsertDocumentShares } from "@/server/repositories/docs/upsert-shares";
 import type { ApiContext } from "@/server/foundation/context";
 import { forbiddenError, notFoundError } from "@/server/foundation/errors";
 import type { DocumentRouteParams, ShareDocumentRequest } from "@/types/docs";
diff --git a/src/services/docs/test-helpers.ts b/src/server/services/docs/test-helpers.ts
similarity index 100%
rename from src/services/docs/test-helpers.ts
rename to src/server/services/docs/test-helpers.ts
diff --git a/src/services/docs/update-document.test.ts b/src/server/services/docs/update-document.test.ts
similarity index 94%
rename from src/services/docs/update-document.test.ts
rename to src/server/services/docs/update-document.test.ts
index 92e5204..9d7cf7e 100644
--- a/src/services/docs/update-document.test.ts
+++ b/src/server/services/docs/update-document.test.ts
@@ -7,10 +7,10 @@ const repository = vi.hoisted(() => ({
   findDocumentById: vi.fn(),
 }));
 
-vi.mock("@/repository/docs/add-version", () => ({
+vi.mock("@/server/repositories/docs/add-version", () => ({
   addDocumentVersion: repository.addDocumentVersion,
 }));
-vi.mock("@/repository/docs/find-document-by-id", () => ({
+vi.mock("@/server/repositories/docs/find-document-by-id", () => ({
   findDocumentById: repository.findDocumentById,
 }));
 
diff --git a/src/services/docs/update-document.ts b/src/server/services/docs/update-document.ts
similarity index 88%
rename from src/services/docs/update-document.ts
rename to src/server/services/docs/update-document.ts
index fd99fd9..a79b58a 100644
--- a/src/services/docs/update-document.ts
+++ b/src/server/services/docs/update-document.ts
@@ -1,5 +1,5 @@
-import { addDocumentVersion } from "@/repository/docs/add-version";
-import { findDocumentById } from "@/repository/docs/find-document-by-id";
+import { addDocumentVersion } from "@/server/repositories/docs/add-version";
+import { findDocumentById } from "@/server/repositories/docs/find-document-by-id";
 import type { ApiContext } from "@/server/foundation/context";
 import {
   conflictError,
diff --git a/src/repository/docs/types.ts b/src/types/docs-repository.ts
similarity index 100%
rename from src/repository/docs/types.ts
rename to src/types/docs-repository.ts

From ac05d6ac3f990b2a26a894df94862eb7b1a9c587 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Tue, 16 Jun 2026 18:26:36 -0300
Subject: [PATCH 17/26] refactor: resolve remaining docs api review comments

---
 .../plans/2026-06-12-docs-api-endpoints.md    | 22 +++---
 .../2026-06-12-docs-api-versioning-design.md  | 42 +++++------
 src/server/foundation/context.test.ts         |  4 +-
 src/server/foundation/context.ts              |  6 +-
 src/server/foundation/errors.test.ts          |  2 +-
 src/server/foundation/errors.ts               |  2 +-
 .../helpers}/db-errors.test.ts                |  0
 .../docs => foundation/helpers}/db-errors.ts  |  4 +-
 .../foundation/{ => helpers}/email.test.ts    |  0
 src/server/foundation/{ => helpers}/email.ts  |  0
 .../helpers/parse-json-body.test.ts}          |  4 +-
 .../helpers/parse-json-body.ts}               |  0
 .../helpers/read-error-code.test.ts}          |  2 +-
 .../helpers/read-error-code.ts}               |  0
 .../helpers}/request-id.test.ts               |  9 ++-
 .../helpers}/request-id.ts                    |  0
 .../helpers/resolve-document-access.test.ts}  | 18 ++++-
 .../helpers/resolve-document-access.ts}       | 10 ++-
 .../helpers/search-params.test.ts}            |  2 +-
 .../helpers/search-params.ts}                 |  0
 .../helpers}/validation.test.ts               |  0
 .../helpers}/validation.ts                    |  0
 src/server/foundation/logs.test.ts            |  9 ++-
 src/server/foundation/logs.ts                 | 60 ++++++++++++---
 src/server/foundation/ulid.test.ts            |  4 +-
 src/server/handlers/api.test.ts               | 26 -------
 src/server/handlers/api.ts                    | 14 +---
 src/server/handlers/docs.ts                   |  5 --
 src/server/handlers/docs/create-document.ts   | 10 +--
 src/server/handlers/docs/get-document.ts      | 10 +--
 .../{docs.test.ts => docs/index.test.ts}      | 12 +--
 src/server/handlers/docs/index.ts             |  5 ++
 .../handlers/docs/list-documents.test.ts      | 14 ++++
 src/server/handlers/docs/list-documents.ts    | 10 +--
 src/server/handlers/docs/share-document.ts    | 10 +--
 .../handlers/docs/update-document.test.ts     |  6 ++
 src/server/handlers/docs/update-document.ts   | 10 +--
 src/server/handlers/response.test.ts          | 17 -----
 src/server/handlers/response.ts               |  1 -
 .../docs/find-document-by-id.test.ts          |  7 ++
 .../docs/find-latest-version.test.ts          |  8 ++
 ...find-latest-versions-for-documents.test.ts | 32 +++++---
 .../find-latest-versions-for-documents.ts     | 29 ++++++--
 .../docs/find-shared-document-ids.test.ts     | 10 ++-
 .../docs/find-shared-document-ids.ts          |  8 +-
 .../repositories/docs/find-version.test.ts    |  7 ++
 .../docs/is-shared-with-email.test.ts         |  7 ++
 .../repositories/docs/list-documents.test.ts  | 73 ++++++++++++++++++-
 .../repositories/docs/list-documents.ts       |  3 +-
 src/server/services/docs/get-document.ts      |  3 +-
 .../services/docs/share-document.test.ts      | 23 +++---
 src/server/services/docs/share-document.ts    |  7 +-
 src/server/services/docs/update-document.ts   |  3 +-
 .../types.ts => types/api-handler.ts}         |  0
 54 files changed, 368 insertions(+), 202 deletions(-)
 rename src/server/{services/docs => foundation/helpers}/db-errors.test.ts (100%)
 rename src/server/{services/docs => foundation/helpers}/db-errors.ts (61%)
 rename src/server/foundation/{ => helpers}/email.test.ts (100%)
 rename src/server/foundation/{ => helpers}/email.ts (100%)
 rename src/server/{handlers/request-body.test.ts => foundation/helpers/parse-json-body.test.ts} (79%)
 rename src/server/{handlers/request-body.ts => foundation/helpers/parse-json-body.ts} (100%)
 rename src/server/{handlers/error-code.test.ts => foundation/helpers/read-error-code.test.ts} (88%)
 rename src/server/{handlers/error-code.ts => foundation/helpers/read-error-code.ts} (100%)
 rename src/server/{handlers => foundation/helpers}/request-id.test.ts (50%)
 rename src/server/{handlers => foundation/helpers}/request-id.ts (100%)
 rename src/server/{services/docs/resolve-access.test.ts => foundation/helpers/resolve-document-access.test.ts} (55%)
 rename src/server/{services/docs/resolve-access.ts => foundation/helpers/resolve-document-access.ts} (74%)
 rename src/server/{handlers/query.test.ts => foundation/helpers/search-params.test.ts} (86%)
 rename src/server/{handlers/query.ts => foundation/helpers/search-params.ts} (100%)
 rename src/server/{handlers => foundation/helpers}/validation.test.ts (100%)
 rename src/server/{handlers => foundation/helpers}/validation.ts (100%)
 delete mode 100644 src/server/handlers/docs.ts
 rename src/server/handlers/{docs.test.ts => docs/index.test.ts} (94%)
 create mode 100644 src/server/handlers/docs/index.ts
 delete mode 100644 src/server/handlers/response.test.ts
 delete mode 100644 src/server/handlers/response.ts
 rename src/{server/handlers/types.ts => types/api-handler.ts} (100%)

diff --git a/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md b/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md
index 8b33a2a..a78f894 100644
--- a/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md
+++ b/docs/superpowers/plans/2026-06-12-docs-api-endpoints.md
@@ -4,7 +4,7 @@
 
 **Goal:** Build versioned HTML document APIs with shared endpoint foundation, authenticated API context, Drizzle persistence, Zod contracts, and tests.
 
-**Architecture:** Next.js `src/app/api/**/route.ts` files stay thin and delegate to HTTP handlers in `src/server/handlers/docs.ts`. Generic API infrastructure lives in `src/server/foundation` and `src/server/handlers/api.ts`; business rules live in `src/server/services/docs`; Drizzle queries live in `src/server/repositories/docs`; Zod contracts and shared document types live in `src/types/docs.ts`.
+**Architecture:** Next.js `src/app/api/**/route.ts` files stay thin and delegate to HTTP handlers in `src/server/handlers/docs/index.ts`. Generic API infrastructure lives in `src/server/foundation` and `src/server/handlers/api.ts`; business rules live in `src/server/services/docs`; Drizzle queries live in `src/server/repositories/docs`; Zod contracts and shared document types live in `src/types/docs.ts`.
 
 **Tech Stack:** Next.js 16 Route Handlers, Clerk, Drizzle ORM, Postgres, Zod 4, Vitest, Bun.
 
@@ -157,13 +157,13 @@ Write tests that prove:
 ```ts
 // context.test.ts
 // - unauthenticated Clerk auth returns a 401 Response
-// - authenticated Clerk user without local active row returns a 403 Response
+// - authenticated Clerk user without local active row returns a 409 Response
 // - active local user returns ctx.user, ctx.userEmail, and ctx.db
 
 // api.test.ts
 // - withApiHandler converts API error objects into the expected JSON error response
 // - withApiHandler converts unexpected errors into generic 500 JSON
-// - parseJsonBody returns validation_error for malformed JSON
+// - parseJsonBody returns 422 validation_error for malformed JSON
 // - parseWithSchema does not include submitted HTML in validation details
 ```
 
@@ -190,7 +190,7 @@ export type ApiError = {
 };
 ```
 
-Add helper constructors for validation, unauthorized, forbidden, not found, conflict, and internal errors. Implement `logs.ts` as a thin wrapper around `console.info` and `console.error`. Implement `context.ts` with `createApiContext(database = db)` and `auth()` from Clerk. Implement `api.ts` with JSON response helpers, request id extraction, safe JSON parsing, Zod parsing, and `withApiHandler`.
+Add helper constructors for validation, unauthorized, forbidden, not found, conflict, and internal errors. Implement `logs.ts` as a canonical structured request event wrapper around `console.info`. Implement `context.ts` with `createApiContext(database = db)` and `auth()` from Clerk. Implement foundation helpers for JSON responses, request id extraction, safe JSON parsing, and Zod parsing. Implement `api.ts` with `withApiHandler`.
 
 - [ ] **Step 4: Verify foundation passes**
 
@@ -220,7 +220,7 @@ Create service tests using an in-memory repository fake. Cover:
 // shared email can read
 // shared email cannot update
 // owner can update and gets latestVersion + 1
-// owner and shared user can share
+// only owner can share
 // listDocuments filters all, owned, and shared
 // user without primary email gets no shared documents
 ```
@@ -259,8 +259,8 @@ Expected: pass.
 ## Task 5: HTTP Handlers And Next Route Adapters
 
 **Files:**
-- Create: `src/server/handlers/docs.ts`
-- Create: `src/server/handlers/docs.test.ts`
+- Create: `src/server/handlers/docs/index.ts`
+- Create: `src/server/handlers/docs/index.test.ts`
 - Create: `src/app/api/docs/route.ts`
 - Create: `src/app/api/docs/[id]/route.ts`
 - Create: `src/app/api/docs/share/[id]/route.ts`
@@ -279,13 +279,13 @@ Write handler tests with mocked document services. Cover:
 
 - [ ] **Step 2: Verify handler tests fail**
 
-Run: `bun run test src/server/handlers/docs.test.ts`
+Run: `bun run test src/server/handlers/docs`
 
 Expected: fail because handlers do not exist.
 
 - [ ] **Step 3: Implement HTTP handlers**
 
-Implement named exports in `src/server/handlers/docs.ts`, for example:
+Implement named exports in `src/server/handlers/docs/index.ts`, for example:
 
 ```ts
 export const POST = withApiHandler(async ({ request, ctx }) => {
@@ -299,11 +299,11 @@ Use Next.js 16 async route params by awaiting `routeContext.params` inside the h
 
 - [ ] **Step 4: Implement route adapters**
 
-Each `src/app/api/docs/**/route.ts` should export `runtime = "nodejs"` and delegate to the matching function from `src/server/handlers/docs.ts`.
+Each `src/app/api/docs/**/route.ts` should export `runtime = "nodejs"` and delegate to the matching function from `src/server/handlers/docs/index.ts`.
 
 - [ ] **Step 5: Verify handlers pass**
 
-Run: `bun run test src/server/handlers/docs.test.ts`
+Run: `bun run test src/server/handlers/docs`
 
 Expected: pass.
 
diff --git a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
index a049580..afd719f 100644
--- a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
+++ b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
@@ -15,7 +15,7 @@ The new documents API must store HTML documents, support multiple immutable vers
 - Preserve every document version instead of overwriting HTML.
 - Authorize reads for owners and users whose primary email was shared.
 - Authorize updates only for owners.
-- Authorize sharing for any user who currently has access to the document.
+- Authorize sharing only for the document owner.
 - Validate API request contracts and database write contracts with Zod.
 - Centralize request user resolution in a reusable API context helper.
 - Create a reusable endpoint foundation for error handling, request parsing, database access, structured logs, and business-logic dispatch.
@@ -40,7 +40,7 @@ The helper should build an `ApiContext` for every protected API request. It shou
 - Load the active local `users` row by `clerkUserId`.
 - Normalize and expose the local user's primary email when present.
 - Return a clear `401` response when no Clerk session exists.
-- Return a clear `403` response when a Clerk session exists but the local user row has not been synchronized yet.
+- Return a clear `409` response when a Clerk session exists but the local user row has not been synchronized yet.
 - Expose the local user as `ctx.user`.
 - Expose the local user's normalized primary email as `ctx.userEmail`.
 - Expose the Drizzle database handle as `ctx.db`.
@@ -71,7 +71,7 @@ Suggested files:
 
 ```txt
 src/server/handlers/api.ts
-src/server/handlers/docs.ts
+src/server/handlers/docs/index.ts
 src/server/handlers/docs/*.ts
 src/server/foundation/context.ts
 src/server/foundation/errors.ts
@@ -109,14 +109,14 @@ Dynamic route params should still be awaited and validated by the endpoint or re
 
 `src/server/foundation/errors.ts` should define typed application errors, for example `ApiError`, with a status code, stable error code, safe message, and optional validation details. Business logic should throw these typed errors for expected failures such as forbidden access, missing documents, validation failures, and local user sync conflicts.
 
-The handler layer should provide JSON helpers for success and error responses, either in `src/server/handlers/api.ts` or a sibling file under `src/server/handlers`. Response helpers should produce one consistent envelope for errors and should avoid leaking stack traces, SQL details, Clerk secrets, or submitted HTML.
+The foundation layer should provide JSON helpers for success and error responses under `src/server/foundation`. Response helpers should produce one consistent envelope for errors and should avoid leaking stack traces, SQL details, Clerk secrets, or submitted HTML.
 
 ### Request parsing
 
-`src/server/handlers/api.ts`, or a sibling file under `src/server/handlers`, should contain reusable helpers for:
+`src/server/foundation/helpers` should contain reusable helpers for:
 
 - Reading JSON request bodies safely.
-- Returning `400` for malformed JSON.
+- Returning `422` for malformed JSON.
 - Validating bodies, query strings, and route params with Zod.
 - Converting `URLSearchParams` to plain objects before validation.
 
@@ -130,7 +130,7 @@ Repository modules under `src/server/repositories/docs` should own Drizzle queri
 
 ### Logging
 
-`src/server/foundation/logs.ts` should expose a minimal structured logger wrapper around `console`. Logs should include:
+`src/server/foundation/logs.ts` should expose a minimal structured logger wrapper around `console`. Logs should be emitted as one canonical wide event per request and include:
 
 - `requestId`.
 - HTTP method and pathname.
@@ -388,9 +388,9 @@ Behavior:
 2. Validate route params and body with Zod.
 3. Normalize emails by trimming and lowercasing.
 4. Remove duplicate emails from the request.
-5. Verify the current user can access the document.
+5. Verify the current user owns the document.
 6. Return `404` if the document does not exist.
-7. Return `403` if the document exists but the current user cannot access it.
+7. Return `403` if the document exists but the current user is not the owner.
 8. Insert access grants idempotently.
 9. Return `200`.
 
@@ -408,9 +408,9 @@ Sharing is document-level. A shared email can read every existing and future ver
 ## Authorization Rules
 
 - Unauthenticated requests return `401`.
-- Authenticated requests without a local `users` row return `403`.
+- Authenticated requests without a local `users` row return `409`.
 - Owners can read, update, list, and share their documents.
-- Shared users can read, list, and share documents shared with their primary email.
+- Shared users can read and list documents shared with their primary email.
 - Shared users cannot update documents.
 - A user with no primary email can still own documents but cannot receive email-based shares until their local `primaryEmail` is present.
 - Soft-deleted users should not be loaded by `ApiContext`.
@@ -431,11 +431,11 @@ Use JSON error bodies consistently:
 
 Recommended status codes:
 
-- `400`: malformed JSON, invalid route param, invalid query string, invalid body.
+- `422`: malformed JSON, invalid route param, invalid query string, invalid body.
 - `401`: missing Clerk session.
 - `403`: authenticated user lacks access.
 - `404`: document or version not found.
-- `409`: a concurrent version insert conflicts after retry handling.
+- `409`: local user has not been synchronized yet, or a concurrent version insert conflicts after retry handling.
 - `500`: unexpected server/database error.
 
 Validation errors should not echo submitted HTML.
@@ -449,7 +449,7 @@ src/app/api/docs/route.ts
 src/app/api/docs/[id]/route.ts
 src/app/api/docs/share/[id]/route.ts
 src/server/handlers/api.ts
-src/server/handlers/docs.ts
+src/server/handlers/docs/index.ts
 src/server/foundation/context.ts
 src/server/foundation/errors.ts
 src/server/foundation/logs.ts
@@ -479,15 +479,15 @@ Test the contract layer:
 Test the API context helper:
 
 - Returns `401` when Clerk has no authenticated user.
-- Returns `403` when a Clerk user exists but no active local user row exists.
+- Returns `409` when a Clerk user exists but no active local user row exists.
 - Returns `ApiContext` with local user and normalized email when present.
 
 Test the API foundation:
 
 - Handler wrapper catches typed `ApiError` instances and returns the expected status and JSON error envelope.
 - Handler wrapper catches unexpected errors, logs them through `src/server/foundation/logs.ts`, and returns a generic `500`.
-- Request parser in the handler layer returns `400` for malformed JSON.
-- Zod request helpers in the handler layer format validation failures without echoing submitted HTML.
+- Request parser in the foundation helper layer returns `422` for malformed JSON.
+- Zod request helpers in the foundation helper layer format validation failures without echoing submitted HTML.
 - Completion logs include request id, method, pathname, status, duration, and user id when available.
 
 Test the document service:
@@ -498,7 +498,7 @@ Test the document service:
 - Owner can read and update.
 - Shared email can read.
 - Shared email cannot update.
-- Owner and shared user can share.
+- Only owners can share.
 - List returns owned, shared, or all based on the filter.
 - User without primary email gets no shared documents.
 
@@ -516,18 +516,18 @@ Test HTTP handlers with mocked service/context dependencies where useful:
 2. Generate a Postgres migration with `bun run db:generate`.
 3. Add the shared API foundation: errors, logging, and API context under `src/server/foundation`.
 4. Add foundation tests before implementation.
-5. Add the shared handler wrapper, response helpers, and request parsing under `src/server/handlers`.
+5. Add the shared handler wrapper under `src/server/handlers` and response/request parsing helpers under `src/server/foundation`.
 6. Add Zod contracts and document types in `src/types/docs.ts`.
 7. Add repository and service tests before implementation.
 8. Add repository and service implementation under `src/server/repositories/docs` and `src/server/services/docs`.
 9. Add handler tests before each handler implementation.
-10. Add thin Next.js Route Handlers in `src/app/api/docs/**/route.ts` that delegate to `src/server/handlers/docs.ts`.
+10. Add thin Next.js Route Handlers in `src/app/api/docs/**/route.ts` that delegate to `src/server/handlers/docs/index.ts`.
 11. Run `bun run test`, `bun run typecheck`, and `bun run lint`.
 
 ## Open Decisions Resolved
 
 - Sharing is stored by normalized email, not by `userId`, so recipients do not need accounts before access is granted.
-- Any user with document access can share the document onward.
+- Only document owners can share the document onward.
 - Updating a document creates a new version and does not mutate existing version rows.
 - Reading without `version` returns the latest version.
 - Listing defaults to all accessible documents.
diff --git a/src/server/foundation/context.test.ts b/src/server/foundation/context.test.ts
index 68a0bfc..09d3e47 100644
--- a/src/server/foundation/context.test.ts
+++ b/src/server/foundation/context.test.ts
@@ -26,7 +26,7 @@ describe("createApiContext", () => {
     }
   });
 
-  it("returns 403 when the Clerk user has no active local user row", async () => {
+  it("returns 409 when the Clerk user has no active local user row", async () => {
     const { auth } = await import("@clerk/nextjs/server");
     vi.mocked(auth).mockResolvedValue({ userId: "clerk_123" } as never);
 
@@ -35,7 +35,7 @@ describe("createApiContext", () => {
 
     expect(result.ok).toBe(false);
     if (!result.ok) {
-      expect(result.response.status).toBe(403);
+      expect(result.response.status).toBe(409);
       await expect(result.response.json()).resolves.toMatchObject({
         error: { code: "user_not_synced" },
       });
diff --git a/src/server/foundation/context.ts b/src/server/foundation/context.ts
index cc9730a..72bb3ad 100644
--- a/src/server/foundation/context.ts
+++ b/src/server/foundation/context.ts
@@ -1,14 +1,14 @@
 import { auth } from "@clerk/nextjs/server";
 
 import { db, type User } from "@/db";
-import { normalizeEmail } from "@/server/foundation/email";
+import { normalizeEmail } from "@/server/foundation/helpers/email";
 import {
   findActiveUserByClerkId,
   type UserLookupDb,
 } from "@/server/repositories/users/find-active-user-by-clerk-id";
 import { apiErrorResponse } from "@/server/foundation/responses";
 
-import { forbiddenError, unauthorizedError } from "./errors";
+import { conflictError, unauthorizedError } from "./errors";
 
 type Db = typeof db;
 
@@ -42,7 +42,7 @@ export async function createApiContext(
     return {
       ok: false,
       response: apiErrorResponse(
-        forbiddenError(
+        conflictError(
           "Authenticated user has not been synchronized yet",
           "user_not_synced",
         ),
diff --git a/src/server/foundation/errors.test.ts b/src/server/foundation/errors.test.ts
index af2a4f8..9b62c1b 100644
--- a/src/server/foundation/errors.test.ts
+++ b/src/server/foundation/errors.test.ts
@@ -13,7 +13,7 @@ import {
 
 describe("API errors", () => {
   it("creates functional API error objects", () => {
-    expect(validationError()).toMatchObject({ status: 400, code: "validation_error" });
+    expect(validationError()).toMatchObject({ status: 422, code: "validation_error" });
     expect(unauthorizedError()).toMatchObject({ status: 401, code: "unauthorized" });
     expect(forbiddenError()).toMatchObject({ status: 403, code: "forbidden" });
     expect(notFoundError()).toMatchObject({ status: 404, code: "not_found" });
diff --git a/src/server/foundation/errors.ts b/src/server/foundation/errors.ts
index ca117e0..7a5d65e 100644
--- a/src/server/foundation/errors.ts
+++ b/src/server/foundation/errors.ts
@@ -46,7 +46,7 @@ export function isApiError(error: unknown): error is ApiError {
 }
 
 export function validationError(message = "Invalid request", details?: unknown) {
-  return apiError(400, "validation_error", message, details);
+  return apiError(422, "validation_error", message, details);
 }
 
 export function unauthorizedError(message = "Authentication required") {
diff --git a/src/server/services/docs/db-errors.test.ts b/src/server/foundation/helpers/db-errors.test.ts
similarity index 100%
rename from src/server/services/docs/db-errors.test.ts
rename to src/server/foundation/helpers/db-errors.test.ts
diff --git a/src/server/services/docs/db-errors.ts b/src/server/foundation/helpers/db-errors.ts
similarity index 61%
rename from src/server/services/docs/db-errors.ts
rename to src/server/foundation/helpers/db-errors.ts
index b771bac..3d561e9 100644
--- a/src/server/services/docs/db-errors.ts
+++ b/src/server/foundation/helpers/db-errors.ts
@@ -1,8 +1,10 @@
+const POSTGRES_UNIQUE_VIOLATION_CODE = "23505";
+
 export function isUniqueViolation(error: unknown): boolean {
   return (
     typeof error === "object" &&
     error !== null &&
     "code" in error &&
-    error.code === "23505"
+    error.code === POSTGRES_UNIQUE_VIOLATION_CODE
   );
 }
diff --git a/src/server/foundation/email.test.ts b/src/server/foundation/helpers/email.test.ts
similarity index 100%
rename from src/server/foundation/email.test.ts
rename to src/server/foundation/helpers/email.test.ts
diff --git a/src/server/foundation/email.ts b/src/server/foundation/helpers/email.ts
similarity index 100%
rename from src/server/foundation/email.ts
rename to src/server/foundation/helpers/email.ts
diff --git a/src/server/handlers/request-body.test.ts b/src/server/foundation/helpers/parse-json-body.test.ts
similarity index 79%
rename from src/server/handlers/request-body.test.ts
rename to src/server/foundation/helpers/parse-json-body.test.ts
index f7f033d..586595e 100644
--- a/src/server/handlers/request-body.test.ts
+++ b/src/server/foundation/helpers/parse-json-body.test.ts
@@ -1,6 +1,6 @@
 import { describe, expect, it } from "vitest";
 
-import { parseJsonBody } from "./request-body";
+import { parseJsonBody } from "./parse-json-body";
 
 describe("parseJsonBody", () => {
   it("parses JSON and maps malformed bodies to validation errors", async () => {
@@ -10,6 +10,6 @@ describe("parseJsonBody", () => {
 
     await expect(
       parseJsonBody(new Request("https://app.test", { method: "POST", body: "{" })),
-    ).rejects.toMatchObject({ status: 400, code: "validation_error" });
+    ).rejects.toMatchObject({ status: 422, code: "validation_error" });
   });
 });
diff --git a/src/server/handlers/request-body.ts b/src/server/foundation/helpers/parse-json-body.ts
similarity index 100%
rename from src/server/handlers/request-body.ts
rename to src/server/foundation/helpers/parse-json-body.ts
diff --git a/src/server/handlers/error-code.test.ts b/src/server/foundation/helpers/read-error-code.test.ts
similarity index 88%
rename from src/server/handlers/error-code.test.ts
rename to src/server/foundation/helpers/read-error-code.test.ts
index 7df02d4..c1016f2 100644
--- a/src/server/handlers/error-code.test.ts
+++ b/src/server/foundation/helpers/read-error-code.test.ts
@@ -1,6 +1,6 @@
 import { describe, expect, it } from "vitest";
 
-import { readErrorCode } from "./error-code";
+import { readErrorCode } from "./read-error-code";
 
 describe("readErrorCode", () => {
   it("reads error code from JSON responses and ignores invalid bodies", async () => {
diff --git a/src/server/handlers/error-code.ts b/src/server/foundation/helpers/read-error-code.ts
similarity index 100%
rename from src/server/handlers/error-code.ts
rename to src/server/foundation/helpers/read-error-code.ts
diff --git a/src/server/handlers/request-id.test.ts b/src/server/foundation/helpers/request-id.test.ts
similarity index 50%
rename from src/server/handlers/request-id.test.ts
rename to src/server/foundation/helpers/request-id.test.ts
index aa00c57..146b41b 100644
--- a/src/server/handlers/request-id.test.ts
+++ b/src/server/foundation/helpers/request-id.test.ts
@@ -3,12 +3,17 @@ import { describe, expect, it, vi } from "vitest";
 import { getRequestId } from "./request-id";
 
 describe("getRequestId", () => {
-  it("prefers request id headers before generating a new id", () => {
+  it("prefers x-request-id, then x-vercel-id, then generated id", () => {
     expect(
       getRequestId(new Request("https://app.test", { headers: { "x-request-id": "req_1" } })),
     ).toBe("req_1");
 
-    vi.spyOn(crypto, "randomUUID").mockReturnValue("generated");
+    expect(
+      getRequestId(new Request("https://app.test", { headers: { "x-vercel-id": "vercel_1" } })),
+    ).toBe("vercel_1");
+
+    const randomUuidSpy = vi.spyOn(crypto, "randomUUID").mockReturnValue("generated");
     expect(getRequestId(new Request("https://app.test"))).toBe("generated");
+    expect(randomUuidSpy).toHaveBeenCalledTimes(1);
   });
 });
diff --git a/src/server/handlers/request-id.ts b/src/server/foundation/helpers/request-id.ts
similarity index 100%
rename from src/server/handlers/request-id.ts
rename to src/server/foundation/helpers/request-id.ts
diff --git a/src/server/services/docs/resolve-access.test.ts b/src/server/foundation/helpers/resolve-document-access.test.ts
similarity index 55%
rename from src/server/services/docs/resolve-access.test.ts
rename to src/server/foundation/helpers/resolve-document-access.test.ts
index 742a55d..0eac659 100644
--- a/src/server/services/docs/resolve-access.test.ts
+++ b/src/server/foundation/helpers/resolve-document-access.test.ts
@@ -1,6 +1,6 @@
 import { describe, expect, it, vi } from "vitest";
 
-import { apiContext, document } from "./test-helpers";
+import { apiContext, document } from "@/server/services/docs/test-helpers";
 
 const repository = vi.hoisted(() => ({
   isSharedWithEmail: vi.fn(),
@@ -10,7 +10,7 @@ vi.mock("@/server/repositories/docs/is-shared-with-email", () => repository);
 
 describe("resolveDocumentAccess", () => {
   it("resolves owner access without checking shares", async () => {
-    const { resolveDocumentAccess } = await import("./resolve-access");
+    const { resolveDocumentAccess } = await import("./resolve-document-access");
 
     await expect(resolveDocumentAccess(apiContext("owner"), document())).resolves.toBe("owned");
     expect(repository.isSharedWithEmail).not.toHaveBeenCalled();
@@ -18,7 +18,7 @@ describe("resolveDocumentAccess", () => {
 
   it("resolves shared access by normalized context email", async () => {
     repository.isSharedWithEmail.mockResolvedValue(true);
-    const { resolveDocumentAccess } = await import("./resolve-access");
+    const { resolveDocumentAccess } = await import("./resolve-document-access");
 
     await expect(
       resolveDocumentAccess(
@@ -27,4 +27,16 @@ describe("resolveDocumentAccess", () => {
       ),
     ).resolves.toBe("shared");
   });
+
+  it("returns null when caller is neither owner nor shared", async () => {
+    repository.isSharedWithEmail.mockResolvedValue(false);
+    const { resolveDocumentAccess } = await import("./resolve-document-access");
+
+    await expect(
+      resolveDocumentAccess(
+        apiContext("reader", "reader@example.com"),
+        document({ ownerUserId: "owner" }),
+      ),
+    ).resolves.toBeNull();
+  });
 });
diff --git a/src/server/services/docs/resolve-access.ts b/src/server/foundation/helpers/resolve-document-access.ts
similarity index 74%
rename from src/server/services/docs/resolve-access.ts
rename to src/server/foundation/helpers/resolve-document-access.ts
index deb3637..56b0ca8 100644
--- a/src/server/services/docs/resolve-access.ts
+++ b/src/server/foundation/helpers/resolve-document-access.ts
@@ -10,10 +10,12 @@ export async function resolveDocumentAccess(
     return "owned";
   }
 
-  if (
-    ctx.userEmail !== null &&
-    (await isSharedWithEmail(ctx.db, document.id, ctx.userEmail))
-  ) {
+  const hasSharedAccess =
+    ctx.userEmail !== null
+      ? await isSharedWithEmail(ctx.db, document.id, ctx.userEmail)
+      : false;
+
+  if (hasSharedAccess) {
     return "shared";
   }
 
diff --git a/src/server/handlers/query.test.ts b/src/server/foundation/helpers/search-params.test.ts
similarity index 86%
rename from src/server/handlers/query.test.ts
rename to src/server/foundation/helpers/search-params.test.ts
index 0492ef1..d450dc5 100644
--- a/src/server/handlers/query.test.ts
+++ b/src/server/foundation/helpers/search-params.test.ts
@@ -1,6 +1,6 @@
 import { describe, expect, it } from "vitest";
 
-import { searchParamsToObject } from "./query";
+import { searchParamsToObject } from "./search-params";
 
 describe("searchParamsToObject", () => {
   it("preserves duplicate query parameters", () => {
diff --git a/src/server/handlers/query.ts b/src/server/foundation/helpers/search-params.ts
similarity index 100%
rename from src/server/handlers/query.ts
rename to src/server/foundation/helpers/search-params.ts
diff --git a/src/server/handlers/validation.test.ts b/src/server/foundation/helpers/validation.test.ts
similarity index 100%
rename from src/server/handlers/validation.test.ts
rename to src/server/foundation/helpers/validation.test.ts
diff --git a/src/server/handlers/validation.ts b/src/server/foundation/helpers/validation.ts
similarity index 100%
rename from src/server/handlers/validation.ts
rename to src/server/foundation/helpers/validation.ts
diff --git a/src/server/foundation/logs.test.ts b/src/server/foundation/logs.test.ts
index e0638b5..e6e4010 100644
--- a/src/server/foundation/logs.test.ts
+++ b/src/server/foundation/logs.test.ts
@@ -22,10 +22,11 @@ describe("API logs", () => {
 
     expect(info).toHaveBeenCalledWith(
       expect.objectContaining({
-        event: "api_request",
-        service: "shareable-docs",
-        requestId: "req_1",
-        userId: "user_1",
+        event: "api.request",
+        schemaVersion: 1,
+        service: expect.objectContaining({ name: "shareable-docs" }),
+        request: expect.objectContaining({ id: "req_1", path: "/api/docs" }),
+        user: { id: "user_1" },
       }),
     );
   });
diff --git a/src/server/foundation/logs.ts b/src/server/foundation/logs.ts
index 23c803d..06acec8 100644
--- a/src/server/foundation/logs.ts
+++ b/src/server/foundation/logs.ts
@@ -1,9 +1,35 @@
 type ApiLogOutcome = "success" | "error";
 
 export type ApiLogEvent = {
-  event: "api_request";
+  event: "api.request";
+  schemaVersion: 1;
   timestamp: string;
-  service: "shareable-docs";
+  service: {
+    name: "shareable-docs";
+    environment: string;
+  };
+  request: {
+    id: string;
+    method: string;
+    path: string;
+  };
+  http: {
+    statusCode: number;
+  };
+  outcome: ApiLogOutcome;
+  duration: {
+    ms: number;
+  };
+  user?: {
+    id: string;
+  };
+  error?: {
+    code: string;
+    type: string;
+  };
+};
+
+export type ApiRequestLogFields = {
   requestId: string;
   method: string;
   pathname: string;
@@ -11,18 +37,32 @@ export type ApiLogEvent = {
   outcome: ApiLogOutcome;
   durationMs: number;
   userId?: string;
-  error?: {
-    code: string;
-    type: string;
-  };
+  error?: ApiLogEvent["error"];
 };
 
-export function logApiRequest(fields: Omit<ApiLogEvent, "event" | "timestamp" | "service">): void {
+export function logApiRequest(fields: ApiRequestLogFields): void {
   console.info({
-    event: "api_request",
+    event: "api.request",
+    schemaVersion: 1,
     timestamp: new Date().toISOString(),
-    service: "shareable-docs",
-    ...fields,
+    service: {
+      name: "shareable-docs",
+      environment: process.env.NODE_ENV ?? "development",
+    },
+    request: {
+      id: fields.requestId,
+      method: fields.method,
+      path: fields.pathname,
+    },
+    http: {
+      statusCode: fields.status,
+    },
+    outcome: fields.outcome,
+    duration: {
+      ms: fields.durationMs,
+    },
+    ...(fields.userId === undefined ? {} : { user: { id: fields.userId } }),
+    ...(fields.error === undefined ? {} : { error: fields.error }),
   } satisfies ApiLogEvent);
 }
 
diff --git a/src/server/foundation/ulid.test.ts b/src/server/foundation/ulid.test.ts
index bfd7211..842f68e 100644
--- a/src/server/foundation/ulid.test.ts
+++ b/src/server/foundation/ulid.test.ts
@@ -10,6 +10,8 @@ describe("createUlid", () => {
       return array;
     });
 
-    expect(createUlid(0)).toMatch(/^[0-9A-HJKMNP-TV-Z]{26}$/);
+    const ulid = createUlid(0);
+    expect(ulid).toMatch(/^[0-9A-HJKMNP-TV-Z]{26}$/);
+    expect(ulid.startsWith("0000000000")).toBe(true);
   });
 });
diff --git a/src/server/handlers/api.test.ts b/src/server/handlers/api.test.ts
index 23e52f2..19cdc00 100644
--- a/src/server/handlers/api.test.ts
+++ b/src/server/handlers/api.test.ts
@@ -1,5 +1,4 @@
 import { describe, expect, it, vi } from "vitest";
-import { z } from "zod";
 
 import { forbiddenError } from "@/server/foundation/errors";
 
@@ -49,29 +48,4 @@ describe("API handler foundation", () => {
     });
   });
 
-  it("returns validation_error for malformed JSON", async () => {
-    const { parseJsonBody } = await import("./api");
-
-    await expect(
-      parseJsonBody(
-        new Request("https://app.test/api/docs", {
-          method: "POST",
-          body: "{",
-        }),
-      ),
-    ).rejects.toMatchObject({ status: 400, code: "validation_error" });
-  });
-
-  it("formats Zod validation failures without echoing submitted HTML", async () => {
-    const { parseWithSchema } = await import("./api");
-    const schema = z.object({ name: z.string().min(1) });
-
-    try {
-      parseWithSchema(schema, { name: "", html: "<script>alert(1)</script>" });
-      throw new Error("expected parseWithSchema to throw");
-    } catch (error) {
-      expect(error).toMatchObject({ status: 400, code: "validation_error" });
-      expect(JSON.stringify(error)).not.toContain("<script>");
-    }
-  });
 });
diff --git a/src/server/handlers/api.ts b/src/server/handlers/api.ts
index 7a5e559..301d2a6 100644
--- a/src/server/handlers/api.ts
+++ b/src/server/handlers/api.ts
@@ -1,11 +1,10 @@
 import { createApiContext } from "@/server/foundation/context";
 import { isApiError } from "@/server/foundation/errors";
+import { readErrorCode } from "@/server/foundation/helpers/read-error-code";
+import { getRequestId } from "@/server/foundation/helpers/request-id";
+import { apiErrorResponse } from "@/server/foundation/responses";
 import { getErrorType, logApiRequest } from "@/server/foundation/logs";
-
-import { readErrorCode } from "./error-code";
-import { getRequestId } from "./request-id";
-import { apiErrorResponse } from "./response";
-import type { ApiHandler } from "./types";
+import type { ApiHandler } from "@/types/api-handler";
 
 export function withApiHandler<TParams = unknown>(
   handler: ApiHandler<TParams>,
@@ -71,8 +70,3 @@ export function withApiHandler<TParams = unknown>(
     }
   };
 }
-
-export { parseJsonBody } from "./request-body";
-export { searchParamsToObject } from "./query";
-export { jsonResponse } from "./response";
-export { parseWithSchema } from "./validation";
diff --git a/src/server/handlers/docs.ts b/src/server/handlers/docs.ts
deleted file mode 100644
index d27b81b..0000000
--- a/src/server/handlers/docs.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-export { createDocumentHandler } from "./docs/create-document";
-export { getDocumentHandler } from "./docs/get-document";
-export { listDocumentsHandler } from "./docs/list-documents";
-export { shareDocumentHandler } from "./docs/share-document";
-export { updateDocumentHandler } from "./docs/update-document";
diff --git a/src/server/handlers/docs/create-document.ts b/src/server/handlers/docs/create-document.ts
index 474b2d9..7d33d7d 100644
--- a/src/server/handlers/docs/create-document.ts
+++ b/src/server/handlers/docs/create-document.ts
@@ -1,12 +1,10 @@
 import { createDocument } from "@/server/services/docs/create-document";
+import { parseJsonBody } from "@/server/foundation/helpers/parse-json-body";
+import { parseWithSchema } from "@/server/foundation/helpers/validation";
+import { jsonResponse } from "@/server/foundation/responses";
 import { createDocumentRequestSchema } from "@/types/docs";
 
-import {
-  jsonResponse,
-  parseJsonBody,
-  parseWithSchema,
-  withApiHandler,
-} from "../api";
+import { withApiHandler } from "../api";
 
 export const createDocumentHandler = withApiHandler(async ({ request, ctx }) => {
   const input = parseWithSchema(
diff --git a/src/server/handlers/docs/get-document.ts b/src/server/handlers/docs/get-document.ts
index c9e0069..cb83beb 100644
--- a/src/server/handlers/docs/get-document.ts
+++ b/src/server/handlers/docs/get-document.ts
@@ -1,12 +1,10 @@
 import { getDocument } from "@/server/services/docs/get-document";
+import { searchParamsToObject } from "@/server/foundation/helpers/search-params";
+import { parseWithSchema } from "@/server/foundation/helpers/validation";
+import { jsonResponse } from "@/server/foundation/responses";
 import { documentRouteParamsSchema, getDocumentQuerySchema } from "@/types/docs";
 
-import {
-  jsonResponse,
-  parseWithSchema,
-  searchParamsToObject,
-  withApiHandler,
-} from "../api";
+import { withApiHandler } from "../api";
 
 export const getDocumentHandler = withApiHandler<{ id: string }>(
   async ({ request, ctx, params }) => {
diff --git a/src/server/handlers/docs.test.ts b/src/server/handlers/docs/index.test.ts
similarity index 94%
rename from src/server/handlers/docs.test.ts
rename to src/server/handlers/docs/index.test.ts
index cfdf7e2..c37b890 100644
--- a/src/server/handlers/docs.test.ts
+++ b/src/server/handlers/docs/index.test.ts
@@ -66,7 +66,7 @@ describe("docs HTTP handlers", () => {
       version: { versionNumber: 1 },
     });
 
-    const { createDocumentHandler } = await import("./docs");
+    const { createDocumentHandler } = await import(".");
     const response = await createDocumentHandler(
       jsonRequest("https://app.test/api/docs", {
         name: " Report ",
@@ -89,7 +89,7 @@ describe("docs HTTP handlers", () => {
   it("lists documents and rejects invalid access filters", async () => {
     serviceMocks.listDocuments.mockResolvedValue({ documents: [] });
 
-    const { listDocumentsHandler } = await import("./docs");
+    const { listDocumentsHandler } = await import(".");
     const validResponse = await listDocumentsHandler(
       new Request("https://app.test/api/docs?access=shared"),
     );
@@ -102,7 +102,7 @@ describe("docs HTTP handlers", () => {
       expect.anything(),
       { access: "shared" },
     );
-    expect(invalidResponse.status).toBe(400);
+    expect(invalidResponse.status).toBe(422);
   });
 
   it("gets a document by awaiting route params and defaulting to latest version", async () => {
@@ -124,7 +124,7 @@ describe("docs HTTP handlers", () => {
       latestVersion: { versionNumber: 2 },
     });
 
-    const { getDocumentHandler } = await import("./docs");
+    const { getDocumentHandler } = await import(".");
     const response = await getDocumentHandler(
       new Request("https://app.test/api/docs/01HZXJK8JHX7QY9N7K6X8Y2W0A"),
       { params: Promise.resolve({ id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" }) },
@@ -149,7 +149,7 @@ describe("docs HTTP handlers", () => {
       forbiddenError("Only the document owner can update it"),
     );
 
-    const { updateDocumentHandler } = await import("./docs");
+    const { updateDocumentHandler } = await import(".");
     const response = await updateDocumentHandler(
       jsonRequest("https://app.test/api/docs/01HZXJK8JHX7QY9N7K6X8Y2W0A", { html: "<p>v2</p>" }, "PUT"),
       { params: Promise.resolve({ id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" }) },
@@ -171,7 +171,7 @@ describe("docs HTTP handlers", () => {
       ],
     });
 
-    const { shareDocumentHandler } = await import("./docs");
+    const { shareDocumentHandler } = await import(".");
     const response = await shareDocumentHandler(
       jsonRequest("https://app.test/api/docs/share/01HZXJK8JHX7QY9N7K6X8Y2W0A", {
         emails: [" Reader@Example.com ", "reader@example.com", "reviewer@example.com"],
diff --git a/src/server/handlers/docs/index.ts b/src/server/handlers/docs/index.ts
new file mode 100644
index 0000000..87a3abd
--- /dev/null
+++ b/src/server/handlers/docs/index.ts
@@ -0,0 +1,5 @@
+export { createDocumentHandler } from "./create-document";
+export { getDocumentHandler } from "./get-document";
+export { listDocumentsHandler } from "./list-documents";
+export { shareDocumentHandler } from "./share-document";
+export { updateDocumentHandler } from "./update-document";
diff --git a/src/server/handlers/docs/list-documents.test.ts b/src/server/handlers/docs/list-documents.test.ts
index 72eed2e..7794af3 100644
--- a/src/server/handlers/docs/list-documents.test.ts
+++ b/src/server/handlers/docs/list-documents.test.ts
@@ -39,6 +39,20 @@ describe("listDocumentsHandler", () => {
     );
 
     expect(response.status).toBe(200);
+    await expect(response.json()).resolves.toMatchObject({
+      documents: [
+        {
+          id: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
+          ownerUserId: "user_1",
+          name: "Report",
+          description: null,
+          access: "owned",
+          latestVersion: 1,
+          createdAt: now.toISOString(),
+          updatedAt: now.toISOString(),
+        },
+      ],
+    });
     expect(service.listDocuments).toHaveBeenCalledWith(ctx, { access: "owned" });
   });
 });
diff --git a/src/server/handlers/docs/list-documents.ts b/src/server/handlers/docs/list-documents.ts
index 552f106..3d9930e 100644
--- a/src/server/handlers/docs/list-documents.ts
+++ b/src/server/handlers/docs/list-documents.ts
@@ -1,12 +1,10 @@
 import { listDocuments } from "@/server/services/docs/list-documents";
+import { searchParamsToObject } from "@/server/foundation/helpers/search-params";
+import { parseWithSchema } from "@/server/foundation/helpers/validation";
+import { jsonResponse } from "@/server/foundation/responses";
 import { listDocumentsQuerySchema } from "@/types/docs";
 
-import {
-  jsonResponse,
-  parseWithSchema,
-  searchParamsToObject,
-  withApiHandler,
-} from "../api";
+import { withApiHandler } from "../api";
 
 export const listDocumentsHandler = withApiHandler(async ({ request, ctx }) => {
   const query = parseWithSchema(
diff --git a/src/server/handlers/docs/share-document.ts b/src/server/handlers/docs/share-document.ts
index 41a6204..8240507 100644
--- a/src/server/handlers/docs/share-document.ts
+++ b/src/server/handlers/docs/share-document.ts
@@ -1,12 +1,10 @@
 import { shareDocument } from "@/server/services/docs/share-document";
+import { parseJsonBody } from "@/server/foundation/helpers/parse-json-body";
+import { parseWithSchema } from "@/server/foundation/helpers/validation";
+import { jsonResponse } from "@/server/foundation/responses";
 import { documentRouteParamsSchema, shareDocumentRequestSchema } from "@/types/docs";
 
-import {
-  jsonResponse,
-  parseJsonBody,
-  parseWithSchema,
-  withApiHandler,
-} from "../api";
+import { withApiHandler } from "../api";
 
 export const shareDocumentHandler = withApiHandler<{ id: string }>(
   async ({ request, ctx, params }) => {
diff --git a/src/server/handlers/docs/update-document.test.ts b/src/server/handlers/docs/update-document.test.ts
index e6d3514..50ed8fa 100644
--- a/src/server/handlers/docs/update-document.test.ts
+++ b/src/server/handlers/docs/update-document.test.ts
@@ -36,6 +36,12 @@ describe("updateDocumentHandler", () => {
     );
 
     expect(response.status).toBe(200);
+    await expect(response.json()).resolves.toMatchObject({
+      id: "01HZXJK8JHX7QY9N7K6X8Y2W0A",
+      version: 2,
+      latestVersion: 2,
+      updatedAt: updatedAt.toISOString(),
+    });
     expect(service.updateDocument).toHaveBeenCalledWith(
       ctx,
       { id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" },
diff --git a/src/server/handlers/docs/update-document.ts b/src/server/handlers/docs/update-document.ts
index 3e1f4bd..881bd7e 100644
--- a/src/server/handlers/docs/update-document.ts
+++ b/src/server/handlers/docs/update-document.ts
@@ -1,12 +1,10 @@
 import { updateDocument } from "@/server/services/docs/update-document";
+import { parseJsonBody } from "@/server/foundation/helpers/parse-json-body";
+import { parseWithSchema } from "@/server/foundation/helpers/validation";
+import { jsonResponse } from "@/server/foundation/responses";
 import { documentRouteParamsSchema, updateDocumentRequestSchema } from "@/types/docs";
 
-import {
-  jsonResponse,
-  parseJsonBody,
-  parseWithSchema,
-  withApiHandler,
-} from "../api";
+import { withApiHandler } from "../api";
 
 export const updateDocumentHandler = withApiHandler<{ id: string }>(
   async ({ request, ctx, params }) => {
diff --git a/src/server/handlers/response.test.ts b/src/server/handlers/response.test.ts
deleted file mode 100644
index a26fed3..0000000
--- a/src/server/handlers/response.test.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import { apiErrorResponse, jsonResponse } from "./response";
-
-describe("handler response exports", () => {
-  it("re-exports foundation response helpers", async () => {
-    await expect(jsonResponse({ ok: true }).json()).resolves.toEqual({ ok: true });
-    expect(
-      apiErrorResponse({
-        kind: "api_error",
-        status: 404,
-        code: "not_found",
-        message: "Missing",
-      }).status,
-    ).toBe(404);
-  });
-});
diff --git a/src/server/handlers/response.ts b/src/server/handlers/response.ts
deleted file mode 100644
index 494e4d1..0000000
--- a/src/server/handlers/response.ts
+++ /dev/null
@@ -1 +0,0 @@
-export { apiErrorResponse, jsonResponse } from "@/server/foundation/responses";
diff --git a/src/server/repositories/docs/find-document-by-id.test.ts b/src/server/repositories/docs/find-document-by-id.test.ts
index 4efeb23..0c8f86f 100644
--- a/src/server/repositories/docs/find-document-by-id.test.ts
+++ b/src/server/repositories/docs/find-document-by-id.test.ts
@@ -13,6 +13,13 @@ describe("findDocumentById", () => {
     await expect(findDocumentById(db, "doc_1")).resolves.toBe(document);
     expect(chain.limit).toHaveBeenCalledWith(1);
   });
+
+  it("returns null when no document matches", async () => {
+    const chain = selectLimitChain([]);
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+
+    await expect(findDocumentById(db, "missing")).resolves.toBeNull();
+  });
 });
 
 function selectLimitChain(rows: unknown[]) {
diff --git a/src/server/repositories/docs/find-latest-version.test.ts b/src/server/repositories/docs/find-latest-version.test.ts
index bdfe11c..57faea4 100644
--- a/src/server/repositories/docs/find-latest-version.test.ts
+++ b/src/server/repositories/docs/find-latest-version.test.ts
@@ -14,6 +14,14 @@ describe("findLatestVersion", () => {
     expect(chain.orderBy).toHaveBeenCalledTimes(1);
     expect(chain.limit).toHaveBeenCalledWith(1);
   });
+
+  it("returns null when no versions exist", async () => {
+    const db = {
+      select: vi.fn(() => selectOrderedLimitChain([])),
+    } as unknown as DocumentsDatabase;
+
+    await expect(findLatestVersion(db, "doc_1")).resolves.toBeNull();
+  });
 });
 
 function selectOrderedLimitChain(rows: unknown[]) {
diff --git a/src/server/repositories/docs/find-latest-versions-for-documents.test.ts b/src/server/repositories/docs/find-latest-versions-for-documents.test.ts
index 0c40d32..b4b1bd2 100644
--- a/src/server/repositories/docs/find-latest-versions-for-documents.test.ts
+++ b/src/server/repositories/docs/find-latest-versions-for-documents.test.ts
@@ -12,22 +12,34 @@ describe("findLatestVersionsForDocuments", () => {
     expect(db.select).not.toHaveBeenCalled();
   });
 
-  it("keeps the first ordered version per document", async () => {
-    const rows = [
+  it("maps latest version rows selected by the database", async () => {
+    const versions = [
       { id: "v2", documentId: "doc_1", versionNumber: 2 },
-      { id: "v1", documentId: "doc_1", versionNumber: 1 },
       { id: "other", documentId: "doc_2", versionNumber: 1 },
     ];
-    const chain = {
-      from: vi.fn(() => chain),
-      where: vi.fn(() => chain),
-      orderBy: vi.fn(async () => rows),
+    const latestSubquery = {
+      from: vi.fn(() => latestSubquery),
+      where: vi.fn(() => latestSubquery),
+      groupBy: vi.fn(() => latestSubquery),
+      as: vi.fn(() => ({ documentId: "document_id", versionNumber: "version_number" })),
     };
-    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+    const rows = versions.map((version) => ({ document_versions: version }));
+    const latestRowsQuery = {
+      from: vi.fn(() => latestRowsQuery),
+      innerJoin: vi.fn(async () => rows),
+    };
+    const db = {
+      select: vi
+        .fn()
+        .mockReturnValueOnce(latestSubquery)
+        .mockReturnValueOnce(latestRowsQuery),
+    } as unknown as DocumentsDatabase;
 
     const latest = await findLatestVersionsForDocuments(db, ["doc_1", "doc_2"]);
 
-    expect(latest.get("doc_1")).toBe(rows[0]);
-    expect(latest.get("doc_2")).toBe(rows[2]);
+    expect(latestSubquery.groupBy).toHaveBeenCalledTimes(1);
+    expect(latestRowsQuery.innerJoin).toHaveBeenCalledTimes(1);
+    expect(latest.get("doc_1")).toBe(versions[0]);
+    expect(latest.get("doc_2")).toBe(versions[1]);
   });
 });
diff --git a/src/server/repositories/docs/find-latest-versions-for-documents.ts b/src/server/repositories/docs/find-latest-versions-for-documents.ts
index 2bd10bf..22bf6f9 100644
--- a/src/server/repositories/docs/find-latest-versions-for-documents.ts
+++ b/src/server/repositories/docs/find-latest-versions-for-documents.ts
@@ -1,4 +1,4 @@
-import { desc, inArray } from "drizzle-orm";
+import { and, eq, inArray, max } from "drizzle-orm";
 
 import { documentVersions } from "@/db";
 import type { DocumentsDatabase } from "@/types/docs-repository";
@@ -11,18 +11,31 @@ export async function findLatestVersionsForDocuments(
     return new Map();
   }
 
+  const latestVersionNumbers = db
+    .select({
+      documentId: documentVersions.documentId,
+      versionNumber: max(documentVersions.versionNumber).as("version_number"),
+    })
+    .from(documentVersions)
+    .where(inArray(documentVersions.documentId, documentIds))
+    .groupBy(documentVersions.documentId)
+    .as("latest_version_numbers");
+
   const rows = await db
     .select()
     .from(documentVersions)
-    .where(inArray(documentVersions.documentId, documentIds))
-    .orderBy(desc(documentVersions.versionNumber));
+    .innerJoin(
+      latestVersionNumbers,
+      and(
+        eq(documentVersions.documentId, latestVersionNumbers.documentId),
+        eq(documentVersions.versionNumber, latestVersionNumbers.versionNumber),
+      ),
+    );
 
-  const latestVersions = new Map<string, (typeof rows)[number]>();
+  const latestVersions = new Map<string, typeof documentVersions.$inferSelect>();
 
-  for (const version of rows) {
-    if (!latestVersions.has(version.documentId)) {
-      latestVersions.set(version.documentId, version);
-    }
+  for (const row of rows) {
+    latestVersions.set(row.document_versions.documentId, row.document_versions);
   }
 
   return latestVersions;
diff --git a/src/server/repositories/docs/find-shared-document-ids.test.ts b/src/server/repositories/docs/find-shared-document-ids.test.ts
index aaa3ec8..a045ee0 100644
--- a/src/server/repositories/docs/find-shared-document-ids.test.ts
+++ b/src/server/repositories/docs/find-shared-document-ids.test.ts
@@ -12,9 +12,17 @@ describe("findSharedDocumentIds", () => {
     };
     const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
 
-    await expect(findSharedDocumentIds(db, "reader@example.com")).resolves.toEqual([
+    await expect(findSharedDocumentIds(db, " Reader@Example.com ")).resolves.toEqual([
       "doc_1",
       "doc_2",
     ]);
+    expect(chain.where).toHaveBeenCalledTimes(1);
+  });
+
+  it("returns an empty list for blank emails without querying", async () => {
+    const db = { select: vi.fn() } as unknown as DocumentsDatabase;
+
+    await expect(findSharedDocumentIds(db, " ")).resolves.toEqual([]);
+    expect(db.select).not.toHaveBeenCalled();
   });
 });
diff --git a/src/server/repositories/docs/find-shared-document-ids.ts b/src/server/repositories/docs/find-shared-document-ids.ts
index 7f452ab..5a1bc03 100644
--- a/src/server/repositories/docs/find-shared-document-ids.ts
+++ b/src/server/repositories/docs/find-shared-document-ids.ts
@@ -1,16 +1,22 @@
 import { eq } from "drizzle-orm";
 
 import { documentShares } from "@/db";
+import { normalizeEmail } from "@/server/foundation/helpers/email";
 import type { DocumentsDatabase } from "@/types/docs-repository";
 
 export async function findSharedDocumentIds(
   db: DocumentsDatabase,
   email: string,
 ) {
+  const normalizedEmail = normalizeEmail(email);
+  if (normalizedEmail === null) {
+    return [];
+  }
+
   const rows = await db
     .select({ documentId: documentShares.documentId })
     .from(documentShares)
-    .where(eq(documentShares.sharedWithEmail, email));
+    .where(eq(documentShares.sharedWithEmail, normalizedEmail));
 
   return rows.map((row) => row.documentId);
 }
diff --git a/src/server/repositories/docs/find-version.test.ts b/src/server/repositories/docs/find-version.test.ts
index 98017a5..6a94b7d 100644
--- a/src/server/repositories/docs/find-version.test.ts
+++ b/src/server/repositories/docs/find-version.test.ts
@@ -13,6 +13,13 @@ describe("findVersion", () => {
     await expect(findVersion(db, "doc_1", 1)).resolves.toBe(version);
     expect(chain.limit).toHaveBeenCalledWith(1);
   });
+
+  it("returns null when the requested version does not exist", async () => {
+    const chain = selectLimitChain([]);
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+
+    await expect(findVersion(db, "doc_1", 999)).resolves.toBeNull();
+  });
 });
 
 function selectLimitChain(rows: unknown[]) {
diff --git a/src/server/repositories/docs/is-shared-with-email.test.ts b/src/server/repositories/docs/is-shared-with-email.test.ts
index 90151da..30f8c57 100644
--- a/src/server/repositories/docs/is-shared-with-email.test.ts
+++ b/src/server/repositories/docs/is-shared-with-email.test.ts
@@ -11,6 +11,13 @@ describe("isSharedWithEmail", () => {
 
     await expect(isSharedWithEmail(db, "doc_1", "reader@example.com")).resolves.toBe(true);
   });
+
+  it("returns false when no share exists", async () => {
+    const chain = selectLimitChain([]);
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+
+    await expect(isSharedWithEmail(db, "doc_1", "reader@example.com")).resolves.toBe(false);
+  });
 });
 
 function selectLimitChain(rows: unknown[]) {
diff --git a/src/server/repositories/docs/list-documents.test.ts b/src/server/repositories/docs/list-documents.test.ts
index c429a34..20ae2bd 100644
--- a/src/server/repositories/docs/list-documents.test.ts
+++ b/src/server/repositories/docs/list-documents.test.ts
@@ -1,4 +1,4 @@
-import { describe, expect, it, vi } from "vitest";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 
 import type { DocumentsDatabase } from "@/types/docs-repository";
 
@@ -15,6 +15,10 @@ vi.mock("./find-shared-document-ids", () => ({
 }));
 
 describe("listAccessibleDocuments", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
   it("lists accessible documents with latest versions", async () => {
     const document = {
       id: "doc_1",
@@ -42,4 +46,71 @@ describe("listAccessibleDocuments", () => {
 
     expect(result).toEqual([{ ...document, access: "owned", latestVersion: version }]);
   });
+
+  it("skips shared lookup for owned-only listings", async () => {
+    const document = {
+      id: "doc_1",
+      ownerUserId: "owner",
+      updatedAt: new Date("2026-06-12T00:00:00.000Z"),
+    };
+    const version = { documentId: "doc_1", versionNumber: 1 };
+    const chain = {
+      from: vi.fn(() => chain),
+      where: vi.fn(() => chain),
+      orderBy: vi.fn(async () => [document]),
+    };
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+    helpers.findLatestVersionsForDocuments.mockResolvedValue(
+      new Map([["doc_1", version]]),
+    );
+
+    const { listAccessibleDocuments } = await import("./list-documents");
+    await listAccessibleDocuments(db, {
+      ownerUserId: "owner",
+      sharedWithEmail: "owner@example.com",
+      access: "owned",
+    });
+
+    expect(helpers.findSharedDocumentIds).not.toHaveBeenCalled();
+  });
+
+  it("returns an empty list for shared access when no shared document ids exist", async () => {
+    const db = { select: vi.fn() } as unknown as DocumentsDatabase;
+    helpers.findSharedDocumentIds.mockResolvedValue([]);
+
+    const { listAccessibleDocuments } = await import("./list-documents");
+    const result = await listAccessibleDocuments(db, {
+      ownerUserId: "owner",
+      sharedWithEmail: "owner@example.com",
+      access: "shared",
+    });
+
+    expect(result).toEqual([]);
+    expect(db.select).not.toHaveBeenCalled();
+  });
+
+  it("omits rows that have no latest version entry", async () => {
+    const document = {
+      id: "doc_missing_version",
+      ownerUserId: "owner",
+      updatedAt: new Date("2026-06-12T00:00:00.000Z"),
+    };
+    const chain = {
+      from: vi.fn(() => chain),
+      where: vi.fn(() => chain),
+      orderBy: vi.fn(async () => [document]),
+    };
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+    helpers.findSharedDocumentIds.mockResolvedValue([]);
+    helpers.findLatestVersionsForDocuments.mockResolvedValue(new Map());
+
+    const { listAccessibleDocuments } = await import("./list-documents");
+    const result = await listAccessibleDocuments(db, {
+      ownerUserId: "owner",
+      sharedWithEmail: null,
+      access: "all",
+    });
+
+    expect(result).toEqual([]);
+  });
 });
diff --git a/src/server/repositories/docs/list-documents.ts b/src/server/repositories/docs/list-documents.ts
index 951396d..31c34da 100644
--- a/src/server/repositories/docs/list-documents.ts
+++ b/src/server/repositories/docs/list-documents.ts
@@ -15,8 +15,9 @@ export async function listAccessibleDocuments(
   input: ListDocumentsInput,
 ): Promise<DocumentListItem[]> {
   const ownedCondition = eq(documents.ownerUserId, input.ownerUserId);
+  const shouldResolveSharedIds = input.access !== "owned";
   const sharedDocumentIds =
-    input.sharedWithEmail === null
+    !shouldResolveSharedIds || input.sharedWithEmail === null
       ? []
       : await findSharedDocumentIds(db, input.sharedWithEmail);
 
diff --git a/src/server/services/docs/get-document.ts b/src/server/services/docs/get-document.ts
index 98e9cf6..cf43d0e 100644
--- a/src/server/services/docs/get-document.ts
+++ b/src/server/services/docs/get-document.ts
@@ -3,10 +3,9 @@ import { findLatestVersion } from "@/server/repositories/docs/find-latest-versio
 import { findVersion } from "@/server/repositories/docs/find-version";
 import type { ApiContext } from "@/server/foundation/context";
 import { forbiddenError, notFoundError } from "@/server/foundation/errors";
+import { resolveDocumentAccess } from "@/server/foundation/helpers/resolve-document-access";
 import type { DocumentRouteParams, GetDocumentQuery } from "@/types/docs";
 
-import { resolveDocumentAccess } from "./resolve-access";
-
 export async function getDocument(
   ctx: ApiContext,
   params: DocumentRouteParams,
diff --git a/src/server/services/docs/share-document.test.ts b/src/server/services/docs/share-document.test.ts
index 50e6909..e4270bc 100644
--- a/src/server/services/docs/share-document.test.ts
+++ b/src/server/services/docs/share-document.test.ts
@@ -1,4 +1,4 @@
-import { describe, expect, it, vi } from "vitest";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 
 import { apiContext, document } from "./test-helpers";
 
@@ -19,6 +19,10 @@ vi.mock("@/server/repositories/docs/upsert-shares", () => ({
 }));
 
 describe("shareDocument", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
   it("allows the owner to share a document", async () => {
     const foundDocument = document();
     repository.findDocumentById.mockResolvedValue(foundDocument);
@@ -41,19 +45,20 @@ describe("shareDocument", () => {
     expect(result.access).toBe("owned");
   });
 
-  it("allows a shared user to share a document", async () => {
+  it("does not allow a shared user to share a document", async () => {
     const foundDocument = document({ ownerUserId: "owner" });
     repository.findDocumentById.mockResolvedValue(foundDocument);
     repository.isSharedWithEmail.mockResolvedValue(true);
     repository.upsertDocumentShares.mockResolvedValue([]);
 
     const { shareDocument } = await import("./share-document");
-    const result = await shareDocument(
-      apiContext("reader", "reader@example.com"),
-      { id: foundDocument.id },
-      { emails: ["reviewer@example.com"] },
-    );
-
-    expect(result.access).toBe("shared");
+    await expect(
+      shareDocument(
+        apiContext("reader", "reader@example.com"),
+        { id: foundDocument.id },
+        { emails: ["reviewer@example.com"] },
+      ),
+    ).rejects.toMatchObject({ status: 403, code: "forbidden" });
+    expect(repository.upsertDocumentShares).not.toHaveBeenCalled();
   });
 });
diff --git a/src/server/services/docs/share-document.ts b/src/server/services/docs/share-document.ts
index 664eb35..0345b5f 100644
--- a/src/server/services/docs/share-document.ts
+++ b/src/server/services/docs/share-document.ts
@@ -2,10 +2,9 @@ import { findDocumentById } from "@/server/repositories/docs/find-document-by-id
 import { upsertDocumentShares } from "@/server/repositories/docs/upsert-shares";
 import type { ApiContext } from "@/server/foundation/context";
 import { forbiddenError, notFoundError } from "@/server/foundation/errors";
+import { resolveDocumentAccess } from "@/server/foundation/helpers/resolve-document-access";
 import type { DocumentRouteParams, ShareDocumentRequest } from "@/types/docs";
 
-import { resolveDocumentAccess } from "./resolve-access";
-
 export async function shareDocument(
   ctx: ApiContext,
   params: DocumentRouteParams,
@@ -17,8 +16,8 @@ export async function shareDocument(
   }
 
   const access = await resolveDocumentAccess(ctx, document);
-  if (!access) {
-    throw forbiddenError("Document access denied");
+  if (access !== "owned") {
+    throw forbiddenError("Only document owners can share");
   }
 
   const shares = await upsertDocumentShares(ctx.db, {
diff --git a/src/server/services/docs/update-document.ts b/src/server/services/docs/update-document.ts
index a79b58a..2dd1085 100644
--- a/src/server/services/docs/update-document.ts
+++ b/src/server/services/docs/update-document.ts
@@ -6,10 +6,9 @@ import {
   forbiddenError,
   notFoundError,
 } from "@/server/foundation/errors";
+import { isUniqueViolation } from "@/server/foundation/helpers/db-errors";
 import type { DocumentRouteParams, UpdateDocumentRequest } from "@/types/docs";
 
-import { isUniqueViolation } from "./db-errors";
-
 export async function updateDocument(
   ctx: ApiContext,
   params: DocumentRouteParams,
diff --git a/src/server/handlers/types.ts b/src/types/api-handler.ts
similarity index 100%
rename from src/server/handlers/types.ts
rename to src/types/api-handler.ts

From ff98da63ae1f9d10dd9398b2694a76a8946f810d Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Mon, 27 Jul 2026 21:39:02 -0300
Subject: [PATCH 18/26] refactor: emit wide events from the API log foundation

Rework the log foundation around one canonical wide event per request.
`createRequestLog` builds the event, context and services enrich it with
business fields while the request runs, and the handler wrapper emits it
once with status, duration and error dimensions.

Route the unsynced/unauthenticated context failures through the errors
foundation instead of a pre-built Response, which removes the need to
read the error code back out of the response body.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .../2026-06-12-docs-api-versioning-design.md  |  20 +--
 src/server/foundation/context.test.ts         |  29 ++--
 src/server/foundation/context.ts              |  38 +++---
 .../helpers/read-error-code.test.ts           |  13 --
 .../foundation/helpers/read-error-code.ts     |   9 --
 src/server/foundation/logs.test.ts            |  72 ++++++++--
 src/server/foundation/logs.ts                 | 125 ++++++++++--------
 src/server/handlers/api.test.ts               |   4 +-
 src/server/handlers/api.ts                    |  65 ++++-----
 src/server/handlers/docs/index.test.ts        |   4 +-
 src/server/services/docs/create-document.ts   |  10 +-
 src/server/services/docs/get-document.ts      |   7 +
 src/server/services/docs/list-documents.ts    |   5 +
 src/server/services/docs/share-document.ts    |   6 +
 src/server/services/docs/test-helpers.ts      |   8 ++
 src/server/services/docs/update-document.ts   |   6 +
 16 files changed, 246 insertions(+), 175 deletions(-)
 delete mode 100644 src/server/foundation/helpers/read-error-code.test.ts
 delete mode 100644 src/server/foundation/helpers/read-error-code.ts

diff --git a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
index afd719f..0ad8b78 100644
--- a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
+++ b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
@@ -130,14 +130,16 @@ Repository modules under `src/server/repositories/docs` should own Drizzle queri
 
 ### Logging
 
-`src/server/foundation/logs.ts` should expose a minimal structured logger wrapper around `console`. Logs should be emitted as one canonical wide event per request and include:
+`src/server/foundation/logs.ts` exposes `createRequestLog`, which builds one canonical wide event per request. The handler wrapper creates the log, context and services enrich it with `log.add(...)` while the request runs, and the wrapper emits it exactly once. The event includes:
 
-- `requestId`.
-- HTTP method and pathname.
-- Response status.
-- Duration in milliseconds.
+- `requestId`, HTTP method and pathname.
+- Response status, outcome, and duration in milliseconds.
+- Service, environment, and deployment identity (`deploymentId`, `region`) when available.
 - `userId` when a local user was resolved.
-- Stable error code for expected failures.
+- Business context added by the request: `documentId`, `documentAccess`, `documentVersion`, `documentCount`, `shareCount`.
+- For failures, `errorCode`, `errorType`, `errorMessage`, and `errorRetriable`.
+
+Request identity fields are written after the added context, so enrichment cannot overwrite them.
 
 Logs should not include raw HTML, complete request bodies, secret values, database URLs, or full email lists unless explicitly safe and necessary. For share operations, logging counts is safer than logging every email.
 
@@ -149,7 +151,7 @@ Add three Postgres tables to `src/db/schema.ts`.
 
 Stores stable document metadata and ownership.
 
-- `id`: text primary key, generated by the application with `crypto.randomUUID()`.
+- `id`: text primary key, generated by the application with `createUlid()` so ids sort by creation time.
 - `ownerUserId`: text, required, references `users.id`.
 - `name`: text, required.
 - `description`: text, nullable.
@@ -165,7 +167,7 @@ Indexes:
 
 Stores immutable HTML snapshots.
 
-- `id`: text primary key, generated by the application with `crypto.randomUUID()`.
+- `id`: text primary key, generated by the application with `createUlid()` so ids sort by creation time.
 - `documentId`: text, required, references `documents.id`.
 - `versionNumber`: integer, required, starts at `1`.
 - `html`: text, required.
@@ -181,7 +183,7 @@ Indexes:
 
 Stores email-based access grants. The share target does not need to exist in `users` yet.
 
-- `id`: text primary key, generated by the application with `crypto.randomUUID()`.
+- `id`: text primary key, generated by the application with `createUlid()` so ids sort by creation time.
 - `documentId`: text, required, references `documents.id`.
 - `sharedWithEmail`: text, required, stored lowercased and trimmed.
 - `sharedByUserId`: text, required, references `users.id`.
diff --git a/src/server/foundation/context.test.ts b/src/server/foundation/context.test.ts
index 09d3e47..84895cb 100644
--- a/src/server/foundation/context.test.ts
+++ b/src/server/foundation/context.test.ts
@@ -1,5 +1,7 @@
 import { beforeEach, describe, expect, it, vi } from "vitest";
 
+import type { RequestLog } from "./logs";
+
 vi.mock("@clerk/nextjs/server", () => ({
   auth: vi.fn(),
 }));
@@ -10,35 +12,29 @@ describe("createApiContext", () => {
     vi.clearAllMocks();
   });
 
-  it("returns 401 when Clerk has no authenticated user", async () => {
+  it("returns an unauthorized error when Clerk has no authenticated user", async () => {
     const { auth } = await import("@clerk/nextjs/server");
     vi.mocked(auth).mockResolvedValue({ userId: null } as never);
 
     const { createApiContext } = await import("./context");
-    const result = await createApiContext(fakeDb());
+    const result = await createApiContext({ log: fakeLog(), database: fakeDb() });
 
     expect(result.ok).toBe(false);
     if (!result.ok) {
-      expect(result.response.status).toBe(401);
-      await expect(result.response.json()).resolves.toMatchObject({
-        error: { code: "unauthorized" },
-      });
+      expect(result.error).toMatchObject({ status: 401, code: "unauthorized" });
     }
   });
 
-  it("returns 409 when the Clerk user has no active local user row", async () => {
+  it("returns a conflict error when the Clerk user has no active local user row", async () => {
     const { auth } = await import("@clerk/nextjs/server");
     vi.mocked(auth).mockResolvedValue({ userId: "clerk_123" } as never);
 
     const { createApiContext } = await import("./context");
-    const result = await createApiContext(fakeDb(null));
+    const result = await createApiContext({ log: fakeLog(), database: fakeDb(null) });
 
     expect(result.ok).toBe(false);
     if (!result.ok) {
-      expect(result.response.status).toBe(409);
-      await expect(result.response.json()).resolves.toMatchObject({
-        error: { code: "user_not_synced" },
-      });
+      expect(result.error).toMatchObject({ status: 409, code: "user_not_synced" });
     }
   });
 
@@ -56,19 +52,26 @@ describe("createApiContext", () => {
       updatedAt: new Date("2026-06-12T00:00:00.000Z"),
       deletedAt: null,
     });
+    const log = fakeLog();
 
     const { createApiContext } = await import("./context");
-    const result = await createApiContext(database);
+    const result = await createApiContext({ log, database });
 
     expect(result.ok).toBe(true);
     if (result.ok) {
       expect(result.ctx.db).toBe(database);
       expect(result.ctx.user.id).toBe("user_1");
       expect(result.ctx.userEmail).toBe("ada@example.com");
+      expect(result.ctx.log).toBe(log);
     }
+    expect(log.add).toHaveBeenCalledWith({ userId: "user_1" });
   });
 });
 
+function fakeLog(): RequestLog {
+  return { add: vi.fn(), emit: vi.fn() };
+}
+
 function fakeDb(user: unknown = null) {
   return {
     query: {
diff --git a/src/server/foundation/context.ts b/src/server/foundation/context.ts
index 72bb3ad..36a24bf 100644
--- a/src/server/foundation/context.ts
+++ b/src/server/foundation/context.ts
@@ -2,13 +2,13 @@ import { auth } from "@clerk/nextjs/server";
 
 import { db, type User } from "@/db";
 import { normalizeEmail } from "@/server/foundation/helpers/email";
+import type { RequestLog } from "@/server/foundation/logs";
 import {
   findActiveUserByClerkId,
   type UserLookupDb,
 } from "@/server/repositories/users/find-active-user-by-clerk-id";
-import { apiErrorResponse } from "@/server/foundation/responses";
 
-import { conflictError, unauthorizedError } from "./errors";
+import { conflictError, unauthorizedError, type ApiError } from "./errors";
 
 type Db = typeof db;
 
@@ -17,39 +17,46 @@ export type ApiContext = {
   requestId: string;
   user: User;
   userEmail: string | null;
+  log: RequestLog;
 };
 
 export type ApiContextResult =
   | { ok: true; ctx: ApiContext }
-  | { ok: false; response: Response };
+  | { ok: false; error: ApiError };
 
-export async function createApiContext(
-  database: UserLookupDb = db as UserLookupDb,
+export type CreateApiContextOptions = {
+  log: RequestLog;
+  requestId?: string;
+  database?: UserLookupDb;
+};
+
+export async function createApiContext({
+  log,
   requestId = crypto.randomUUID(),
-): Promise<ApiContextResult> {
+  database = db as UserLookupDb,
+}: CreateApiContextOptions): Promise<ApiContextResult> {
   const session = await auth();
 
   if (!session.userId) {
-    return {
-      ok: false,
-      response: apiErrorResponse(unauthorizedError()),
-    };
+    return { ok: false, error: unauthorizedError() };
   }
 
+  log.add({ clerkUserId: session.userId });
+
   const user = await findActiveUserByClerkId(database, session.userId);
 
   if (!user) {
     return {
       ok: false,
-      response: apiErrorResponse(
-        conflictError(
-          "Authenticated user has not been synchronized yet",
-          "user_not_synced",
-        ),
+      error: conflictError(
+        "Authenticated user has not been synchronized yet",
+        "user_not_synced",
       ),
     };
   }
 
+  log.add({ userId: user.id });
+
   return {
     ok: true,
     ctx: {
@@ -57,6 +64,7 @@ export async function createApiContext(
       requestId,
       user,
       userEmail: normalizeEmail(user.primaryEmail),
+      log,
     },
   };
 }
diff --git a/src/server/foundation/helpers/read-error-code.test.ts b/src/server/foundation/helpers/read-error-code.test.ts
deleted file mode 100644
index c1016f2..0000000
--- a/src/server/foundation/helpers/read-error-code.test.ts
+++ /dev/null
@@ -1,13 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import { readErrorCode } from "./read-error-code";
-
-describe("readErrorCode", () => {
-  it("reads error code from JSON responses and ignores invalid bodies", async () => {
-    await expect(
-      readErrorCode(Response.json({ error: { code: "forbidden" } })),
-    ).resolves.toBe("forbidden");
-
-    await expect(readErrorCode(new Response("not json"))).resolves.toBeUndefined();
-  });
-});
diff --git a/src/server/foundation/helpers/read-error-code.ts b/src/server/foundation/helpers/read-error-code.ts
deleted file mode 100644
index abdeed7..0000000
--- a/src/server/foundation/helpers/read-error-code.ts
+++ /dev/null
@@ -1,9 +0,0 @@
-export async function readErrorCode(response: Response): Promise<string | undefined> {
-  try {
-    const clone = response.clone();
-    const body = (await clone.json()) as { error?: { code?: string } };
-    return body.error?.code;
-  } catch {
-    return undefined;
-  }
-}
diff --git a/src/server/foundation/logs.test.ts b/src/server/foundation/logs.test.ts
index e6e4010..aa8cbb3 100644
--- a/src/server/foundation/logs.test.ts
+++ b/src/server/foundation/logs.test.ts
@@ -1,36 +1,82 @@
 import { afterEach, describe, expect, it, vi } from "vitest";
 
-import { getErrorType, logApiRequest } from "./logs";
+import { forbiddenError } from "./errors";
+import { createRequestLog, describeError, getErrorType } from "./logs";
 
 describe("API logs", () => {
   afterEach(() => {
     vi.restoreAllMocks();
   });
 
-  it("emits one structured event for an API request", () => {
+  it("emits one wide event carrying the context added during the request", () => {
     const info = vi.spyOn(console, "info").mockImplementation(() => {});
-
-    logApiRequest({
+    const log = createRequestLog({
       requestId: "req_1",
       method: "GET",
-      pathname: "/api/docs",
-      status: 200,
-      outcome: "success",
-      durationMs: 12,
-      userId: "user_1",
+      path: "/api/docs",
     });
 
+    log.add({ userId: "user_1" });
+    log.add({ documentId: "doc_1", documentAccess: "owned" });
+    log.emit({ status: 200, durationMs: 12 });
+
+    expect(info).toHaveBeenCalledTimes(1);
     expect(info).toHaveBeenCalledWith(
       expect.objectContaining({
         event: "api.request",
-        schemaVersion: 1,
-        service: expect.objectContaining({ name: "shareable-docs" }),
-        request: expect.objectContaining({ id: "req_1", path: "/api/docs" }),
-        user: { id: "user_1" },
+        schemaVersion: 2,
+        service: "shareable-docs",
+        requestId: "req_1",
+        method: "GET",
+        path: "/api/docs",
+        statusCode: 200,
+        outcome: "success",
+        durationMs: 12,
+        userId: "user_1",
+        documentId: "doc_1",
+        documentAccess: "owned",
+      }),
+    );
+  });
+
+  it("keeps request fields authoritative over added context", () => {
+    const info = vi.spyOn(console, "info").mockImplementation(() => {});
+    const log = createRequestLog({
+      requestId: "req_1",
+      method: "GET",
+      path: "/api/docs",
+    });
+
+    log.add({ requestId: "spoofed", statusCode: 200 });
+    log.emit({ status: 500, durationMs: 3 });
+
+    expect(info).toHaveBeenCalledWith(
+      expect.objectContaining({
+        requestId: "req_1",
+        statusCode: 500,
+        outcome: "error",
       }),
     );
   });
 
+  it("describes API errors with code, message and retriability", () => {
+    expect(describeError(forbiddenError("Document access denied"))).toEqual({
+      errorCode: "forbidden",
+      errorType: "ApiError",
+      errorMessage: "Document access denied",
+      errorRetriable: false,
+    });
+  });
+
+  it("describes unexpected errors as retriable internal failures", () => {
+    expect(describeError(new TypeError("bad"))).toEqual({
+      errorCode: "internal_error",
+      errorType: "TypeError",
+      errorMessage: "bad",
+      errorRetriable: true,
+    });
+  });
+
   it("classifies thrown values for logs", () => {
     expect(getErrorType(new TypeError("bad"))).toBe("TypeError");
     expect(getErrorType("bad")).toBe("string");
diff --git a/src/server/foundation/logs.ts b/src/server/foundation/logs.ts
index 06acec8..5a2ddb0 100644
--- a/src/server/foundation/logs.ts
+++ b/src/server/foundation/logs.ts
@@ -1,69 +1,82 @@
+import { isApiError } from "./errors";
+
 type ApiLogOutcome = "success" | "error";
 
-export type ApiLogEvent = {
-  event: "api.request";
-  schemaVersion: 1;
-  timestamp: string;
-  service: {
-    name: "shareable-docs";
-    environment: string;
-  };
-  request: {
-    id: string;
-    method: string;
-    path: string;
-  };
-  http: {
-    statusCode: number;
-  };
-  outcome: ApiLogOutcome;
-  duration: {
-    ms: number;
-  };
-  user?: {
-    id: string;
-  };
-  error?: {
-    code: string;
-    type: string;
-  };
+/**
+ * One wide event per request, enriched while the request runs and emitted once
+ * at the end. Handlers and services add business context through `add`, so the
+ * event carries the facts needed to answer questions about a request instead of
+ * a trail of statements about the code that served it.
+ */
+export type RequestLog = {
+  add: (fields: Record<string, unknown>) => void;
+  emit: (result: { status: number; durationMs: number; error?: unknown }) => void;
 };
 
-export type ApiRequestLogFields = {
+export type RequestLogSource = {
   requestId: string;
   method: string;
-  pathname: string;
-  status: number;
-  outcome: ApiLogOutcome;
-  durationMs: number;
-  userId?: string;
-  error?: ApiLogEvent["error"];
+  path: string;
 };
 
-export function logApiRequest(fields: ApiRequestLogFields): void {
-  console.info({
-    event: "api.request",
-    schemaVersion: 1,
-    timestamp: new Date().toISOString(),
-    service: {
-      name: "shareable-docs",
-      environment: process.env.NODE_ENV ?? "development",
-    },
-    request: {
-      id: fields.requestId,
-      method: fields.method,
-      path: fields.pathname,
-    },
-    http: {
-      statusCode: fields.status,
+export function createRequestLog(source: RequestLogSource): RequestLog {
+  const context: Record<string, unknown> = {};
+
+  return {
+    add(fields) {
+      Object.assign(context, fields);
     },
-    outcome: fields.outcome,
-    duration: {
-      ms: fields.durationMs,
+    emit({ status, durationMs, error }) {
+      console.info({
+        ...context,
+        event: "api.request",
+        schemaVersion: 2,
+        timestamp: new Date().toISOString(),
+        service: "shareable-docs",
+        environment: process.env.NODE_ENV ?? "development",
+        ...deploymentFields(),
+        requestId: source.requestId,
+        method: source.method,
+        path: source.path,
+        statusCode: status,
+        outcome: (status >= 400 ? "error" : "success") satisfies ApiLogOutcome,
+        durationMs,
+        ...(error === undefined ? {} : describeError(error)),
+      });
     },
-    ...(fields.userId === undefined ? {} : { user: { id: fields.userId } }),
-    ...(fields.error === undefined ? {} : { error: fields.error }),
-  } satisfies ApiLogEvent);
+  };
+}
+
+function deploymentFields() {
+  const deploymentId = process.env.VERCEL_DEPLOYMENT_ID;
+  const region = process.env.VERCEL_REGION;
+
+  return {
+    ...(deploymentId === undefined ? {} : { deploymentId }),
+    ...(region === undefined ? {} : { region }),
+  };
+}
+
+/**
+ * Errors are described with the dimensions an on-call reader filters by: which
+ * failure it was, where it came from, and whether retrying could help.
+ */
+export function describeError(error: unknown) {
+  if (isApiError(error)) {
+    return {
+      errorCode: error.code,
+      errorType: "ApiError",
+      errorMessage: error.message,
+      errorRetriable: error.status >= 500,
+    };
+  }
+
+  return {
+    errorCode: "internal_error",
+    errorType: getErrorType(error),
+    errorMessage: error instanceof Error ? error.message : String(error),
+    errorRetriable: true,
+  };
 }
 
 export function getErrorType(error: unknown): string {
diff --git a/src/server/handlers/api.test.ts b/src/server/handlers/api.test.ts
index 19cdc00..90d9c3c 100644
--- a/src/server/handlers/api.test.ts
+++ b/src/server/handlers/api.test.ts
@@ -10,13 +10,13 @@ vi.mock("@/server/foundation/context", () => ({
       user: { id: "user_1" },
       userEmail: "ada@example.com",
       requestId: "req_test",
+      log: { add: vi.fn(), emit: vi.fn() },
     },
   }),
 }));
 
 vi.mock("@/server/foundation/logs", () => ({
-  getErrorType: vi.fn(() => "Error"),
-  logApiRequest: vi.fn(),
+  createRequestLog: vi.fn(() => ({ add: vi.fn(), emit: vi.fn() })),
 }));
 
 describe("API handler foundation", () => {
diff --git a/src/server/handlers/api.ts b/src/server/handlers/api.ts
index 301d2a6..ecf573c 100644
--- a/src/server/handlers/api.ts
+++ b/src/server/handlers/api.ts
@@ -1,9 +1,8 @@
 import { createApiContext } from "@/server/foundation/context";
-import { isApiError } from "@/server/foundation/errors";
-import { readErrorCode } from "@/server/foundation/helpers/read-error-code";
+import { internalError, isApiError } from "@/server/foundation/errors";
 import { getRequestId } from "@/server/foundation/helpers/request-id";
 import { apiErrorResponse } from "@/server/foundation/responses";
-import { getErrorType, logApiRequest } from "@/server/foundation/logs";
+import { createRequestLog } from "@/server/foundation/logs";
 import type { ApiHandler } from "@/types/api-handler";
 
 export function withApiHandler<TParams = unknown>(
@@ -13,60 +12,42 @@ export function withApiHandler<TParams = unknown>(
     const startedAt = performance.now();
     const requestId = getRequestId(request);
     const url = new URL(request.url);
-    let userId: string | undefined;
-    let error:
-      | {
-          code: string;
-          type: string;
-        }
-      | undefined;
-    let response: Response | undefined;
+    const log = createRequestLog({
+      requestId,
+      method: request.method,
+      path: url.pathname,
+    });
 
     try {
-      const contextResult = await createApiContext(undefined, requestId);
+      const contextResult = await createApiContext({ log, requestId });
 
       if (!contextResult.ok) {
-        response = contextResult.response;
-        const code = await readErrorCode(response);
-        error = code ? { code, type: "ApiError" } : undefined;
-        return response;
+        throw contextResult.error;
       }
 
-      userId = contextResult.ctx.user.id;
       const params = await routeContext?.params;
-      response = await handler({
+      const response = await handler({
         request,
         ctx: contextResult.ctx,
         params: params as TParams,
       });
+
+      log.emit({ status: response.status, durationMs: elapsedMs(startedAt) });
       return response;
     } catch (caught) {
-      if (isApiError(caught)) {
-        error = { code: caught.code, type: "ApiError" };
-        response = apiErrorResponse(caught);
-        return response;
-      }
+      const error = isApiError(caught) ? caught : internalError();
 
-      error = { code: "internal_error", type: getErrorType(caught) };
-      response = apiErrorResponse({
-        kind: "api_error",
-        code: "internal_error",
-        message: "Internal server error",
-        status: 500,
-      });
-      return response;
-    } finally {
-      const status = response?.status ?? 500;
-      logApiRequest({
-        requestId,
-        method: request.method,
-        pathname: url.pathname,
-        status,
-        outcome: status >= 400 ? "error" : "success",
-        durationMs: Math.round(performance.now() - startedAt),
-        userId,
-        error,
+      log.emit({
+        status: error.status,
+        durationMs: elapsedMs(startedAt),
+        error: caught,
       });
+
+      return apiErrorResponse(error);
     }
   };
 }
+
+function elapsedMs(startedAt: number): number {
+  return Math.round(performance.now() - startedAt);
+}
diff --git a/src/server/handlers/docs/index.test.ts b/src/server/handlers/docs/index.test.ts
index c37b890..94501d1 100644
--- a/src/server/handlers/docs/index.test.ts
+++ b/src/server/handlers/docs/index.test.ts
@@ -18,13 +18,13 @@ vi.mock("@/server/foundation/context", () => ({
       requestId: "req_test",
       user: { id: "user_1" },
       userEmail: "ada@example.com",
+      log: { add: vi.fn(), emit: vi.fn() },
     },
   }),
 }));
 
 vi.mock("@/server/foundation/logs", () => ({
-  getErrorType: vi.fn(() => "Error"),
-  logApiRequest: vi.fn(),
+  createRequestLog: vi.fn(() => ({ add: vi.fn(), emit: vi.fn() })),
 }));
 
 vi.mock("@/server/services/docs/create-document", () => ({
diff --git a/src/server/services/docs/create-document.ts b/src/server/services/docs/create-document.ts
index 3a2053f..b077159 100644
--- a/src/server/services/docs/create-document.ts
+++ b/src/server/services/docs/create-document.ts
@@ -6,7 +6,7 @@ export async function createDocument(
   ctx: ApiContext,
   input: CreateDocumentRequest,
 ) {
-  return createDocumentRecord(ctx.db, {
+  const created = await createDocumentRecord(ctx.db, {
     document: {
       ownerUserId: ctx.user.id,
       name: input.name,
@@ -17,4 +17,12 @@ export async function createDocument(
       createdByUserId: ctx.user.id,
     },
   });
+
+  ctx.log.add({
+    documentId: created.document.id,
+    documentVersion: created.version.versionNumber,
+    documentAccess: "owned",
+  });
+
+  return created;
 }
diff --git a/src/server/services/docs/get-document.ts b/src/server/services/docs/get-document.ts
index cf43d0e..3e835fe 100644
--- a/src/server/services/docs/get-document.ts
+++ b/src/server/services/docs/get-document.ts
@@ -31,5 +31,12 @@ export async function getDocument(
     throw notFoundError("Document version not found");
   }
 
+  ctx.log.add({
+    documentId: document.id,
+    documentAccess: access,
+    documentVersion: version.versionNumber,
+    documentLatestVersion: latestVersion.versionNumber,
+  });
+
   return { document, version, latestVersion, access };
 }
diff --git a/src/server/services/docs/list-documents.ts b/src/server/services/docs/list-documents.ts
index 9e74bc5..5d9a3c1 100644
--- a/src/server/services/docs/list-documents.ts
+++ b/src/server/services/docs/list-documents.ts
@@ -12,5 +12,10 @@ export async function listDocuments(
     access: query.access,
   });
 
+  ctx.log.add({
+    listAccess: query.access,
+    documentCount: documents.length,
+  });
+
   return { documents };
 }
diff --git a/src/server/services/docs/share-document.ts b/src/server/services/docs/share-document.ts
index 0345b5f..0cfaea9 100644
--- a/src/server/services/docs/share-document.ts
+++ b/src/server/services/docs/share-document.ts
@@ -26,5 +26,11 @@ export async function shareDocument(
     sharedByUserId: ctx.user.id,
   });
 
+  ctx.log.add({
+    documentId: document.id,
+    documentAccess: access,
+    shareCount: shares.length,
+  });
+
   return { document, shares, access };
 }
diff --git a/src/server/services/docs/test-helpers.ts b/src/server/services/docs/test-helpers.ts
index 8429bdb..3258471 100644
--- a/src/server/services/docs/test-helpers.ts
+++ b/src/server/services/docs/test-helpers.ts
@@ -1,5 +1,12 @@
+import { vi } from "vitest";
+
 import type { User } from "@/db";
 import type { ApiContext } from "@/server/foundation/context";
+import type { RequestLog } from "@/server/foundation/logs";
+
+export function requestLog(): RequestLog {
+  return { add: vi.fn(), emit: vi.fn() };
+}
 
 export function apiContext(userId: string, email?: string | null): ApiContext {
   const now = new Date("2026-06-12T00:00:00.000Z");
@@ -20,6 +27,7 @@ export function apiContext(userId: string, email?: string | null): ApiContext {
       deletedAt: null,
     } satisfies User,
     userEmail: primaryEmail,
+    log: requestLog(),
   };
 }
 
diff --git a/src/server/services/docs/update-document.ts b/src/server/services/docs/update-document.ts
index 2dd1085..1a11416 100644
--- a/src/server/services/docs/update-document.ts
+++ b/src/server/services/docs/update-document.ts
@@ -33,6 +33,12 @@ export async function updateDocument(
     throw notFoundError("Document not found");
   }
 
+  ctx.log.add({
+    documentId: document.id,
+    documentAccess: "owned",
+    documentVersion: updated.version.versionNumber,
+  });
+
   return updated;
 }
 

From 2bea1d17b83a8ae4866468f669c47bb3440c828c Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Mon, 27 Jul 2026 21:50:16 -0300
Subject: [PATCH 19/26] fix: keep unexpected error messages out of request logs

Driver and third-party error messages can carry connection strings, SQL,
or request content. Log unexpected failures by type with a stable generic
message and keep the full message only for errors the application authors.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .../specs/2026-06-12-docs-api-versioning-design.md        | 2 +-
 src/server/foundation/logs.test.ts                        | 8 +++++---
 src/server/foundation/logs.ts                             | 6 +++++-
 3 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
index 0ad8b78..9c7e362 100644
--- a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
+++ b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
@@ -137,7 +137,7 @@ Repository modules under `src/server/repositories/docs` should own Drizzle queri
 - Service, environment, and deployment identity (`deploymentId`, `region`) when available.
 - `userId` when a local user was resolved.
 - Business context added by the request: `documentId`, `documentAccess`, `documentVersion`, `documentCount`, `shareCount`.
-- For failures, `errorCode`, `errorType`, `errorMessage`, and `errorRetriable`.
+- For failures, `errorCode`, `errorType`, `errorMessage`, and `errorRetriable`. Only messages the application authors are logged; unexpected errors are recorded by type with a stable generic message, because driver and third-party messages can carry connection strings, SQL, or request content.
 
 Request identity fields are written after the added context, so enrichment cannot overwrite them.
 
diff --git a/src/server/foundation/logs.test.ts b/src/server/foundation/logs.test.ts
index aa8cbb3..9c88e28 100644
--- a/src/server/foundation/logs.test.ts
+++ b/src/server/foundation/logs.test.ts
@@ -68,11 +68,13 @@ describe("API logs", () => {
     });
   });
 
-  it("describes unexpected errors as retriable internal failures", () => {
-    expect(describeError(new TypeError("bad"))).toEqual({
+  it("describes unexpected errors without leaking their raw message", () => {
+    expect(
+      describeError(new TypeError("connect to postgres://user:secret@host failed")),
+    ).toEqual({
       errorCode: "internal_error",
       errorType: "TypeError",
-      errorMessage: "bad",
+      errorMessage: "Unexpected error",
       errorRetriable: true,
     });
   });
diff --git a/src/server/foundation/logs.ts b/src/server/foundation/logs.ts
index 5a2ddb0..af23bf9 100644
--- a/src/server/foundation/logs.ts
+++ b/src/server/foundation/logs.ts
@@ -60,6 +60,10 @@ function deploymentFields() {
 /**
  * Errors are described with the dimensions an on-call reader filters by: which
  * failure it was, where it came from, and whether retrying could help.
+ *
+ * Only messages we author are logged. Unexpected errors bubble up from drivers
+ * and third parties, so their messages can carry connection strings, SQL, or
+ * request content; the error type is the safe dimension to keep.
  */
 export function describeError(error: unknown) {
   if (isApiError(error)) {
@@ -74,7 +78,7 @@ export function describeError(error: unknown) {
   return {
     errorCode: "internal_error",
     errorType: getErrorType(error),
-    errorMessage: error instanceof Error ? error.message : String(error),
+    errorMessage: "Unexpected error",
     errorRetriable: true,
   };
 }

From bdb51a9f0482b85b463cac68c0d855bd96743c2b Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Mon, 27 Jul 2026 21:51:00 -0300
Subject: [PATCH 20/26] refactor: read shared access with an early return

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 src/server/foundation/helpers/resolve-document-access.ts | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/src/server/foundation/helpers/resolve-document-access.ts b/src/server/foundation/helpers/resolve-document-access.ts
index 56b0ca8..cc2d56b 100644
--- a/src/server/foundation/helpers/resolve-document-access.ts
+++ b/src/server/foundation/helpers/resolve-document-access.ts
@@ -10,10 +10,11 @@ export async function resolveDocumentAccess(
     return "owned";
   }
 
-  const hasSharedAccess =
-    ctx.userEmail !== null
-      ? await isSharedWithEmail(ctx.db, document.id, ctx.userEmail)
-      : false;
+  if (ctx.userEmail === null) {
+    return null;
+  }
+
+  const hasSharedAccess = await isSharedWithEmail(ctx.db, document.id, ctx.userEmail);
 
   if (hasSharedAccess) {
     return "shared";

From e97fec33adbe24ea2173301fa1e70c058c9bae17 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Mon, 27 Jul 2026 22:07:32 -0300
Subject: [PATCH 21/26] fix: type the latest-version map and scope its outer
 query

The empty-input branch returned an untyped Map, widening the function's
return type to include any and silently disabling type checking on every
latestVersion read in the listing flow. Also repeat the document-id
predicate on the outer select so correctness does not rest on the join
alone.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .../docs/find-latest-versions-for-documents.test.ts   |  4 +++-
 .../docs/find-latest-versions-for-documents.ts        | 11 ++++++-----
 2 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/src/server/repositories/docs/find-latest-versions-for-documents.test.ts b/src/server/repositories/docs/find-latest-versions-for-documents.test.ts
index b4b1bd2..e692cef 100644
--- a/src/server/repositories/docs/find-latest-versions-for-documents.test.ts
+++ b/src/server/repositories/docs/find-latest-versions-for-documents.test.ts
@@ -26,7 +26,8 @@ describe("findLatestVersionsForDocuments", () => {
     const rows = versions.map((version) => ({ document_versions: version }));
     const latestRowsQuery = {
       from: vi.fn(() => latestRowsQuery),
-      innerJoin: vi.fn(async () => rows),
+      innerJoin: vi.fn(() => latestRowsQuery),
+      where: vi.fn(async () => rows),
     };
     const db = {
       select: vi
@@ -39,6 +40,7 @@ describe("findLatestVersionsForDocuments", () => {
 
     expect(latestSubquery.groupBy).toHaveBeenCalledTimes(1);
     expect(latestRowsQuery.innerJoin).toHaveBeenCalledTimes(1);
+    expect(latestRowsQuery.where).toHaveBeenCalledTimes(1);
     expect(latest.get("doc_1")).toBe(versions[0]);
     expect(latest.get("doc_2")).toBe(versions[1]);
   });
diff --git a/src/server/repositories/docs/find-latest-versions-for-documents.ts b/src/server/repositories/docs/find-latest-versions-for-documents.ts
index 22bf6f9..424c48c 100644
--- a/src/server/repositories/docs/find-latest-versions-for-documents.ts
+++ b/src/server/repositories/docs/find-latest-versions-for-documents.ts
@@ -1,14 +1,14 @@
 import { and, eq, inArray, max } from "drizzle-orm";
 
-import { documentVersions } from "@/db";
+import { documentVersions, type DocumentVersion } from "@/db";
 import type { DocumentsDatabase } from "@/types/docs-repository";
 
 export async function findLatestVersionsForDocuments(
   db: DocumentsDatabase,
   documentIds: string[],
-) {
+): Promise<Map<string, DocumentVersion>> {
   if (documentIds.length === 0) {
-    return new Map();
+    return new Map<string, DocumentVersion>();
   }
 
   const latestVersionNumbers = db
@@ -30,9 +30,10 @@ export async function findLatestVersionsForDocuments(
         eq(documentVersions.documentId, latestVersionNumbers.documentId),
         eq(documentVersions.versionNumber, latestVersionNumbers.versionNumber),
       ),
-    );
+    )
+    .where(inArray(documentVersions.documentId, documentIds));
 
-  const latestVersions = new Map<string, typeof documentVersions.$inferSelect>();
+  const latestVersions = new Map<string, DocumentVersion>();
 
   for (const row of rows) {
     latestVersions.set(row.document_versions.documentId, row.document_versions);

From 13962a097b227318222b586015adeb65620f7003 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Mon, 27 Jul 2026 22:07:32 -0300
Subject: [PATCH 22/26] fix: bound the size of document and share requests

No request schema had an upper bound, so one call could store a document
of arbitrary size or insert an unbounded number of share rows. Cap name,
description, html and the share email list on both the request and the
database write schemas.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .../2026-06-12-docs-api-versioning-design.md  | 12 +++++----
 src/server/handlers/docs/index.test.ts        | 27 +++++++++++++++++++
 src/types/docs.ts                             | 22 +++++++++++----
 3 files changed, 51 insertions(+), 10 deletions(-)

diff --git a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
index 9c7e362..1312e95 100644
--- a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
+++ b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
@@ -201,17 +201,19 @@ Create shared schemas for endpoint inputs, database inserts, and document-facing
 API schemas:
 
 - `createDocumentRequestSchema`
-  - `name`: non-empty string.
-  - `description`: optional string; blank strings may be normalized to `null`.
-  - `html`: non-empty string.
+  - `name`: non-empty string of at most 200 characters.
+  - `description`: optional string of at most 2000 characters; blank strings may be normalized to `null`.
+  - `html`: non-empty string of at most 1,000,000 characters.
 - `updateDocumentRequestSchema`
-  - `html`: non-empty string.
+  - `html`: non-empty string of at most 1,000,000 characters.
 - `getDocumentQuerySchema`
   - `version`: optional positive integer parsed from the query string.
 - `listDocumentsQuerySchema`
   - `access`: optional enum `"all" | "owned" | "shared"`, default `"all"`.
 - `shareDocumentRequestSchema`
-  - `emails`: non-empty array of valid email strings.
+  - `emails`: non-empty array of at most 50 valid email strings; the limit applies to what the caller sent, before deduplication.
+
+Every request schema is bounded so a single call cannot store an arbitrarily large document or insert an unbounded number of share rows. The same bounds are reused by the database write schemas, so `newDocumentSchema` enforces the name and description limits and `newDocumentVersionSchema` enforces the HTML limit at the persistence boundary as well.
 
 Database write schemas:
 
diff --git a/src/server/handlers/docs/index.test.ts b/src/server/handlers/docs/index.test.ts
index 94501d1..f73d7d4 100644
--- a/src/server/handlers/docs/index.test.ts
+++ b/src/server/handlers/docs/index.test.ts
@@ -86,6 +86,33 @@ describe("docs HTTP handlers", () => {
     });
   });
 
+  it("rejects a document larger than the html limit", async () => {
+    const { createDocumentHandler } = await import(".");
+    const response = await createDocumentHandler(
+      jsonRequest("https://app.test/api/docs", {
+        name: "Report",
+        description: null,
+        html: "a".repeat(1_000_001),
+      }),
+    );
+
+    expect(response.status).toBe(422);
+    expect(serviceMocks.createDocument).not.toHaveBeenCalled();
+  });
+
+  it("rejects a share request above the email limit", async () => {
+    const { shareDocumentHandler } = await import(".");
+    const response = await shareDocumentHandler(
+      jsonRequest("https://app.test/api/docs/share/01HZXJK8JHX7QY9N7K6X8Y2W0A", {
+        emails: Array.from({ length: 51 }, (_, index) => `user${index}@example.com`),
+      }),
+      { params: Promise.resolve({ id: "01HZXJK8JHX7QY9N7K6X8Y2W0A" }) },
+    );
+
+    expect(response.status).toBe(422);
+    expect(serviceMocks.shareDocument).not.toHaveBeenCalled();
+  });
+
   it("lists documents and rejects invalid access filters", async () => {
     serviceMocks.listDocuments.mockResolvedValue({ documents: [] });
 
diff --git a/src/types/docs.ts b/src/types/docs.ts
index 9cb0320..ffce5d0 100644
--- a/src/types/docs.ts
+++ b/src/types/docs.ts
@@ -7,6 +7,16 @@ const nonEmptyTrimmedStringSchema = z
 
 const nonEmptyStringSchema = z.string().min(1, "Required");
 
+const documentNameSchema = nonEmptyTrimmedStringSchema.max(
+  200,
+  "Name is too long",
+);
+
+const documentHtmlSchema = nonEmptyStringSchema.max(
+  1_000_000,
+  "Document is too large",
+);
+
 const dateSchema = z.date();
 const ulidSchema = z
   .string()
@@ -27,6 +37,7 @@ const storedEmailSchema = z
 const nullishDescriptionSchema = z
   .string()
   .trim()
+  .max(2000, "Description is too long")
   .nullish()
   .transform((description) => {
     if (description === undefined || description === null || description === "") {
@@ -37,13 +48,13 @@ const nullishDescriptionSchema = z
   });
 
 export const createDocumentRequestSchema = z.object({
-  name: nonEmptyTrimmedStringSchema,
+  name: documentNameSchema,
   description: nullishDescriptionSchema,
-  html: nonEmptyStringSchema,
+  html: documentHtmlSchema,
 });
 
 export const updateDocumentRequestSchema = z.object({
-  html: nonEmptyStringSchema,
+  html: documentHtmlSchema,
 });
 
 export const getDocumentQuerySchema = z.object({
@@ -58,6 +69,7 @@ export const shareDocumentRequestSchema = z.object({
   emails: z
     .array(normalizedEmailSchema)
     .nonempty()
+    .max(50, "Too many emails")
     .transform((emails) => [...new Set(emails)]),
 });
 
@@ -69,7 +81,7 @@ export const newDocumentSchema = z
   .object({
     id: ulidSchema,
     ownerUserId: nonEmptyStringSchema,
-    name: nonEmptyTrimmedStringSchema,
+    name: documentNameSchema,
     description: nullishDescriptionSchema,
     createdAt: dateSchema,
     updatedAt: dateSchema,
@@ -82,7 +94,7 @@ export const newDocumentVersionSchema = z
     id: ulidSchema,
     documentId: ulidSchema,
     versionNumber: z.number().int().positive(),
-    html: nonEmptyStringSchema,
+    html: documentHtmlSchema,
     createdByUserId: nonEmptyStringSchema,
     createdAt: dateSchema,
   })

From b8f933e6bd377c668cfa10cf5f1cfc7e1b35f291 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Mon, 27 Jul 2026 22:07:32 -0300
Subject: [PATCH 23/26] fix: normalize the email in the share access check

isSharedWithEmail queried the shares column raw while its sibling
repository normalized it. The asymmetry fails by denying access
silently, so both now share one contract.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .../docs/is-shared-with-email.test.ts         | 25 +++++++++++++++++++
 .../repositories/docs/is-shared-with-email.ts |  8 +++++-
 2 files changed, 32 insertions(+), 1 deletion(-)

diff --git a/src/server/repositories/docs/is-shared-with-email.test.ts b/src/server/repositories/docs/is-shared-with-email.test.ts
index 30f8c57..e279f7c 100644
--- a/src/server/repositories/docs/is-shared-with-email.test.ts
+++ b/src/server/repositories/docs/is-shared-with-email.test.ts
@@ -1,5 +1,7 @@
+import { and, eq } from "drizzle-orm";
 import { describe, expect, it, vi } from "vitest";
 
+import { documentShares } from "@/db";
 import type { DocumentsDatabase } from "@/types/docs-repository";
 
 import { isSharedWithEmail } from "./is-shared-with-email";
@@ -18,6 +20,29 @@ describe("isSharedWithEmail", () => {
 
     await expect(isSharedWithEmail(db, "doc_1", "reader@example.com")).resolves.toBe(false);
   });
+
+  it("queries with the normalized email", async () => {
+    const chain = selectLimitChain([{ id: "share_1" }]);
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+
+    await expect(isSharedWithEmail(db, "doc_1", " Reader@Example.com ")).resolves.toBe(true);
+
+    expect(chain.where).toHaveBeenCalledWith(
+      and(
+        eq(documentShares.documentId, "doc_1"),
+        eq(documentShares.sharedWithEmail, "reader@example.com"),
+      ),
+    );
+  });
+
+  it("returns false without querying when the email is blank", async () => {
+    const chain = selectLimitChain([{ id: "share_1" }]);
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+
+    await expect(isSharedWithEmail(db, "doc_1", "   ")).resolves.toBe(false);
+
+    expect(db.select).not.toHaveBeenCalled();
+  });
 });
 
 function selectLimitChain(rows: unknown[]) {
diff --git a/src/server/repositories/docs/is-shared-with-email.ts b/src/server/repositories/docs/is-shared-with-email.ts
index 993ee7a..98dde6f 100644
--- a/src/server/repositories/docs/is-shared-with-email.ts
+++ b/src/server/repositories/docs/is-shared-with-email.ts
@@ -1,6 +1,7 @@
 import { and, eq } from "drizzle-orm";
 
 import { documentShares } from "@/db";
+import { normalizeEmail } from "@/server/foundation/helpers/email";
 import type { DocumentsDatabase } from "@/types/docs-repository";
 
 export async function isSharedWithEmail(
@@ -8,13 +9,18 @@ export async function isSharedWithEmail(
   documentId: string,
   email: string,
 ) {
+  const normalizedEmail = normalizeEmail(email);
+  if (normalizedEmail === null) {
+    return false;
+  }
+
   const [share] = await db
     .select({ id: documentShares.id })
     .from(documentShares)
     .where(
       and(
         eq(documentShares.documentId, documentId),
-        eq(documentShares.sharedWithEmail, email),
+        eq(documentShares.sharedWithEmail, normalizedEmail),
       ),
     )
     .limit(1);

From f06b6256fd71a033dd8c6d5ad4ca3d3bb0c10a25 Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Mon, 27 Jul 2026 22:07:32 -0300
Subject: [PATCH 24/26] fix: exclude owned documents from shared listings

A document shared with its own owner was returned under access=shared
and then labelled owned, contradicting the requested filter.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .../repositories/docs/list-documents.test.ts  | 28 +++++++++++++++++++
 .../repositories/docs/list-documents.ts       |  7 +++--
 2 files changed, 33 insertions(+), 2 deletions(-)

diff --git a/src/server/repositories/docs/list-documents.test.ts b/src/server/repositories/docs/list-documents.test.ts
index 20ae2bd..82789e4 100644
--- a/src/server/repositories/docs/list-documents.test.ts
+++ b/src/server/repositories/docs/list-documents.test.ts
@@ -1,5 +1,7 @@
+import { and, inArray, isNull, ne } from "drizzle-orm";
 import { beforeEach, describe, expect, it, vi } from "vitest";
 
+import { documents } from "@/db";
 import type { DocumentsDatabase } from "@/types/docs-repository";
 
 const helpers = vi.hoisted(() => ({
@@ -89,6 +91,32 @@ describe("listAccessibleDocuments", () => {
     expect(db.select).not.toHaveBeenCalled();
   });
 
+  it("excludes documents owned by the caller from a shared listing", async () => {
+    const chain = {
+      from: vi.fn(() => chain),
+      where: vi.fn(() => chain),
+      orderBy: vi.fn(async () => []),
+    };
+    const db = { select: vi.fn(() => chain) } as unknown as DocumentsDatabase;
+    helpers.findSharedDocumentIds.mockResolvedValue(["doc_1", "doc_2"]);
+    helpers.findLatestVersionsForDocuments.mockResolvedValue(new Map());
+
+    const { listAccessibleDocuments } = await import("./list-documents");
+    await listAccessibleDocuments(db, {
+      ownerUserId: "owner",
+      sharedWithEmail: "owner@example.com",
+      access: "shared",
+    });
+
+    const expectedAccessCondition = and(
+      inArray(documents.id, ["doc_1", "doc_2"]),
+      ne(documents.ownerUserId, "owner"),
+    );
+    expect(chain.where).toHaveBeenCalledWith(
+      and(isNull(documents.deletedAt), expectedAccessCondition),
+    );
+  });
+
   it("omits rows that have no latest version entry", async () => {
     const document = {
       id: "doc_missing_version",
diff --git a/src/server/repositories/docs/list-documents.ts b/src/server/repositories/docs/list-documents.ts
index 31c34da..ba39110 100644
--- a/src/server/repositories/docs/list-documents.ts
+++ b/src/server/repositories/docs/list-documents.ts
@@ -1,4 +1,4 @@
-import { and, desc, eq, inArray, isNull, or } from "drizzle-orm";
+import { and, desc, eq, inArray, isNull, ne, or } from "drizzle-orm";
 
 import { documents } from "@/db";
 import type {
@@ -29,7 +29,10 @@ export async function listAccessibleDocuments(
     accessCondition =
       sharedDocumentIds.length === 0
         ? undefined
-        : inArray(documents.id, sharedDocumentIds);
+        : and(
+            inArray(documents.id, sharedDocumentIds),
+            ne(documents.ownerUserId, input.ownerUserId),
+          );
   } else if (sharedDocumentIds.length === 0) {
     accessCondition = ownedCondition;
   } else {

From d72fd8c68c933cdf39d8934fdfe5ee8bd8f0e0fa Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Mon, 27 Jul 2026 22:07:33 -0300
Subject: [PATCH 25/26] refactor: drop the unused document version index

No query orders or filters by document_versions.created_at; the unique
(document_id, version_number) index already serves latest-version
lookups. The migration is unreleased, so it is edited in place.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 drizzle/0001_create_document_tables.sql |  1 -
 drizzle/meta/0001_snapshot.json         | 21 ---------------------
 src/db/schema.ts                        |  4 ----
 3 files changed, 26 deletions(-)

diff --git a/drizzle/0001_create_document_tables.sql b/drizzle/0001_create_document_tables.sql
index 4d62a49..eeb9984 100644
--- a/drizzle/0001_create_document_tables.sql
+++ b/drizzle/0001_create_document_tables.sql
@@ -37,5 +37,4 @@ ALTER TABLE "document_shares" ADD CONSTRAINT "document_shares_shared_with_email_
   AND length(trim("document_shares"."shared_with_email")) > 0
 );--> statement-breakpoint
 CREATE UNIQUE INDEX "document_versions_document_id_version_unique" ON "document_versions" USING btree ("document_id","version_number");--> statement-breakpoint
-CREATE INDEX "document_versions_document_id_created_at_idx" ON "document_versions" USING btree ("document_id","created_at");--> statement-breakpoint
 CREATE INDEX "documents_owner_user_id_idx" ON "documents" USING btree ("owner_user_id");
diff --git a/drizzle/meta/0001_snapshot.json b/drizzle/meta/0001_snapshot.json
index 1a626b9..2ea1850 100644
--- a/drizzle/meta/0001_snapshot.json
+++ b/drizzle/meta/0001_snapshot.json
@@ -178,27 +178,6 @@
           "concurrently": false,
           "method": "btree",
           "with": {}
-        },
-        "document_versions_document_id_created_at_idx": {
-          "name": "document_versions_document_id_created_at_idx",
-          "columns": [
-            {
-              "expression": "document_id",
-              "isExpression": false,
-              "asc": true,
-              "nulls": "last"
-            },
-            {
-              "expression": "created_at",
-              "isExpression": false,
-              "asc": true,
-              "nulls": "last"
-            }
-          ],
-          "isUnique": false,
-          "concurrently": false,
-          "method": "btree",
-          "with": {}
         }
       },
       "foreignKeys": {
diff --git a/src/db/schema.ts b/src/db/schema.ts
index 8ec0923..390b024 100644
--- a/src/db/schema.ts
+++ b/src/db/schema.ts
@@ -78,10 +78,6 @@ export const documentVersions = pgTable(
       table.documentId,
       table.versionNumber,
     ),
-    index("document_versions_document_id_created_at_idx").on(
-      table.documentId,
-      table.createdAt,
-    ),
   ],
 );
 

From 64a17540b4c1f029594bcb0104f6dcb8474baf1c Mon Sep 17 00:00:00 2001
From: Ana Berg <ana.berg99@gmail.com>
Date: Mon, 27 Jul 2026 22:21:51 -0300
Subject: [PATCH 26/26] refactor: separate client and server failures in
 request logs

403, 404 and 409 are routine outcomes of this API. Folding them into a
single error bucket with 5xx dilutes the signal an alert needs, so the
wide event now reports success, client_error or server_error.

Also cover the handler wrapper's success path, which asserted only the
two failure branches until now.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .../2026-06-12-docs-api-versioning-design.md  |  2 +-
 src/server/foundation/logs.test.ts            | 17 +++++++++++++-
 src/server/foundation/logs.ts                 | 21 +++++++++++++++--
 src/server/handlers/api.test.ts               | 23 +++++++++++++++++--
 4 files changed, 57 insertions(+), 6 deletions(-)

diff --git a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
index 1312e95..2155bce 100644
--- a/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
+++ b/docs/superpowers/specs/2026-06-12-docs-api-versioning-design.md
@@ -133,7 +133,7 @@ Repository modules under `src/server/repositories/docs` should own Drizzle queri
 `src/server/foundation/logs.ts` exposes `createRequestLog`, which builds one canonical wide event per request. The handler wrapper creates the log, context and services enrich it with `log.add(...)` while the request runs, and the wrapper emits it exactly once. The event includes:
 
 - `requestId`, HTTP method and pathname.
-- Response status, outcome, and duration in milliseconds.
+- Response status, duration in milliseconds, and an `outcome` of `success`, `client_error`, or `server_error`. Client and server failures are separate buckets because `403`, `404`, and `409` are routine outcomes of this API and would otherwise drown the responses that mean something is broken.
 - Service, environment, and deployment identity (`deploymentId`, `region`) when available.
 - `userId` when a local user was resolved.
 - Business context added by the request: `documentId`, `documentAccess`, `documentVersion`, `documentCount`, `shareCount`.
diff --git a/src/server/foundation/logs.test.ts b/src/server/foundation/logs.test.ts
index 9c88e28..1019ab9 100644
--- a/src/server/foundation/logs.test.ts
+++ b/src/server/foundation/logs.test.ts
@@ -54,11 +54,26 @@ describe("API logs", () => {
       expect.objectContaining({
         requestId: "req_1",
         statusCode: 500,
-        outcome: "error",
+        outcome: "server_error",
       }),
     );
   });
 
+  it("separates client failures from server failures", () => {
+    const info = vi.spyOn(console, "info").mockImplementation(() => {});
+    const emitWith = (status: number) => {
+      createRequestLog({ requestId: "req_1", method: "GET", path: "/api/docs" }).emit({
+        status,
+        durationMs: 1,
+      });
+      return info.mock.calls.at(-1)?.[0] as { outcome: string };
+    };
+
+    expect(emitWith(200).outcome).toBe("success");
+    expect(emitWith(403).outcome).toBe("client_error");
+    expect(emitWith(500).outcome).toBe("server_error");
+  });
+
   it("describes API errors with code, message and retriability", () => {
     expect(describeError(forbiddenError("Document access denied"))).toEqual({
       errorCode: "forbidden",
diff --git a/src/server/foundation/logs.ts b/src/server/foundation/logs.ts
index af23bf9..104f807 100644
--- a/src/server/foundation/logs.ts
+++ b/src/server/foundation/logs.ts
@@ -1,6 +1,23 @@
 import { isApiError } from "./errors";
 
-type ApiLogOutcome = "success" | "error";
+/**
+ * Client and server failures are separate buckets: 403/404/409 are routine
+ * outcomes of this API, so folding them in with 5xx would drown the responses
+ * that actually mean something is broken.
+ */
+type ApiLogOutcome = "success" | "client_error" | "server_error";
+
+function outcomeForStatus(status: number): ApiLogOutcome {
+  if (status >= 500) {
+    return "server_error";
+  }
+
+  if (status >= 400) {
+    return "client_error";
+  }
+
+  return "success";
+}
 
 /**
  * One wide event per request, enriched while the request runs and emitted once
@@ -39,7 +56,7 @@ export function createRequestLog(source: RequestLogSource): RequestLog {
         method: source.method,
         path: source.path,
         statusCode: status,
-        outcome: (status >= 400 ? "error" : "success") satisfies ApiLogOutcome,
+        outcome: outcomeForStatus(status),
         durationMs,
         ...(error === undefined ? {} : describeError(error)),
       });
diff --git a/src/server/handlers/api.test.ts b/src/server/handlers/api.test.ts
index 90d9c3c..45e8917 100644
--- a/src/server/handlers/api.test.ts
+++ b/src/server/handlers/api.test.ts
@@ -1,4 +1,4 @@
-import { describe, expect, it, vi } from "vitest";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 
 import { forbiddenError } from "@/server/foundation/errors";
 
@@ -15,11 +15,30 @@ vi.mock("@/server/foundation/context", () => ({
   }),
 }));
 
+const log = vi.hoisted(() => ({ add: vi.fn(), emit: vi.fn() }));
+
 vi.mock("@/server/foundation/logs", () => ({
-  createRequestLog: vi.fn(() => ({ add: vi.fn(), emit: vi.fn() })),
+  createRequestLog: vi.fn(() => log),
 }));
 
 describe("API handler foundation", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it("returns the handler response unchanged and logs the success", async () => {
+    const { withApiHandler } = await import("./api");
+    const handlerResponse = new Response(null, { status: 204 });
+    const handler = withApiHandler(async () => handlerResponse);
+
+    const response = await handler(new Request("https://app.test/api/docs"));
+
+    expect(response).toBe(handlerResponse);
+    expect(log.emit).toHaveBeenCalledWith(
+      expect.objectContaining({ status: 204 }),
+    );
+  });
+
   it("converts API errors into a JSON error response", async () => {
     const { withApiHandler } = await import("./api");
     const handler = withApiHandler(async () => {