- Replace HTML5+touch drag with @dnd-kit; MouseSensor (desktop, 8px)
+ TouchSensor (iPad, 200ms long-press) so input sources never overlap.
- Add sort_order column; ORDER BY asc(sortOrder), updatedAt desc.
- PATCH /notes/reorder: strict isPinned boolean check, bucket+permission
scoped, all writes wrapped in db.transaction for atomicity.
- PATCH /notes/:id stamps sort_order = min-1 on folder/pin bucket change.
- Client useReorderNotes (PATCH) with optimistic cache update.
- handleDragEnd builds reorder payload from FULL bucket (owner notes
or shared-folder bucket via ref), not the filtered subset, so hidden
siblings under search/label filters keep their order.
- Drag guarded for view-only contexts: source must be owned OR in
editable shared bucket; folder-drop additionally requires isOwn.
- SharedFolderView publishes its data.notes via bucketRef when viewer
has edit permission, enabling correct reorder in shared folders.
- Layout fix at narrow viewport: rail stacks above notes
(flex-col md:flex-row) so iPad portrait drag has proper bbox.
- Playwright tests: notes-folders.spec.mjs both desktop pointer drag
and touch long-press drag pass (33s).
- OpenAPI codegen skipped: notes-api.ts is hand-written.
- Out of scope (pre-existing failures): executive-meetings reorder/font,
notes-share PATCH 403/404, groups-crud rollback.
Riyadh
d83019f0f3