v0.2.3 두 번째 항목의 mini-brainstorm 결과 lock.

UI=A (Inbox 탭 toggle), 필터=A (명시적 WHERE deleted_at IS NULL),
AiWorker race=C (pending_jobs cleanup + processJob 가드),
액션=B (per-card 영구 삭제 추가 — IPC 4채널 → 5채널, telemetry 3 → 4 events),
confirm/정렬/카드차이 모두 A.

self-review 후 ExportService/ImportService 충돌 정책 ambiguity 명시화.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

@@ -122,3 +122,3 @@
       try {
         const note = this.repo.findById(job.noteId);
-        if (!note || note.aiStatus !== 'pending') return;
+        if (!note || note.deletedAt !== null || note.aiStatus !== 'pending') return;

@@ -55,0 +80,4 @@
+    // limit 200 한 번 — UI 표시 cap. count > 200 시 dialog message 만 부정확하지만
+    // emptyTrash() 내부 SQL 은 LIMIT 없으므로 실제 삭제는 모든 trash 노트 적용.
+    // v0.2.4 에서 repo.countTrashed() 추가 시 둘 다 정확해짐.
+    const trashed = deps.repo.listTrashed({ limit: 200 });

@@ -55,0 +106,4 @@
+  );
+
+  ipcMain.handle('inbox:trashCount', () =>
+    deps.repo.listTrashed({ limit: 200 }).length

@@ -224,0 +245,4 @@
+    this.db
+      .prepare(`UPDATE notes SET deleted_at = NULL, updated_at = ? WHERE id = ?`)
+      .run(now, id);
+  }

@@ -224,0 +253,4 @@
+
+  emptyTrash(): { noteIds: string[] } {
+    // Single DELETE ... RETURNING is atomic by itself (no explicit transaction needed)
+    // and avoids per-row prepare overhead. RETURNING is house-style elsewhere

@@ -248,1 +301,4 @@
       if (existing === input.rawText) {
+        // skip — source 가 deletedAt IS NOT NULL 이고 dest 가 NULL 이면 dest 갱신 (삭제 보존).
+        // trash() 를 재사용해 pending_jobs cleanup invariant (§9.2) 도 동시에 만족.
+        if (input.deletedAt != null) {

@@ -67,0 +69,4 @@
+    // v0.2.3 #4: hard delete → soft delete. media 보존 (restore 시 필요).
+    // 이미 trash 인 노트는 telemetry emit skip — restore/trash ratio 오염 방지.
+    const note = this.repo.findById(noteId);
+    if (!note || note.deletedAt !== null) return;

@@ -8,1 +8,4 @@
     const dirs = await this.store.listNoteDirs();
+    // Intentionally does NOT filter `deleted_at IS NULL` — trashed notes still own
+    // their media until permanentDelete/emptyTrash. Removing dirs of soft-deleted
+    // notes here would defeat restore.

@@ -27,1 +36,4 @@
+  z.object({ ts: z.string(), kind: z.literal('restore'), payload: NoteIdPayload }).strict(),
+  z.object({ ts: z.string(), kind: z.literal('permanent_delete'), payload: NoteIdPayload }).strict(),
+  z.object({ ts: z.string(), kind: z.literal('empty_trash'), payload: EmptyTrashPayload }).strict()
 ]);

@@ -70,0 +114,4 @@
+    if (next) await get().loadTrash();
+  },
+  async loadTrash() {
+    const trashNotes = await inboxApi.listTrash({ limit: 200 });

@@ -218,0 +409,4 @@
+    repo.create({ rawText: 'b' }); // ai_status=pending
+    expect(repo.getPendingCount()).toBe(2);
+    // trash() 가 pending_jobs row 는 정리하지만 notes.ai_status 는 'pending' 그대로.
+    // getPendingCount 가 deleted_at IS NOT NULL 노트 포함하면 영구 over-count.