sync app filled in

apps/server/internal/docs/service_test.go

@@ -150,6 +150,38 @@ func TestSaveSourcePageWithBaseHashCanResolveWithLatestHash(t *testing.T) {
 	}
 }
 
+func TestSaveSourcePageCreatesNewDocument(t *testing.T) {
+	service, sourceDir := setupDocsTestService(t)
+	ctx := context.Background()
+
+	content := "# Inbox Note\n\nCreated from clipboard"
+	page, err := service.SaveSourcePageWithBaseHash(ctx, "inbox/note", content, "")
+	if err != nil {
+		t.Fatalf("SaveSourcePageWithBaseHash() error = %v", err)
+	}
+	if page.Path != "inbox/note.md" {
+		t.Fatalf("page path = %q, want inbox/note.md", page.Path)
+	}
+
+	written, err := os.ReadFile(filepath.Join(sourceDir, "inbox", "note.md"))
+	if err != nil {
+		t.Fatalf("read new document: %v", err)
+	}
+	if string(written) != content {
+		t.Fatalf("new document content = %q, want %q", string(written), content)
+	}
+}
+
+func TestSaveSourcePageRejectsTraversalForNewDocument(t *testing.T) {
+	service, _ := setupDocsTestService(t)
+	ctx := context.Background()
+
+	_, err := service.SaveSourcePageWithBaseHash(ctx, "../outside", "# Outside\n", "")
+	if err == nil {
+		t.Fatal("expected traversal path to be rejected")
+	}
+}
+
 func TestSyncSourceDirHandles100FilesUnderTarget(t *testing.T) {
 	service, sourceDir := setupDocsTestService(t)
 	ctx := context.Background()