@agent-native/core 0.114.0 → 0.114.1

package/corpus/templates/content/actions/_files-system-properties.ts

@@ -0,0 +1,499 @@
+import { createHash } from "node:crypto";
+
+import { accessFilter } from "@agent-native/core/sharing";
+import { and, eq, inArray, isNull, lt, or } from "drizzle-orm";
+
+import { getDb, schema } from "../server/db/index.js";
+import type {
+  ContentDatabaseViewConfig,
+  DocumentProperty,
+  DocumentPropertyDefinition,
+  DocumentPropertyOption,
+  DocumentPropertySystemRole,
+  DocumentPropertyValue,
+} from "../shared/api.js";
+import {
+  parsePropertyOptions,
+  serializePropertyOptions,
+} from "../shared/properties.js";
+import {
+  defaultDatabaseViewConfig,
+  parseDatabaseViewConfig,
+  serializeDatabaseViewConfig,
+} from "./_property-utils.js";
+
+type Db = Pick<ReturnType<typeof getDb>, "select" | "insert" | "update">;
+type Database = typeof schema.contentDatabases.$inferSelect;
+type Document = Pick<
+  typeof schema.documents.$inferSelect,
+  "id" | "spaceId" | "parentId" | "ownerEmail" | "orgId"
+>;
+
+const FILES_SYSTEM_PROPERTIES_VERSION = 2;
+
+const SYSTEM_PROPERTY_SPECS = [
+  {
+    role: "files_parent" as const,
+    name: "Parent",
+    type: "select" as const,
+    description: "The authorized parent page or database for this file.",
+    position: -200,
+  },
+  {
+    role: "files_source" as const,
+    name: "Source",
+    type: "multi_select" as const,
+    description: "The source system that supplies this file.",
+    position: -100,
+  },
+] as const;
+
+function systemPropertyId(
+  databaseId: string,
+  role: DocumentPropertySystemRole,
+) {
+  return `content_files_property_${createHash("sha256")
+    .update(`${databaseId}:${role}`)
+    .digest("hex")
+    .slice(0, 32)}`;
+}
+
+function legacyFilesKindPropertyId(databaseId: string) {
+  return systemPropertyId(databaseId, "files_kind");
+}
+
+export function filesParentPropertyId(databaseId: string) {
+  return systemPropertyId(databaseId, "files_parent");
+}
+
+function legacyFilesRootFilter(databaseId: string) {
+  return {
+    key: filesParentPropertyId(databaseId),
+    label: "Parent",
+    operator: "is_empty" as const,
+    value: "",
+  };
+}
+
+export function defaultFilesDatabaseViewConfig(
+  _databaseId: string,
+): ContentDatabaseViewConfig {
+  return defaultDatabaseViewConfig("table");
+}
+
+export function migrateFilesDatabaseViewConfig(
+  config: ContentDatabaseViewConfig,
+  databaseId: string,
+  options: { removeLegacyRootFilter?: boolean } = {},
+): ContentDatabaseViewConfig {
+  const legacyKindPropertyId = legacyFilesKindPropertyId(databaseId);
+  const legacyRootFilter = legacyFilesRootFilter(databaseId);
+  const migrateFilters = (
+    filters: ContentDatabaseViewConfig["filters"],
+  ): ContentDatabaseViewConfig["filters"] =>
+    filters.flatMap((filter) => {
+      if (
+        options.removeLegacyRootFilter &&
+        filter.key === legacyRootFilter.key &&
+        filter.operator === legacyRootFilter.operator &&
+        filter.value === legacyRootFilter.value
+      ) {
+        return [];
+      }
+      if (filter.key !== legacyKindPropertyId) return [filter];
+      if (
+        filter.operator === "does_not_equal" &&
+        filter.value === "database_row"
+      ) {
+        return [];
+      }
+      return [];
+    });
+  return {
+    ...config,
+    filters: migrateFilters(config.filters),
+    views: config.views.map((view) => ({
+      ...view,
+      filters: migrateFilters(view.filters),
+    })),
+  };
+}
+
+function storedOptions(role: DocumentPropertySystemRole) {
+  if (role === "files_source") {
+    return {
+      options: [{ id: "local", name: "Content", color: "gray" as const }],
+    };
+  }
+  return { options: [] };
+}
+
+export async function ensureFilesSystemPropertyDefinitions(args: {
+  database: Database;
+  db?: Db;
+  now?: string;
+}) {
+  if (args.database.systemRole !== "files") return;
+  const db = args.db ?? getDb();
+  const now = args.now ?? new Date().toISOString();
+  const existingDefinitions = await db
+    .select()
+    .from(schema.documentPropertyDefinitions)
+    .where(eq(schema.documentPropertyDefinitions.databaseId, args.database.id));
+  const existingSourceSystemProperty = existingDefinitions.find(
+    (definition) => definition.systemRole === "files_source",
+  );
+  const sourceIds = (
+    await db
+      .select({ id: schema.contentDatabaseSources.id })
+      .from(schema.contentDatabaseSources)
+      .where(eq(schema.contentDatabaseSources.databaseId, args.database.id))
+  ).map((source) => source.id);
+  const legacySourceOptionIds = [...sourceIds, "local"].sort();
+  const legacySourceProperty = existingDefinitions.find((definition) => {
+    if (
+      definition.systemRole ||
+      definition.name !== "Source" ||
+      (definition.type !== "select" && definition.type !== "multi_select")
+    ) {
+      return false;
+    }
+    const optionIds = (
+      parsePropertyOptions(definition.optionsJson).options ?? []
+    )
+      .map((option) => option.id)
+      .sort();
+    return (
+      sourceIds.length >= 2 &&
+      optionIds.length === legacySourceOptionIds.length &&
+      optionIds.every((id, index) => id === legacySourceOptionIds[index])
+    );
+  });
+  const adoptedLegacySource =
+    !existingSourceSystemProperty && Boolean(legacySourceProperty);
+  if (adoptedLegacySource && legacySourceProperty) {
+    await db
+      .update(schema.documentPropertyDefinitions)
+      .set({
+        systemRole: "files_source",
+        type: "multi_select",
+        updatedAt: now,
+      })
+      .where(
+        eq(schema.documentPropertyDefinitions.id, legacySourceProperty.id),
+      );
+  }
+  const existingRoles = new Set(
+    existingDefinitions
+      .map((definition) => definition.systemRole)
+      .filter((role): role is string => Boolean(role)),
+  );
+  if (legacySourceProperty && !existingSourceSystemProperty) {
+    existingRoles.add("files_source");
+  }
+  const missingDefinitions = SYSTEM_PROPERTY_SPECS.filter(
+    (spec) => !existingRoles.has(spec.role),
+  ).map((spec) => ({
+    id: systemPropertyId(args.database.id, spec.role),
+    ownerEmail: args.database.ownerEmail,
+    orgId: args.database.orgId,
+    databaseId: args.database.id,
+    systemRole: spec.role,
+    name: spec.name,
+    type: spec.type,
+    description: spec.description,
+    visibility: "always_show",
+    optionsJson: serializePropertyOptions(storedOptions(spec.role)),
+    position: spec.position,
+    createdAt: now,
+    updatedAt: now,
+  }));
+  if (missingDefinitions.length > 0) {
+    await db
+      .insert(schema.documentPropertyDefinitions)
+      .values(missingDefinitions)
+      .onConflictDoNothing();
+  }
+  const parsedStored = parseDatabaseViewConfig(args.database.viewConfigJson);
+  const normalizedStored = serializeDatabaseViewConfig(parsedStored);
+  const migratedStored = serializeDatabaseViewConfig(
+    migrateFilesDatabaseViewConfig(parsedStored, args.database.id, {
+      removeLegacyRootFilter:
+        args.database.filesSystemPropertiesSeeded <
+        FILES_SYSTEM_PROPERTIES_VERSION,
+    }),
+  );
+  const untouchedLegacyDefaults = new Set([
+    serializeDatabaseViewConfig(defaultDatabaseViewConfig("sidebar")),
+    serializeDatabaseViewConfig(defaultDatabaseViewConfig("table")),
+  ]);
+  const viewConfigJson = untouchedLegacyDefaults.has(normalizedStored)
+    ? serializeDatabaseViewConfig(
+        defaultFilesDatabaseViewConfig(args.database.id),
+      )
+    : migratedStored !== normalizedStored
+      ? migratedStored
+      : args.database.viewConfigJson;
+  if (
+    missingDefinitions.length === 0 &&
+    !adoptedLegacySource &&
+    viewConfigJson === args.database.viewConfigJson &&
+    args.database.filesSystemPropertiesSeeded ===
+      FILES_SYSTEM_PROPERTIES_VERSION
+  ) {
+    return;
+  }
+  await db
+    .update(schema.contentDatabases)
+    .set({
+      viewConfigJson,
+      filesSystemPropertiesSeeded: FILES_SYSTEM_PROPERTIES_VERSION,
+      updatedAt: now,
+    })
+    .where(eq(schema.contentDatabases.id, args.database.id));
+}
+
+export async function repairFilesSystemPropertyDefinitions() {
+  const db = getDb();
+  const databases = await db
+    .select()
+    .from(schema.contentDatabases)
+    .where(
+      and(
+        eq(schema.contentDatabases.systemRole, "files"),
+        lt(
+          schema.contentDatabases.filesSystemPropertiesSeeded,
+          FILES_SYSTEM_PROPERTIES_VERSION,
+        ),
+        isNull(schema.contentDatabases.deletedAt),
+      ),
+    );
+  for (const database of databases) {
+    await db.transaction((tx) =>
+      ensureFilesSystemPropertyDefinitions({ database, db: tx }),
+    );
+  }
+  return databases.length;
+}
+
+function safeOption(
+  id: string,
+  name: string,
+  color: DocumentPropertyOption["color"] = "gray",
+): DocumentPropertyOption {
+  return { id, name: name.trim() || "Untitled", color };
+}
+
+function filesVisibilityFilter(database: Database) {
+  return database.orgId
+    ? and(
+        eq(schema.documents.spaceId, database.spaceId!),
+        eq(schema.documents.orgId, database.orgId),
+        or(
+          eq(schema.documents.visibility, "org"),
+          eq(schema.documents.visibility, "public"),
+        ),
+        or(
+          eq(schema.documents.hideFromSearch, 0),
+          isNull(schema.documents.hideFromSearch),
+        ),
+      )
+    : and(
+        eq(schema.documents.spaceId, database.spaceId!),
+        eq(schema.documents.ownerEmail, database.ownerEmail),
+      );
+}
+
+async function readableDatabaseIds(
+  db: Db,
+  databaseIds: string[],
+  options: { includeSystem?: boolean } = {},
+) {
+  if (databaseIds.length === 0) return new Set<string>();
+  const databases = await db
+    .select({
+      id: schema.contentDatabases.id,
+      documentId: schema.contentDatabases.documentId,
+    })
+    .from(schema.contentDatabases)
+    .where(
+      and(
+        inArray(schema.contentDatabases.id, databaseIds),
+        isNull(schema.contentDatabases.deletedAt),
+        options.includeSystem === false
+          ? isNull(schema.contentDatabases.systemRole)
+          : undefined,
+      ),
+    );
+  if (databases.length === 0) return new Set<string>();
+  const readableDocuments = await db
+    .select({ id: schema.documents.id })
+    .from(schema.documents)
+    .where(
+      and(
+        inArray(
+          schema.documents.id,
+          databases.map((database) => database.documentId),
+        ),
+        accessFilter(schema.documents, schema.documentShares),
+      ),
+    );
+  const readableDocumentIds = new Set(readableDocuments.map((row) => row.id));
+  return new Set(
+    databases
+      .filter((database) => readableDocumentIds.has(database.documentId))
+      .map((database) => database.id),
+  );
+}
+
+export async function filesSystemPropertyProjection(args: {
+  database: Database;
+  documents: Document[];
+  properties: DocumentProperty[];
+}) {
+  const systemProperties = args.properties.filter((property) =>
+    SYSTEM_PROPERTY_SPECS.some(
+      (spec) => spec.role === property.definition.systemRole,
+    ),
+  );
+  if (args.database.systemRole !== "files" || systemProperties.length === 0) {
+    return null;
+  }
+  const db = getDb();
+  const documentIds = args.documents.map((document) => document.id);
+  const parentIds = [
+    ...new Set(
+      args.documents
+        .map((document) => document.parentId)
+        .filter((id): id is string => Boolean(id)),
+    ),
+  ];
+  const parents = parentIds.length
+    ? await db
+        .select({ id: schema.documents.id, title: schema.documents.title })
+        .from(schema.documents)
+        .where(
+          and(
+            inArray(schema.documents.id, parentIds),
+            filesVisibilityFilter(args.database),
+            accessFilter(schema.documents, schema.documentShares),
+          ),
+        )
+    : [];
+  const parentById = new Map(parents.map((parent) => [parent.id, parent]));
+
+  const sourceRows = documentIds.length
+    ? await db
+        .select({
+          documentId: schema.contentDatabaseSourceRows.documentId,
+          sourceId: schema.contentDatabaseSourceRows.sourceId,
+        })
+        .from(schema.contentDatabaseSourceRows)
+        .where(
+          inArray(schema.contentDatabaseSourceRows.documentId, documentIds),
+        )
+    : [];
+  const sourceIds = [...new Set(sourceRows.map((row) => row.sourceId))];
+  const sources = sourceIds.length
+    ? await db
+        .select({
+          id: schema.contentDatabaseSources.id,
+          databaseId: schema.contentDatabaseSources.databaseId,
+          sourceName: schema.contentDatabaseSources.sourceName,
+        })
+        .from(schema.contentDatabaseSources)
+        .where(inArray(schema.contentDatabaseSources.id, sourceIds))
+    : [];
+  const readableSourceDatabaseIds = await readableDatabaseIds(
+    db,
+    sources
+      .map((source) => source.databaseId)
+      .filter((databaseId) => databaseId !== args.database.id),
+  );
+  readableSourceDatabaseIds.add(args.database.id);
+  const readableSourceById = new Map(
+    sources
+      .filter((source) => readableSourceDatabaseIds.has(source.databaseId))
+      .map((source) => [source.id, source]),
+  );
+  const sourceIdsByDocument = new Map<string, string[]>();
+  for (const row of sourceRows) {
+    if (!readableSourceById.has(row.sourceId)) continue;
+    sourceIdsByDocument.set(row.documentId, [
+      ...(sourceIdsByDocument.get(row.documentId) ?? []),
+      row.sourceId,
+    ]);
+  }
+
+  const parentOptions = parents.map((parent) =>
+    safeOption(parent.id, parent.title, "blue"),
+  );
+  const sourceOptions = [
+    safeOption("local", "Content"),
+    ...[...readableSourceById.values()].map((source) =>
+      safeOption(source.id, source.sourceName, "green"),
+    ),
+  ];
+  const definitionByRole = new Map<
+    DocumentPropertySystemRole,
+    DocumentPropertyDefinition
+  >();
+  for (const property of systemProperties) {
+    const role = property.definition.systemRole!;
+    definitionByRole.set(role, {
+      ...property.definition,
+      options: {
+        options: role === "files_parent" ? parentOptions : sourceOptions,
+      },
+    });
+  }
+
+  const valuesByDocumentId = new Map<
+    string,
+    Map<DocumentPropertySystemRole, DocumentPropertyValue>
+  >();
+  for (const document of args.documents) {
+    const sourceValues = [
+      ...new Set(sourceIdsByDocument.get(document.id) ?? []),
+    ];
+    valuesByDocumentId.set(
+      document.id,
+      new Map<DocumentPropertySystemRole, DocumentPropertyValue>([
+        [
+          "files_parent",
+          document.parentId && parentById.has(document.parentId)
+            ? document.parentId
+            : null,
+        ],
+        ["files_source", sourceValues.length > 0 ? sourceValues : ["local"]],
+      ]),
+    );
+  }
+  return { definitionByRole, valuesByDocumentId };
+}
+
+export function applyFilesSystemPropertyProjection(args: {
+  properties: DocumentProperty[];
+  projection: NonNullable<
+    Awaited<ReturnType<typeof filesSystemPropertyProjection>>
+  >;
+  documentId?: string;
+}) {
+  return args.properties
+    .filter((property) => property.definition.systemRole !== "files_kind")
+    .map((property) => {
+      const role = property.definition.systemRole;
+      if (!role) return property;
+      return {
+        ...property,
+        definition:
+          args.projection.definitionByRole.get(role) ?? property.definition,
+        value: args.documentId
+          ? (args.projection.valuesByDocumentId
+              .get(args.documentId)
+              ?.get(role) ?? null)
+          : null,
+        editable: false,
+      };
+    });
+}

package/corpus/templates/content/actions/_local-file-documents.ts

@@ -234,7 +234,6 @@ function localFileDocumentsCacheScope() {
   return JSON.stringify({
     manifest: process.env.AGENT_NATIVE_MANIFEST,
     manifestPath: process.env.AGENT_NATIVE_MANIFEST_PATH,
-    dataMode: process.env.AGENT_NATIVE_DATA_MODE,
   });
 }
 

package/corpus/templates/content/actions/_property-utils.ts

@@ -159,6 +159,7 @@ export function serializeDatabase(
     id: database.id,
     documentId: database.documentId,
     title: database.title,
+    systemRole: database.systemRole,
     description,
     viewConfig: parseDatabaseViewConfig(database.viewConfigJson),
     createdAt: database.createdAt,
@@ -260,10 +261,8 @@ function defaultDatabaseView(
                 ? "Timeline"
                 : type === "form"
                   ? "Form"
-                  : type === "sidebar"
-                    ? "Sidebar"
-                    : "Table",
-    type,
+                  : "Table",
+    type: type === "sidebar" ? "table" : type,
     sorts: values.sorts ?? [],
     filters: values.filters ?? [],
     filterMode: normalizeDatabaseFilterMode(values.filterMode),
@@ -287,21 +286,23 @@ function normalizeDatabaseView(value: unknown): ContentDatabaseView | null {
   if (!value || typeof value !== "object") return null;
   const view = value as Partial<ContentDatabaseView>;
   if (typeof view.id !== "string" || !view.id.trim()) return null;
+  const retiredSidebar = view.type === "sidebar";
   const type =
     view.type === "board" ||
     view.type === "list" ||
     view.type === "gallery" ||
     view.type === "calendar" ||
     view.type === "timeline" ||
-    view.type === "form" ||
-    view.type === "sidebar"
+    view.type === "form"
       ? view.type
       : "table";
   return {
     id: view.id,
     name:
       typeof view.name === "string" && view.name.trim()
-        ? view.name.trim()
+        ? retiredSidebar && view.name.trim() === "Sidebar"
+          ? "Table"
+          : view.name.trim()
         : defaultDatabaseView({}, type).name,
     type,
     sorts: Array.isArray(view.sorts) ? view.sorts.filter(isDatabaseSort) : [],
@@ -507,6 +508,9 @@ export async function listPropertiesForDatabase(
       definition: {
         id: definition.id,
         databaseId: definition.databaseId,
+        systemRole: definition.systemRole as
+          | import("../shared/api.js").DocumentPropertySystemRole
+          | null,
         name: definition.name,
         type,
         description: definition.description,
@@ -530,7 +534,7 @@ export async function listPropertiesForDatabase(
                 blockFieldContent: blockContentByPropertyId.get(definition.id),
               })
             : parsePropertyValue(storedValue?.valueJson),
-      editable: !isComputedPropertyType(type),
+      editable: !definition.systemRole && !isComputedPropertyType(type),
     };
   });
 
@@ -576,6 +580,9 @@ function serializePropertyDefinition(
   return {
     id: definition.id,
     databaseId: definition.databaseId,
+    systemRole: definition.systemRole as
+      | import("../shared/api.js").DocumentPropertySystemRole
+      | null,
     name: definition.name,
     type,
     description: definition.description,
@@ -700,7 +707,9 @@ export async function listPropertiesForDatabaseDocuments(
                   ),
                 })
               : parsePropertyValue(storedValue?.valueJson),
-        editable: !isComputedPropertyType(propertyDefinition.type),
+        editable:
+          !definition.systemRole &&
+          !isComputedPropertyType(propertyDefinition.type),
       };
     });
 

package/corpus/templates/content/actions/bind-content-database-source-field.ts

@@ -121,6 +121,9 @@ export default defineAction({
     if (!property) {
       throw new Error("Target column does not belong to this database.");
     }
+    if (property.systemRole) {
+      throw new Error("System properties cannot be bound to source fields.");
+    }
     // The auto-created "Source" tag is internal row-tagging, never a writable
     // bind target.
     if (

package/corpus/templates/content/actions/configure-document-property.ts

@@ -118,6 +118,9 @@ export default defineAction({
           ),
         );
       if (!existing) throw new Error(`Property "${args.id}" not found`);
+      if (existing.systemRole) {
+        throw new Error("System properties cannot be changed.");
+      }
       if (
         isComputedPropertyType(existing.type as DocumentPropertyType) &&
         existing.type !== type

package/corpus/templates/content/actions/create-content-database.ts

@@ -160,7 +160,7 @@ export async function resolveContentDatabaseSpace(
   if (!userEmail) throw new Error("no authenticated user");
   const provisioned = await provisionContentSpaces(db, userEmail);
   const spaceId = args.spaceId ?? provisioned.personalSpaceId;
-  await resolveContentSpaceAccess(spaceId, "editor");
+  await resolveContentSpaceAccess(spaceId, "contributor");
   return spaceId;
 }
 
@@ -288,7 +288,7 @@ export async function createContentDatabaseRecord(
       }
       const spaceAccess = await (
         options.resolveSpaceAccess ?? resolveContentSpaceAccess
-      )(spaceId, "editor", { db });
+      )(spaceId, "contributor", { db });
       if (spaceAccess.space.id !== spaceId) {
         throw new Error("Resolved Content space does not match the request");
       }

package/corpus/templates/content/actions/create-content-space.ts

@@ -0,0 +1,34 @@
+import { defineAction } from "@agent-native/core";
+import { getRequestUserEmail } from "@agent-native/core/server/request-context";
+import { z } from "zod";
+
+import { getDb } from "../server/db/index.js";
+import {
+  provisionUserContentSpace,
+  systemIdsForContentSpace,
+} from "./_content-spaces.js";
+
+export default defineAction({
+  description:
+    "Create a private Content workspace with its own canonical Files database.",
+  schema: z.object({
+    name: z.string().trim().min(1).max(200),
+    requestId: z.string().trim().min(1).max(200),
+    propertyValues: z.record(z.string(), z.unknown()).optional(),
+  }),
+  run: async ({ name, requestId, propertyValues }) => {
+    const userEmail = getRequestUserEmail();
+    if (!userEmail) throw new Error("no authenticated user");
+    const result = await provisionUserContentSpace(getDb(), userEmail, {
+      workspaceId: requestId,
+      name,
+      propertyValues,
+    });
+    return {
+      ...result,
+      filesDocumentId: systemIdsForContentSpace(result.spaceId, "files")
+        .documentId,
+      kind: "user" as const,
+    };
+  },
+});

package/corpus/templates/content/actions/create-document.ts

@@ -211,7 +211,10 @@ export default defineAction({
     } else {
       const provisioned = await provisionContentSpaces(db, currentUserEmail);
       spaceId = args.spaceId ?? provisioned.personalSpaceId;
-      const spaceAccess = await resolveContentSpaceAccess(spaceId, "editor");
+      const spaceAccess = await resolveContentSpaceAccess(
+        spaceId,
+        "contributor",
+      );
       ownerEmail = currentUserEmail;
       orgId = spaceAccess.space.orgId;
       visibility = orgId ? "org" : "private";

package/corpus/templates/content/actions/delete-content-space.ts

@@ -0,0 +1,19 @@
+import { defineAction } from "@agent-native/core";
+import { writeAppState } from "@agent-native/core/application-state";
+import { z } from "zod";
+
+import { getDb } from "../server/db/index.js";
+import { deleteUserContentSpace } from "./_delete-content-space.js";
+
+export default defineAction({
+  description:
+    "Permanently delete a user-created Content workspace and all content inside it. Personal and organization workspaces cannot be deleted.",
+  schema: z.object({
+    spaceId: z.string().trim().min(1),
+  }),
+  run: async ({ spaceId }) => {
+    const result = await deleteUserContentSpace(getDb(), spaceId);
+    await writeAppState("refresh-signal", { ts: Date.now() });
+    return { success: true, ...result };
+  },
+});