@agent-native/core 0.176.1 → 0.176.2-nightly-20260831184159

package/corpus/templates/content/actions/_property-utils.ts

@@ -148,11 +148,14 @@ export async function resolvePropertyDatabaseForDocument(
   document: DocumentRow,
   databaseId?: string,
   role: "viewer" | "editor" | "admin" = "viewer",
+  options: { requireDatabaseAccess?: boolean } = {},
 ): Promise<ContentDatabaseRow | null> {
   if (databaseId) {
     const database = await getDatabaseById(databaseId);
     if (!database) throw new Error(`Database "${databaseId}" not found`);
-    await assertAccess("document", database.documentId, role);
+    if (options.requireDatabaseAccess !== false) {
+      await assertAccess("document", database.documentId, role);
+    }
     if (database.documentId === document.id) return database;
 
     const db = getDb();
@@ -503,17 +506,22 @@ function normalizeStringList(value: unknown) {
 export async function listPropertiesForDocument(
   document: DocumentRow,
   databaseId?: string,
+  options: { requireDatabaseAccess?: boolean } = {},
 ) {
   const database = await resolvePropertyDatabaseForDocument(
     document,
     databaseId,
+    "viewer",
+    options,
   );
   if (!database) return [];
   // Read path: PURE read. Seeding the primary Blocks field happens at create
   // time and via the one-time startup repair (repairUnseededBlocksFields) —
   // never here. A viewer opening a shared/legacy row must not trigger writes on
   // another owner's database.
-  return listPropertiesForDatabase(database.id, document);
+  return listPropertiesForDatabase(database.id, document, {
+    includeContainerDerivedValues: options.requireDatabaseAccess !== false,
+  });
 }
 
 export async function listPropertiesForAllDocumentDatabases(
@@ -557,6 +565,7 @@ export async function listPropertiesForAllDocumentDatabases(
 export async function listPropertiesForDatabase(
   databaseId: string,
   valueDocument?: DocumentRow,
+  options: { includeContainerDerivedValues?: boolean } = {},
 ) {
   const db = getDb();
   const definitions = await db
@@ -577,9 +586,12 @@ export async function listPropertiesForDatabase(
   const valueByPropertyId = new Map(
     values.map((value) => [value.propertyId, value]),
   );
-  const rowNumberByDocumentId = valueDocument
-    ? await databaseRowNumbersByDocumentId(databaseId)
-    : new Map<string, number>();
+  const includeContainerDerivedValues =
+    options.includeContainerDerivedValues !== false;
+  const rowNumberByDocumentId =
+    valueDocument && includeContainerDerivedValues
+      ? await databaseRowNumbersByDocumentId(databaseId)
+      : new Map<string, number>();
 
   // Additional (non-primary) Blocks fields keep their content in their own
   // store, keyed by (documentId, propertyId). Load this row's contents up front
@@ -613,7 +625,19 @@ export async function listPropertiesForDatabase(
   const properties = definitions.map((definition) => {
     const type = definition.type as DocumentPropertyType;
     const storedValue = valueByPropertyId.get(definition.id);
-    const options = parsePropertyOptions(definition.optionsJson);
+    const storedOptions = parsePropertyOptions(definition.optionsJson);
+    const options =
+      !includeContainerDerivedValues && type === "relation"
+        ? { relation: { databaseId: null } }
+        : !includeContainerDerivedValues && type === "rollup"
+          ? {
+              rollup: {
+                relationPropertyId: null,
+                targetPropertyId: null,
+                aggregation: storedOptions.rollup?.aggregation ?? "count",
+              },
+            }
+          : storedOptions;
     const value =
       valueDocument && isComputedPropertyType(type) && type !== "formula"
         ? computedPropertyValue(type, valueDocument, {
@@ -644,8 +668,15 @@ export async function listPropertiesForDatabase(
         createdAt: definition.createdAt,
         updatedAt: definition.updatedAt,
       },
-      value,
-      editable: !definition.systemRole && !isComputedPropertyType(type),
+      value:
+        !includeContainerDerivedValues &&
+        (type === "relation" || isComputedPropertyType(type))
+          ? null
+          : value,
+      editable:
+        includeContainerDerivedValues &&
+        !definition.systemRole &&
+        !isComputedPropertyType(type),
       ...(valueDocument && isBlocksPropertyType(type)
         ? {
             blocksField: blocksFieldIdentityById.get(
@@ -678,11 +709,16 @@ export async function listPropertiesForDatabase(
 
   const nextProperties = [];
   for (const property of evaluatedProperties) {
-    if (property.definition.type === "rollup") {
+    if (
+      property.definition.type === "rollup" &&
+      includeContainerDerivedValues
+    ) {
       nextProperties.push({
         ...property,
         value: await evaluatePropertyRollup(property, evaluatedProperties),
       });
+    } else if (property.definition.type === "rollup") {
+      nextProperties.push({ ...property, value: null });
     } else {
       nextProperties.push(property);
     }

package/corpus/templates/content/actions/edit-document.ts

@@ -18,6 +18,10 @@ import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
+import {
+  documentVersionChatContextFromAction,
+  serializeDocumentVersionChatContext,
+} from "../server/lib/document-version-context.js";
 import { applyDocumentTextEdits } from "../shared/document-text-edits.js";
 import { inspectNfmFidelity } from "../shared/nfm.js";
 import {
@@ -325,6 +329,19 @@ export default defineAction({
     try {
       await db.transaction(async (tx: any) => {
         const primaryBlocksFields = await lockPrimaryBlocksFields(tx, id);
+        if (isAgentCaller) {
+          await tx.insert(schema.documentVersions).values({
+            id: crypto.randomUUID(),
+            ownerEmail: existing.ownerEmail as string,
+            documentId: id,
+            title: existing.title,
+            content: existing.content ?? "",
+            chatContext: serializeDocumentVersionChatContext(
+              documentVersionChatContextFromAction(ctx),
+            ),
+            createdAt: now,
+          });
+        }
         const mirrored = await tx
           .update(schema.documents)
           .set({

package/corpus/templates/content/actions/get-document.ts

@@ -122,14 +122,13 @@ export default defineAction({
     const propertyDatabase = args.databaseId
       ? await getDatabaseById(args.databaseId)
       : await resolvePropertyDatabaseForDocument(doc);
-    const propertyDatabaseAccess =
-      args.databaseId && propertyDatabase
-        ? await resolveDocumentAccess(propertyDatabase.documentId)
-        : null;
+    const propertyDatabaseAccess = propertyDatabase
+      ? await resolveDocumentAccess(propertyDatabase.documentId)
+      : null;
     if (
       args.databaseId &&
       (!propertyDatabase ||
-        !propertyDatabaseAccess ||
+        (!propertyDatabaseAccess && access.role === "owner") ||
         (propertyDatabase.documentId !== doc.id && !databaseMembership))
     ) {
       throw Object.assign(new Error("Database context not found"), {
@@ -159,6 +158,11 @@ export default defineAction({
     const favoriteIds = userEmail
       ? await favoriteDocumentIds(getDb(), userEmail, [doc.id])
       : new Set<string>();
+    const properties = await listPropertiesForDocument(doc, args.databaseId, {
+      // A share authorizes the exact page and its membership-local fields,
+      // not the private database document that owns those definitions.
+      requireDatabaseAccess: propertyDatabaseAccess !== null,
+    });
 
     return {
       id: doc.id,
@@ -167,7 +171,8 @@ export default defineAction({
         view: "editor",
         params: { documentId: doc.id },
       }),
-      parentId: doc.parentId,
+      parentId:
+        databaseMembership && !propertyDatabaseAccess ? null : doc.parentId,
       title: doc.title,
       content: doc.content,
       description: doc.description,
@@ -185,7 +190,14 @@ export default defineAction({
         ? serializeDatabase(database, doc.description)
         : undefined,
       databaseMembership: databaseMembership
-        ? serializeDatabaseMembership(databaseMembership)
+        ? propertyDatabaseAccess
+          ? serializeDatabaseMembership(databaseMembership)
+          : {
+              databaseId: null,
+              databaseDocumentId: null,
+              databaseTitle: null,
+              position: null,
+            }
         : undefined,
       bodyHydration: bodyHydrationMembership
         ? {
@@ -211,10 +223,18 @@ export default defineAction({
         : undefined,
       createdAt: doc.createdAt,
       updatedAt: doc.updatedAt,
-      properties: await listPropertiesForDocument(doc, args.databaseId),
-      contextPath: await getDocumentContextPath(doc, {
-        databaseId: args.databaseId,
-      }),
+      properties: propertyDatabaseAccess
+        ? properties
+        : properties.map((property) => ({
+            ...property,
+            definition: { ...property.definition, databaseId: null },
+          })),
+      contextPath:
+        databaseMembership && !propertyDatabaseAccess
+          ? []
+          : await getDocumentContextPath(doc, {
+              databaseId: args.databaseId,
+            }),
     };
   },
   link: ({ result }) => {

package/corpus/templates/content/actions/list-document-properties.ts

@@ -32,12 +32,40 @@ export default defineAction({
     const database = await resolvePropertyDatabaseForDocument(
       access.resource,
       databaseId,
+      "viewer",
+      { requireDatabaseAccess: false },
+    );
+    const databaseAccess = database
+      ? await resolveAccess("document", database.documentId)
+      : null;
+    const canEditValues =
+      databaseAccess?.role === "owner" ||
+      databaseAccess?.role === "admin" ||
+      databaseAccess?.role === "editor";
+    const canManageSchema = canEditValues;
+
+    const properties = await listPropertiesForDocument(
+      access.resource,
+      databaseId,
+      {
+        // The page share authorizes this page's definitions and values. The
+        // supplied database is checked only as this page's exact membership;
+        // its backing document remains private for container operations.
+        requireDatabaseAccess: databaseAccess !== null,
+      },
     );
 
     return {
       documentId,
-      databaseId: database?.id ?? null,
-      properties: await listPropertiesForDocument(access.resource, databaseId),
+      databaseId: databaseAccess ? (database?.id ?? null) : null,
+      canEditValues,
+      canManageSchema,
+      properties: databaseAccess
+        ? properties
+        : properties.map((property) => ({
+            ...property,
+            definition: { ...property.definition, databaseId: null },
+          })),
     };
   },
 });

package/corpus/templates/content/actions/list-document-versions.ts

@@ -4,11 +4,18 @@ import { and, desc, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
+import { parseDocumentVersionChatContext } from "../server/lib/document-version-context.js";
 
 export default defineAction({
   description: "List saved versions for a document.",
   schema: z.object({
     documentId: z.string().optional().describe("Document ID"),
+    includeContent: z
+      .boolean()
+      .optional()
+      .default(true)
+      .describe("Include full version content in the response"),
+    limit: z.coerce.number().int().min(1).max(100).default(100),
   }),
   http: { method: "GET" },
   readOnly: true,
@@ -18,25 +25,50 @@ export default defineAction({
     const access = await assertAccess("document", args.documentId, "viewer");
     const ownerEmail = access.resource.ownerEmail as string;
     const db = getDb();
-    const versions = await db
-      .select()
-      .from(schema.documentVersions)
-      .where(
-        and(
-          eq(schema.documentVersions.documentId, args.documentId),
-          eq(schema.documentVersions.ownerEmail, ownerEmail),
-        ),
-      )
-      .orderBy(desc(schema.documentVersions.createdAt));
+    const where = and(
+      eq(schema.documentVersions.documentId, args.documentId),
+      eq(schema.documentVersions.ownerEmail, ownerEmail),
+    );
+    const versions = args.includeContent
+      ? await db
+          .select()
+          .from(schema.documentVersions)
+          .where(where)
+          .orderBy(desc(schema.documentVersions.createdAt))
+          .limit(args.limit)
+      : await db
+          .select({
+            id: schema.documentVersions.id,
+            documentId: schema.documentVersions.documentId,
+            title: schema.documentVersions.title,
+            createdAt: schema.documentVersions.createdAt,
+            chatContext: schema.documentVersions.chatContext,
+          })
+          .from(schema.documentVersions)
+          .where(where)
+          .orderBy(desc(schema.documentVersions.createdAt))
+          .limit(args.limit);
 
     return {
-      versions: versions.map((version) => ({
-        id: version.id,
-        documentId: version.documentId,
-        title: version.title,
-        content: version.content,
-        createdAt: version.createdAt,
-      })),
+      versions: versions.map((version) => {
+        let chatContext;
+        try {
+          chatContext = parseDocumentVersionChatContext(version.chatContext);
+        } catch {
+          chatContext = undefined;
+        }
+        return {
+          id: version.id,
+          documentId: version.documentId,
+          title: version.title,
+          ...(args.includeContent && "content" in version
+            ? { content: version.content }
+            : {}),
+          createdAt: version.createdAt,
+          editable: Boolean(chatContext),
+          ...(chatContext ? { chatContext } : {}),
+        };
+      }),
     };
   },
 });

package/corpus/templates/content/actions/list-documents.ts

@@ -290,6 +290,9 @@ export default defineAction({
       }
     }
 
+    const visibleDocumentIds = new Set(
+      documents.map((document) => document.id),
+    );
     const mapped = documents.map((d) => {
       let accessRole: EffectiveRole = "viewer";
       const shareRole = shareRoleByDocumentId.get(d.id) ?? null;
@@ -310,7 +313,8 @@ export default defineAction({
 
       return {
         id: d.id,
-        parentId: d.parentId,
+        parentId:
+          d.parentId && visibleDocumentIds.has(d.parentId) ? d.parentId : null,
         title: d.title,
         description: d.description,
         contentPreview: contentPreview(d.contentSnippet),
@@ -338,7 +342,14 @@ export default defineAction({
             }
           : undefined,
         databaseMembership: databaseMembership
-          ? serializeDatabaseMembership(databaseMembership)
+          ? visibleDocumentIds.has(databaseMembership.database.documentId)
+            ? serializeDatabaseMembership(databaseMembership)
+            : {
+                databaseId: null,
+                databaseDocumentId: null,
+                databaseTitle: null,
+                position: null,
+              }
           : undefined,
         accessRole,
         canComment: canCommentRole(accessRole),

package/corpus/templates/content/actions/restore-document-version.ts

@@ -5,6 +5,10 @@ import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
+import {
+  documentVersionChatContextFromAction,
+  serializeDocumentVersionChatContext,
+} from "../server/lib/document-version-context.js";
 import {
   parseDocumentFavorite,
   parseDocumentHideFromSearch,
@@ -26,7 +30,7 @@ export default defineAction({
     documentId: z.string().optional().describe("Document ID"),
     versionId: z.string().optional().describe("Version ID"),
   }),
-  run: async (args) => {
+  run: async (args, ctx) => {
     if (!args.documentId) throw new Error("--documentId is required");
     if (!args.versionId) throw new Error("--versionId is required");
 
@@ -56,6 +60,9 @@ export default defineAction({
       documentId: args.documentId,
       title: doc.title,
       content: doc.content,
+      chatContext: serializeDocumentVersionChatContext(
+        documentVersionChatContextFromAction(ctx),
+      ),
       createdAt: now,
     });
 

package/corpus/templates/content/actions/update-document.ts

@@ -14,6 +14,10 @@ import { and, eq, desc, inArray } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
+import {
+  documentVersionChatContextFromAction,
+  serializeDocumentVersionChatContext,
+} from "../server/lib/document-version-context.js";
 import {
   parseDocumentFavorite,
   parseDocumentHideFromSearch,
@@ -580,6 +584,7 @@ export default defineAction({
             .orderBy(desc(schema.documentVersions.createdAt))
             .limit(1);
           const shouldSnapshot =
+            isAgentCaller ||
             clearsNonEmptyContent ||
             !latestVersion ||
             Date.now() - new Date(latestVersion.createdAt).getTime() >
@@ -592,6 +597,9 @@ export default defineAction({
               documentId: id,
               title: existing.title,
               content: existing.content,
+              chatContext: serializeDocumentVersionChatContext(
+                documentVersionChatContextFromAction(ctx),
+              ),
               createdAt: new Date().toISOString(),
             });
           }

package/corpus/templates/content/app/components/QueryErrorState.tsx

@@ -26,6 +26,7 @@ export function QueryErrorState({
         <IconAlertTriangle className="size-7 text-destructive" />
         <p className="text-sm text-destructive">{t("empty.genericError")}</p>
         <Button
+          type="button"
           size="sm"
           variant="outline"
           onClick={onRetry}

package/corpus/templates/content/app/components/editor/DocumentBlockFields.tsx

@@ -18,6 +18,7 @@ import {
 } from "react";
 import { toast } from "sonner";
 
+import { QueryErrorState } from "@/components/QueryErrorState";
 import {
   documentPropertiesResponseMatchesScope,
   useDocumentProperties,
@@ -42,8 +43,8 @@ const BLOCK_FIELD_DRAG_THRESHOLD = 6;
 
 interface DocumentBlockFieldsProps {
   documentId: string;
-  databaseId: string;
-  databaseDocumentId: string;
+  databaseId: string | null;
+  databaseDocumentId: string | null;
   canEdit: boolean;
   /**
    * The fully-wired collaborative body editor for the primary "Content" field.
@@ -223,7 +224,7 @@ export type BlockFieldsRenderState =
 // (shared/api.ts → DocumentPropertiesResponse).
 export function isLoadedForDocument(
   documentId: string,
-  databaseId: string,
+  databaseId: string | null,
   data: DocumentPropertiesResponse | undefined,
 ): boolean {
   return documentPropertiesResponseMatchesScope(documentId, databaseId, data);
@@ -271,12 +272,31 @@ export function DocumentBlockFields({
 }: DocumentBlockFieldsProps) {
   const t = useT();
   const query = useDocumentProperties(documentId, databaseId);
+  const canEditFields =
+    canEdit &&
+    query.data?.canEditValues === true &&
+    databaseId !== null &&
+    databaseDocumentId !== null;
   const properties = query.data?.properties ?? [];
   const blockFields = useMemo(
     () => blockFieldsFromProperties(properties),
     [properties],
   );
 
+  // A failed property read is not an empty field list. Rendering the editor in
+  // that state could bind the body before we know which storage target owns it.
+  if (query.isError) {
+    return (
+      <div className="grid gap-1" data-block-fields-state="error">
+        <QueryErrorState
+          compact
+          onRetry={() => globalThis.location.reload()}
+          retrying={query.isRefetching}
+        />
+      </div>
+    );
+  }
+
   // Placeholder data may belong to the previous row or database. Trust it only
   // after both response identities match the active scope.
   const loaded = isLoadedForDocument(documentId, databaseId, query.data);
@@ -324,9 +344,9 @@ export function DocumentBlockFields({
               // field while SAVING to another across an identity change.
               key={`${documentId}:${state.field.definition.id}`}
               documentId={documentId}
-              databaseDocumentId={databaseDocumentId}
+              databaseDocumentId={databaseDocumentId ?? documentId}
               property={state.field}
-              canEdit={canEdit}
+              canEdit={canEditFields}
             />
           </div>
         );
@@ -340,9 +360,9 @@ export function DocumentBlockFields({
       return (
         <MultiBlockFields
           documentId={documentId}
-          databaseId={databaseId}
-          databaseDocumentId={databaseDocumentId}
-          canEdit={canEdit}
+          databaseId={databaseId ?? ""}
+          databaseDocumentId={databaseDocumentId ?? documentId}
+          canEdit={canEditFields}
           blockFields={state.fields}
           primaryEditor={primaryEditor}
           t={t}