@agent-native/core 0.85.7 → 0.86.0

package/corpus/templates/videos/actions/save-composition.ts

@@ -1,114 +0,0 @@
-import { defineAction } from "@agent-native/core";
-import {
-  hasCollabState,
-  applyText,
-  seedFromText,
-} from "@agent-native/core/collab";
-import {
-  getRequestUserEmail,
-  getRequestOrgId,
-} from "@agent-native/core/server/request-context";
-import {
-  assertAccess,
-  resolveAccess,
-  ForbiddenError,
-} from "@agent-native/core/sharing";
-import { eq } from "drizzle-orm";
-import { z } from "zod";
-
-import { getDb, schema } from "../server/db/index.js";
-
-export default defineAction({
-  description:
-    "Create or update a composition. Upserts by ID — creates if new, updates if existing.",
-  schema: z.object({
-    id: z.string().optional().describe("Composition ID"),
-    title: z.string().optional().describe("Composition title"),
-    type: z.string().optional().describe("Composition type"),
-    data: z.string().optional().describe("Composition data as JSON string"),
-  }),
-  run: async (args) => {
-    if (!args.id || !args.title || !args.type) {
-      return { error: "Composition must have id, title, and type" };
-    }
-
-    const now = new Date().toISOString();
-    const db = getDb();
-    const dataStr = args.data || "{}";
-
-    // Resolve the caller's access to this composition id (if any). This is
-    // scoped — it returns null when the row doesn't exist OR when it exists
-    // but the caller has no access. Treating "no access" the same as
-    // "doesn't exist" prevents cross-tenant existence probing AND prevents
-    // a malicious caller from forcing a write path against someone else's
-    // composition by passing their id.
-    const access = await resolveAccess("composition", args.id);
-
-    if (access) {
-      // Updating — require editor access (assertAccess re-checks role)
-      await assertAccess("composition", args.id, "editor");
-
-      await db
-        .update(schema.compositions)
-        .set({
-          title: args.title,
-          type: args.type,
-          data: dataStr,
-          updatedAt: now,
-        })
-        .where(eq(schema.compositions.id, args.id));
-    } else {
-      // Creating — set owner/org from request context
-      const ownerEmail = getRequestUserEmail();
-      if (!ownerEmail) throw new Error("no authenticated user");
-      try {
-        await db.insert(schema.compositions).values({
-          id: args.id,
-          title: args.title,
-          type: args.type,
-          data: dataStr,
-          createdAt: now,
-          updatedAt: now,
-          ownerEmail,
-          orgId: getRequestOrgId(),
-        });
-      } catch {
-        // PK conflict means the id is taken by another tenant we couldn't
-        // see via resolveAccess. Reject rather than overwrite their row.
-        throw new ForbiddenError(
-          `Composition ${args.id} already exists and is not accessible to you`,
-        );
-      }
-    }
-
-    // Sync to collab layer for live editing
-    const docId = `comp-${args.id}`;
-    try {
-      const collabExists = await hasCollabState(docId);
-      if (collabExists) {
-        await applyText(docId, dataStr, "content", "agent");
-      } else {
-        await seedFromText(docId, dataStr);
-      }
-    } catch (err) {
-      // Collab sync is best-effort — SQL is the source of truth
-      console.warn("[save-composition] Collab sync failed:", err);
-    }
-
-    let parsedData = {};
-    try {
-      parsedData = JSON.parse(dataStr);
-    } catch {
-      // keep empty
-    }
-
-    return {
-      id: args.id,
-      title: args.title,
-      type: args.type,
-      data: parsedData,
-      createdAt: now,
-      updatedAt: now,
-    };
-  },
-});

package/corpus/templates/videos/actions/set-default-design-system.ts

@@ -1,40 +0,0 @@
-import { defineAction } from "@agent-native/core";
-import { getRequestUserEmail } from "@agent-native/core/server/request-context";
-import { assertAccess } from "@agent-native/core/sharing";
-import { eq } from "drizzle-orm";
-import { z } from "zod";
-
-import { getDb, schema } from "../server/db/index.js";
-
-export default defineAction({
-  description:
-    "Set a design system as the default. Unsets any previously-default design system for this user.",
-  schema: z.object({
-    id: z.string().describe("Design system ID to set as default"),
-  }),
-  run: async ({ id }) => {
-    await assertAccess("design-system", id, "editor");
-
-    const db = getDb();
-    const now = new Date().toISOString();
-
-    const userEmail = getRequestUserEmail();
-
-    // Use a transaction to atomically unset all defaults then set the new one.
-    // Without a transaction, concurrent set-default requests can interleave and
-    // leave multiple design systems marked as default.
-    await db.transaction(async (tx) => {
-      await tx
-        .update(schema.designSystems)
-        .set({ isDefault: false, updatedAt: now })
-        .where(eq(schema.designSystems.ownerEmail, userEmail ?? ""));
-
-      await tx
-        .update(schema.designSystems)
-        .set({ isDefault: true, updatedAt: now })
-        .where(eq(schema.designSystems.id, id));
-    });
-
-    return { id, isDefault: true };
-  },
-});

package/corpus/templates/videos/actions/update-composition.ts

@@ -1,81 +0,0 @@
-import { defineAction } from "@agent-native/core";
-import {
-  hasCollabState,
-  applyText,
-  seedFromText,
-} from "@agent-native/core/collab";
-import { assertAccess } from "@agent-native/core/sharing";
-import { eq } from "drizzle-orm";
-import { z } from "zod";
-
-import { getDb, schema } from "../server/db/index.js";
-
-export default defineAction({
-  description: "Update an existing composition by ID",
-  schema: z.object({
-    id: z.string().optional().describe("Composition ID"),
-    title: z.string().optional().describe("New title (optional)"),
-    type: z.string().optional().describe("New type (optional)"),
-    data: z
-      .string()
-      .optional()
-      .describe("New composition data as JSON string (optional)"),
-  }),
-  run: async (args) => {
-    if (!args.id) {
-      return { error: "Composition id is required" };
-    }
-
-    await assertAccess("composition", args.id, "editor");
-
-    const db = getDb();
-    const now = new Date().toISOString();
-
-    const updates: Record<string, any> = { updatedAt: now };
-    if (args.title !== undefined) updates.title = args.title;
-    if (args.type !== undefined) updates.type = args.type;
-    if (args.data !== undefined) updates.data = args.data;
-
-    // Update SQL (source of truth)
-    const result = await db
-      .update(schema.compositions)
-      .set(updates)
-      .where(eq(schema.compositions.id, args.id))
-      .returning();
-
-    // Sync data to collab layer for live editing
-    if (args.data !== undefined) {
-      const docId = `comp-${args.id}`;
-      const dataStr =
-        typeof args.data === "string" ? args.data : JSON.stringify(args.data);
-      try {
-        const exists = await hasCollabState(docId);
-        if (exists) {
-          await applyText(docId, dataStr, "content", "agent");
-        } else {
-          await seedFromText(docId, dataStr);
-        }
-      } catch (err) {
-        // Collab sync is best-effort — SQL is the source of truth
-        console.warn("[update-composition] Collab sync failed:", err);
-      }
-    }
-
-    if (result.length > 0) {
-      const row = result[0];
-      return {
-        id: row.id,
-        title: row.title,
-        type: row.type,
-        data: JSON.parse(row.data),
-        createdAt: row.createdAt,
-        updatedAt: row.updatedAt,
-        ownerEmail: row.ownerEmail,
-        orgId: row.orgId,
-        visibility: row.visibility,
-      };
-    }
-
-    return { error: "Composition not found" };
-  },
-});

package/corpus/templates/videos/actions/update-design-system.ts

@@ -1,68 +0,0 @@
-import { defineAction } from "@agent-native/core";
-import { assertAccess } from "@agent-native/core/sharing";
-import { eq } from "drizzle-orm";
-import { z } from "zod";
-
-import { getDb, schema } from "../server/db/index.js";
-
-export default defineAction({
-  description:
-    "Update an existing design system. Requires editor access. " +
-    "Only provided fields are updated; omitted fields are left unchanged.",
-  schema: z.object({
-    id: z.string().describe("Design system ID"),
-    title: z.string().optional().describe("New title"),
-    description: z.string().optional().describe("New description"),
-    data: z
-      .string()
-      .optional()
-      .describe("Updated JSON string of DesignSystemData"),
-    assets: z
-      .string()
-      .optional()
-      .describe("Updated JSON string of DesignSystemAsset[]"),
-    customInstructions: z
-      .string()
-      .optional()
-      .describe(
-        "Updated free-form guidance the agent should follow when generating compositions with this design system. Pass an empty string to clear.",
-      ),
-  }),
-  run: async ({ id, title, description, data, assets, customInstructions }) => {
-    // Validate that data/assets are valid JSON when provided
-    if (data !== undefined) {
-      try {
-        JSON.parse(data);
-      } catch {
-        throw new Error("data must be a valid JSON string");
-      }
-    }
-    if (assets !== undefined) {
-      try {
-        JSON.parse(assets);
-      } catch {
-        throw new Error("assets must be a valid JSON string");
-      }
-    }
-
-    await assertAccess("design-system", id, "editor");
-
-    const db = getDb();
-    const now = new Date().toISOString();
-
-    const updates: Record<string, unknown> = { updatedAt: now };
-    if (title !== undefined) updates.title = title;
-    if (description !== undefined) updates.description = description;
-    if (data !== undefined) updates.data = data;
-    if (assets !== undefined) updates.assets = assets;
-    if (customInstructions !== undefined)
-      updates.customInstructions = customInstructions;
-
-    await db
-      .update(schema.designSystems)
-      .set(updates)
-      .where(eq(schema.designSystems.id, id));
-
-    return { id, updated: true };
-  },
-});