@nodegx/mcp 0.2.5 → 0.2.7

package/dist/render-harness/data/node-catalog-enriched.json

@@ -5114,7 +5114,7 @@
         "whenToUse": "Whenever a file handle needs to become a URL or filename. Note the cloudfile→image typecast lets a cloudfile feed an Image `src` directly; reach for Cloud File when you need the URL as a *string* or the file's name.",
         "ports": {
           "file": "The cloudfile value to unwrap.",
-          "url": "The file's public URL as a string.",
+          "url": "The file's URL as a string, for an Image `src` or a link. It's the address the backend answered from, so don't save it into a text property. Save the file itself into a file-typed one.",
           "name": "The stored file's name."
         },
         "examples": [
@@ -7928,11 +7928,9 @@
       ],
       "dynamicPorts": {
         "mechanisms": [
-          "runtime-discovered",
-          "editor-adapter"
+          "runtime-discovered"
         ],
-        "description": "Filter/sort input ports are generated by the editor from the visual query (QueryRecordsAdapter) and the selected class schema.",
-        "editorAdapter": "QueryRecordsAdapter"
+        "description": "Every input is drawn from the parameters, so the static port list is empty: \"collectionName\" (the class), \"visualFilter\", \"visualSort\", \"storageEnableLimit\" + \"storageLimit\"/\"storageSkip\", \"storageEnableCount\", \"search\", \"realtime\", and the \"runOnChange-<input>\" boxes. A server-side filter is \"visualFilter\": {\"combinator\": \"and\", \"rules\": [{\"property\": \"<field>\", \"operator\": \"equal to\", \"input\": \"<name>\"}]}; each rule's \"input\" mints the input port \"qp-<name>\" a connection feeds, or the rule carries a literal \"value\" instead. Any other parameter name is stored and never read."
       },
       "parameterEncoding": {
         "known": true,
@@ -8057,8 +8055,9 @@
           "changedRecords": "All records of the last batch; for deletes, an array of primary-key strings.",
           "changedRecordId": "Primary key of the first affected record, across all three event types."
         },
-        "runtimeBehavior": "All *inputs* are runtime-determined (runtime-discovered + editor-adapter): the class choice, filter values, sort keys and paging inputs are generated from the project's database schema and the visual filter you build in the editor — e.g. each 'value' placeholder in a filter becomes its own input port, and actions like fetch ('storageFetch') are registered on demand. A generator cannot enumerate them statically; an authoring tool should set `collectionName` and filter parameters, and may wire signals to fetch-related inputs which the runtime registers when used.",
+        "runtimeBehavior": "Every input is drawn from the parameters (the static list is empty). Set `collectionName` (the class). FILTER ON THE SERVER with `visualFilter`: {\"combinator\": \"and\", \"rules\": [{\"property\": \"<field>\", \"operator\": \"equal to\", \"input\": \"<name>\"}]} — each rule's `input` mints an input port `qp-<name>`; wire the value into it (e.g. a User node's `id` → `qp-ownerId`), or give the rule a literal `\"value\"` instead of `input`. Operators: \"equal to\", \"not equal to\", \"greater than\", \"greater than or equal to\", \"less than\", \"less than or equal to\", \"contain\" (case-insensitive), \"exist\", \"not exist\" (no value), \"points to\" (a pointer field equals a record id), and \"related to\" (with `relatedTo` and `relationProperty`). A rule may itself be a {\"combinator\": \"or\", \"rules\": [...]} group. The filter is compiled to the backend's `where`, so only matching rows leave the server. Sort: `visualSort`: [{\"property\": \"<field>\", \"order\": \"ascending\" | \"descending\"}]. Paging: `storageEnableLimit`: true with `storageLimit` and `storageSkip` (both ignored without it); `storageEnableCount`: true adds the `storageTotalCount` output. `storageFetch` (Do) is the signal that re-runs it. ⚠️ A rule whose `qp-` value has not arrived yet is DROPPED, not failed, so the query that runs when the graph is built returns every row the user may read: with a wired filter value set `\"runOnChange-collectionName\": false` and `\"runOnChange-querySettings\": false` and leave Do unwired, so the value's arrival is what runs the query (get_example cloud-query-own-rows). Any other parameter name (`querySettings`, `filter`, `where`…) is stored and never read, and the write is refused. Once the filter is opened in the editor's panel it is saved as {\"type\": \"and\", \"conditions\": [{\"field\", \"operator\": \"equalTo\", \"valueSource\": \"connected\", \"valuePortName\": \"qp-<name>\"}]}; the runtime reads both shapes.",
         "examples": [
+          "cloud-query-own-rows",
           "repeater-query-records",
           "send-event-across-components",
           "cloud-record-live-refresh",
@@ -8068,12 +8067,14 @@
           "community-email-signup-validat"
         ],
         "patterns": [
+          "A signed-in user's own rows: `visualFilter` rule {\"property\": \"owner\", \"operator\": \"equal to\", \"input\": \"owner\"}, the User node's `id` wired into `qp-owner`, and both fetch-at-build boxes off — the server answers with only that user's rows. `owner` is the backend's: it writes the creator into every record from their session, and a page never sends it. A field the page filled from the User id (an ownerId, a familyId) is the caller's word, never proof of whose a record is.",
           "`items` → Repeater `items`, with record properties delivered to the item component via Component Inputs: the canonical list page.",
           "Event Receiver `eventReceived` → fetch input: re-run a query on demand from anywhere in the app.",
           "Turn on Subscribe To Changes and wire `Changed` back into this node's own `Do`: the list stays current without polling, on every backend whose descriptor allows it — SSE on the built-in backend and PocketBase, a WebSocket on Directus.",
           "`Subscribed` → a status indicator's visibility, so people can see when live updates are actually running rather than assuming."
         ],
         "antiPatterns": [
+          "Fetching every row and dropping the ones a user should not see in a Function or Filter Records: every row still reaches every browser. Filter on the server with `visualFilter` and a `qp-` port.",
           "Re-querying on a timer to feel 'live' — results already update from cloud events; explicit re-fetch is only needed when the server changed outside those events.",
           "Treating `Changed Record` as the full record on a delete — delete events carry only primary keys, so it is null and only `Changed Record Id` is populated.",
           "Polling with a Timer while Subscribe To Changes is available on this backend. Subscribe and re-fetch on `Changed` instead.",
@@ -8539,7 +8540,7 @@
             "name": "signal"
           },
           "isSignal": true,
-          "description": "Fires when the Id binds a record, and again when a Fetch finishes reading it — a bind has read nothing, so use Done to act on data that is really there"
+          "description": "Fires when the Id binds a record already in memory, when a record the Id names is first read from the backend, and when a Fetch finishes reading it; use Done to act on the answer to a Fetch"
         },
         {
           "name": "id",
@@ -8632,14 +8633,14 @@
       "enrichment": {
         "typeName": "DbModel2",
         "summary": "Record: binds to one cloud database record by id and exposes each of its properties as an output that follows the record.",
-        "description": "DbModel2 (Record) points at a single record of a cloud database class and exposes one value output per property of that class (registered as `prop-<property>`), plus a `changed-<property>` signal per property. Setting `modelId` binds the node to the record in the app's local record store — properties already known locally (for example from a Query Records result) appear immediately, and `fetched` fires. Triggering `fetch` (Fetch, signal) loads the record fresh from the server by id; while `fetch` is connected, local change events no longer drive the outputs, so updates arrive only when you fetch. `changed` fires whenever the bound record changes from anywhere in the app (a Update Record elsewhere, a live query update). `fetched` and `changed` are value-level announcements and fire on binding as well as on a fetch; `done`/`failure`/`completed` are the outcome of a `fetch` invocation specifically, so wire those to sequence a chain and `fetched` to react to the data.",
+        "description": "DbModel2 (Record) points at a single record of a cloud database class and exposes one value output per property of that class (registered as `prop-<property>`), plus a `changed-<property>` signal per property. Setting `modelId` binds the node to that record. A record already in memory (for example from a Query Records result on the page you came from) appears at once and `fetched` fires. A record nothing in memory holds yet (a page opened by its own URL: a reload, a bookmark, a shared link) is read from the backend first, and `fetched` fires when it arrives; until then the property outputs are empty. Triggering `fetch` (Fetch, signal) re-reads the record from the server by id. `changed` fires whenever the bound record changes from anywhere in the app (an Update Record elsewhere, a live query update). `fetched` and `changed` are value-level announcements; `done`/`failure`/`completed` are the outcome of a `fetch` invocation specifically, so wire those to sequence a chain and `fetched` to react to the data. A read the bind makes on its own reports a failure on `error`, not on `failure`.",
         "whenToUse": "Use it to read one record's properties — a detail page, or the current item inside a repeater (set `idSource` to 'From repeater'). It does not write: pair it with SetDbModelProperties to save edits. For lists of records use DbCollection2 (Query Records); for records from a non-cloud (BYOB) backend use noodl.byob.QueryData, whose results are plain objects, not records.",
         "ports": {
           "modelId": "Value input (connections only): the record id to bind to; a full record object is also accepted and dereferenced to its id.",
           "idSource": "Edit-only choice: 'Specify explicitly' uses `modelId`; 'From repeater' binds to the record driving the nearest enclosing For Each item.",
-          "fetch": "Signal; fetches the record from the server by the current `modelId`. Connecting it also switches the node to fetch-driven mode: outputs update on Fetch instead of on local record changes.",
-          "fetched": "Signal; fires after the record resolves — on bind when `fetch` is not connected, or after a server fetch completes.",
-          "changed": "Signal; fires when the bound record's data changes anywhere in the app (suppressed while `fetch` is connected).",
+          "fetch": "Signal; re-reads the record from the server by the current `modelId`, replacing the copy held in memory. Not needed for a page opened by its own URL: binding an id nothing in memory holds already reads it.",
+          "fetched": "Signal; fires when the record is there to read: on bind for a record already in memory, when the backend answers for one that was not, and after a Fetch completes.",
+          "changed": "Signal; fires when the bound record's data changes anywhere in the app.",
           "id": "String value; the id of the currently bound record."
         },
         "runtimeBehavior": "Property ports are runtime-determined from the cloud database class selected via the `collectionName` parameter (itself a runtime-registered enum of the project's classes plus _User and _Role): each schema property becomes a value output `prop-<name>` (typed from the schema) and a signal output `changed-<name>`. Relation properties get no ports. An authoring tool should set `collectionName` in parameters and may reference `prop-<name>`/`changed-<name>` for properties it knows exist in the class schema.",
@@ -8651,7 +8652,7 @@
           "`prop-<name>` → a Text Input's `startValue`, edited text → Update Record `prop-<name>`: prefill an edit form and save it back."
         ],
         "antiPatterns": [
-          "Connecting `fetch` just to 'refresh' — while `fetch` is connected the node stops following local record changes, so only do it when you explicitly want server-fetch-driven updates.",
+          "Reading the property outputs before `fetched` on a page that can be opened by its own URL — until the backend answers they are empty, and an Update Record fed from them then writes the empties back. Act on `fetched` (or a Fetch's `done`).",
           "Comparing a read-back Object field with `JSON.stringify` — an Object field does not keep the order of its names (a backend on PostgreSQL gives them back with shorter names first), so two equal objects can give different text. Compare them name by name, and sort the names yourself where a page shows them in an order."
         ],
         "relatedNodes": [
@@ -18525,12 +18526,14 @@
         "examples": [
           "function-compute-on-run",
           "community-csv-download",
-          "community-seo-meta-tag-setter"
+          "community-seo-meta-tag-setter",
+          "cloud-members-can-edit-my-records"
         ],
         "patterns": [
           "Async action: `run` from a click → `await fetch(...)` → set value outputs → `Outputs.Success()`; wire Success onward for sequencing.",
           "Transform between nodes: array in, reshaped array out, feeding a Repeater.",
-          "Shared helper: `exports.canStep = …` in `scripts/engine/rules.js`, `engine/rules.js` under Uses on each Function that needs it, and `Scripts.rules.canStep(tile)` in each body."
+          "Shared helper: `exports.canStep = …` in `scripts/engine/rules.js`, `engine/rules.js` under Uses on each Function that needs it, and `Scripts.rules.canStep(tile)` in each body.",
+          "Records from a script, in a cloud function: `await Noodl.Records.query('Note', { owner: id }, { plain: true })` (rows as stored, ids as strings), `await Noodl.Records.create('Note', { title, owner }, { acl })`, `await Noodl.Records.save(id, { title }, { className: 'Note', acl })`, `await Noodl.Records.delete(id, { className: 'Note' })` and `Noodl.Records.increment`. A cloud function runs as the system: it reads every record, may name `owner`, and creates where the collection's create rule is \"nobody\". `acl` is the record's whole ACL: `{ \"<userId>\": { read: true, write: true }, \"role:<name>\": { … }, \"*\": { … } }` (example `cloud-members-can-edit-my-records`)."
         ],
         "antiPatterns": [
           "Wiring to the bare script name — `toProperty: \"amount\"` for a script reading `Inputs.amount`. The port is `in-amount`; the bare name is only its display label. The door refuses it, and drawn by hand it fails on the canvas.",
@@ -21801,7 +21804,7 @@
       },
       "enrichment": {
         "typeName": "NewDbModelProperties",
-        "summary": "Create Record: inserts a record into a cloud database class from its property inputs when Do is triggered.",
+        "summary": "Create Record: inserts a record into a cloud database class from its property inputs on Do, with optional access rules (ACL: users, roles).",
         "description": "NewDbModelProperties (Create Record) creates one record in the cloud database class chosen with the `collectionName` (Class) parameter. Each property of the class becomes a value input; when the `store` (Do) signal is triggered, the current input values are sent to the server as a new record. On success the node binds to the new record, outputs its `id`, and fires `done` (Done) followed by `completed`; on failure it fires `failure` with a message on `error`, and `completed` after that too. Optionally, `sourceObjectId` seeds the new record with the data of an existing local object (explicit property inputs win), and Access Control Rules restrict who can read/write the record (defaulting to the creating user when a rule is left unconfigured).",
         "whenToUse": "The write half of every 'add item' flow — forms, quick-add buttons, duplicating a record via `sourceObjectId`. Live Query Records nodes pick the new record up automatically, so no manual re-fetch is needed. To modify an existing record use SetDbModelProperties instead; for a non-cloud (BYOB) backend use noodl.byob.CreateRecord.",
         "ports": {
@@ -21810,21 +21813,24 @@
           "completed": "Signal; fires after every Do whatever the outcome — wire it to carry on regardless. It never replaces `failure`, which still fires and still carries its reason.",
           "id": "String value; the id of the created record — feed it to a Record node or navigation parameter.",
           "sourceObjectId": "Value input (connections only): id of a local object/record whose data seeds the new record before the property inputs are applied.",
-          "accessControl": "Edit-only list of access rules; each rule expands into its own Target/Read/Write inputs (see runtimeBehavior). With no rules the record gets the class default (public) permissions."
+          "accessControl": "Edit-only list of access rules; each rule expands into its own Target/Read/Write inputs (see runtimeBehavior). With no rules, on the NodeGX backend's default (creator-owned) collections the record is the creator's alone: readable and changeable only by them. Rules you set REPLACE that, so keep one for the creator (target user, the User node's `id` wired into its User Id)."
         },
-        "runtimeBehavior": "Ports are runtime-determined: `collectionName` (Class) is registered as an edit-only enum of the project's classes plus _User/_Role, and each schema property of the chosen class becomes a value input `prop-<name>` typed from the schema. Each entry in the `accessControl` list additionally spawns `acl-<ruleId>-target` (user/everyone/role), then `acl-<ruleId>-userid` or `acl-<ruleId>-role`, plus `acl-<ruleId>-read` and `acl-<ruleId>-write` booleans. An authoring tool should set `collectionName` in parameters and drive `prop-<name>` inputs it knows from the class schema.",
+        "runtimeBehavior": "Ports are runtime-determined: `collectionName` (Class) is registered as an edit-only enum of the project's classes plus _User/_Role, and each schema property of the chosen class becomes a value input `prop-<name>` typed from the schema. Each entry in the `accessControl` list additionally spawns `acl-<ruleId>-target` (user/everyone/role), then `acl-<ruleId>-userid` or `acl-<ruleId>-role`, plus `acl-<ruleId>-read` and `acl-<ruleId>-write` booleans. An authoring tool should set `collectionName` in parameters and drive `prop-<name>` inputs it knows from the class schema. What the rules store is the record's ACL, one key per rule: the user's id, `role:<name>` for a role rule (set `acl-<ruleId>-target` to \"role\" as a parameter, then wire or set `acl-<ruleId>-role` to the role's name without the `role:` prefix), or `*` for everyone; each key holds `{\"read\": true, \"write\": true}`. The backend lets a caller read or change the record only through a key it holds, after the collection's own find/get/update rule. Who joins a role is decided only in a cloud function (Add User To Role).",
         "examples": [
           "cloud-create-record-with-upload",
           "cloud-record-crud",
           "community-simple-audio-recorde",
-          "community-web-rtc-video-record"
+          "community-web-rtc-video-record",
+          "cloud-members-can-edit-my-records"
         ],
         "patterns": [
           "Text Input `text` → `prop-<name>`, Button `onClick` → `store`: the minimal create form.",
-          "`done` → a navigation or Event Sender, with `id` as payload: jump straight to the new record's detail page."
+          "`done` → a navigation or Event Sender, with `id` as payload: jump straight to the new record's detail page.",
+          "Records several people may all change: a rule for the creator and a role rule (`members-of-<ownerId>`), the role joined only in a cloud function that reads an invitation's `owner` (example `cloud-members-can-edit-my-records`). Where only a function should create the records, it creates them as the system and the collection's create rule is \"nobody\". A record it creates while a signed-in person's call runs is that person's (P112-OWN026-OPENSTAT); to share one, the function passes `acl` with `'*'`."
         ],
         "antiPatterns": [
-          "Re-fetching a Query Records node after `done` — live queries already receive the new record; only re-fetch when the query is not live."
+          "Re-fetching a Query Records node after `done` — live queries already receive the new record; only re-fetch when the query is not live.",
+          "Wiring the User node's `id` into a field of your own (an ownerId, a familyId, a teamId) to say whose the record is. The backend already writes the creator into `owner` from the session and drops an `owner` the page sends; a field the page fills is whatever the caller sent, so anyone signed in can name another id. Read `owner` wherever it is decided who sees the record (example `cloud-share-my-records-with-someone`)."
         ],
         "relatedNodes": [
           "SetDbModelProperties",
@@ -31286,6 +31292,17 @@
           "description": "Read and write rules stored on the record as it is written, each rule adding its own Target, Read and Write ports; the NodeGX backend enforces them on every query and every realtime event, and backends with no per-record access control ignore them",
           "index": 1000
         },
+        {
+          "name": "addTo",
+          "displayName": "Add To",
+          "group": "General",
+          "plug": "input",
+          "type": {
+            "name": "string"
+          },
+          "isSignal": false,
+          "description": "Property names, comma-separated (e.g. points). For these, the value wired in is an amount added to what the backend holds, in one step on the backend, instead of replacing it: two devices adding at once both count. Wire the amount (1, -1, 5). The record then shows the backend's total. Leave empty to write every value as given."
+        },
         {
           "name": "idSource",
           "displayName": "Id Source",
@@ -31575,6 +31592,9 @@
         "onlyIfUnchanged": [
           "always: read by the next save — the fields the backend must still hold as this record holds them, or the save is refused"
         ],
+        "addTo": [
+          "always: read by the next Do — the fields whose value is an amount the backend adds, not a value it stores"
+        ],
         "accessControl": [
           "always: read by the next call — the access rules sent with the record"
         ],
@@ -31586,9 +31606,9 @@
       },
       "enrichment": {
         "typeName": "SetDbModelProperties",
-        "summary": "Update Record: writes property values to an existing cloud database record when Do is triggered.",
+        "summary": "Update Record: writes property values to an existing cloud database record on Do; access rules sent with it replace its ACL.",
         "description": "SetDbModelProperties (Update Record) updates the record identified by `modelId` in the class chosen with the `collectionName` (Class) parameter. Each class property becomes a value input; triggering `store` (Do) applies the connected inputs to the local record and saves them to the server, firing `done` (Done) on confirmation or `failure` with `error` on problems, and `completed` after either. `storeType` (Store to) can switch the node to 'Local only', which updates the in-memory record without any server call — useful for optimistic UI or scratch state. By default only the properties you actually supply are sent (`storeProperties` = 'Only specified'); 'All' sends the record's entire current data. Because the shared local record is updated, every bound Record node and live query in the app sees the change immediately.",
-        "whenToUse": "The save half of every edit form, and the way to flip a single field ('mark done') from a list row. To create a record use NewDbModelProperties; to remove one use DeleteDbModelProperties; for BYOB backends use noodl.byob.UpdateRecord.",
+        "whenToUse": "The save half of every edit form, and the way to flip a single field ('mark done') from a list row. To create a record use NewDbModelProperties; to remove one use DeleteDbModelProperties; for BYOB backends use noodl.byob.UpdateRecord. For a count, score, balance or progress, set `addTo` and wire the change, not the new total.",
         "ports": {
           "store": "Signal (displayed as Do); saves to cloud (default) or applies locally, depending on `storeType`.",
           "done": "Signal (displayed as Done); fires after the server confirms the save, or immediately after a local-only store.",
@@ -31597,22 +31617,28 @@
           "idSource": "Edit-only choice: 'Specify explicitly' uses `modelId`; 'From repeater' targets the record driving the nearest enclosing For Each item.",
           "storeProperties": "Edit-only choice ('Only specified' / 'All'): whether to send just the supplied property inputs or the record's whole data. Shown while `storeType` is cloud.",
           "storeType": "Edit-only choice ('Cloud and local' / 'Local only'): whether the save reaches the server or only the in-memory record.",
-          "accessControl": "Edit-only list of access rules applied with the save; each rule expands into its own Target/Read/Write inputs.",
-          "onlyIfUnchanged": "Edit-only text (displayed as Only If Unchanged): property names, comma-separated, usually `version`. The update applies only if those properties still hold the values the record had when it was read (taken before this node's inputs are applied), checked by the backend inside the UPDATE itself. If someone else wrote the record in between, nothing is written, `failure` fires, `error` says so, and the local record goes back to what it held (the backend answered 409 with reason `precondition-failed`). To retry, FETCH the record again first: retrying with the same values fails the same way. NodeGX backends only; other backends refuse it. Empty: always write."
+          "accessControl": "Edit-only list of access rules applied with the save; each rule expands into its own Target/Read/Write inputs. Rules sent with an update replace the record's whole ACL (keys and shape as on Create Record); an update without rules leaves the ACL as it was.",
+          "onlyIfUnchanged": "Edit-only text (displayed as Only If Unchanged): property names, comma-separated, usually `version`. The update applies only if those properties still hold the values the record had when it was read (taken before this node's inputs are applied), checked by the backend inside the UPDATE itself. If someone else wrote the record in between, nothing is written, `failure` fires, `error` says so, and the local record goes back to what it held (the backend answered 409 with reason `precondition-failed`). To retry, FETCH the record again first: retrying with the same values fails the same way. NodeGX backends only; other backends refuse it. Empty: always write.",
+          "addTo": "Edit-only text (displayed as Add To): property names, comma-separated. For these, the value wired into `prop-<name>` is an AMOUNT (1, -1, 5) the backend adds to what it holds, in one step, instead of a value that replaces it, so two devices or tabs adding at once both count. The record then shows the backend's total. The other properties are saved first, so `onlyIfUnchanged` still guards them and a refused save adds nothing. A value that is not a number fails the Do and says so. 'Local only' adds the amount to the record held in memory."
         },
         "runtimeBehavior": "Ports are runtime-determined: `collectionName` (Class) is registered as an edit-only enum of the project's classes plus _User/_Role, and each schema property of the chosen class becomes a value input `prop-<name>` typed from the schema. Access Control rules spawn `acl-<ruleId>-*` inputs like on Create Record. An authoring tool should set `collectionName` in parameters and drive the `prop-<name>` inputs it intends to change.",
         "examples": [
           "cloud-edit-record",
-          "cloud-record-crud"
+          "cloud-record-crud",
+          "cloud-shared-counter",
+          "cloud-members-can-edit-my-records"
         ],
         "patterns": [
+          "A count, score, balance or progress: `addTo` = `points`, `prop-points` = 1 (or the change a Function works out), Button `onClick` → `store`. No script, no read of the old value: the backend adds it, and two devices pressing together both count (example `cloud-shared-counter`).",
           "DbModel2 `prop-<name>` → Text Input `startValue`, edited `text` → `prop-<name>`, Button `onClick` → `store`: prefill, edit, save.",
           "'From repeater' `idSource` inside a list row: one node updates whichever record the row represents.",
           "Two people editing one record: bump a `version` property on every save and set `onlyIfUnchanged` to `version`. The second save to land gets `failure` instead of silently replacing the first; on `failure`, fetch the record again (DbModel2) and let the person re-apply their change."
         ],
         "antiPatterns": [
           "Setting `storeProperties` to 'All' to 'be safe' — it uploads the record's entire local data and can overwrite fields other users changed; send only what the form edits.",
-          "Retrying a `failure` from `onlyIfUnchanged` by pressing Do again without fetching the record first: the precondition is taken from the record as it was read, so the retry fails the same way until the record is re-read."
+          "Retrying a `failure` from `onlyIfUnchanged` by pressing Do again without fetching the record first: the precondition is taken from the record as it was read, so the retry fails the same way until the record is re-read.",
+          "Saving a count, score, balance or progress that several tabs or devices change from the value the page holds (read it, add one in a Function, wire the new total into `prop-<name>`, Do): of two such saves the later erases the earlier. Set `addTo` to that property and wire the CHANGE (1, -1) instead: one node, no script (example `cloud-shared-counter`). For a value that is not a count, guard the whole-value save with `onlyIfUnchanged`.",
+          "Wiring two controls (a Button's Click and a Text Input's On Enter) to two DIFFERENT nodes that each lead to this Do. A press that starts a save is taken once (the control's `repeatWhileSaving` is off by default), and controls wired to the SAME node share that guard; wired to different nodes, one press of each still saves twice. Wire both into the same node (the same Function's Run, or this Do)."
         ],
         "relatedNodes": [
           "DbModel2",
@@ -37728,7 +37754,8 @@
         ],
         "antiPatterns": [
           "Treating `cloudFile` as set before `done` fired — sequence record writes on the Done signal.",
-          "Setting `private: true` and then binding `cloudFile.url` straight to an Image/link — a private file's plain url 403s for anyone but the uploader; sign it first."
+          "Setting `private: true` and then binding `cloudFile.url` straight to an Image/link — a private file's plain url 403s for anyone but the uploader; sign it first.",
+          "Saving the url of `cloudFile` (or Cloud File's `url`) into a text property. That url names the address the backend was reached at during the upload, which is `127.0.0.1` on your own machine, so it stops working once the app runs on a host. Save the `cloudFile` handle into a file-typed property instead. The NodeGX backend keeps the file's name and fills its address in on every read."
         ],
         "relatedNodes": [
           "Open File Picker",
@@ -50480,6 +50507,18 @@
           "description": "How the element is placed: In Layout follows its siblings, Absolute ignores them, Sticky pins to the parent edge on overflow, Fixed stays put and takes no space",
           "index": 11
         },
+        {
+          "name": "repeatWhileSaving",
+          "displayName": "Repeat While Saving",
+          "group": "General",
+          "plug": "input",
+          "type": {
+            "name": "boolean"
+          },
+          "isSignal": false,
+          "default": false,
+          "description": "Off (the default): when a click starts a save, the next click is ignored until the backend has answered, and for at least half a second, so a double press saves once. Controls wired to the same node share this. On: every click fires, for a control that saves each quick tap"
+        },
         {
           "name": "scrollIntoView",
           "displayName": "Scroll Into View",
@@ -51279,9 +51318,10 @@
         "ports": {
           "label": "The button caption string.",
           "onClick": "Signal; the click event — wire this to the action (Condition `eval`, Navigate `navigate`, Send Event `sendEvent`, …).",
-          "enabled": "Boolean level input; false renders the disabled state and suppresses `onClick`. The current value is also mirrored as an output of the same name."
+          "enabled": "Boolean level input; false renders the disabled state and suppresses `onClick`. The current value is also mirrored as an output of the same name.",
+          "repeatWhileSaving": "Boolean (displayed as Repeat While Saving), default off. Off: when a click starts a backend save (a Record node's Do, a `Noodl.Records` call made before its first await), the next `onClick` from this control, or from any control wired to the same node, is ignored until the backend has answered and for at least half a second, so a double press saves once. A press that starts no save is never held. On: every `onClick` fires (a stepper that saves each tap)."
         },
-        "runtimeBehavior": "Declared-port-groups: icon ports appear when an icon source is chosen, and each visual state (hover, pressed, disabled, focused) contributes state-scoped styling ports. The catalog list is the superset; the editor shows the subset matching current parameters.",
+        "runtimeBehavior": "Declared-port-groups: icon ports appear when an icon source is chosen, and each visual state (hover, pressed, disabled, focused) contributes state-scoped styling ports. The catalog list is the superset; the editor shows the subset matching current parameters. A `onClick` that starts a backend save is taken once: a second one is ignored while that save is waiting and for half a second after the press (`repeatWhileSaving` turns this off). There is no need to wire a busy flag back to `enabled` for a double press.",
         "examples": [
           "validate-before-submit",
           "navigate-on-click",
@@ -56083,11 +56123,12 @@
         ],
         "items": [
           "nothing handed (undefined): the list it has stays",
+          "the value is still the placed node's seed and the list does not offer it: the list is kept, and the value is cleared to '' and sent",
           "otherwise: the list is kept as handed and drawn at the next paint; the value stays, so a list handed again keeps the pick"
         ],
         "value": [
           "null: ignored",
-          "the value it already holds, as text: nothing",
+          "the value it already holds, as text: nothing (it is no longer the seed)",
           "a change: kept as text, Value follows, and the list selects it at the next paint if it names an option — Changed does not fire (only a person's pick fires it)"
         ],
         "mounted": [
@@ -62677,6 +62718,18 @@
           "description": "How the element is placed: In Layout follows its siblings, Absolute ignores them, Sticky pins to the parent edge on overflow, Fixed stays put and takes no space",
           "index": 11
         },
+        {
+          "name": "repeatWhileSaving",
+          "displayName": "Repeat While Saving",
+          "group": "General",
+          "plug": "input",
+          "type": {
+            "name": "boolean"
+          },
+          "isSignal": false,
+          "default": false,
+          "description": "Off (the default): when Enter starts a save, the next Enter is ignored until the backend has answered, and for at least half a second, so a double press saves once. Controls wired to the same node share this. On: every Enter fires, for a control that saves each quick tap"
+        },
         {
           "name": "runOnChange-startValue",
           "displayName": "Value",
@@ -63650,9 +63703,10 @@
           "set": "Signal; applies the pending `startValue` to the field.",
           "clear": "Signal; empties the field.",
           "focus": "Signal; gives the field keyboard focus (`blur` removes it).",
-          "type": "Enum: text, textArea, email, number, password or url. textArea renders a multi-line editor."
+          "type": "Enum: text, textArea, email, number, password or url. textArea renders a multi-line editor.",
+          "repeatWhileSaving": "Boolean (displayed as Repeat While Saving), default off. Off: when Enter starts a backend save (a Record node's Do, a `Noodl.Records` call made before its first await), the next `onEnter` from this control, or from any control wired to the same node, is ignored until the backend has answered and for at least half a second, so a double press saves once. A press that starts no save is never held. On: every `onEnter` fires (a stepper that saves each tap)."
         },
-        "runtimeBehavior": "Declared-port-groups: `width`/`height` appear per `sizeMode`, icon ports per `useIcon`/`iconSourceType`, label styling ports when `useLabel` is true, and border/shadow ports per border-style and `boxShadowEnabled` settings. The catalog list is the superset; the editor shows the subset matching current parameters.",
+        "runtimeBehavior": "Declared-port-groups: `width`/`height` appear per `sizeMode`, icon ports per `useIcon`/`iconSourceType`, label styling ports when `useLabel` is true, and border/shadow ports per border-style and `boxShadowEnabled` settings. The catalog list is the superset; the editor shows the subset matching current parameters. An `onEnter` that starts a backend save is taken once: a second one is ignored while that save is waiting and for half a second after the press (`repeatWhileSaving` turns this off). There is no need to wire a busy flag back to `enabled` for a double press.",
         "examples": [
           "ctl-settings-form",
           "community-email-signup-validat"
@@ -66950,10 +67004,12 @@
           "error": "Value; why the last attempt failed."
         },
         "examples": [
-          "cloud-invite-a-team-member"
+          "cloud-invite-a-team-member",
+          "cloud-members-can-edit-my-records"
         ],
         "patterns": [
-          "Wire straight after Create User in a signup function to put every new account into a default role like `member` — `unchanged` and `done` both mean the account is now in that role, so wiring both to the same next step covers a re-run cleanly."
+          "Wire straight after Create User in a signup function to put every new account into a default role like `member` — `unchanged` and `done` both mean the account is now in that role, so wiring both to the same next step covers a re-run cleanly.",
+          "A group per owner, joined by invitation: the role is named in code from the owner's id (`'members-of-' + invitation.owner`), so `createRole` is on (one name per owner, never typed), and the owner is the invitation's `owner` (the backend's word), never a group field the invitation carries: anyone signed in can create an invitation naming any group (example `cloud-members-can-edit-my-records`)."
         ],
         "antiPatterns": [
           "Wiring a request parameter straight into `userId` (or `role`) on a function anyone may call. That is 'grant any role to any account' with an HTTP endpoint in front of it — give the function a `call` rule (CWF-017) and check inside the graph that the caller is entitled to make this particular grant.",
@@ -69160,7 +69216,8 @@
           "error": "Value; why the last attempt failed, or (on Unchanged) which of the two non-membership cases it was."
         },
         "examples": [
-          "cloud-revoke-a-role-and-record-it"
+          "cloud-revoke-a-role-and-record-it",
+          "cloud-members-can-edit-my-records"
         ],
         "patterns": [
           "Wire a lapsed-subscription webhook straight to this node's `remove`, with `done` and `unchanged` both leading to the same next step — the account ends up without the role either way, which is the only thing that response needs to be true."
@@ -69254,7 +69311,7 @@
           "group": "Request",
           "plug": "output",
           "type": {
-            "name": "boolean"
+            "name": "string"
           },
           "isSignal": false,
           "description": "Id of the user the session token resolved to, and blank for an unauthenticated request"
@@ -70915,7 +70972,10 @@
             {
               "id": "prompt_body",
               "type": "Javascript2",
-              "label": "Build request body"
+              "label": "Build request body",
+              "parameters": {
+                "code": "Script.Inputs = { prompt: 'string', token: 'string' };\nScript.Outputs = { body: 'object', headers: 'object', send: 'signal' };\n\n// Run builds the request from the prompt as it is now, then asks the stream to connect.\n// `token` is the signed-in person's token for your own endpoint, never a provider key in the page.\nScript.Signals.run = function () {\n  Script.setOutputs({\n    body: { stream: true, messages: [{ role: 'user', content: Script.Inputs.prompt || '' }] },\n    headers: { Authorization: 'Bearer ' + (Script.Inputs.token || '') }\n  });\n  Script.Outputs.send();\n};"
+              }
             },
             {
               "id": "chat_stream",
@@ -70943,7 +71003,18 @@
             {
               "id": "state_label",
               "type": "String Mapper",
-              "label": "State to label"
+              "label": "State to label",
+              "parameters": {
+                "input 0": "connecting",
+                "output 0": "Connecting…",
+                "input 1": "open",
+                "output 1": "Answering",
+                "input 2": "reconnecting",
+                "output 2": "Reconnecting…",
+                "input 3": "error",
+                "output 3": "The stream failed",
+                "defaultMapping": ""
+              }
             }
           ],
           "connections": [
@@ -71005,11 +71076,11 @@
               "fromId": "chat_stream",
               "fromProperty": "connectionState",
               "toId": "state_label",
-              "toProperty": "input"
+              "toProperty": "inputString"
             },
             {
               "fromId": "state_label",
-              "fromProperty": "output",
+              "fromProperty": "mappedString",
               "toId": "status_text",
               "toProperty": "text"
             }
@@ -71422,7 +71493,7 @@
     {
       "id": "agent-store-shared-state",
       "title": "Shared state: one store read by two unrelated components",
-      "description": "Two components that are not parent and child, sharing state through a named store instead of prop drilling or a Send/Receive Event pair. Sign In writes `user` with Set Global Store; Header declares the same store by name and renders `state` — no wiring runs between the two components, because naming the store is what connects them. Header also subscribes to just the `user` key, so a write to any other key does not wake it, and uses `previousValue` against `value` to fire only on the signed-out → signed-in transition rather than on every change. Initial State fills gaps without overwriting live state, so Header remounting cannot reset a store Sign In is already using.",
+      "description": "Two components that are not parent and child, sharing state through a named store instead of prop drilling or a Send/Receive Event pair. Sign In writes `user` with Set Global Store; Header declares the same store by name and reads `user` from it — no wiring runs between the two components, because naming the store is what connects them. Header subscribes to just the `user` key, so a write to any other key does not wake it, and puts the value into its greeting through a String Format whose `{user}` tag is the input the wire lands on. The store persists under its storage key, so the greeting survives a reload.",
       "demonstrates": [
         "net.noodl.GlobalStore",
         "net.noodl.GlobalStore.Set",
@@ -71524,7 +71595,10 @@
             {
               "id": "greeting",
               "type": "String Format",
-              "label": "Format greeting"
+              "label": "Format greeting",
+              "parameters": {
+                "format": "Signed in as {user}"
+              }
             }
           ],
           "connections": [
@@ -71532,11 +71606,11 @@
               "fromId": "watch_user",
               "fromProperty": "value",
               "toId": "greeting",
-              "toProperty": "input"
+              "toProperty": "user"
             },
             {
               "fromId": "greeting",
-              "fromProperty": "result",
+              "fromProperty": "formatted",
               "toId": "user_text",
               "toProperty": "text"
             }
@@ -71905,7 +71979,7 @@
               "type": "net.noodl.Log",
               "label": "The provider round trip did not start",
               "parameters": {
-                "level": "warning"
+                "level": "warn"
               }
             },
             {
@@ -72507,7 +72581,7 @@
               "type": "net.noodl.Log",
               "label": "Unreadable due date",
               "parameters": {
-                "level": "warning",
+                "level": "warn",
                 "message": "Invoice row: the due date could not be read as a date."
               }
             }
@@ -72732,7 +72806,7 @@
               "type": "net.noodl.Log",
               "label": "The server did not answer usably",
               "parameters": {
-                "level": "warning"
+                "level": "warn"
               }
             },
             {
@@ -72740,7 +72814,7 @@
               "type": "net.noodl.Log",
               "label": "The answer was not a feed",
               "parameters": {
-                "level": "warning"
+                "level": "warn"
               }
             }
           ],
@@ -72911,7 +72985,7 @@
               "type": "net.noodl.Log",
               "label": "The paste would not parse",
               "parameters": {
-                "level": "warning"
+                "level": "warn"
               }
             }
           ],
@@ -73010,7 +73084,7 @@
               "type": "net.noodl.Log",
               "label": "The server did not answer usably",
               "parameters": {
-                "level": "warning"
+                "level": "warn"
               }
             },
             {
@@ -73018,7 +73092,7 @@
               "type": "net.noodl.Log",
               "label": "Refused or unreadable — read Error Code",
               "parameters": {
-                "level": "warning"
+                "level": "warn"
               }
             }
           ],
@@ -73375,7 +73449,7 @@
       ],
       "components": [
         {
-          "name": "/Cloud Functions/Check Client Session",
+          "name": "/#__cloud__/Cloud Functions/Check Client Session",
           "nodes": [
             {
               "id": "fn_request",
@@ -73479,7 +73553,7 @@
       ],
       "components": [
         {
-          "name": "/Cloud Functions/Verify Inbound",
+          "name": "/#__cloud__/Cloud Functions/Verify Inbound",
           "nodes": [
             {
               "id": "fn_request",
@@ -73787,7 +73861,7 @@
       ],
       "components": [
         {
-          "name": "/Cloud Functions/Delete Account",
+          "name": "/#__cloud__/Cloud Functions/Delete Account",
           "nodes": [
             {
               "id": "fn_request",
@@ -74161,7 +74235,7 @@
       ],
       "components": [
         {
-          "name": "/Cloud Functions/Invite Team Member",
+          "name": "/#__cloud__/Cloud Functions/Invite Team Member",
           "nodes": [
             {
               "id": "fn_request",
@@ -74299,6 +74373,982 @@
         }
       ]
     },
+    {
+      "id": "cloud-members-can-edit-my-records",
+      "title": "Invite people who can change my records too: a role per owner, joined only through an invitation its owner made",
+      "description": "A second person, or several, who can change everything you can: people who may all read AND change the same records (a partner, a co-organiser, a colleague, anyone you invite to edit with you). The group belongs to one person, its owner, and its role is named from that person's id (\"members-of-<id>\"). The owner's page creates an Invite holding only the invited address; the backend writes who made it into `owner`. Join Group, a cloud function the invited person's page calls, finds the invitations naming the caller's own address (from their session, not the request) and puts them in the role of the invitation's OWNER, never a group id the invitation carries: anyone signed in can create an Invite naming any group, and only `owner` is the server's word, so an invitation can only ever let someone into its creator's own group. Every record of the group is created by Add To Group, which runs as the system: it refuses a caller who is neither the owner nor in the role (the User node's `roles`, read from the caller's session), writes the GROUP owner into `owner` (a page could never name it), and stores access rules for the owner and the role ({\"<ownerId>\": read+write, \"role:members-of-<ownerId>\": read+write}). So members change a record straight from the page with Update Record (the role's write rule lets them), and the group's list is a Query Records filtered on `owner` = the group, which a record somebody else made and opened to the role can never match. Remove Member takes back the caller's own invitation and takes the member out of the caller's own group, whatever the invitation says. `createRole` is on in Join Group because the role name is built in code, one per owner, never typed. Declare Invite (withEmail, memberId) and Note (title) in provision_backend, both creator-owned (the default), and set Note's create rule to \"nobody\" (set_collection_permissions): a cloud function runs as the system and still creates, and a Note posted straight to the collection from a page is refused, so a check in Add To Group is not one a caller can walk around.",
+      "demonstrates": [
+        "NewDbModelProperties",
+        "SetDbModelProperties",
+        "DbCollection2",
+        "CloudFunction2",
+        "noodl.cloud.request",
+        "net.noodl.user.User",
+        "JavaScriptFunction",
+        "noodl.cloud.addusertorole",
+        "noodl.cloud.removeuserfromrole",
+        "noodl.cloud.response"
+      ],
+      "components": [
+        {
+          "name": "/Member Row",
+          "nodes": [
+            {
+              "id": "mem_root",
+              "type": "Group",
+              "label": "One invitation",
+              "parameters": {
+                "flexDirection": "row",
+                "columnGap": "var(--space-2)",
+                "alignItems": "center"
+              },
+              "children": [
+                "mem_address",
+                "mem_remove"
+              ]
+            },
+            {
+              "id": "mem_address",
+              "type": "Text",
+              "label": "Who it invites",
+              "parent": "mem_root"
+            },
+            {
+              "id": "mem_remove",
+              "type": "net.noodl.controls.button",
+              "label": "Take it back",
+              "parent": "mem_root",
+              "parameters": {
+                "label": "Remove"
+              }
+            },
+            {
+              "id": "mem_inputs",
+              "type": "Component Inputs",
+              "label": "Invitation in",
+              "ports": [
+                {
+                  "name": "withEmail",
+                  "plug": "output",
+                  "type": "*"
+                }
+              ]
+            },
+            {
+              "id": "mem_call",
+              "type": "CloudFunction2",
+              "label": "Take the invitation back, and the access with it",
+              "parameters": {
+                "function": "Cloud Functions/Remove Member"
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "mem_inputs",
+              "fromProperty": "withEmail",
+              "toId": "mem_address",
+              "toProperty": "text"
+            },
+            {
+              "fromId": "mem_inputs",
+              "fromProperty": "withEmail",
+              "toId": "mem_call",
+              "toProperty": "in-withEmail"
+            },
+            {
+              "fromId": "mem_remove",
+              "fromProperty": "onClick",
+              "toId": "mem_call",
+              "toProperty": "call"
+            }
+          ]
+        },
+        {
+          "name": "/Invite Someone To Edit",
+          "nodes": [
+            {
+              "id": "inv_root",
+              "type": "Group",
+              "label": "Invite someone to edit my notes",
+              "parameters": {
+                "flexDirection": "column",
+                "rowGap": "var(--space-3)"
+              },
+              "children": [
+                "inv_address",
+                "inv_button",
+                "inv_error",
+                "inv_list"
+              ]
+            },
+            {
+              "id": "inv_address",
+              "type": "net.noodl.controls.textinput",
+              "label": "Their email address",
+              "parent": "inv_root",
+              "parameters": {
+                "type": "email",
+                "placeholder": "name@example.com"
+              }
+            },
+            {
+              "id": "inv_button",
+              "type": "net.noodl.controls.button",
+              "label": "Invite them",
+              "parent": "inv_root",
+              "parameters": {
+                "label": "Invite"
+              }
+            },
+            {
+              "id": "inv_error",
+              "type": "Text",
+              "label": "Why it did not save",
+              "parent": "inv_root",
+              "parameters": {
+                "text": ""
+              }
+            },
+            {
+              "id": "inv_list",
+              "type": "For Each",
+              "label": "One row per invitation I made",
+              "parent": "inv_root",
+              "parameters": {
+                "template": "/Member Row"
+              }
+            },
+            {
+              "id": "inv_create",
+              "type": "NewDbModelProperties",
+              "label": "An Invite naming only their address (owner is the backend's)",
+              "parameters": {
+                "collectionName": "Invite"
+              }
+            },
+            {
+              "id": "inv_mine",
+              "type": "DbCollection2",
+              "label": "My invitations (creator-owned: a query returns only mine)",
+              "parameters": {
+                "collectionName": "Invite",
+                "runOnChange-collectionName": false,
+                "runOnChange-querySettings": false
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "inv_address",
+              "fromProperty": "onTextChanged",
+              "toId": "inv_create",
+              "toProperty": "prop-withEmail"
+            },
+            {
+              "fromId": "inv_button",
+              "fromProperty": "onClick",
+              "toId": "inv_create",
+              "toProperty": "store"
+            },
+            {
+              "fromId": "inv_create",
+              "fromProperty": "error",
+              "toId": "inv_error",
+              "toProperty": "text"
+            },
+            {
+              "fromId": "inv_root",
+              "fromProperty": "didMount",
+              "toId": "inv_mine",
+              "toProperty": "storageFetch"
+            },
+            {
+              "fromId": "inv_create",
+              "fromProperty": "done",
+              "toId": "inv_mine",
+              "toProperty": "storageFetch"
+            },
+            {
+              "fromId": "inv_mine",
+              "fromProperty": "items",
+              "toId": "inv_list",
+              "toProperty": "items"
+            }
+          ]
+        },
+        {
+          "name": "/Group Note Row",
+          "nodes": [
+            {
+              "id": "gnr_root",
+              "type": "Group",
+              "label": "One note of the group",
+              "parameters": {
+                "flexDirection": "row",
+                "columnGap": "var(--space-2)",
+                "alignItems": "center"
+              },
+              "children": [
+                "gnr_title",
+                "gnr_save"
+              ]
+            },
+            {
+              "id": "gnr_title",
+              "type": "net.noodl.controls.textinput",
+              "label": "The note, editable by every member",
+              "parent": "gnr_root"
+            },
+            {
+              "id": "gnr_save",
+              "type": "net.noodl.controls.button",
+              "label": "Save the change",
+              "parent": "gnr_root",
+              "parameters": {
+                "label": "Save"
+              }
+            },
+            {
+              "id": "gnr_inputs",
+              "type": "Component Inputs",
+              "label": "Note in",
+              "ports": [
+                {
+                  "name": "title",
+                  "plug": "output",
+                  "type": "*"
+                }
+              ]
+            },
+            {
+              "id": "gnr_update",
+              "type": "SetDbModelProperties",
+              "label": "Change this note (the group's role may write it)",
+              "parameters": {
+                "collectionName": "Note",
+                "idSource": "foreach"
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "gnr_inputs",
+              "fromProperty": "title",
+              "toId": "gnr_title",
+              "toProperty": "startValue"
+            },
+            {
+              "fromId": "gnr_title",
+              "fromProperty": "onTextChanged",
+              "toId": "gnr_update",
+              "toProperty": "prop-title"
+            },
+            {
+              "fromId": "gnr_save",
+              "fromProperty": "onClick",
+              "toId": "gnr_update",
+              "toProperty": "store"
+            }
+          ]
+        },
+        {
+          "name": "/Group Notes",
+          "nodes": [
+            {
+              "id": "grp_root",
+              "type": "Group",
+              "label": "The notes of the group I am in",
+              "parameters": {
+                "flexDirection": "column",
+                "rowGap": "var(--space-3)"
+              },
+              "children": [
+                "grp_title",
+                "grp_add",
+                "grp_list"
+              ]
+            },
+            {
+              "id": "grp_title",
+              "type": "net.noodl.controls.textinput",
+              "label": "A new note",
+              "parent": "grp_root",
+              "parameters": {
+                "placeholder": "A new note"
+              }
+            },
+            {
+              "id": "grp_add",
+              "type": "net.noodl.controls.button",
+              "label": "Add it to the group",
+              "parent": "grp_root",
+              "parameters": {
+                "label": "Add"
+              }
+            },
+            {
+              "id": "grp_list",
+              "type": "For Each",
+              "label": "One row per note of the group",
+              "parent": "grp_root",
+              "parameters": {
+                "template": "/Group Note Row"
+              }
+            },
+            {
+              "id": "grp_join",
+              "type": "CloudFunction2",
+              "label": "Which group am I in (the server decides)",
+              "parameters": {
+                "function": "Cloud Functions/Join Group"
+              }
+            },
+            {
+              "id": "grp_notes",
+              "type": "DbCollection2",
+              "label": "The group's notes: owned by the group's owner",
+              "parameters": {
+                "collectionName": "Note",
+                "visualFilter": {
+                  "combinator": "and",
+                  "rules": [
+                    {
+                      "property": "owner",
+                      "operator": "equal to",
+                      "input": "group"
+                    }
+                  ]
+                },
+                "visualSort": [
+                  {
+                    "property": "createdAt",
+                    "order": "ascending"
+                  }
+                ],
+                "runOnChange-collectionName": false,
+                "runOnChange-querySettings": false
+              }
+            },
+            {
+              "id": "grp_add_call",
+              "type": "CloudFunction2",
+              "label": "Add a note to the group (the server checks I am in it)",
+              "parameters": {
+                "function": "Cloud Functions/Add To Group"
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "grp_root",
+              "fromProperty": "didMount",
+              "toId": "grp_join",
+              "toProperty": "call"
+            },
+            {
+              "fromId": "grp_join",
+              "fromProperty": "out-group",
+              "toId": "grp_notes",
+              "toProperty": "qp-group"
+            },
+            {
+              "fromId": "grp_join",
+              "fromProperty": "done",
+              "toId": "grp_notes",
+              "toProperty": "storageFetch"
+            },
+            {
+              "fromId": "grp_notes",
+              "fromProperty": "items",
+              "toId": "grp_list",
+              "toProperty": "items"
+            },
+            {
+              "fromId": "grp_title",
+              "fromProperty": "onTextChanged",
+              "toId": "grp_add_call",
+              "toProperty": "in-title"
+            },
+            {
+              "fromId": "grp_join",
+              "fromProperty": "out-group",
+              "toId": "grp_add_call",
+              "toProperty": "in-group"
+            },
+            {
+              "fromId": "grp_add",
+              "fromProperty": "onClick",
+              "toId": "grp_add_call",
+              "toProperty": "call"
+            },
+            {
+              "fromId": "grp_add_call",
+              "fromProperty": "done",
+              "toId": "grp_notes",
+              "toProperty": "storageFetch"
+            }
+          ]
+        },
+        {
+          "name": "/#__cloud__/Cloud Functions/Join Group",
+          "nodes": [
+            {
+              "id": "jg_request",
+              "type": "noodl.cloud.request",
+              "label": "The caller (no parameters: nothing to forge)",
+              "parameters": {
+                "allowNoAuth": false
+              }
+            },
+            {
+              "id": "jg_me",
+              "type": "net.noodl.user.User",
+              "label": "The caller's own session"
+            },
+            {
+              "id": "jg_invites",
+              "type": "DbCollection2",
+              "label": "Every invitation",
+              "parameters": {
+                "collectionName": "Invite",
+                "runOnChange-collectionName": false,
+                "runOnChange-querySettings": false
+              }
+            },
+            {
+              "id": "jg_pick",
+              "type": "JavaScriptFunction",
+              "label": "The group of whoever invited this address: the invitation's owner",
+              "parameters": {
+                "functionScript": "if (Inputs.me === undefined || Inputs.email === undefined || Inputs.invites === undefined) return;\nconst me = String(Inputs.me || '');\nconst email = String(Inputs.email || '').trim().toLowerCase();\n// The group an invitation lets you into is the person who MADE it: its owner, which the backend wrote\n// from their session and nobody can change. Never a group id the invitation carries: anyone signed in\n// can create an invitation naming any group. Your own invitations are not a way in to anything.\nconst mine = Inputs.invites\n  .filter((i) => email !== '' && String(i.withEmail || '').trim().toLowerCase() === email && String(i.owner) !== me)\n  .sort((a, b) => String(a.createdAt || '').localeCompare(String(b.createdAt || '')));\nconst invite = mine[0];\nif (!invite) {\n  // Nobody invited this address: the caller's group is their own.\n  Outputs.group = me;\n  Outputs.none();\n  return;\n}\n// Remember who took the invitation up, so its owner can take it back (Remove Member).\nawait Noodl.Records.save(invite.id || invite.objectId, { memberId: me }, { className: 'Invite' });\nOutputs.group = String(invite.owner);\nOutputs.userId = me;\nOutputs.role = 'members-of-' + String(invite.owner);\nOutputs.join();"
+              }
+            },
+            {
+              "id": "jg_join",
+              "type": "noodl.cloud.addusertorole",
+              "label": "Put the caller in that group's role",
+              "parameters": {
+                "createRole": true
+              }
+            },
+            {
+              "id": "jg_ok",
+              "type": "noodl.cloud.response",
+              "label": "The group this caller is in",
+              "parameters": {
+                "params": "group"
+              }
+            },
+            {
+              "id": "jg_fail",
+              "type": "noodl.cloud.response",
+              "label": "Tell the caller it went wrong",
+              "parameters": {
+                "status": "failure"
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "jg_request",
+              "fromProperty": "receive",
+              "toId": "jg_me",
+              "toProperty": "fetch"
+            },
+            {
+              "fromId": "jg_request",
+              "fromProperty": "receive",
+              "toId": "jg_invites",
+              "toProperty": "storageFetch"
+            },
+            {
+              "fromId": "jg_me",
+              "fromProperty": "id",
+              "toId": "jg_pick",
+              "toProperty": "in-me"
+            },
+            {
+              "fromId": "jg_me",
+              "fromProperty": "email",
+              "toId": "jg_pick",
+              "toProperty": "in-email"
+            },
+            {
+              "fromId": "jg_invites",
+              "fromProperty": "items",
+              "toId": "jg_pick",
+              "toProperty": "in-invites"
+            },
+            {
+              "fromId": "jg_pick",
+              "fromProperty": "out-role",
+              "toId": "jg_join",
+              "toProperty": "role"
+            },
+            {
+              "fromId": "jg_pick",
+              "fromProperty": "out-userId",
+              "toId": "jg_join",
+              "toProperty": "userId"
+            },
+            {
+              "fromId": "jg_pick",
+              "fromProperty": "out-join",
+              "toId": "jg_join",
+              "toProperty": "add"
+            },
+            {
+              "fromId": "jg_pick",
+              "fromProperty": "out-group",
+              "toId": "jg_ok",
+              "toProperty": "pm-group"
+            },
+            {
+              "fromId": "jg_pick",
+              "fromProperty": "out-none",
+              "toId": "jg_ok",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "jg_join",
+              "fromProperty": "done",
+              "toId": "jg_ok",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "jg_join",
+              "fromProperty": "unchanged",
+              "toId": "jg_ok",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "jg_pick",
+              "fromProperty": "error",
+              "toId": "jg_fail",
+              "toProperty": "errorMessage"
+            },
+            {
+              "fromId": "jg_join",
+              "fromProperty": "error",
+              "toId": "jg_fail",
+              "toProperty": "errorMessage"
+            },
+            {
+              "fromId": "jg_pick",
+              "fromProperty": "failure",
+              "toId": "jg_fail",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "jg_join",
+              "fromProperty": "failure",
+              "toId": "jg_fail",
+              "toProperty": "send"
+            }
+          ]
+        },
+        {
+          "name": "/#__cloud__/Cloud Functions/Add To Group",
+          "nodes": [
+            {
+              "id": "ag_request",
+              "type": "noodl.cloud.request",
+              "label": "A note, and the group it is for",
+              "parameters": {
+                "allowNoAuth": false,
+                "params": "title,group"
+              }
+            },
+            {
+              "id": "ag_me",
+              "type": "net.noodl.user.User",
+              "label": "The caller's own session, and the roles it carries"
+            },
+            {
+              "id": "ag_add",
+              "type": "JavaScriptFunction",
+              "label": "Only a member writes, and the note is the group owner's",
+              "parameters": {
+                "functionScript": "if (Inputs.me === undefined || Inputs.roles === undefined || Inputs.group === undefined) return;\nconst me = String(Inputs.me || '');\nconst group = String(Inputs.group || '');\nconst roles = Array.isArray(Inputs.roles) ? Inputs.roles : [];\n// The group a caller may add to: their own, or one whose role their own session carries. The role is\n// only ever granted by Join Group, from an invitation's owner, so a group id sent here proves nothing.\nif (group === '' || (group !== me && !roles.includes('members-of-' + group))) {\n  Outputs.reason = 'You are not a member of this group.';\n  Outputs.refused();\n  return;\n}\n// Created as the system, so the record's owner is the GROUP's owner (a page could never name it), and\n// its access rules are the owner and the group's role: every member reads and changes it.\nconst acl = {};\nacl[group] = { read: true, write: true };\nacl['role:members-of-' + group] = { read: true, write: true };\nconst note = await Noodl.Records.create('Note', { title: String(Inputs.title || ''), owner: group }, { acl });\nOutputs.id = note.getId();\nOutputs.added();"
+              }
+            },
+            {
+              "id": "ag_ok",
+              "type": "noodl.cloud.response",
+              "label": "The new note",
+              "parameters": {
+                "params": "id"
+              }
+            },
+            {
+              "id": "ag_fail",
+              "type": "noodl.cloud.response",
+              "label": "Refused, or it went wrong",
+              "parameters": {
+                "status": "failure"
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "ag_request",
+              "fromProperty": "receive",
+              "toId": "ag_me",
+              "toProperty": "fetch"
+            },
+            {
+              "fromId": "ag_me",
+              "fromProperty": "id",
+              "toId": "ag_add",
+              "toProperty": "in-me"
+            },
+            {
+              "fromId": "ag_me",
+              "fromProperty": "roles",
+              "toId": "ag_add",
+              "toProperty": "in-roles"
+            },
+            {
+              "fromId": "ag_request",
+              "fromProperty": "pm-group",
+              "toId": "ag_add",
+              "toProperty": "in-group"
+            },
+            {
+              "fromId": "ag_request",
+              "fromProperty": "pm-title",
+              "toId": "ag_add",
+              "toProperty": "in-title"
+            },
+            {
+              "fromId": "ag_add",
+              "fromProperty": "out-id",
+              "toId": "ag_ok",
+              "toProperty": "pm-id"
+            },
+            {
+              "fromId": "ag_add",
+              "fromProperty": "out-added",
+              "toId": "ag_ok",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "ag_add",
+              "fromProperty": "out-reason",
+              "toId": "ag_fail",
+              "toProperty": "errorMessage"
+            },
+            {
+              "fromId": "ag_add",
+              "fromProperty": "out-refused",
+              "toId": "ag_fail",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "ag_add",
+              "fromProperty": "error",
+              "toId": "ag_fail",
+              "toProperty": "errorMessage"
+            },
+            {
+              "fromId": "ag_add",
+              "fromProperty": "failure",
+              "toId": "ag_fail",
+              "toProperty": "send"
+            }
+          ]
+        },
+        {
+          "name": "/#__cloud__/Cloud Functions/Remove Member",
+          "nodes": [
+            {
+              "id": "rm_request",
+              "type": "noodl.cloud.request",
+              "label": "The address whose invitation the caller takes back",
+              "parameters": {
+                "allowNoAuth": false,
+                "params": "withEmail"
+              }
+            },
+            {
+              "id": "rm_me",
+              "type": "net.noodl.user.User",
+              "label": "The caller's own session"
+            },
+            {
+              "id": "rm_invites",
+              "type": "DbCollection2",
+              "label": "Every invitation",
+              "parameters": {
+                "collectionName": "Invite",
+                "runOnChange-collectionName": false,
+                "runOnChange-querySettings": false
+              }
+            },
+            {
+              "id": "rm_pick",
+              "type": "JavaScriptFunction",
+              "label": "The caller's own invitation, and the member who took it up",
+              "parameters": {
+                "functionScript": "if (Inputs.me === undefined || Inputs.withEmail === undefined || Inputs.invites === undefined) return;\nconst me = String(Inputs.me || '');\nconst email = String(Inputs.withEmail || '').trim().toLowerCase();\n// Only the caller's own invitations, and only the caller's own group: whatever an invitation says, the\n// role taken away is the caller's.\nconst mine = Inputs.invites.filter(\n  (i) => String(i.owner) === me && String(i.withEmail || '').trim().toLowerCase() === email\n);\nif (mine.length === 0) {\n  Outputs.reason = 'You have not invited that address.';\n  Outputs.refused();\n  return;\n}\nconst member = mine.map((i) => String(i.memberId || '')).find((m) => m !== '') || '';\nfor (const i of mine) await Noodl.Records.delete(i.id || i.objectId, { className: 'Invite' });\nif (member === '') {\n  Outputs.removed();\n  return;\n}\nOutputs.userId = member;\nOutputs.role = 'members-of-' + me;\nOutputs.remove();"
+              }
+            },
+            {
+              "id": "rm_role",
+              "type": "noodl.cloud.removeuserfromrole",
+              "label": "Take them out of the caller's group"
+            },
+            {
+              "id": "rm_ok",
+              "type": "noodl.cloud.response",
+              "label": "Taken back"
+            },
+            {
+              "id": "rm_fail",
+              "type": "noodl.cloud.response",
+              "label": "Refused, or it went wrong",
+              "parameters": {
+                "status": "failure"
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "rm_request",
+              "fromProperty": "receive",
+              "toId": "rm_me",
+              "toProperty": "fetch"
+            },
+            {
+              "fromId": "rm_request",
+              "fromProperty": "receive",
+              "toId": "rm_invites",
+              "toProperty": "storageFetch"
+            },
+            {
+              "fromId": "rm_me",
+              "fromProperty": "id",
+              "toId": "rm_pick",
+              "toProperty": "in-me"
+            },
+            {
+              "fromId": "rm_request",
+              "fromProperty": "pm-withEmail",
+              "toId": "rm_pick",
+              "toProperty": "in-withEmail"
+            },
+            {
+              "fromId": "rm_invites",
+              "fromProperty": "items",
+              "toId": "rm_pick",
+              "toProperty": "in-invites"
+            },
+            {
+              "fromId": "rm_pick",
+              "fromProperty": "out-role",
+              "toId": "rm_role",
+              "toProperty": "role"
+            },
+            {
+              "fromId": "rm_pick",
+              "fromProperty": "out-userId",
+              "toId": "rm_role",
+              "toProperty": "userId"
+            },
+            {
+              "fromId": "rm_pick",
+              "fromProperty": "out-remove",
+              "toId": "rm_role",
+              "toProperty": "remove"
+            },
+            {
+              "fromId": "rm_pick",
+              "fromProperty": "out-removed",
+              "toId": "rm_ok",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "rm_role",
+              "fromProperty": "done",
+              "toId": "rm_ok",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "rm_role",
+              "fromProperty": "unchanged",
+              "toId": "rm_ok",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "rm_pick",
+              "fromProperty": "out-reason",
+              "toId": "rm_fail",
+              "toProperty": "errorMessage"
+            },
+            {
+              "fromId": "rm_pick",
+              "fromProperty": "out-refused",
+              "toId": "rm_fail",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "rm_pick",
+              "fromProperty": "error",
+              "toId": "rm_fail",
+              "toProperty": "errorMessage"
+            },
+            {
+              "fromId": "rm_role",
+              "fromProperty": "error",
+              "toId": "rm_fail",
+              "toProperty": "errorMessage"
+            },
+            {
+              "fromId": "rm_pick",
+              "fromProperty": "failure",
+              "toId": "rm_fail",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "rm_role",
+              "fromProperty": "failure",
+              "toId": "rm_fail",
+              "toProperty": "send"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "cloud-query-own-rows",
+      "title": "Only my records: a Query Records filtered on the server by the signed-in user's id",
+      "description": "A signed-in user's own rows, with the filter on the server (a server-side filter, the backend's where clause), not a Filter Records or a Function after the fetch. The Query Records node's `visualFilter` holds one rule, {\"property\": \"owner\", \"operator\": \"equal to\", \"input\": \"owner\"}, and that `input` mints the input port `qp-owner`; the User node's `id` is wired into it, so other users' rows never leave the server. `owner` is the backend's own field: it writes the creator's id into every record a signed-in user makes, from their session, and drops any `owner` a page sends, so the page that creates a Note sends no owner field at all. Never copy the user's id into a field of your own (an ownerId, a familyId, a teamId) to say whose a record is: that is the caller's word, and anyone signed in can send another id. Both fetch-at-build boxes are off (`runOnChange-collectionName` and `runOnChange-querySettings`: false) and Do is unwired: a rule whose qp- value has not arrived yet is dropped, so a query run before the id arrives would return every row the user may read; this way the id's arrival is what runs it. Sort and limit sit beside the filter (`visualSort`, `storageEnableLimit` + `storageLimit`). When a collection keeps its default creatorOwns rule and the backend enforces it, a user's query already returns only rows they own; the filter is how you narrow further, or how you ask for one person's rows in a shared collection.",
+      "demonstrates": [
+        "DbCollection2",
+        "net.noodl.user.User",
+        "For Each",
+        "Component Inputs"
+      ],
+      "components": [
+        {
+          "name": "/My Notes",
+          "nodes": [
+            {
+              "id": "notes_root",
+              "type": "Group",
+              "label": "My notes",
+              "parameters": {
+                "flexDirection": "column"
+              },
+              "children": [
+                "notes_list"
+              ]
+            },
+            {
+              "id": "notes_list",
+              "type": "For Each",
+              "label": "One row per note of mine",
+              "parent": "notes_root",
+              "parameters": {
+                "template": "/Note Row"
+              }
+            },
+            {
+              "id": "me",
+              "type": "net.noodl.user.User",
+              "label": "Signed-in user"
+            },
+            {
+              "id": "my_notes",
+              "type": "DbCollection2",
+              "label": "Notes where owner = my id",
+              "parameters": {
+                "collectionName": "Note",
+                "visualFilter": {
+                  "combinator": "and",
+                  "rules": [
+                    {
+                      "property": "owner",
+                      "operator": "equal to",
+                      "input": "owner"
+                    }
+                  ]
+                },
+                "visualSort": [
+                  {
+                    "property": "createdAt",
+                    "order": "descending"
+                  }
+                ],
+                "storageEnableLimit": true,
+                "storageLimit": 50,
+                "runOnChange-collectionName": false,
+                "runOnChange-querySettings": false
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "me",
+              "fromProperty": "id",
+              "toId": "my_notes",
+              "toProperty": "qp-owner"
+            },
+            {
+              "fromId": "my_notes",
+              "fromProperty": "items",
+              "toId": "notes_list",
+              "toProperty": "items"
+            }
+          ]
+        },
+        {
+          "name": "/Note Row",
+          "nodes": [
+            {
+              "id": "row_root",
+              "type": "Group",
+              "label": "Note row",
+              "parameters": {
+                "flexDirection": "column",
+                "paddingTop": "var(--space-2)",
+                "paddingBottom": "var(--space-2)"
+              },
+              "children": [
+                "row_title"
+              ]
+            },
+            {
+              "id": "row_title",
+              "type": "Text",
+              "label": "Note title",
+              "parent": "row_root"
+            },
+            {
+              "id": "row_inputs",
+              "type": "Component Inputs",
+              "label": "Record properties in",
+              "ports": [
+                {
+                  "name": "title",
+                  "plug": "output",
+                  "type": "*"
+                }
+              ]
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "row_inputs",
+              "fromProperty": "title",
+              "toId": "row_title",
+              "toProperty": "text"
+            }
+          ]
+        }
+      ]
+    },
     {
       "id": "cloud-record-crud",
       "title": "Records on a REST backend: query, create, update, delete",
@@ -74825,7 +75875,7 @@
       ],
       "components": [
         {
-          "name": "/Cloud Functions/Revoke Role",
+          "name": "/#__cloud__/Cloud Functions/Revoke Role",
           "nodes": [
             {
               "id": "fn_request",
@@ -74983,6 +76033,424 @@
         }
       ]
     },
+    {
+      "id": "cloud-share-my-records-with-someone",
+      "title": "Invite someone to see my records: a share row, and a cloud function that trusts its owner",
+      "description": "Letting another person see your records (invite a teacher, a coach, a family member, a colleague by email). The page creates a Share record holding only the address it is shared with: it sends no field naming whose records these are, because the backend already writes that into the record's `owner`, from the signed-in caller's own session, and drops any `owner` a page sends. A cloud function answers \"what has been shared with me\": the caller's address comes from a User node inside the function (the caller's session, not the request body), the shares that name that address say WHO shared (their `owner`), and the notes returned are exactly the notes those people own (`note.owner`). Never decide it by a field the page wrote (a familyId, a teamId, an ownerId set from the User id): anyone signed in can create a Share saying any id they like, and only `owner` is the server's word. The records stay creator-owned (the default rules), so the function, which reads as the system, is the only door to another person's notes, and it answers read-only. The address match is done in the function rather than as a server filter on purpose: a filter rule whose value has not arrived yet is dropped, which would widen a system read to every share.",
+      "demonstrates": [
+        "NewDbModelProperties",
+        "noodl.cloud.request",
+        "net.noodl.user.User",
+        "DbCollection2",
+        "JavaScriptFunction",
+        "noodl.cloud.response",
+        "CloudFunction2"
+      ],
+      "components": [
+        {
+          "name": "/Share My Notes",
+          "nodes": [
+            {
+              "id": "share_root",
+              "type": "Group",
+              "label": "Share my notes",
+              "parameters": {
+                "flexDirection": "column",
+                "rowGap": "var(--space-3)"
+              },
+              "children": [
+                "share_address",
+                "share_button",
+                "share_error"
+              ]
+            },
+            {
+              "id": "share_address",
+              "type": "net.noodl.controls.textinput",
+              "label": "Their email address",
+              "parent": "share_root",
+              "parameters": {
+                "type": "email",
+                "placeholder": "name@example.com"
+              }
+            },
+            {
+              "id": "share_button",
+              "type": "net.noodl.controls.button",
+              "label": "Share with them",
+              "parent": "share_root",
+              "parameters": {
+                "label": "Share my notes"
+              }
+            },
+            {
+              "id": "share_error",
+              "type": "Text",
+              "label": "Why it did not save",
+              "parent": "share_root",
+              "parameters": {
+                "text": ""
+              }
+            },
+            {
+              "id": "share_create",
+              "type": "NewDbModelProperties",
+              "label": "A Share naming only their address (owner is the backend's)",
+              "parameters": {
+                "collectionName": "Share"
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "share_address",
+              "fromProperty": "onTextChanged",
+              "toId": "share_create",
+              "toProperty": "prop-withEmail"
+            },
+            {
+              "fromId": "share_button",
+              "fromProperty": "onClick",
+              "toId": "share_create",
+              "toProperty": "store"
+            },
+            {
+              "fromId": "share_create",
+              "fromProperty": "error",
+              "toId": "share_error",
+              "toProperty": "text"
+            }
+          ]
+        },
+        {
+          "name": "/Shared With Me",
+          "nodes": [
+            {
+              "id": "seen_root",
+              "type": "Group",
+              "label": "Notes shared with me",
+              "parameters": {
+                "flexDirection": "column",
+                "rowGap": "var(--space-2)"
+              },
+              "children": [
+                "seen_refresh",
+                "seen_list"
+              ]
+            },
+            {
+              "id": "seen_refresh",
+              "type": "net.noodl.controls.button",
+              "label": "Refresh",
+              "parent": "seen_root",
+              "parameters": {
+                "label": "Refresh"
+              }
+            },
+            {
+              "id": "seen_list",
+              "type": "For Each",
+              "label": "One row per shared note",
+              "parent": "seen_root",
+              "parameters": {
+                "template": "/Shared Note Row"
+              }
+            },
+            {
+              "id": "seen_call",
+              "type": "CloudFunction2",
+              "label": "Ask the server what was shared with me",
+              "parameters": {
+                "function": "Cloud Functions/Shared With Me"
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "seen_refresh",
+              "fromProperty": "onClick",
+              "toId": "seen_call",
+              "toProperty": "call"
+            },
+            {
+              "fromId": "seen_call",
+              "fromProperty": "out-notes",
+              "toId": "seen_list",
+              "toProperty": "items"
+            }
+          ]
+        },
+        {
+          "name": "/Shared Note Row",
+          "nodes": [
+            {
+              "id": "row_root",
+              "type": "Group",
+              "label": "Shared note row",
+              "parameters": {
+                "flexDirection": "column",
+                "paddingTop": "var(--space-2)",
+                "paddingBottom": "var(--space-2)"
+              },
+              "children": [
+                "row_title"
+              ]
+            },
+            {
+              "id": "row_title",
+              "type": "Text",
+              "label": "Note title",
+              "parent": "row_root"
+            },
+            {
+              "id": "row_inputs",
+              "type": "Component Inputs",
+              "label": "Note in",
+              "ports": [
+                {
+                  "name": "title",
+                  "plug": "output",
+                  "type": "*"
+                }
+              ]
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "row_inputs",
+              "fromProperty": "title",
+              "toId": "row_title",
+              "toProperty": "text"
+            }
+          ]
+        },
+        {
+          "name": "/#__cloud__/Cloud Functions/Shared With Me",
+          "nodes": [
+            {
+              "id": "fn_request",
+              "type": "noodl.cloud.request",
+              "label": "The caller (no parameters: nothing to forge)",
+              "parameters": {
+                "allowNoAuth": false
+              }
+            },
+            {
+              "id": "fn_me",
+              "type": "net.noodl.user.User",
+              "label": "The caller's own session"
+            },
+            {
+              "id": "fn_shares",
+              "type": "DbCollection2",
+              "label": "Every share",
+              "parameters": {
+                "collectionName": "Share",
+                "runOnChange-collectionName": false,
+                "runOnChange-querySettings": false
+              }
+            },
+            {
+              "id": "fn_notes",
+              "type": "DbCollection2",
+              "label": "Every note",
+              "parameters": {
+                "collectionName": "Note",
+                "runOnChange-collectionName": false,
+                "runOnChange-querySettings": false
+              }
+            },
+            {
+              "id": "fn_pick",
+              "type": "JavaScriptFunction",
+              "label": "The notes of the people who shared with this address",
+              "parameters": {
+                "functionScript": "if (Inputs.email === undefined || Inputs.shares === undefined || Inputs.notes === undefined) return;\nconst me = String(Inputs.email || '').trim().toLowerCase();\n// WHO shared is each share's owner: the backend wrote it from their session and nobody can change it.\n// withEmail is only what they typed. A field the page wrote (a groupId, an ownerId) proves nothing.\nconst from = new Set(\n  Inputs.shares\n    .filter((s) => me !== '' && String(s.withEmail || '').trim().toLowerCase() === me)\n    .map((s) => s.owner)\n);\nOutputs.notes = Inputs.notes\n  .filter((n) => from.has(n.owner))\n  .map((n) => ({ id: n.objectId || n.id, title: n.title || '' }));\nOutputs.answer();"
+              }
+            },
+            {
+              "id": "fn_response",
+              "type": "noodl.cloud.response",
+              "label": "What this caller may see",
+              "parameters": {
+                "params": "notes"
+              }
+            },
+            {
+              "id": "fn_fail",
+              "type": "noodl.cloud.response",
+              "label": "Tell the caller it went wrong",
+              "parameters": {
+                "status": "failure"
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "fn_request",
+              "fromProperty": "receive",
+              "toId": "fn_me",
+              "toProperty": "fetch"
+            },
+            {
+              "fromId": "fn_request",
+              "fromProperty": "receive",
+              "toId": "fn_shares",
+              "toProperty": "storageFetch"
+            },
+            {
+              "fromId": "fn_request",
+              "fromProperty": "receive",
+              "toId": "fn_notes",
+              "toProperty": "storageFetch"
+            },
+            {
+              "fromId": "fn_me",
+              "fromProperty": "email",
+              "toId": "fn_pick",
+              "toProperty": "in-email"
+            },
+            {
+              "fromId": "fn_shares",
+              "fromProperty": "items",
+              "toId": "fn_pick",
+              "toProperty": "in-shares"
+            },
+            {
+              "fromId": "fn_notes",
+              "fromProperty": "items",
+              "toId": "fn_pick",
+              "toProperty": "in-notes"
+            },
+            {
+              "fromId": "fn_pick",
+              "fromProperty": "out-notes",
+              "toId": "fn_response",
+              "toProperty": "pm-notes"
+            },
+            {
+              "fromId": "fn_pick",
+              "fromProperty": "out-answer",
+              "toId": "fn_response",
+              "toProperty": "send"
+            },
+            {
+              "fromId": "fn_pick",
+              "fromProperty": "error",
+              "toId": "fn_fail",
+              "toProperty": "errorMessage"
+            },
+            {
+              "fromId": "fn_pick",
+              "fromProperty": "failure",
+              "toId": "fn_fail",
+              "toProperty": "send"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "cloud-shared-counter",
+      "title": "A count several devices change: Update Record adds on the server, each press taken once",
+      "description": "A value two tabs or two devices change at once (a count, a score, a balance, progress) is changed on the server by the amount, never read into the page, changed, and written back whole: of two such whole saves the later erases the earlier. Here Update Record names `points` in Add To, so the 1 on `prop-points` is an amount the backend adds in one step, and the Record node bound to the same id shows the backend's total. No script, and no read of the old value. The press is taken once with no wiring: while the save a click started is waiting, and for half a second, the Button's next click is ignored (its Repeat While Saving is off). A Text Input's On Enter wired to the same Do shares that guard. To add a different amount, wire it into `prop-points` (a Function's output, -1 for a take-away button). To replace a whole value instead, use Update Record with `onlyIfUnchanged`. For a change that also needs `Noodl.Records.increment` in a script, read `recordId` once at the top so the answer belongs to the record the press was for.",
+      "demonstrates": [
+        "SetDbModelProperties",
+        "DbModel2",
+        "net.noodl.controls.button"
+      ],
+      "components": [
+        {
+          "name": "/Shared Count",
+          "nodes": [
+            {
+              "id": "root",
+              "type": "Group",
+              "label": "Count",
+              "parameters": {
+                "flexDirection": "row",
+                "alignItems": "center"
+              },
+              "children": [
+                "count_text",
+                "add_btn"
+              ]
+            },
+            {
+              "id": "count_text",
+              "type": "Text",
+              "label": "Total so far",
+              "parent": "root"
+            },
+            {
+              "id": "add_btn",
+              "type": "net.noodl.controls.button",
+              "label": "Add one",
+              "parent": "root",
+              "parameters": {
+                "label": "+1"
+              }
+            },
+            {
+              "id": "count_inputs",
+              "type": "Component Inputs",
+              "label": "Record id in",
+              "ports": [
+                {
+                  "name": "recordId",
+                  "plug": "output",
+                  "type": "string"
+                }
+              ]
+            },
+            {
+              "id": "count_record",
+              "type": "DbModel2",
+              "label": "The shared record",
+              "parameters": {
+                "collectionName": "Score"
+              }
+            },
+            {
+              "id": "add_one",
+              "type": "SetDbModelProperties",
+              "label": "Add one on the server",
+              "parameters": {
+                "collectionName": "Score",
+                "addTo": "points",
+                "prop-points": 1
+              }
+            }
+          ],
+          "connections": [
+            {
+              "fromId": "count_inputs",
+              "fromProperty": "recordId",
+              "toId": "count_record",
+              "toProperty": "modelId"
+            },
+            {
+              "fromId": "count_inputs",
+              "fromProperty": "recordId",
+              "toId": "add_one",
+              "toProperty": "modelId"
+            },
+            {
+              "fromId": "count_record",
+              "fromProperty": "prop-points",
+              "toId": "count_text",
+              "toProperty": "text"
+            },
+            {
+              "fromId": "add_btn",
+              "fromProperty": "onClick",
+              "toId": "add_one",
+              "toProperty": "store"
+            }
+          ]
+        }
+      ]
+    },
     {
       "id": "cloud-sign-a-token-with-a-stored-secret",
       "title": "Mint a signed token for another service to check",
@@ -74995,7 +76463,7 @@
       ],
       "components": [
         {
-          "name": "/Cloud Functions/Issue Partner Token",
+          "name": "/#__cloud__/Cloud Functions/Issue Partner Token",
           "nodes": [
             {
               "id": "fn_request",
@@ -75623,7 +77091,7 @@
       ],
       "components": [
         {
-          "name": "/Cloud Functions/List Role Members",
+          "name": "/#__cloud__/Cloud Functions/List Role Members",
           "nodes": [
             {
               "id": "fn_request",
@@ -75835,7 +77303,7 @@
               "type": "Javascript2",
               "label": "Extract headline",
               "parameters": {
-                "code": "script.inputs = { response: 'object' };\nscript.outputs = { headline: 'string' };\nscript.run = function (inputs, outputs) {\n  outputs.headline = inputs.response && inputs.response.items ? inputs.response.items[0].title : '';\n};"
+                "code": "Script.Inputs = { response: 'object' };\nScript.Outputs = { headline: 'string' };\n\n// Each response sets the headline: the first item's title, or nothing when the answer has no items.\nScript.Setters.response = function (response) {\n  Script.setOutputs({ headline: response && response.items && response.items.length ? response.items[0].title : '' });\n};"
               }
             },
             {
@@ -76151,9 +77619,7 @@
                 {
                   "name": "Clicked",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 0
                 }
               ]
@@ -76165,135 +77631,105 @@
                 {
                   "name": "text",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "General",
                   "index": 2
                 },
                 {
                   "name": "css-class",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "General",
                   "index": 1
                 },
                 {
                   "name": "padding top",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Margin and padding",
                   "index": 3
                 },
                 {
                   "name": "padding bottom",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Margin and padding",
                   "index": 4
                 },
                 {
                   "name": "padding left",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Margin and padding",
                   "index": 5
                 },
                 {
                   "name": "padding right",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Margin and padding",
                   "index": 6
                 },
                 {
                   "name": "margin top",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Margin and padding",
                   "index": 7
                 },
                 {
                   "name": "margin bottom",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Margin and padding",
                   "index": 8
                 },
                 {
                   "name": "margin left",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Margin and padding",
                   "index": 9
                 },
                 {
                   "name": "margin right",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Margin and padding",
                   "index": 10
                 },
                 {
                   "name": "mounted",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "General",
                   "index": 0
                 },
                 {
                   "name": "align horizontal",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Other",
                   "index": 11
                 },
                 {
                   "name": "align vertical",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Other",
                   "index": 12
                 },
                 {
                   "name": "position",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Other",
                   "index": 13
                 },
                 {
                   "name": "layout",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Other",
                   "index": 14
                 }
@@ -76473,17 +77909,13 @@
                 {
                   "name": "Do",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 0
                 },
                 {
                   "name": "JsonArray",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 1
                 }
               ]
@@ -76545,54 +77977,42 @@
                 {
                   "name": "File",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "General",
                   "index": 0
                 },
                 {
                   "name": "Path",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Metadata",
                   "index": 1
                 },
                 {
                   "name": "Name",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Metadata",
                   "index": 2
                 },
                 {
                   "name": "Size in bytes",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Metadata",
                   "index": 3
                 },
                 {
                   "name": "Type",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Metadata",
                   "index": 4
                 },
                 {
                   "name": "Success",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Events",
                   "index": 5
                 }
@@ -76632,18 +78052,14 @@
                 {
                   "name": "Enable File Picker on click",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Dropzone",
                   "index": 0
                 },
                 {
                   "name": "Accepted file types",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Dropzone",
                   "index": 1
                 }
@@ -76675,54 +78091,42 @@
                 {
                   "name": "File",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "General",
                   "index": 0
                 },
                 {
                   "name": "Path",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Metadata",
                   "index": 1
                 },
                 {
                   "name": "Name",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Metadata",
                   "index": 2
                 },
                 {
                   "name": "Size in bytes",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Metadata",
                   "index": 3
                 },
                 {
                   "name": "Type",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Metadata",
                   "index": 4
                 },
                 {
                   "name": "Success",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Events",
                   "index": 5
                 }
@@ -77179,108 +78583,84 @@
                 {
                   "name": "title",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "General search engine",
                   "index": 1
                 },
                 {
                   "name": "description",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "General search engine",
                   "index": 2
                 },
                 {
                   "name": "og:title",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Open Graph",
                   "index": 4
                 },
                 {
                   "name": "og:description",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Open Graph",
                   "index": 5
                 },
                 {
                   "name": "og:image",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Open Graph",
                   "index": 6
                 },
                 {
                   "name": "og:type",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Open Graph",
                   "index": 9
                 },
                 {
                   "name": "og:url (override default)",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Open Graph",
                   "index": 10
                 },
                 {
                   "name": "robots",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "General search engine",
                   "index": 3
                 },
                 {
                   "name": "twitter:title",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Twitter",
                   "index": 11
                 },
                 {
                   "name": "twitter:description",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Twitter",
                   "index": 12
                 },
                 {
                   "name": "twitter:card",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Twitter",
                   "index": 13
                 },
                 {
                   "name": "twitter:image",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "group": "Twitter",
                   "index": 14
                 }
@@ -77787,17 +79167,13 @@
                 {
                   "name": "uploadRecordCreated",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 1
                 },
                 {
                   "name": "absoluteFilePathCreated",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 2
                 }
               ]
@@ -78355,25 +79731,19 @@
                 {
                   "name": "Html Content",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 1
                 },
                 {
                   "name": "Changed",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 2
                 },
                 {
                   "name": "Saved",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 3
                 }
               ]
@@ -78385,17 +79755,13 @@
                 {
                   "name": "Initial Content",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 1
                 },
                 {
                   "name": "Update Content",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 2
                 }
               ]
@@ -78499,7 +79865,7 @@
     {
       "id": "community-tiptap-text-editor",
       "title": "A rich-text editor with a toolbar and local drafts",
-      "description": "The larger companion to the single-button component: a `Static Data` node holds the list of toolbar commands, a `For Each` draws one button per entry, and the editor itself is mounted by a `JavaScriptFunction` onto a `Group`'s element. Two details are worth more than the editor. The draft is saved to `localStorage` on a `Timer` and read back on mount, which is the whole of 'don't lose my work' and costs two function nodes. And `Model2` plus `SetModelProperties` keep the document in the project's own data model rather than only inside the third-party editor, so something other than the editor can read what was typed. ⚠️ The toolbar is driven by data, so adding a command is a row in the `Static Data` node — not a new button.",
+      "description": "The larger companion to the single-button component: a `Static Data` node holds the list of toolbar commands, a `For Each` draws one button per entry, and the editor itself is mounted by a `JavaScriptFunction` onto a `Group`'s element. Two details are worth more than the editor. The draft is saved to `localStorage` on a `Timer` and read back on mount, which is the whole of 'don't lose my work' and costs two function nodes. And `Model2` plus `SetModelProperties` keep the document in the project's own data model rather than only inside the third-party editor, so something other than the editor can read what was typed. ⚠️ The toolbar is driven by data, so adding a command is a row in the `Static Data` node — not a new button. Each row is the companion example's button component, `/Tiptap text editor r` (`community-tiptap-text-editor-r`): write that one first.",
       "demonstrates": [
         "Boolean",
         "CSS Definition",
@@ -78561,7 +79927,7 @@
               "type": "For Each",
               "parent": "menu",
               "parameters": {
-                "template": "/#Experiments/experiments/Tiptap editor/Editor button"
+                "template": "/Tiptap text editor r"
               }
             },
             {
@@ -78876,7 +80242,7 @@
             },
             {
               "fromId": "setmodelproperties",
-              "fromProperty": "stored",
+              "fromProperty": "done",
               "toId": "model2",
               "toProperty": "fetch"
             },
@@ -79014,17 +80380,13 @@
                 {
                   "name": "buttonType",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 1
                 },
                 {
                   "name": "editor",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 2
                 }
               ]
@@ -79070,17 +80432,13 @@
                 {
                   "name": "Success",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 1
                 },
                 {
                   "name": "buttonClicked",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 2
                 }
               ]
@@ -79298,17 +80656,13 @@
                 {
                   "name": "videoURL",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 1
                 },
                 {
                   "name": "uploadId",
                   "plug": "input",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 2
                 }
               ]
@@ -79320,9 +80674,7 @@
                 {
                   "name": "assignmentId",
                   "plug": "output",
-                  "type": {
-                    "name": "*"
-                  },
+                  "type": "*",
                   "index": 1
                 }
               ]
@@ -79996,7 +81348,7 @@
             },
             {
               "fromId": "draft_object",
-              "fromProperty": "title",
+              "fromProperty": "prop-title",
               "toId": "draft_title_text",
               "toProperty": "text"
             }
@@ -80462,7 +81814,7 @@
               "parent": "row",
               "parameters": {
                 "useLabel": true,
-                "labelSpacing": "8px"
+                "labelSpacing": "var(--space-2)"
               }
             },
             {
@@ -82124,7 +83476,7 @@
     {
       "id": "fn-aggregate-stats-function",
       "title": "Server-side aggregation exposed as a cloud function",
-      "description": "Aggregate Records runs count/sum/min/max/average over a database class without transferring the records — it exists only in the cloud runtime, so the idiomatic shape is a small cloud function around it: Request triggers the aggregate's fetch, `fetched` sends the Response, and the aggregate results (outputs generated from the `aggregates` configuration) are returned as response params. The browser calls it like any cloud function and renders the statistic.",
+      "description": "Aggregate Records runs a sum, min, max or average over a number column (or the distinct values of a text column) of a database class without transferring the records — it exists only in the cloud runtime, so the idiomatic shape is a small cloud function around it: Request triggers the aggregate's fetch, `fetched` sends the Response, and each name in `aggregates` gets its own Property and Operation inputs (`aggprop-<name>`, `aggop-<name>`) and its result on `agg-<name>`, returned as a response param. Here that is `totalHours`, the sum of every task's `hours`. There is no count operation: for a count, use Query Records with Fetch total count on. The browser calls the function like any cloud function and renders the statistic.",
       "demonstrates": [
         "noodl.cloud.aggregate",
         "CloudFunction2",
@@ -82144,7 +83496,7 @@
               },
               "children": [
                 "refresh_btn",
-                "count_text"
+                "total_text"
               ]
             },
             {
@@ -82157,9 +83509,9 @@
               }
             },
             {
-              "id": "count_text",
+              "id": "total_text",
               "type": "Text",
-              "label": "Task count",
+              "label": "Total hours",
               "parent": "root"
             },
             {
@@ -82180,8 +83532,8 @@
             },
             {
               "fromId": "call_stats",
-              "fromProperty": "out-taskCount",
-              "toId": "count_text",
+              "fromProperty": "out-totalHours",
+              "toId": "total_text",
               "toProperty": "text"
             }
           ]
@@ -82195,12 +83547,14 @@
               "label": "Request"
             },
             {
-              "id": "count_tasks",
+              "id": "sum_hours",
               "type": "noodl.cloud.aggregate",
-              "label": "Count tasks",
+              "label": "Sum task hours",
               "parameters": {
                 "collectionName": "Task",
-                "aggregates": "taskCount"
+                "aggregates": "totalHours",
+                "aggprop-totalHours": "hours",
+                "aggop-totalHours": "sum"
               }
             },
             {
@@ -82208,7 +83562,7 @@
               "type": "noodl.cloud.response",
               "label": "Response",
               "parameters": {
-                "params": "taskCount"
+                "params": "totalHours"
               }
             },
             {
@@ -82224,29 +83578,29 @@
             {
               "fromId": "fn_request",
               "fromProperty": "receive",
-              "toId": "count_tasks",
+              "toId": "sum_hours",
               "toProperty": "fetch"
             },
             {
-              "fromId": "count_tasks",
-              "fromProperty": "taskCount",
+              "fromId": "sum_hours",
+              "fromProperty": "agg-totalHours",
               "toId": "fn_response",
-              "toProperty": "pm-taskCount"
+              "toProperty": "pm-totalHours"
             },
             {
-              "fromId": "count_tasks",
+              "fromId": "sum_hours",
               "fromProperty": "fetched",
               "toId": "fn_response",
               "toProperty": "send"
             },
             {
-              "fromId": "count_tasks",
+              "fromId": "sum_hours",
               "fromProperty": "error",
               "toId": "fn_fail_response",
               "toProperty": "errorMessage"
             },
             {
-              "fromId": "count_tasks",
+              "fromId": "sum_hours",
               "fromProperty": "failure",
               "toId": "fn_fail_response",
               "toProperty": "send"
@@ -82649,7 +84003,7 @@
       ],
       "components": [
         {
-          "name": "/Cloud Functions/Notify",
+          "name": "/#__cloud__/Cloud Functions/Notify",
           "nodes": [
             {
               "id": "fn_request",
@@ -92358,7 +93712,7 @@
     {
       "id": "user-login-flow",
       "title": "Log in, show the user, log out",
-      "description": "The authentication triangle: Log In takes `username`/`password` values and a `login` signal, firing `success` or `failure` (+`error`). The User node is the session's single source of truth — its `authenticated` boolean and profile outputs update on login/logout, so UI binds to it rather than to the action nodes. Log Out ends the session from anywhere. Gate visible areas on `authenticated`, not on the login node's `success` pulse.",
+      "description": "The authentication triangle: Log In takes `username`/`password` values and a `login` signal, firing `done` or `failure` (+`error`). The User node is the session's single source of truth — its `authenticated` boolean and profile outputs update on login/logout, so UI binds to it rather than to the action nodes. Log Out ends the session from anywhere. Gate visible areas on `authenticated`, not on the login node's `done` pulse.",
       "demonstrates": [
         "net.noodl.user.LogIn",
         "net.noodl.user.LogOut",