stagent 0.6.2 → 0.7.0

package/docs/manifest.json

@@ -1,6 +1,6 @@
 {
-  "generated": "2026-03-31T21:00:00Z",
-  "version": 2,
+  "generated": "2026-04-03T22:00:00Z",
+  "version": 3,
   "sections": [
     {
       "slug": "home-workspace",
@@ -72,6 +72,16 @@
       "features": ["document-manager", "file-attachment-data-layer", "document-preprocessing", "agent-document-context", "document-output-generation"],
       "screengrabCount": 2
     },
+    {
+      "slug": "tables",
+      "title": "Tables",
+      "category": "feature-reference",
+      "path": "features/tables.md",
+      "route": "/tables",
+      "tags": ["tables", "structured-data", "spreadsheet", "charts", "triggers", "templates", "import", "export", "formulas"],
+      "features": ["tables-data-layer", "tables-list-page", "tables-spreadsheet-editor", "tables-document-import", "tables-template-gallery", "tables-agent-integration", "tables-chat-queries", "tables-computed-columns", "tables-cross-joins", "tables-agent-charts", "tables-workflow-triggers", "tables-nl-creation", "tables-export", "tables-versioning"],
+      "screengrabCount": 8
+    },
     {
       "slug": "monitoring",
       "title": "Monitor",
@@ -118,8 +128,8 @@
       "category": "feature-reference",
       "path": "features/settings.md",
       "route": "/settings",
-      "tags": ["settings", "authentication", "permissions", "presets", "budgets", "browser-tools", "ollama", "channels"],
-      "features": ["session-management", "tool-permission-persistence", "tool-permission-presets", "browser-use", "spend-budget-guardrails", "ollama-runtime-provider", "multi-channel-delivery", "bidirectional-channel-chat"],
+      "tags": ["settings", "authentication", "permissions", "presets", "budgets", "browser-tools", "ollama", "channels", "snapshots"],
+      "features": ["session-management", "tool-permission-persistence", "tool-permission-presets", "browser-use", "spend-budget-guardrails", "ollama-runtime-provider", "multi-channel-delivery", "bidirectional-channel-chat", "database-snapshot-backup"],
       "screengrabCount": 9
     },
     {
@@ -136,7 +146,7 @@
       "slug": "playbook",
       "title": "User Guide",
       "category": "feature-reference",
-      "path": "features/playbook.md",
+      "path": "features/user-guide.md",
       "route": "/user-guide",
       "tags": ["user-guide", "documentation", "adoption-tracking"],
       "features": ["playbook-documentation", "documentation-adoption-tracking"],
@@ -232,8 +242,8 @@
       "persona": "personal",
       "difficulty": "beginner",
       "path": "journeys/personal-use.md",
-      "sections": ["home-workspace", "chat", "dashboard-kanban", "projects", "schedules", "delivery-channels", "user-guide"],
-      "stepCount": 14
+      "sections": ["home-workspace", "chat", "dashboard-kanban", "projects", "tables", "schedules", "delivery-channels", "user-guide"],
+      "stepCount": 15
     },
     {
       "slug": "work-use",
@@ -241,8 +251,8 @@
       "persona": "work",
       "difficulty": "intermediate",
       "path": "journeys/work-use.md",
-      "sections": ["projects", "chat", "documents", "workflows", "schedules", "cost-usage", "inbox-notifications", "delivery-channels"],
-      "stepCount": 15
+      "sections": ["projects", "chat", "documents", "tables", "workflows", "schedules", "cost-usage", "inbox-notifications", "delivery-channels"],
+      "stepCount": 16
     },
     {
       "slug": "power-user",
@@ -250,8 +260,8 @@
       "persona": "power-user",
       "difficulty": "advanced",
       "path": "journeys/power-user.md",
-      "sections": ["dashboard-kanban", "profiles", "chat", "workflows", "schedules", "monitoring", "settings"],
-      "stepCount": 15
+      "sections": ["dashboard-kanban", "profiles", "chat", "workflows", "tables", "schedules", "monitoring", "settings"],
+      "stepCount": 16
     },
     {
       "slug": "developer",
@@ -259,14 +269,14 @@
       "persona": "developer",
       "difficulty": "advanced",
       "path": "journeys/developer.md",
-      "sections": ["settings", "environment", "chat", "monitoring", "profiles", "workflows", "schedules", "delivery-channels"],
-      "stepCount": 14
+      "sections": ["settings", "environment", "chat", "monitoring", "profiles", "tables", "workflows", "schedules", "delivery-channels"],
+      "stepCount": 15
     }
   ],
   "metadata": {
-    "totalDocs": 29,
-    "totalScreengrabs": 44,
-    "featuresCovered": 68,
-    "appSections": 15
+    "totalDocs": 30,
+    "totalScreengrabs": 48,
+    "featuresCovered": 82,
+    "appSections": 16
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stagent",
-  "version": "0.6.2",
+  "version": "0.7.0",
   "description": "AI Business Operating System — run your business with AI agents. Local-first, multi-provider, governed.",
   "keywords": [
     "ai",
@@ -27,7 +27,6 @@
     "dist/",
     "docs/",
     "src/",
-    "public/icon.svg",
     "public/icon-512.png",
     "public/stagent-s-64.png",
     "public/stagent-s-128.png",
@@ -95,6 +94,7 @@
     "react-dom": "^19",
     "react-hook-form": "^7.71.2",
     "react-markdown": "^10.1.0",
+    "recharts": "^3.8.1",
     "remark-gfm": "^4.0.1",
     "sharp": "^0.34.5",
     "smol-toml": "^1.6.1",
@@ -102,6 +102,7 @@
     "sugar-high": "^1.0.0",
     "tailwind-merge": "^3",
     "tailwindcss": "^4",
+    "tar": "^7.5.13",
     "tw-animate-css": "^1",
     "typescript": "^5",
     "zod": "^4.3.6"

package/src/app/api/chat/entities/search/route.ts

@@ -1,6 +1,6 @@
 import { NextResponse } from "next/server";
 import { db } from "@/lib/db";
-import { projects, tasks, workflows, documents, schedules } from "@/lib/db/schema";
+import { projects, tasks, workflows, documents, schedules, userTables } from "@/lib/db/schema";
 import { like, desc } from "drizzle-orm";
 import { listProfiles } from "@/lib/agents/profiles/registry";
 
@@ -25,7 +25,7 @@ export async function GET(request: Request) {
 
   const hasQuery = query.trim().length > 0;
   const pattern = hasQuery ? `%${query}%` : "";
-  const perType = Math.max(2, Math.floor(limit / 5));
+  const perType = Math.max(2, Math.floor(limit / 7));
 
   const results: EntityResult[] = [];
 
@@ -45,9 +45,12 @@ export async function GET(request: Request) {
   const scheduleQuery = db
     .select({ id: schedules.id, name: schedules.name, status: schedules.status })
     .from(schedules);
+  const tableQuery = db
+    .select({ id: userTables.id, name: userTables.name, rowCount: userTables.rowCount, source: userTables.source })
+    .from(userTables);
 
   // Search in parallel across all entity types
-  const [projectRows, taskRows, workflowRows, documentRows, scheduleRows] =
+  const [projectRows, taskRows, workflowRows, documentRows, scheduleRows, tableRows] =
     await Promise.all([
       (hasQuery ? projectQuery.where(like(projects.name, pattern)) : projectQuery)
         .orderBy(desc(projects.updatedAt))
@@ -64,6 +67,9 @@ export async function GET(request: Request) {
       (hasQuery ? scheduleQuery.where(like(schedules.name, pattern)) : scheduleQuery)
         .orderBy(desc(schedules.updatedAt))
         .limit(perType),
+      (hasQuery ? tableQuery.where(like(userTables.name, pattern)) : tableQuery)
+        .orderBy(desc(userTables.updatedAt))
+        .limit(perType),
     ]);
 
   for (const p of projectRows) {
@@ -81,6 +87,9 @@ export async function GET(request: Request) {
   for (const s of scheduleRows) {
     results.push({ entityType: "schedule", entityId: s.id, label: s.name, status: s.status });
   }
+  for (const t of tableRows) {
+    results.push({ entityType: "table", entityId: t.id, label: t.name, description: `${t.rowCount ?? 0} rows · ${t.source}` });
+  }
 
   // Search profiles in-memory (file-based registry)
   const allProfiles = listProfiles();

package/src/app/api/documents/[id]/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from "next/server";
 import { db } from "@/lib/db";
-import { documents, tasks, projects } from "@/lib/db/schema";
+import { documents, tasks, projects, workflows } from "@/lib/db/schema";
 import { eq } from "drizzle-orm";
 import { unlink } from "fs/promises";
 import { z } from "zod/v4";
@@ -42,9 +42,13 @@ export async function GET(
       updatedAt: documents.updatedAt,
       taskTitle: tasks.title,
       projectName: projects.name,
+      workflowId: workflows.id,
+      workflowName: workflows.name,
+      workflowRunNumber: tasks.workflowRunNumber,
     })
     .from(documents)
     .leftJoin(tasks, eq(documents.taskId, tasks.id))
+    .leftJoin(workflows, eq(tasks.workflowId, workflows.id))
     .leftJoin(projects, eq(documents.projectId, projects.id))
     .where(eq(documents.id, id));
 

package/src/app/api/documents/[id]/versions/route.ts

@@ -0,0 +1,53 @@
+import { NextRequest, NextResponse } from "next/server";
+import { db } from "@/lib/db";
+import { documents, tasks } from "@/lib/db/schema";
+import { eq, and, desc } from "drizzle-orm";
+
+export async function GET(
+  _req: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const { id } = await params;
+
+  // First, get the document to find its originalName and projectId
+  const [doc] = await db
+    .select({
+      originalName: documents.originalName,
+      projectId: documents.projectId,
+      direction: documents.direction,
+    })
+    .from(documents)
+    .where(eq(documents.id, id));
+
+  if (!doc) {
+    return NextResponse.json({ error: "Document not found" }, { status: 404 });
+  }
+
+  // Only output documents have version history
+  if (doc.direction !== "output" || !doc.projectId) {
+    return NextResponse.json([]);
+  }
+
+  // Find all output documents with same originalName + projectId
+  const versions = await db
+    .select({
+      id: documents.id,
+      version: documents.version,
+      size: documents.size,
+      status: documents.status,
+      createdAt: documents.createdAt,
+      workflowRunNumber: tasks.workflowRunNumber,
+    })
+    .from(documents)
+    .leftJoin(tasks, eq(documents.taskId, tasks.id))
+    .where(
+      and(
+        eq(documents.originalName, doc.originalName),
+        eq(documents.projectId, doc.projectId),
+        eq(documents.direction, "output")
+      )
+    )
+    .orderBy(desc(documents.version));
+
+  return NextResponse.json(versions);
+}

package/src/app/api/documents/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from "next/server";
 import { db } from "@/lib/db";
-import { documents, tasks, projects } from "@/lib/db/schema";
+import { documents, tasks, projects, workflows } from "@/lib/db/schema";
 import { eq, and, like, or, desc } from "drizzle-orm";
 import { access, stat, copyFile, mkdir } from "fs/promises";
 import path, { basename, extname, join } from "path";
@@ -74,9 +74,13 @@ export async function GET(req: NextRequest) {
       updatedAt: documents.updatedAt,
       taskTitle: tasks.title,
       projectName: projects.name,
+      workflowId: workflows.id,
+      workflowName: workflows.name,
+      workflowRunNumber: tasks.workflowRunNumber,
     })
     .from(documents)
     .leftJoin(tasks, eq(documents.taskId, tasks.id))
+    .leftJoin(workflows, eq(tasks.workflowId, workflows.id))
     .leftJoin(projects, eq(documents.projectId, projects.id))
     .where(conditions.length > 0 ? and(...conditions) : undefined)
     .orderBy(desc(documents.createdAt));

package/src/app/api/projects/[id]/documents/route.ts

@@ -0,0 +1,124 @@
+import { NextRequest, NextResponse } from "next/server";
+import { db } from "@/lib/db";
+import {
+  projectDocumentDefaults,
+  documents,
+  projects,
+} from "@/lib/db/schema";
+import { eq, inArray } from "drizzle-orm";
+
+type RouteContext = { params: Promise<{ id: string }> };
+
+/**
+ * GET /api/projects/[id]/documents
+ * List all default document bindings for a project, with document metadata.
+ */
+export async function GET(
+  _request: NextRequest,
+  context: RouteContext
+) {
+  const { id: projectId } = await context.params;
+
+  try {
+    const bindings = await db
+      .select()
+      .from(projectDocumentDefaults)
+      .where(eq(projectDocumentDefaults.projectId, projectId));
+
+    if (bindings.length === 0) {
+      return NextResponse.json([]);
+    }
+
+    const docIds = bindings.map((b) => b.documentId);
+    const docs = await db
+      .select()
+      .from(documents)
+      .where(inArray(documents.id, docIds));
+
+    // Return flat document list (same shape as /api/documents)
+    return NextResponse.json(
+      docs.map((doc) => ({
+        id: doc.id,
+        originalName: doc.originalName,
+        filename: doc.filename,
+        mimeType: doc.mimeType,
+        size: doc.size,
+        direction: doc.direction,
+        status: doc.status,
+        category: doc.category,
+      }))
+    );
+  } catch (error) {
+    console.error("[project-documents] GET failed:", error);
+    return NextResponse.json(
+      { error: "Failed to fetch project documents" },
+      { status: 500 }
+    );
+  }
+}
+
+/**
+ * PUT /api/projects/[id]/documents
+ * Replace all default document bindings for a project.
+ * Body: { documentIds: string[] }
+ */
+export async function PUT(
+  request: NextRequest,
+  context: RouteContext
+) {
+  const { id: projectId } = await context.params;
+
+  try {
+    const body = await request.json();
+    const { documentIds } = body as { documentIds: string[] };
+
+    if (!Array.isArray(documentIds)) {
+      return NextResponse.json(
+        { error: "documentIds must be an array" },
+        { status: 400 }
+      );
+    }
+
+    // Verify project exists
+    const [project] = await db
+      .select({ id: projects.id })
+      .from(projects)
+      .where(eq(projects.id, projectId));
+
+    if (!project) {
+      return NextResponse.json(
+        { error: "Project not found" },
+        { status: 404 }
+      );
+    }
+
+    // Remove all existing bindings
+    await db
+      .delete(projectDocumentDefaults)
+      .where(eq(projectDocumentDefaults.projectId, projectId));
+
+    // Insert new bindings
+    const now = new Date();
+    for (const docId of documentIds) {
+      try {
+        await db.insert(projectDocumentDefaults).values({
+          id: crypto.randomUUID(),
+          projectId,
+          documentId: docId,
+          createdAt: now,
+        });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : "";
+        if (!msg.includes("UNIQUE constraint")) throw err;
+      }
+    }
+
+    return NextResponse.json({ updated: documentIds.length, projectId });
+  } catch (error) {
+    console.error("[project-documents] PUT failed:", error);
+    return NextResponse.json(
+      { error: "Failed to update project documents" },
+      { status: 500 }
+    );
+  }
+}

package/src/app/api/projects/[id]/route.ts

@@ -16,6 +16,19 @@ import {
   environmentScans,
   chatMessages,
   conversations,
+  projectDocumentDefaults,
+  userTables,
+  userTableColumns,
+  userTableRows,
+  userTableViews,
+  userTableImports,
+  userTableRelationships,
+  tableDocumentInputs,
+  taskTableInputs,
+  workflowTableInputs,
+  scheduleTableInputs,
+  userTableTriggers,
+  userTableRowHistory,
 } from "@/lib/db/schema";
 import { eq, inArray } from "drizzle-orm";
 import { updateProjectSchema } from "@/lib/validators/project";
@@ -42,16 +55,44 @@ export async function PATCH(
 ) {
   const { id } = await params;
   const body = await req.json();
-  const parsed = updateProjectSchema.safeParse(body);
+  // Extract documentIds before validation (not a project column)
+  const { documentIds, ...projectBody } = body as Record<string, unknown> & { documentIds?: string[] };
+  const parsed = updateProjectSchema.safeParse(projectBody);
   if (!parsed.success) {
     return NextResponse.json({ error: parsed.error.flatten() }, { status: 400 });
   }
 
+  const now = new Date();
   await db
     .update(projects)
-    .set({ ...parsed.data, updatedAt: new Date() })
+    .set({ ...parsed.data, updatedAt: now })
     .where(eq(projects.id, id));
 
+  // Handle default document bindings
+  if (documentIds !== undefined) {
+    try {
+      // Replace all bindings
+      await db
+        .delete(projectDocumentDefaults)
+        .where(eq(projectDocumentDefaults.projectId, id));
+      for (const docId of documentIds) {
+        try {
+          await db.insert(projectDocumentDefaults).values({
+            id: crypto.randomUUID(),
+            projectId: id,
+            documentId: docId,
+            createdAt: now,
+          });
+        } catch (err) {
+          const msg = err instanceof Error ? err.message : "";
+          if (!msg.includes("UNIQUE constraint")) throw err;
+        }
+      }
+    } catch (err) {
+      console.error("[projects] Document defaults update failed:", err);
+    }
+  }
+
   const [updated] = await db
     .select()
     .from(projects)
@@ -160,7 +201,35 @@ export async function DELETE(
         .run();
     }
 
-    // 6. Direct project children
+    // 6. Project document defaults (junction table)
+    db.delete(projectDocumentDefaults).where(eq(projectDocumentDefaults.projectId, id)).run();
+
+    // 6b. User-defined tables — cascade-delete children before parent
+    const tableIds = db
+      .select({ id: userTables.id })
+      .from(userTables)
+      .where(eq(userTables.projectId, id))
+      .all()
+      .map((r) => r.id);
+
+    if (tableIds.length > 0) {
+      // Junction tables first
+      db.delete(tableDocumentInputs).where(inArray(tableDocumentInputs.tableId, tableIds)).run();
+      db.delete(taskTableInputs).where(inArray(taskTableInputs.tableId, tableIds)).run();
+      db.delete(workflowTableInputs).where(inArray(workflowTableInputs.tableId, tableIds)).run();
+      db.delete(scheduleTableInputs).where(inArray(scheduleTableInputs.tableId, tableIds)).run();
+      // Children
+      db.delete(userTableRowHistory).where(inArray(userTableRowHistory.tableId, tableIds)).run();
+      db.delete(userTableTriggers).where(inArray(userTableTriggers.tableId, tableIds)).run();
+      db.delete(userTableImports).where(inArray(userTableImports.tableId, tableIds)).run();
+      db.delete(userTableViews).where(inArray(userTableViews.tableId, tableIds)).run();
+      db.delete(userTableRelationships).where(inArray(userTableRelationships.fromTableId, tableIds)).run();
+      db.delete(userTableRows).where(inArray(userTableRows.tableId, tableIds)).run();
+      db.delete(userTableColumns).where(inArray(userTableColumns.tableId, tableIds)).run();
+      db.delete(userTables).where(inArray(userTables.id, tableIds)).run();
+    }
+
+    // 7. Direct project children
     db.delete(documents).where(eq(documents.projectId, id)).run();
     db.delete(tasks).where(eq(tasks.projectId, id)).run();
     if (workflowIds.length > 0) {

package/src/app/api/projects/__tests__/delete-project.test.ts

@@ -27,6 +27,8 @@ describe("project DELETE cascade coverage", () => {
     "environmentScans",
     "environmentCheckpoints",
     "conversations",
+    "projectDocumentDefaults",
+    "userTables",
   ];
 
   // Tables that are indirect children (FK to a table that has projectId)
@@ -38,6 +40,17 @@ describe("project DELETE cascade coverage", () => {
     { table: "chatMessages", parent: "conversations", via: "conversationId" },
     { table: "environmentArtifacts", parent: "environmentScans", via: "scanId" },
     { table: "environmentSyncOps", parent: "environmentCheckpoints", via: "checkpointId" },
+    { table: "userTableColumns", parent: "userTables", via: "tableId" },
+    { table: "userTableRows", parent: "userTables", via: "tableId" },
+    { table: "userTableViews", parent: "userTables", via: "tableId" },
+    { table: "userTableImports", parent: "userTables", via: "tableId" },
+    { table: "userTableRelationships", parent: "userTables", via: "fromTableId" },
+    { table: "tableDocumentInputs", parent: "userTables", via: "tableId" },
+    { table: "taskTableInputs", parent: "userTables", via: "tableId" },
+    { table: "workflowTableInputs", parent: "userTables", via: "tableId" },
+    { table: "scheduleTableInputs", parent: "userTables", via: "tableId" },
+    { table: "userTableTriggers", parent: "userTables", via: "tableId" },
+    { table: "userTableRowHistory", parent: "userTables", via: "tableId" },
   ];
 
   it("handles all tables with direct projectId FK", () => {

package/src/app/api/schedules/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from "next/server";
 import { db } from "@/lib/db";
-import { schedules } from "@/lib/db/schema";
+import { schedules, scheduleDocumentInputs } from "@/lib/db/schema";
 import { desc, eq } from "drizzle-orm";
 import { parseInterval, computeNextFireTime } from "@/lib/schedules/interval-parser";
 import { parseNaturalLanguage } from "@/lib/schedules/nlp-parser";
@@ -34,6 +34,7 @@ export async function POST(req: NextRequest) {
     activeHoursEnd,
     activeTimezone,
     heartbeatBudgetPerDay,
+    documentIds,
   } =
     body as {
       name?: string;
@@ -51,6 +52,7 @@ export async function POST(req: NextRequest) {
       activeHoursEnd?: number;
       activeTimezone?: string;
       heartbeatBudgetPerDay?: number;
+      documentIds?: string[];
     };
 
   const scheduleType = type ?? "scheduled";
@@ -167,6 +169,22 @@ export async function POST(req: NextRequest) {
     updatedAt: now,
   });
 
+  // Link documents to schedule
+  if (documentIds && documentIds.length > 0) {
+    try {
+      for (const docId of documentIds) {
+        await db.insert(scheduleDocumentInputs).values({
+          id: crypto.randomUUID(),
+          scheduleId: id,
+          documentId: docId,
+          createdAt: now,
+        });
+      }
+    } catch (err) {
+      console.error("[schedules] Document association failed:", err);
+    }
+  }
+
   const [created] = await db
     .select()
     .from(schedules)

package/src/app/api/snapshots/[id]/restore/route.ts

@@ -0,0 +1,62 @@
+import { NextRequest, NextResponse } from "next/server";
+import {
+  restoreFromSnapshot,
+  isSnapshotLocked,
+} from "@/lib/snapshots/snapshot-manager";
+import { db } from "@/lib/db";
+import { tasks } from "@/lib/db/schema";
+import { eq } from "drizzle-orm";
+
+/** POST /api/snapshots/[id]/restore — restore from a snapshot (destructive) */
+export async function POST(
+  _req: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const { id } = await params;
+
+  if (isSnapshotLocked()) {
+    return NextResponse.json(
+      { error: "Another snapshot operation is already in progress" },
+      { status: 409 }
+    );
+  }
+
+  // Check for running tasks
+  const runningTasks = await db
+    .select()
+    .from(tasks)
+    .where(eq(tasks.status, "running"));
+
+  if (runningTasks.length > 0) {
+    return NextResponse.json(
+      {
+        error: `${runningTasks.length} task(s) are currently running. Stop them before restoring.`,
+        runningTasks: runningTasks.map((t) => ({
+          id: t.id,
+          title: t.title,
+        })),
+      },
+      { status: 409 }
+    );
+  }
+
+  try {
+    const result = await restoreFromSnapshot(id);
+
+    return NextResponse.json({
+      success: true,
+      requiresRestart: result.requiresRestart,
+      preRestoreSnapshotId: result.preRestoreSnapshotId,
+      message:
+        "Restore complete. Please restart the server to load the restored database.",
+    });
+  } catch (error) {
+    return NextResponse.json(
+      {
+        error:
+          error instanceof Error ? error.message : "Failed to restore snapshot",
+      },
+      { status: 500 }
+    );
+  }
+}