@promptowl/contextnest-community 0.1.0-alpha.1 → 1.0.0

package/README.md

@@ -1,105 +1,105 @@
-# ContextNest Community Edition
-
-**Self-hosted context governance server for AI workflows.** Part of the [PromptOwl](https://promptowl.ai) platform.
-
-> ⚠️ **Commercial Software.** ContextNest Community Edition is proprietary software licensed by Promptowl LLC. A free [PromptOwl account](https://app.promptowl.ai) is required to use it. Redistribution, hosting-as-a-service, and competitive use are prohibited. See [LICENSE.md](./LICENSE.md) for full terms.
-
----
-
-## What it is
-
-ContextNest Community Edition is a self-hosted server that lets you:
-
-- Store, version, and govern markdown-based context documents ("nests")
-- Apply stewardship workflows — draft, pending review, approved
-- Serve approved context to AI agents via MCP, HTTP, or CLI
-- Sync with the PromptOwl hosted platform for multi-user collaboration
-
-The server runs locally or on your own infrastructure. Your PromptOwl account handles authentication, entitlement, and governance metadata.
-
-## Quickstart
-
-```bash
-# 1. Get a license key — sign up free at https://app.promptowl.ai
-#    Settings → License Keys → Create a Community Server key
-
-# 2. (Optional) Scaffold a local nest with the open-source CLI
-npx @promptowl/contextnest-cli init
-
-# 3. Run the community server
-PROMPTOWL_KEY=pk_... npx @promptowl/contextnest-community
-```
-
-The server listens on `http://localhost:3000` by default. Without a valid `PROMPTOWL_KEY` the server still runs but some features are limited. See [CONFIGURATION.md](./CONFIGURATION.md) for all environment variables (port, auth mode, storage, telemetry).
-
-## System requirements
-
-- **Node.js** 20.x or later
-- **PromptOwl account** — free signup at <https://app.promptowl.ai/signup>
-- **OS:** Windows, macOS, or Linux
-- **Disk:** ~200 MB for the server, plus storage for your nests
-
-## What you get
-
-| Feature | Community Edition | Enterprise |
-|---|:---:|:---:|
-| Self-hosted context server | ✅ | ✅ |
-| Markdown + YAML frontmatter vaults | ✅ | ✅ |
-| Stewardship workflow (draft/review/approve) | ✅ | ✅ |
-| MCP server for AI agents | ✅ | ✅ |
-| Multi-user governance UI | — | ✅ |
-| SSO / SAML / SCIM | — | ✅ |
-| Audit log streaming | — | ✅ |
-| Policy transforms (redaction, summarization) | — | ✅ |
-| Priority support and SLA | — | ✅ |
-
-For Enterprise pricing and features, contact **hoot@promptowl.ai** or visit <https://promptowl.ai/contextnest/>.
-
-## Licensing
-
-ContextNest Community Edition is **commercial software**. It is **not open source**.
-
-**You may:**
-- Install and run the Software on devices You own or control
-- Use the Software for internal business purposes, tied to a valid PromptOwl account
-- Make backup and archival copies
-
-**You may not:**
-- Redistribute, resell, rent, lease, or sublicense the Software
-- Offer the Software as a hosted, managed, or software-as-a-service product to third parties
-- Reverse engineer, decompile, or create derivative works
-- Use the Software to build a competing product or service
-- Remove copyright, trademark, or license notices
-
-Full license text: [LICENSE.md](./LICENSE.md)
-
-**For redistribution, hosted-service, OEM, or regulated-industry use,** contact **hoot@promptowl.ai** for a commercial license agreement.
-
-## Platform terms
-
-Because the Software requires a PromptOwl account, the following terms also apply to Your use:
-
-- **End User License Agreement** — <https://promptowl.ai/eula/>
-- **Terms of Service** — <https://promptowl.ai/terms-of-service/>
-- **Privacy Policy** — <https://promptowl.ai/privacy-policy/>
-- **Acceptable Use Policy** — <https://promptowl.ai/acceptable-use/>
-- **Disclaimer** — <https://promptowl.ai/disclaimer/>
-- **Cookie Policy** — <https://promptowl.ai/cookies/>
-
-## Support
-
-- **Documentation:** <https://promptowl.ai/contextnest/>
-- **Product questions:** <https://promptowl.ai/contact-us/>
-- **Support & bugs:** `hoot@promptowl.ai`
-- **Commercial licensing:** `hoot@promptowl.ai` (subject: *ContextNest Commercial License*)
-
-## AI output disclaimer
-
-The Software injects content into large language models. AI output may be inaccurate, incomplete, or inappropriate for your use case. You are responsible for reviewing and validating any AI-generated content before relying on it, particularly in business-critical or regulated contexts. Do not deploy the Software in medical, legal, financial-advisory, or safety-critical environments without appropriate human oversight.
-
----
-
-**Copyright © 2026 Promptowl LLC.** All rights reserved.
-"ContextNest" and "PromptOwl" are trademarks of Promptowl LLC.
-
-Promptowl LLC · 3060 Mercer University Dr Ste 110 · Atlanta, GA 30341 · USA
+# ContextNest Community Edition
+
+**Self-hosted context governance server for AI workflows.** Part of the [PromptOwl](https://promptowl.ai) platform.
+
+> ⚠️ **Commercial Software.** ContextNest Community Edition is proprietary software licensed by Promptowl LLC. A free [PromptOwl account](https://app.promptowl.ai) is required to use it. Redistribution, hosting-as-a-service, and competitive use are prohibited. See [LICENSE.md](./LICENSE.md) for full terms.
+
+---
+
+## What it is
+
+ContextNest Community Edition is a self-hosted server that lets you:
+
+- Store, version, and govern markdown-based context documents ("nests")
+- Apply stewardship workflows — draft, pending review, approved
+- Serve approved context to AI agents via MCP, HTTP, or CLI
+- Sync with the PromptOwl hosted platform for multi-user collaboration
+
+The server runs locally or on your own infrastructure. Your PromptOwl account handles authentication, entitlement, and governance metadata.
+
+## Quickstart
+
+```bash
+# 1. Get a license key — sign up free at https://app.promptowl.ai
+#    Settings → License Keys → Create a Community Server key
+
+# 2. (Optional) Scaffold a local nest with the open-source CLI
+npx @promptowl/contextnest-cli init
+
+# 3. Run the community server
+PROMPTOWL_KEY=pk_... npx @promptowl/contextnest-community
+```
+
+The server listens on `http://localhost:3000` by default. Without a valid `PROMPTOWL_KEY` the server still runs but some features are limited. See [CONFIGURATION.md](./CONFIGURATION.md) for all environment variables (port, auth mode, storage, telemetry).
+
+## System requirements
+
+- **Node.js** 20.x or later
+- **PromptOwl account** — free signup at <https://app.promptowl.ai/signup>
+- **OS:** Windows, macOS, or Linux
+- **Disk:** ~200 MB for the server, plus storage for your nests
+
+## What you get
+
+| Feature | Community Edition | Enterprise |
+|---|:---:|:---:|
+| Self-hosted context server | ✅ | ✅ |
+| Markdown + YAML frontmatter vaults | ✅ | ✅ |
+| Stewardship workflow (draft/review/approve) | ✅ | ✅ |
+| MCP server for AI agents | ✅ | ✅ |
+| Multi-user governance UI | — | ✅ |
+| SSO / SAML / SCIM | — | ✅ |
+| Audit log streaming | — | ✅ |
+| Policy transforms (redaction, summarization) | — | ✅ |
+| Priority support and SLA | — | ✅ |
+
+For Enterprise pricing and features, contact **hoot@promptowl.ai** or visit <https://promptowl.ai/contextnest/>.
+
+## Licensing
+
+ContextNest Community Edition is **commercial software**. It is **not open source**.
+
+**You may:**
+- Install and run the Software on devices You own or control
+- Use the Software for internal business purposes, tied to a valid PromptOwl account
+- Make backup and archival copies
+
+**You may not:**
+- Redistribute, resell, rent, lease, or sublicense the Software
+- Offer the Software as a hosted, managed, or software-as-a-service product to third parties
+- Reverse engineer, decompile, or create derivative works
+- Use the Software to build a competing product or service
+- Remove copyright, trademark, or license notices
+
+Full license text: [LICENSE.md](./LICENSE.md)
+
+**For redistribution, hosted-service, OEM, or regulated-industry use,** contact **hoot@promptowl.ai** for a commercial license agreement.
+
+## Platform terms
+
+Because the Software requires a PromptOwl account, the following terms also apply to Your use:
+
+- **End User License Agreement** — <https://promptowl.ai/eula/>
+- **Terms of Service** — <https://promptowl.ai/terms-of-service/>
+- **Privacy Policy** — <https://promptowl.ai/privacy-policy/>
+- **Acceptable Use Policy** — <https://promptowl.ai/acceptable-use/>
+- **Disclaimer** — <https://promptowl.ai/disclaimer/>
+- **Cookie Policy** — <https://promptowl.ai/cookies/>
+
+## Support
+
+- **Documentation:** <https://promptowl.ai/contextnest/>
+- **Product questions:** <https://promptowl.ai/contact-us/>
+- **Support & bugs:** `hoot@promptowl.ai`
+- **Commercial licensing:** `hoot@promptowl.ai` (subject: *ContextNest Commercial License*)
+
+## AI output disclaimer
+
+The Software injects content into large language models. AI output may be inaccurate, incomplete, or inappropriate for your use case. You are responsible for reviewing and validating any AI-generated content before relying on it, particularly in business-critical or regulated contexts. Do not deploy the Software in medical, legal, financial-advisory, or safety-critical environments without appropriate human oversight.
+
+---
+
+**Copyright © 2026 Promptowl LLC.** All rights reserved.
+"ContextNest" and "PromptOwl" are trademarks of Promptowl LLC.
+
+Promptowl LLC · 3060 Mercer University Dr Ste 110 · Atlanta, GA 30341 · USA

package/dist/{chunk-Q2DCOS7V.js → chunk-2FXVMVZJ.js}

@@ -1,7 +1,7 @@
 import {
   config,
   getDb
-} from "./chunk-USIDOGVJ.js";
+} from "./chunk-2TW25QEA.js";
 
 // src/governance/stewardship-service.ts
 import { v4 as uuid } from "uuid";
@@ -170,7 +170,34 @@ function listStewards(params) {
   sql += " ORDER BY scope, COALESCE(node_pattern, tag_name, ''), user_email";
   return db.prepare(sql).all(...args).map(rowToSteward);
 }
-function createStewardRecord(params) {
+function rolePermission(role) {
+  return role === "editor" ? "write" : "read";
+}
+async function ensureCollaborator(nestId, email, permission, grantedBy) {
+  const db = getDb();
+  let userRow = db.prepare("SELECT id FROM users WHERE email = ?").get(email);
+  if (!userRow) {
+    const { hashPassword } = await import("./keys-YV33AJK3.js");
+    const newId = uuid();
+    db.prepare(
+      "INSERT INTO users (id, email, name, password_hash, is_invited) VALUES (?, ?, ?, ?, 1)"
+    ).run(newId, email, null, await hashPassword(uuid()));
+    userRow = { id: newId };
+  }
+  const nestRow = db.prepare("SELECT user_id FROM nests WHERE id = ?").get(nestId);
+  if (nestRow && nestRow.user_id === userRow.id) return;
+  const existing = db.prepare(
+    "SELECT id FROM nest_collaborators WHERE nest_id = ? AND user_id = ?"
+  ).get(nestId, userRow.id);
+  if (existing) return;
+  const granterRow = db.prepare("SELECT id FROM users WHERE email = ?").get(grantedBy);
+  const granterId = granterRow?.id ?? nestRow?.user_id;
+  if (!granterId) return;
+  db.prepare(
+    "INSERT INTO nest_collaborators (id, nest_id, user_id, permission, granted_by) VALUES (?, ?, ?, ?, ?)"
+  ).run(uuid(), nestId, userRow.id, permission, granterId);
+}
+async function createStewardRecord(params) {
   if (params.users.length === 0) {
     throw new Error("At least one user is required");
   }
@@ -229,6 +256,12 @@ function createStewardRecord(params) {
       isActive: true
     });
     results.push(created);
+    await ensureCollaborator(
+      params.nestId,
+      email,
+      rolePermission(user.role),
+      params.assignedBy
+    );
   }
   db.prepare(
     "UPDATE nests SET stewardship_enabled = 1 WHERE id = ? AND stewardship_enabled = 0"
@@ -255,7 +288,10 @@ function resolve(nestId, nodeId) {
         WHERE s.nest_id = ? AND s.is_active = 1 AND s.scope = 'folder'
           AND s.node_pattern IS NOT NULL
           AND instr(s.node_pattern, '*') = 0
-          AND ? LIKE s.node_pattern || '/%'
+          AND (
+            ? LIKE s.node_pattern || '/%'
+            OR s.node_pattern = ?
+          )
       UNION ALL
       SELECT s.*, 3 AS priority, ('tag: ' || s.tag_name) AS match_source
         FROM stewards s
@@ -270,7 +306,20 @@ function resolve(nestId, nodeId) {
         WHERE s.nest_id = ? AND s.is_active = 1 AND s.scope = 'nest'
       ORDER BY priority ASC, user_email ASC
       `
-  ).all(nestId, nodeId, nestId, nodeId, nestId, nodeId, nestId);
+  ).all(
+    nestId,
+    nodeId,
+    // document branch
+    nestId,
+    nodeId,
+    nestId,
+    // folder branch (path-prefix OR whole-nest folder)
+    nestId,
+    nodeId,
+    // tag branch
+    nestId
+    // nest branch
+  );
   const resolved = rows.map((row) => ({
     steward: rowToSteward(row),
     priority: row.priority,

package/dist/{chunk-USIDOGVJ.js → chunk-2TW25QEA.js}

@@ -1,5 +1,21 @@
 // src/config.ts
-import { join } from "path";
+import { join, dirname } from "path";
+import { existsSync } from "fs";
+import { fileURLToPath } from "url";
+import dotenv from "dotenv";
+var __filename = fileURLToPath(import.meta.url);
+var __dirname = dirname(__filename);
+var envCandidates = [
+  join(process.cwd(), ".env"),
+  join(__dirname, "..", ".env")
+];
+var envFileLoaded = envCandidates.find((p) => existsSync(p)) || null;
+if (envFileLoaded) {
+  dotenv.config({ path: envFileLoaded, override: true });
+}
+console.log(
+  `[config] dotenv: ${envFileLoaded ? `loaded ${envFileLoaded}` : "no .env file found"}`
+);
 function dataRoot() {
   return process.env.DATA_ROOT || join(process.cwd(), "data");
 }
@@ -19,6 +35,14 @@ var config = {
   get PROMPTOWL_KEY() {
     return process.env.PROMPTOWL_KEY || "";
   },
+  /**
+   * Path to the .env file the server reads its config from. Used by
+   * the license install flow to persist PROMPTOWL_KEY alongside any
+   * existing env vars, instead of a separate sidecar file.
+   */
+  get ENV_FILE_PATH() {
+    return process.env.ENV_FILE_PATH || join(process.cwd(), ".env");
+  },
   get TELEMETRY_ENABLED() {
     return process.env.TELEMETRY_ENABLED !== "false";
   },
@@ -52,7 +76,7 @@ var config = {
 // src/db/client.ts
 import Database from "better-sqlite3";
 import { mkdirSync } from "fs";
-import { dirname } from "path";
+import { dirname as dirname2 } from "path";
 
 // src/db/migrations.ts
 function runMigrations(db2) {
@@ -204,6 +228,9 @@ function runMigrations(db2) {
   if (!userCols.includes("is_admin")) {
     db2.exec("ALTER TABLE users ADD COLUMN is_admin INTEGER NOT NULL DEFAULT 0");
   }
+  if (!userCols.includes("is_invited")) {
+    db2.exec("ALTER TABLE users ADD COLUMN is_invited INTEGER NOT NULL DEFAULT 0");
+  }
   db2.exec(`
     CREATE TABLE IF NOT EXISTS schema_migrations (
       id TEXT PRIMARY KEY,
@@ -326,16 +353,65 @@ function runMigrations(db2) {
       recordMigration("002_steward_parity");
     })();
   }
+  if (!hasMigration("003_sessions_and_single_api_key")) {
+    db2.transaction(() => {
+      db2.exec(`
+        CREATE TABLE IF NOT EXISTS sessions (
+          id TEXT PRIMARY KEY,
+          user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+          expires_at TEXT NOT NULL,
+          created_at TEXT NOT NULL DEFAULT (datetime('now')),
+          last_seen_at TEXT NOT NULL DEFAULT (datetime('now')),
+          user_agent TEXT
+        );
+        CREATE INDEX IF NOT EXISTS idx_sessions_user ON sessions(user_id);
+        CREATE INDEX IF NOT EXISTS idx_sessions_expires ON sessions(expires_at);
+      `);
+      db2.exec(`
+        DELETE FROM api_keys
+        WHERE id IN (
+          SELECT id FROM (
+            SELECT
+              id,
+              ROW_NUMBER() OVER (
+                PARTITION BY user_id
+                ORDER BY
+                  COALESCE(last_used_at, '') DESC,
+                  created_at DESC,
+                  id DESC
+              ) AS rn
+            FROM api_keys
+          )
+          WHERE rn > 1
+        );
+      `);
+      db2.exec(`
+        CREATE UNIQUE INDEX IF NOT EXISTS idx_api_keys_user_unique
+          ON api_keys(user_id);
+      `);
+      recordMigration("003_sessions_and_single_api_key");
+    })();
+  }
+  if (!hasMigration("004_license_cache_owner_email")) {
+    db2.transaction(() => {
+      const cols = db2.prepare("PRAGMA table_info(license_cache)").all().map((c) => c.name);
+      if (!cols.includes("owner_email")) {
+        db2.exec("ALTER TABLE license_cache ADD COLUMN owner_email TEXT");
+      }
+      recordMigration("004_license_cache_owner_email");
+    })();
+  }
 }
 
 // src/db/client.ts
 var db = null;
 function getDb() {
   if (!db) {
-    mkdirSync(dirname(config.DATABASE_PATH), { recursive: true });
+    mkdirSync(dirname2(config.DATABASE_PATH), { recursive: true });
     db = new Database(config.DATABASE_PATH);
     db.pragma("journal_mode = WAL");
     db.pragma("foreign_keys = ON");
+    db.pragma("busy_timeout = 5000");
     runMigrations(db);
   }
   return db;

package/dist/{chunk-P6NG56CO.js → chunk-BLOPZDPL.js}

@@ -1,6 +1,6 @@
 import {
   getDb
-} from "./chunk-USIDOGVJ.js";
+} from "./chunk-2TW25QEA.js";
 
 // src/governance/version-service.ts
 import { createHash } from "crypto";
@@ -102,6 +102,28 @@ function getNodeTags(nestId, nodeId) {
     return [];
   }
 }
+function getDisplayStatus(nestId, nodeId) {
+  const db = getDb();
+  const pending = db.prepare(
+    "SELECT 1 FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' LIMIT 1"
+  ).get(nestId, nodeId);
+  if (pending) return "pending_review";
+  const current = db.prepare(
+    `SELECT version, status FROM node_versions
+       WHERE nest_id = ? AND node_id = ?
+       ORDER BY version DESC LIMIT 1`
+  ).get(nestId, nodeId);
+  if (!current) return "draft";
+  if (current.status === "approved") {
+    const approved = db.prepare(
+      "SELECT approved_version FROM approved_versions WHERE nest_id = ? AND node_id = ?"
+    ).get(nestId, nodeId);
+    if (approved?.approved_version === current.version) return "approved";
+    return "draft";
+  }
+  if (current.status === "rejected") return "rejected";
+  return "draft";
+}
 function rowToVersion(row) {
   return {
     version: row.version,
@@ -123,5 +145,6 @@ export {
   getApprovedVersion,
   setApprovedVersion,
   checkConflict,
-  getNodeTags
+  getNodeTags,
+  getDisplayStatus
 };

package/dist/{chunk-DJFEV4ET.js → chunk-XDCW4HTW.js}

@@ -1,10 +1,10 @@
 import {
   canUserApprove,
   resolveStewardsForNode
-} from "./chunk-Q2DCOS7V.js";
+} from "./chunk-2FXVMVZJ.js";
 import {
   getDb
-} from "./chunk-USIDOGVJ.js";
+} from "./chunk-2TW25QEA.js";
 
 // src/governance/review-service.ts
 import { v4 as uuid } from "uuid";