@promptowl/contextnest-community 1.0.1 → 1.2.0

package/dist/{chunk-5VHKEIAW.js → chunk-E7E3JMQR.js}

@@ -1,46 +1,20 @@
-import {
-  canUserApprove,
-  resolveStewardsForNode
-} from "./chunk-K22GWPT4.js";
 import {
   createVersion,
   setApprovedVersion
-} from "./chunk-JMZ75ZCD.js";
+} from "./chunk-LO54V4AU.js";
+import {
+  buildTitleMap,
+  canUserApprove,
+  engineCache,
+  resolveStewardsForNode
+} from "./chunk-5MT4ZBVF.js";
 import {
-  config,
   getDb
-} from "./chunk-KQCWNHDM.js";
+} from "./chunk-G62P54ET.js";
 
 // src/governance/review-service.ts
 import { v4 as uuid } from "uuid";
 
-// src/nodes/engine.ts
-import { join } from "path";
-import {
-  NestStorage,
-  GraphQueryEngine,
-  VersionManager
-} from "@promptowl/contextnest-engine";
-var NestEngineCache = class {
-  cache = /* @__PURE__ */ new Map();
-  get(nestId) {
-    let engine = this.cache.get(nestId);
-    if (!engine) {
-      const nestPath = join(config.DATA_ROOT, "nests", nestId);
-      const storage = new NestStorage(nestPath);
-      const query = new GraphQueryEngine(storage);
-      const versions = new VersionManager(storage);
-      engine = { storage, query, versions };
-      this.cache.set(nestId, engine);
-    }
-    return engine;
-  }
-  evict(nestId) {
-    this.cache.delete(nestId);
-  }
-};
-var engineCache = new NestEngineCache();
-
 // src/governance/safe-publish.ts
 import {
   publishDocument,
@@ -209,7 +183,7 @@ function cancelReview(params) {
   ).run(params.nestId, params.nodeId, pending.version);
   return getReviewRequest(pending.id);
 }
-function getReviewQueue(params) {
+async function getReviewQueue(params) {
   const db = getDb();
   let whereClauses = [];
   const args = [];
@@ -244,6 +218,15 @@ function getReviewQueue(params) {
       );
     });
   }
+  const titleMapsByNest = /* @__PURE__ */ new Map();
+  const nestIds = new Set(requests.map((r) => r.nestId));
+  for (const nid of nestIds) {
+    titleMapsByNest.set(nid, await buildTitleMap(nid));
+  }
+  requests = requests.map((r) => ({
+    ...r,
+    title: titleMapsByNest.get(r.nestId)?.get(r.nodeId)
+  }));
   return { requests, total };
 }
 function getReviewHistory(nestId, nodeId) {
@@ -283,7 +266,6 @@ function rowToReviewRequest(row) {
 }
 
 export {
-  engineCache,
   safePublishDocument,
   submitForReview,
   approve,

package/dist/{chunk-KQCWNHDM.js → chunk-G62P54ET.js}

@@ -38,6 +38,20 @@ var config = {
   get PROMPTOWL_KEY() {
     return process.env.PROMPTOWL_KEY || "";
   },
+  /**
+   * Restrict "Sign in with PromptOwl":
+   *   "open"       — anyone may sign in with PromptOwl (default)
+   *   "admin-only" — only the license owner (admin) may; everyone else
+   *                  uses email/password. Admin reaches it via the login
+   *                  page's admin route (?admin=1).
+   *   "disabled"   — nobody may sign in with PromptOwl.
+   * Enforced server-side at the device entry points (POST /auth/device,
+   * GET /auth/device/poll) and the identity point (POST /auth/promptowl).
+   */
+  get PROMPTOWL_SIGN_IN_GATE() {
+    const v = (process.env.PROMPTOWL_SIGN_IN_GATE || "open").trim().toLowerCase();
+    return v === "admin-only" || v === "disabled" ? v : "open";
+  },
   /**
    * Path to the .env file the server reads its config from. Used by
    * the license install flow to persist PROMPTOWL_KEY alongside any
@@ -52,6 +66,25 @@ var config = {
   get TELEMETRY_INTERVAL_MS() {
     return parseInt(process.env.TELEMETRY_INTERVAL_MS || "3600000", 10);
   },
+  /**
+   * Optional custom logo URL shown in UI header + login screen.
+   * Must be an absolute https://, http://, or data:image/… URL. Other
+   * schemes (file://, javascript:, relative paths) are rejected with a
+   * warning so an operator typo doesn't silently break the favicon.
+   * When unset or invalid, the UI falls back to the bundled icon.
+   */
+  get LOGO_URL() {
+    const raw = process.env.LOGO_URL?.trim();
+    if (!raw) return null;
+    const ok = /^(https?:\/\/|data:image\/)/i.test(raw);
+    if (!ok) {
+      console.warn(
+        `[config] LOGO_URL rejected: must start with https://, http://, or data:image/ (got "${raw}"). Falling back to default logo.`
+      );
+      return null;
+    }
+    return raw;
+  },
   get AUTH_MODE() {
     return process.env.AUTH_MODE || "key";
   },
@@ -229,6 +262,12 @@ function runMigrations(db2) {
   if (!nestCols.includes("stewardship_enabled")) {
     db2.exec("ALTER TABLE nests ADD COLUMN stewardship_enabled INTEGER NOT NULL DEFAULT 0");
   }
+  if (!nestCols.includes("is_imported")) {
+    db2.exec("ALTER TABLE nests ADD COLUMN is_imported INTEGER NOT NULL DEFAULT 0");
+  }
+  if (!nestCols.includes("allow_self_approve")) {
+    db2.exec("ALTER TABLE nests ADD COLUMN allow_self_approve INTEGER NOT NULL DEFAULT 0");
+  }
   const userCols = db2.prepare("PRAGMA table_info(users)").all().map((c) => c.name);
   if (!userCols.includes("is_admin")) {
     db2.exec("ALTER TABLE users ADD COLUMN is_admin INTEGER NOT NULL DEFAULT 0");

package/dist/{chunk-JMZ75ZCD.js → chunk-LO54V4AU.js}

@@ -1,6 +1,6 @@
 import {
   getDb
-} from "./chunk-KQCWNHDM.js";
+} from "./chunk-G62P54ET.js";
 
 // src/governance/version-service.ts
 import { createHash } from "crypto";

package/dist/{chunk-7K2LLJXK.js → chunk-XRK6SQSC.js}

@@ -2,7 +2,7 @@
 import { randomBytes, createHash, timingSafeEqual } from "crypto";
 import bcrypt from "bcryptjs";
 var KEY_PREFIX = "cnst_";
-var BCRYPT_ROUNDS = 12;
+var BCRYPT_ROUNDS = process.env.VITEST ? 4 : 12;
 function generateApiKey() {
   return KEY_PREFIX + randomBytes(32).toString("hex");
 }