@promptowl/contextnest-community 1.12.0 → 1.14.0

package/CONFIGURATION.md

@@ -73,7 +73,8 @@ The server prints a loud warning at startup when `AUTH_MODE=open` is active.
 | `TELEMETRY_INTERVAL_MS` | `3600000` (1 hour) | How often buffered telemetry is flushed to PromptOwl. |
 | `TRACE_RETENTION_DAYS` | `14` | Activity-trace retention window in days (the `api_events` rows behind `GET /admin/trace` and `GET /nests/:id/trace`). Rows older than this are pruned opportunistically (every ~500 inserts). `0` = keep forever (pruning is skipped entirely). Capped at `3650`; invalid/negative values fall back to `14`. Also editable from Settings → Advanced. |
 | `CORS_ORIGINS` | `*` in open mode; `http://localhost:5173,http://localhost:3838` in key mode | Comma-separated allowlist. Set to `*` to allow any origin (**only** safe in open mode — in key mode with Bearer tokens this enables CSRF). |
-| `MAX_BODY_BYTES` | `10485760` (10 MB) | Reject requests whose `Content-Length` exceeds this. Prevents giant-payload DoS. |
+| `MAX_BODY_BYTES` | `10485760` (10 MB) | Reject requests whose `Content-Length` exceeds this. Prevents giant-payload DoS. The asset-upload route (`POST /nests/:id/assets`) is exempt up to the video cap below. |
+| `VIDEO_MAX_MB` | `30` | Max size (in MB) of a video uploaded into a doc. Default `30` keeps it under Cloud Run's ~32 MiB HTTP/1 request-body limit, so an oversized video is rejected with a clear message instead of a bare `413` from the platform. Raise only where the deployment can actually accept larger request bodies (not behind Cloud Run, or on HTTP/2 / direct-to-bucket upload). Images are fixed at 10 MB. |
 | `LOGO_URL` | _(unset)_ | Custom logo shown in the UI header + login screen. Must start with `https://`, `http://`, or `data:image/` — other schemes (`file://`, relative, `javascript:`) are rejected with a warning and the bundled icon is used. |
 | `PROMPTOWL_TEAMS_ENABLED` | _(unset — off)_ | Lets users who signed in with PromptOwl import their PromptOwl teams as local teams. Off by default; set `true` to enable, or toggle from Settings → Advanced. When off, `GET/POST /teams/promptowl` return `404` and the PromptOwl Teams panel is hidden. Independent of `PROMPTOWL_SIGN_IN_GATE`. |
 | `TYPE_ARTIFACT_ENABLED` | `true` | Set `false` to disable creation of **artifact** nodes server-wide (existing artifact nodes stay readable — never data loss). Runnable types (agent/skill/tool) are gated by `FEATURE_WORKFLOW_PLANE`, not here. Also editable from Settings (`/admin/settings`). |
@@ -86,6 +87,7 @@ The server prints a loud warning at startup when `AUTH_MODE=open` is active.
 | `RUN_MAX_CONCURRENT_ROOTS` | `50` | Max concurrently-running root (depth-0) runs per nest (clamped 1..1000). The subagent caps bound a single tree; this bounds how many trees can run at once, so triggers can't flood a nest. |
 | `ANTHROPIC_API_KEY` | _(unset)_ | Server-wide default runner key for workflow-plane agent runs. Never returned by the API — the health endpoint reports presence only, and Settings shows a masked tail. |
 | `SLACK_WEBHOOK_URL` | _(unset — connector off)_ | Slack incoming-webhook URL for governance-event notifications (review submitted/approved/rejected, collaborator added). `https://` only — the URL embeds a secret. Also editable from Settings in the UI. |
+| `MSTEAMS_WEBHOOK_URL` | _(unset — connector off)_ | Microsoft Teams incoming-webhook URL for the same governance events, posted as Adaptive Cards. `https://` only — the URL embeds a secret. Also editable from Settings in the UI. See [Microsoft Teams notifications](#microsoft-teams-notifications). |
 | `SMTP_URL` | _(unset — connector off)_ | SMTP connection URL for email notifications (`smtp://` or `smtps://`, credentials inline). Requires `NOTIFY_EMAIL_FROM` and `NOTIFY_EMAIL_TO`. Also editable from Settings. |
 | `NOTIFY_EMAIL_FROM` | _(unset)_ | From address for notification emails. |
 | `NOTIFY_EMAIL_TO` | _(unset)_ | Comma-separated recipients for notification emails. |
@@ -93,6 +95,61 @@ The server prints a loud warning at startup when `AUTH_MODE=open` is active.
 
 ---
 
+## Microsoft Teams notifications
+
+Set `MSTEAMS_WEBHOOK_URL` (or paste the URL into **Settings → Notifications →
+Microsoft Teams notifications**) and the server posts the same governance
+events the Slack connector covers — review requested / approved / rejected,
+collaborator added, plus per-nest burst digests — to one Teams channel as
+[Adaptive Cards](https://adaptivecards.io/). Leave it empty to turn the
+connector off. Delivery is fire-and-forget with a short timeout: a Teams
+outage or a bad URL never slows down or fails the action that triggered the
+message.
+
+> Naming note: the setting is `msteams_webhook_url` / `MSTEAMS_WEBHOOK_URL`
+> because "teams" in this product means user groups (the `/teams` API), not
+> Microsoft Teams.
+
+### Create the incoming webhook in a Teams channel
+
+Microsoft retired the classic Office 365 "Incoming Webhook" connectors;
+webhooks are now created with the **Workflows** (Power Automate) app:
+
+1. In Microsoft Teams, open the channel that should receive notifications,
+   click **⋯ (More options) → Workflows**.
+2. Pick the template **"Post to a channel when a webhook request is
+   received"** (searching for "webhook" finds it), sign in if prompted, and
+   confirm the team + channel.
+3. Create the flow and **copy the HTTP POST URL** it shows (a
+   `https://….logic.azure.com/…` or `https://….powerplatform.com/…` address).
+4. Paste that URL into **Settings → Notifications → Microsoft Teams
+   notifications** (or set `MSTEAMS_WEBHOOK_URL`).
+5. Save, then click **Send test** on the card to post a test message and
+   confirm the channel receives it. (The button tests the *saved* URL — save
+   first, then test. The Slack card has the same button.)
+
+If your tenant still has a legacy Office 365 connector webhook, it is expected
+to accept the same payload envelope (legacy connectors documented support for
+Adaptive Card attachments, though we have not verified one end-to-end — the
+card's plain-text `fallbackText` is the safety net) — but create new hooks via
+Workflows.
+
+The URL embeds a secret — anyone holding it can post to the channel, so treat
+it like a password (it is why the setting requires `https://`). The server
+sends the standard envelope Workflows expects:
+`{"type": "message", "attachments": [{"contentType":
+"application/vnd.microsoft.card.adaptive", "content": {…card…}}]}` with a
+plain-text `fallbackText` for clients that cannot render cards.
+
+Per-nest connector rows post the same Adaptive Card format to a nest-specific
+webhook, with per-event filtering: `POST /nests/:id/connectors` with a JSON
+body like `{"channel": "teams", "url": "https://…", "events":
+["review_requested", "review_rejected"]}` (`events` may also be `["*"]`; the
+`url` may be an `env:KEY` reference into the nest's env store). Manage rows
+with `GET`/`PATCH`/`DELETE` on the same path.
+
+---
+
 ## Single sign-on (OIDC)
 
 Generic OpenID Connect sign-in against any spec-compliant identity provider —
@@ -233,7 +290,7 @@ Postgres backend starts empty.
 ### Runtime settings persistence
 
 Settings you change at runtime — everything on the **Settings page** (`/admin/settings`:
-sign-in gate, logo, base URL, upload limit, feature flags, OIDC SSO, Slack/SMTP connectors)
+sign-in gate, logo, base URL, upload limit, feature flags, OIDC SSO, Slack/Teams/SMTP connectors)
 plus the **installed license key** — are stored in the database (`server_settings`
 table), **not** in a `.env` file. This is deliberate: on Cloud Run the container
 filesystem is ephemeral, so a file-based value was wiped by every rebuild, and each

package/README.md

@@ -12,6 +12,7 @@ ContextNest Community Edition is a self-hosted server that lets you:
 
 - Store, version, and govern markdown-based context documents ("nests")
 - Import an existing folder or vault of markdown files in one step
+- Export a nest as a portable bundle and re-import it on another self-hosted host
 - Apply stewardship workflows — draft, pending review, approved
 - Share nests with collaborators or publish them read-only to the public
 - Serve approved context to AI agents via MCP, HTTP, or CLI
@@ -93,6 +94,7 @@ For redistribution, hosted-service, OEM, or regulated-industry licensing, contac
 | Configurable nest storage (external / GCS volume mount) | ✅ | ✅ |
 | Markdown + YAML frontmatter vaults | ✅ | ✅ |
 | Import existing folder / vault | ✅ | ✅ |
+| Export nest as portable bundle (.zip) | ✅ | ✅ |
 | Markdown rendering + wiki cross-linking | ✅ | ✅ |
 | External-edit detection + version diff | ✅ | ✅ |
 | Stewardship workflow (draft/review/approve) | ✅ | ✅ |
@@ -101,7 +103,7 @@ For redistribution, hosted-service, OEM, or regulated-industry licensing, contac
 | Custom logo / branding | ✅ | ✅ |
 | Admin password reset + user removal (in-platform) | ✅ | ✅ |
 | Wiki backlinks, outline, hover-preview, link health | ✅ | ✅ |
-| Rich editor — tables, callouts, toggles, code highlight, find/replace | ✅ | ✅ |
+| Rich editor — tables, callouts, toggles, code highlight, find/replace, image & video upload | ✅ | ✅ |
 | Steward version revert | ✅ | ✅ |
 | MCP server for AI agents | ✅ | ✅ |
 | Centralized multi-tenant admin console | — | ✅ |

package/dist/{chunk-3M7677XW.js → chunk-I5KYGMIT.js}

@@ -12,6 +12,7 @@ import { join, dirname } from "path";
 import { existsSync } from "fs";
 import { fileURLToPath } from "url";
 import dotenv from "dotenv";
+import { z } from "zod";
 var __filename = fileURLToPath(import.meta.url);
 var __dirname = dirname(__filename);
 var envCandidates = [
@@ -26,11 +27,13 @@ if (envFileLoaded && !isTestRun) {
 var canonicalEnvFile = process.env.ENV_FILE_PATH || join(dataRoot(), ".env");
 var canonicalEnvLoaded = null;
 var slackUrlWarned = false;
+var msteamsUrlWarned = false;
 var emailFromWarned = false;
 var emailToWarned = false;
 var oidcIssuerWarned = false;
+var EMAIL_SCHEMA = z.email();
 function isEmailish(v) {
-  return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(v) && !/[\r\n]/.test(v);
+  return EMAIL_SCHEMA.safeParse(v.trim()).success && !/[\r\n]/.test(v);
 }
 function isEmailListish(v) {
   return v.split(",").every((e) => isEmailish(e.trim()));
@@ -353,6 +356,27 @@ var config = {
     }
     return raw;
   },
+  /**
+   * Optional Microsoft Teams incoming-webhook URL (Workflows app) for team
+   * notifications — same events as SLACK_WEBHOOK_URL, posted as Adaptive
+   * Cards. Empty/unset = connector off. https only — a webhook carries an
+   * implicit secret in its path, so it never travels plaintext. Named
+   * MSTEAMS_* deliberately: "teams" in this codebase means user groups.
+   */
+  get MSTEAMS_WEBHOOK_URL() {
+    const raw = process.env.MSTEAMS_WEBHOOK_URL?.trim();
+    if (!raw) return null;
+    if (!/^https:\/\//i.test(raw)) {
+      if (!msteamsUrlWarned) {
+        msteamsUrlWarned = true;
+        console.warn(
+          "[config] MSTEAMS_WEBHOOK_URL rejected: must be an https:// URL. Microsoft Teams notifications disabled."
+        );
+      }
+      return null;
+    }
+    return raw;
+  },
   get FEATURE_WORKFLOW_PLANE() {
     return process.env.FEATURE_WORKFLOW_PLANE === "true";
   },
@@ -494,6 +518,17 @@ var config = {
    */
   get MAX_BODY_BYTES() {
     return parseInt(process.env.MAX_BODY_BYTES || String(10 * 1024 * 1024), 10);
+  },
+  /**
+   * Max video upload size in bytes. Default 30 MB — kept under Cloud Run's
+   * 32 MiB HTTP/1 request-body limit so a too-big video is rejected cleanly by
+   * our own check (clear message) instead of a bare 413 from the platform.
+   * Raise via VIDEO_MAX_MB only when the deployment can actually accept it
+   * (e.g. not behind Cloud Run, or on HTTP/2 / direct-to-bucket upload).
+   */
+  get VIDEO_MAX_BYTES() {
+    const mb = parseInt(process.env.VIDEO_MAX_MB || "30", 10);
+    return (Number.isFinite(mb) && mb > 0 ? mb : 30) * 1024 * 1024;
   }
 };
 

package/dist/{chunk-ZMSU7BCC.js → chunk-IHGPZ6NY.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GUNJTORH.js";
 import {
   getDb
-} from "./chunk-3M7677XW.js";
+} from "./chunk-I5KYGMIT.js";
 
 // src/governance/grants-service.ts
 import { v4 as uuid } from "uuid";

package/dist/{chunk-JHIU6RZU.js → chunk-JP67WXLA.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-XQ46F76G.js";
 import {
   getDb
-} from "./chunk-3M7677XW.js";
+} from "./chunk-I5KYGMIT.js";
 
 // src/governance/version-service.ts
 import { createHash } from "crypto";
@@ -41,6 +41,38 @@ async function createVersion(params) {
     status: params.status
   };
 }
+async function upsertVersion(params) {
+  const db = getDb();
+  const contentHash = hashContent(params.content);
+  const sql = insertOrReplace(
+    db,
+    `INSERT INTO node_versions (nest_id, node_id, version, content_hash, author, status, change_note, tags_json)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,
+    ["nest_id", "node_id", "version"],
+    // Reset created_at on conflict too: SQLite's INSERT OR REPLACE deletes+
+    // reinserts (created_at → now), so mirror that on Postgres — otherwise a
+    // draft edited in place would keep its original (import-time) "edited at".
+    `content_hash = excluded.content_hash, author = excluded.author, status = excluded.status, change_note = excluded.change_note, tags_json = excluded.tags_json, created_at = ${nowExpr(db)}`
+  );
+  await db.run(sql, [
+    params.nestId,
+    params.nodeId,
+    params.version,
+    contentHash,
+    params.author,
+    params.status,
+    params.changeNote || null,
+    params.tags ? JSON.stringify(params.tags) : null
+  ]);
+  return {
+    version: params.version,
+    content: params.content,
+    editedBy: params.author,
+    editedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    changeNote: params.changeNote,
+    status: params.status
+  };
+}
 async function getVersions(nestId, nodeId) {
   const db = getDb();
   const rows = await db.all(
@@ -172,6 +204,7 @@ export {
   SYSTEM_AUTHOR_PREFIX,
   systemAuthor,
   createVersion,
+  upsertVersion,
   getVersions,
   getVersion,
   getCurrentVersion,