@promptowl/contextnest-community 1.13.0 → 1.14.0

package/dist/{client-AAMF22YJ.js → client-3MGIP57D.js}

@@ -2,7 +2,7 @@ import {
   getDb,
   initDb,
   resetDb
-} from "./chunk-5QQ7WKAI.js";
+} from "./chunk-I5KYGMIT.js";
 import "./chunk-SLTQACJW.js";
 export {
   getDb,

package/dist/{grants-service-FZD6QM6V.js → grants-service-5ZFISCBH.js}

@@ -6,9 +6,9 @@ import {
   listGrants,
   listUserGrants,
   resolveNodeGrant
-} from "./chunk-ZQS5W45U.js";
+} from "./chunk-IHGPZ6NY.js";
 import "./chunk-GUNJTORH.js";
-import "./chunk-5QQ7WKAI.js";
+import "./chunk-I5KYGMIT.js";
 import "./chunk-SLTQACJW.js";
 export {
   createGrant,

package/dist/index.js

@@ -17,18 +17,23 @@ import {
   listNotifications,
   listWatchers,
   markNotificationsRead,
+  nodeWriteKey,
   notifyNestEvent,
+  notifyNestInvite,
   parseConditionSchema,
   reject,
   removeWatcher,
+  repointPendingReview,
   requireWorkflowPlane,
   resolveCallerEmail,
   safeJson,
   safePublishDocument,
   seedDefaultEdgeTypes,
+  sendTestNotification,
+  stripUndefinedDeep,
   submitForReview,
-  verifySmtp
-} from "./chunk-PAIP5KHB.js";
+  withNodeWriteLock
+} from "./chunk-MZ4IR5KH.js";
 import {
   createGrant,
   deleteGrant,
@@ -37,7 +42,7 @@ import {
   listGrants,
   listUserGrants,
   resolveNodeGrant
-} from "./chunk-ZQS5W45U.js";
+} from "./chunk-IHGPZ6NY.js";
 import {
   generateApiKey,
   getKeyPrefix,
@@ -55,7 +60,7 @@ import {
   getVersions,
   setApprovedVersion,
   upsertVersion
-} from "./chunk-EG77SQHO.js";
+} from "./chunk-JP67WXLA.js";
 import {
   addMember,
   buildTitleMap,
@@ -119,6 +124,7 @@ import {
   resolveStewardsForNode,
   resolveStewardsWithFallback,
   resolveUserRoles,
+  sendEmailToRecipient,
   setAllowSelfApprove,
   setStewardshipEnabled,
   shareTeamWithNest,
@@ -130,8 +136,9 @@ import {
   unshareTeamFromNest,
   updateMemberRole,
   updateSteward,
-  validateLicense
-} from "./chunk-Q5NRCDD4.js";
+  validateLicense,
+  verifySmtp
+} from "./chunk-KPK656BH.js";
 import {
   AppError,
   ConflictError,
@@ -154,7 +161,7 @@ import {
   initDb,
   isEmailListish,
   isEmailish
-} from "./chunk-5QQ7WKAI.js";
+} from "./chunk-I5KYGMIT.js";
 import {
   ANON_EMAIL,
   ANON_USER_ID
@@ -1476,6 +1483,18 @@ authRoutes.post("/invite", async (c) => {
     );
   }
   trackEvent("admin.invite", { adminId: callerId, email });
+  const inviter = await db.get("SELECT email FROM users WHERE id = ?", [
+    callerId
+  ]);
+  void sendEmailToRecipient(email, {
+    status: "invited",
+    docTitle: "ContextNest",
+    path: "",
+    actor: email,
+    by: inviter?.email || void 0,
+    tempPassword,
+    link: requestBaseUrl(c.req.url)
+  });
   return c.json(
     {
       temporary_password: tempPassword,
@@ -1765,7 +1784,7 @@ async function approveExternalEdit(input) {
     const node = await storage.readDocument(input.documentId);
     const versionNum = result.versionEntry.version;
     const tags = node.frontmatter.tags || [];
-    const { createVersion: createVersion2, setApprovedVersion: setApprovedVersion2 } = await import("./version-service-L52F4WVZ.js");
+    const { createVersion: createVersion2, setApprovedVersion: setApprovedVersion2 } = await import("./version-service-FGL47APL.js");
     await createVersion2({
       nestId: input.nestId,
       nodeId: input.documentId,
@@ -1874,18 +1893,6 @@ async function departmentTagFor(userEmail) {
     return null;
   }
 }
-var nodeWriteChains = /* @__PURE__ */ new Map();
-function withNodeWriteLock(key, fn) {
-  const prev = (nodeWriteChains.get(key) ?? Promise.resolve()).catch(() => {
-  });
-  const run = prev.then(fn);
-  nodeWriteChains.set(key, run);
-  void run.catch(() => {
-  }).finally(() => {
-    if (nodeWriteChains.get(key) === run) nodeWriteChains.delete(key);
-  });
-  return run;
-}
 function toSafeError(err, context, message) {
   if (err instanceof AppError) return err;
   console.error(`${context}:`, err);
@@ -2300,7 +2307,7 @@ async function registerImportedDocuments(nestId, userEmail, onProgress) {
   return registered;
 }
 async function updateNode(nestId, nodeId, patch, userEmail) {
-  return withNodeWriteLock(`${nestId}::${nodeId}`, async () => {
+  return withNodeWriteLock(nodeWriteKey(nestId, nodeId), async () => {
     try {
       const { storage, versions: versionManager } = await engineCache.get(
         nestId
@@ -2352,13 +2359,15 @@ async function updateNode(nestId, nodeId, patch, userEmail) {
       const hasStewards = await isStewardshipEnabled(nestId);
       const autoPublish = !hasStewards || await actorAutoPublishes(nestId, userEmail);
       const currentTags = node.frontmatter.tags || [];
-      if (hasStewards && await getPendingReview(nestId, nodeId)) {
+      const pendingReview = hasStewards ? await getPendingReview(nestId, nodeId) : null;
+      const isAuthorEditingOwnReview = !!pendingReview && pendingReview.requestedBy.toLowerCase() === userEmail.toLowerCase();
+      if (pendingReview && !isAuthorEditingOwnReview) {
         throw new LockedError(
           "This document is awaiting steward review and is locked. Approve or reject the pending review before editing."
         );
       }
       let responseVersion;
-      if (!autoPublish) {
+      if (!autoPublish || isAuthorEditingOwnReview) {
         const currentVersion = await getCurrentVersion(nestId, nodeId);
         const newVersion = currentVersion + 1;
         node = {
@@ -2396,6 +2405,9 @@ async function updateNode(nestId, nodeId, patch, userEmail) {
           tags: currentTags,
           changeNote: patch.changeNote
         });
+        if (isAuthorEditingOwnReview) {
+          await repointPendingReview({ nestId, nodeId, newVersion });
+        }
         responseVersion = newVersion;
       } else {
         node = {
@@ -3143,8 +3155,30 @@ async function addCollaborator(params) {
       actor: params.email || userId,
       permission: params.permission,
       by: params.grantedByEmail || void 0
-    }
-  );
+    },
+    // Invite email goes to the invitee directly (below), NOT the shared
+    // NOTIFY_EMAIL_TO team inbox — so skip the team-channel email for this
+    // event. Slack/Teams still fire.
+    { skipEmail: true }
+  );
+  const inviteeEmail = params.email || (await db.get("SELECT email FROM users WHERE id = ?", [userId]))?.email;
+  if (inviteeEmail) {
+    void sendEmailToRecipient(inviteeEmail, {
+      status: "shared",
+      docTitle: shareNestName,
+      path: shareNestName,
+      link: docLink(nestId, void 0, params.baseUrl),
+      actor: inviteeEmail,
+      permission: params.permission,
+      by: params.grantedByEmail || void 0
+    });
+    void notifyNestInvite({
+      nestId,
+      inviteeEmail,
+      permission: params.permission,
+      nestName: shareNestName
+    });
+  }
   return await db.get(
     "SELECT * FROM nest_collaborators WHERE id = ?",
     [collabId]
@@ -3336,7 +3370,8 @@ nestTeamRoutes.post("/", async (c) => {
     nestId: c.req.param("nestId"),
     teamId: body.team_id,
     callerUserId: userId,
-    allowAdmin: await isLicenseAdminUserId(userId)
+    allowAdmin: await isLicenseAdminUserId(userId),
+    baseUrl: requestBaseUrl(c.req.url)
   });
   return c.json({ teams }, 201);
 });
@@ -4050,7 +4085,7 @@ nodeRoutes.post("/", async (c) => {
 nodeRoutes.get("/:nodeId{.+}/stewards", async (c) => {
   const nestId = c.req.param("nestId");
   const nodeId = c.req.param("nodeId");
-  const { resolveStewardsWithFallback: resolveStewardsWithFallback2 } = await import("./stewardship-service-B6L7UACX.js");
+  const { resolveStewardsWithFallback: resolveStewardsWithFallback2 } = await import("./stewardship-service-G7IF7ZNP.js");
   const { stewards, fallbackToOwner, ownerEmail } = await resolveStewardsWithFallback2(
     nestId,
     nodeId
@@ -4071,7 +4106,7 @@ nodeRoutes.get("/:nodeId{.+}/stewards", async (c) => {
 nodeRoutes.get("/:nodeId{.+}/versions", async (c) => {
   const nestId = c.req.param("nestId");
   const nodeId = c.req.param("nodeId");
-  const { getVersions: getVersions2, getApprovedVersion: getApprovedVersion2 } = await import("./version-service-L52F4WVZ.js");
+  const { getVersions: getVersions2, getApprovedVersion: getApprovedVersion2 } = await import("./version-service-FGL47APL.js");
   const allVersions = await getVersions2(nestId, nodeId);
   const approved = await getApprovedVersion2(nestId, nodeId);
   const db = getDb();
@@ -4103,7 +4138,7 @@ nodeRoutes.get("/:nodeId{.+}/versions", async (c) => {
 nodeRoutes.get("/:nodeId{.+}/reviews", async (c) => {
   const nestId = c.req.param("nestId");
   const nodeId = c.req.param("nodeId");
-  const { getReviewHistory: getReviewHistory2 } = await import("./review-service-Q3NDK5TX.js");
+  const { getReviewHistory: getReviewHistory2 } = await import("./review-service-6G7MVTY6.js");
   const history = await getReviewHistory2(nestId, nodeId);
   return c.json({ reviews: history });
 });
@@ -4518,7 +4553,7 @@ annotationRoutes.get("/:nodeId{.+}/hosted", async (c) => {
 
 // src/nodes/query-routes.ts
 import { Hono as Hono10 } from "hono";
-import { serializeDocument as serializeDocument2 } from "@promptowl/contextnest-engine";
+import { serializeDocument as serializeDocument3 } from "@promptowl/contextnest-engine";
 
 // src/tables/service.ts
 function splitCsvLine(line) {
@@ -4937,6 +4972,68 @@ async function resolveExportBody(nestId, nodeId, workingBody) {
   }
 }
 
+// src/nests/bundle-service.ts
+import { readdirSync as readdirSync2, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
+import { join as join4, sep } from "path";
+import JSZip from "jszip";
+import { serializeDocument as serializeDocument2 } from "@promptowl/contextnest-engine";
+function walkFiles(root) {
+  const out = [];
+  let entries;
+  try {
+    entries = readdirSync2(root, { recursive: true });
+  } catch {
+    return out;
+  }
+  for (const rel of entries) {
+    try {
+      if (statSync2(join4(root, rel)).isFile()) out.push(rel.split(sep).join("/"));
+    } catch {
+    }
+  }
+  return out;
+}
+async function exportNestBundle(nestId, includeDrafts) {
+  const db = getDb();
+  const approvedRows = await db.all(
+    "SELECT node_id, approved_version FROM approved_versions WHERE nest_id = ?",
+    [nestId]
+  );
+  const approvedByNode = new Map(
+    approvedRows.map((r) => [r.node_id, r.approved_version])
+  );
+  const { storage } = await engineCache.get(nestId);
+  const docs = await storage.discoverDocuments();
+  const zip = new JSZip();
+  let count = 0;
+  for (const doc of docs) {
+    const approved = approvedByNode.get(doc.id);
+    const frontmatter = stripUndefinedDeep({ ...doc.frontmatter });
+    let body = doc.body || "";
+    if (approved != null) {
+      const approvedBody = await resolveExportBody(nestId, doc.id, body);
+      if (approvedBody == null) continue;
+      body = approvedBody;
+      frontmatter.status = "published";
+      frontmatter.version = approved;
+    } else {
+      if (!includeDrafts) continue;
+      frontmatter.status = "draft";
+    }
+    zip.file(`${doc.id}.md`, serializeDocument2({ ...doc, frontmatter, body }));
+    count++;
+  }
+  const nestPath = resolveNestPath(nestId);
+  for (const rel of walkFiles(nestPath)) {
+    const segs = rel.split("/");
+    const keep = segs.includes(".versions") || rel === ".context/config.yaml" || rel === "CONTEXT.md";
+    if (!keep) continue;
+    zip.file(rel, readFileSync2(join4(nestPath, rel)));
+  }
+  trackEvent("nest.export.bundle", { nestId, documents: count, includeDrafts });
+  return zip.generateAsync({ type: "arraybuffer" });
+}
+
 // src/nodes/graph-service.ts
 var MAX_GRAPH_NODES = 150;
 var WIKILINK_RE = /\[\[([^\]|]+)(?:\|([^\]]+))?\]\]/g;
@@ -5490,10 +5587,24 @@ queryRoutes.get("/context", async (c) => {
   return c.json({ content: content || "" });
 });
 queryRoutes.get("/export", async (c) => {
+  const nestId = c.req.param("nestId");
+  if (c.req.query("format") === "bundle") {
+    const perm = await resolveNestPermission(nestId, c.get("userId"));
+    if (perm !== "owner" && perm !== "admin") {
+      throw new ForbiddenError("Only the nest owner or an admin can export a bundle");
+    }
+    const draftsParam = c.req.query("includeDrafts");
+    const includeDrafts = draftsParam === "1" || draftsParam === "true";
+    const zip = await exportNestBundle(nestId, includeDrafts);
+    const filename = `nest-${nestId}.zip`;
+    return c.body(zip, 200, {
+      "Content-Type": "application/zip",
+      "Content-Disposition": `attachment; filename="${filename}"`
+    });
+  }
   if (!isMarkdownFormat(c)) {
-    throw new ValidationError("format=markdown is required");
+    throw new ValidationError("format=markdown or format=bundle is required");
   }
-  const nestId = c.req.param("nestId");
   const { storage, query: queryEngine } = await engineCache.get(nestId);
   const selector = c.req.query("selector")?.trim() || null;
   let documents;
@@ -5592,7 +5703,7 @@ queryRoutes.post("/publish", async (c) => {
       body: doc.content,
       rawContent: ""
     };
-    const serialized = serializeDocument2(node);
+    const serialized = serializeDocument3(node);
     await storage.writeDocument(id, serialized);
     await syncNodeTags(nestId, id, tags);
     created.push(id);
@@ -7397,17 +7508,15 @@ ${resolved.map((r) => `- ${r.steward.userEmail} (${r.source})`).join("\n")}` : "
         (n) => n.frontmatter.title.toLowerCase() === args.title.toLowerCase()
       );
       if (!node) return `Node not found: ${args.title}`;
-      const currentVersion = await getCurrentVersion(ctx.nestId, node.id);
       try {
         const request = await approve({
           nestId: ctx.nestId,
           nodeId: node.id,
-          version: currentVersion,
           approvedBy: ctx.userEmail,
           note: args.note,
           baseUrl: ctx.baseUrl
         });
-        return `Approved "${args.title}" v${currentVersion}. This version is now live for AI queries.${args.note ? `
+        return `Approved "${args.title}" v${request.version}. This version is now live for AI queries.${args.note ? `
 Note: ${args.note}` : ""}`;
       } catch (err) {
         return `Cannot approve: ${err.message}`;
@@ -7419,17 +7528,15 @@ Note: ${args.note}` : ""}`;
         (n) => n.frontmatter.title.toLowerCase() === args.title.toLowerCase()
       );
       if (!node) return `Node not found: ${args.title}`;
-      const currentVersion = await getCurrentVersion(ctx.nestId, node.id);
       try {
         const request = await reject({
           nestId: ctx.nestId,
           nodeId: node.id,
-          version: currentVersion,
           rejectedBy: ctx.userEmail,
           note: args.note,
           baseUrl: ctx.baseUrl
         });
-        return `Rejected "${args.title}" v${currentVersion}.
+        return `Rejected "${args.title}" v${request.version}.
 Reason: ${args.note}`;
       } catch (err) {
         return `Cannot reject: ${err.message}`;
@@ -7510,8 +7617,8 @@ ${list}`;
       if (!target) return "target is required (a node id or folder prefix).";
       if (!["read", "write"].includes(role)) return "role must be read or write.";
       try {
-        const { createGrant: createGrant2 } = await import("./grants-service-FZD6QM6V.js");
-        const db = (await import("./client-AAMF22YJ.js")).getDb();
+        const { createGrant: createGrant2 } = await import("./grants-service-5ZFISCBH.js");
+        const db = (await import("./client-3MGIP57D.js")).getDb();
         const { normalizeEmail: normalizeEmail2 } = await import("./email-R7DFS6E5.js");
         const e = normalizeEmail2(String(args.email || ""));
         if (!e) return "email is required.";
@@ -8598,7 +8705,7 @@ definitionRoutes.delete("/:id", async (c) => {
 import { Hono as Hono18 } from "hono";
 import { v4 as uuid13 } from "uuid";
 import { mkdir as mkdir2, readFile as readFile2, writeFile } from "fs/promises";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 var assetRoutes = new Hono18();
 var CONTENT_TYPES = {
   png: "image/png",
@@ -8646,9 +8753,9 @@ assetRoutes.post("/", async (c) => {
     );
   }
   const name = `${uuid13()}.${ext === "jpeg" ? "jpg" : ext}`;
-  const dir = join4(resolveNestPath(nestId), "assets");
+  const dir = join5(resolveNestPath(nestId), "assets");
   await mkdir2(dir, { recursive: true });
-  await writeFile(join4(dir, name), Buffer.from(await file.arrayBuffer()));
+  await writeFile(join5(dir, name), Buffer.from(await file.arrayBuffer()));
   const url = `/nests/${nestId}/assets/${name}`;
   return c.json(
     {
@@ -8670,7 +8777,7 @@ assetRoutes.get("/:file", async (c) => {
   }
   let bytes;
   try {
-    bytes = await readFile2(join4(resolveNestPath(nestId), "assets", name));
+    bytes = await readFile2(join5(resolveNestPath(nestId), "assets", name));
   } catch {
     throw new NotFoundError("Asset not found");
   }
@@ -9425,8 +9532,8 @@ function rowToComment(row) {
 }
 
 // src/governance/stewards-parser.ts
-import { readFileSync as readFileSync2, existsSync } from "fs";
-import { join as join5 } from "path";
+import { readFileSync as readFileSync3, existsSync } from "fs";
+import { join as join6 } from "path";
 function parseStewardsYaml(content) {
   const result = { version: 1 };
   const lines = content.split("\n");
@@ -9492,13 +9599,13 @@ function parseEntry(str) {
 function loadStewardsConfig(nestId) {
   const nestPath = resolveNestPath(nestId);
   const candidates = [
-    join5(nestPath, "stewards.yaml"),
-    join5(nestPath, "stewards.yml"),
-    join5(nestPath, ".context", "stewards.yaml")
+    join6(nestPath, "stewards.yaml"),
+    join6(nestPath, "stewards.yml"),
+    join6(nestPath, ".context", "stewards.yaml")
   ];
   for (const candidatePath of candidates) {
     if (existsSync(candidatePath)) {
-      const content = readFileSync2(candidatePath, "utf-8");
+      const content = readFileSync3(candidatePath, "utf-8");
       return parseStewardsYaml(content);
     }
   }
@@ -9554,7 +9661,8 @@ governanceRoutes.post("/stewards", async (c) => {
       documentId: body.documentId,
       tagName: body.tagName,
       users: body.users,
-      assignedBy
+      assignedBy,
+      baseUrl: requestBaseUrl(c.req.url)
     });
     return c.json({ stewards: created2 }, 201);
   }
@@ -9572,7 +9680,8 @@ governanceRoutes.post("/stewards", async (c) => {
         role: body.role
       }
     ],
-    assignedBy
+    assignedBy,
+    baseUrl: requestBaseUrl(c.req.url)
   });
   return c.json({ steward: created[0] }, 201);
 });
@@ -9891,7 +10000,6 @@ governanceNodeRoutes.post("/:nodeId{.+}/approve", async (c) => {
     const request = await approve({
       nestId,
       nodeId,
-      version: await getCurrentVersion(nestId, nodeId),
       approvedBy: userEmail,
       note: body.note,
       override: body.override && isAdmin,
@@ -9914,7 +10022,6 @@ governanceNodeRoutes.post("/:nodeId{.+}/reject", async (c) => {
     const request = await reject({
       nestId,
       nodeId,
-      version: await getCurrentVersion(nestId, nodeId),
       rejectedBy: userEmail,
       note: body.note,
       baseUrl: requestBaseUrl(c.req.url)
@@ -10007,19 +10114,19 @@ async function ensureAnonymousUser() {
 // src/app.ts
 import { serveStatic } from "@hono/node-server/serve-static";
 import { fileURLToPath } from "url";
-import { dirname as dirname2, join as join6, relative as relative2 } from "path";
-import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
+import { dirname as dirname2, join as join7, relative as relative2 } from "path";
+import { existsSync as existsSync2, readFileSync as readFileSync4 } from "fs";
 var HERE = dirname2(fileURLToPath(import.meta.url));
 var SERVICE_VERSION = (() => {
   try {
-    return JSON.parse(readFileSync3(join6(HERE, "..", "package.json"), "utf8")).version;
+    return JSON.parse(readFileSync4(join7(HERE, "..", "package.json"), "utf8")).version;
   } catch {
     return "unknown";
   }
 })();
 var UI_DIR_CANDIDATES = [
-  join6(HERE, "web3"),
-  join6(process.cwd(), "dist", "web3")
+  join7(HERE, "web3"),
+  join7(process.cwd(), "dist", "web3")
 ];
 var UI_DIR_ABS = UI_DIR_CANDIDATES.find((p) => existsSync2(p)) || UI_DIR_CANDIDATES[0];
 var UI_DIR_REL = relative2(process.cwd(), UI_DIR_ABS) || ".";
@@ -10240,6 +10347,7 @@ function createApp() {
   });
   const serverAdminAllowed = async (c) => config.AUTH_MODE === "open" || await isServerAdminUserId(c.get("userId"));
   app.use("/admin/settings", flexAuthMiddleware);
+  app.use("/admin/settings/*", flexAuthMiddleware);
   const currentServerSettings = () => ({
     promptowl_sign_in_gate: config.PROMPTOWL_SIGN_IN_GATE,
     manual_sign_in: config.MANUAL_SIGN_IN,
@@ -10272,6 +10380,7 @@ function createApp() {
     // Server-wide runner default. NEVER the value — masked tail only.
     anthropic_api_key_masked: process.env.ANTHROPIC_API_KEY ? `\u2022\u2022\u2022\u2022${process.env.ANTHROPIC_API_KEY.slice(-4)}` : null,
     slack_webhook_url: config.SLACK_WEBHOOK_URL ?? "",
+    msteams_webhook_url: config.MSTEAMS_WEBHOOK_URL ?? "",
     smtp_url: config.SMTP_URL ?? "",
     notify_email_from: config.NOTIFY_EMAIL_FROM ?? "",
     notify_email_to: config.NOTIFY_EMAIL_TO ?? ""
@@ -10281,6 +10390,20 @@ function createApp() {
       return c.json({ error: "Only the server admin can view this." }, 403);
     return c.json(currentServerSettings());
   });
+  app.post("/admin/settings/test-notification", async (c) => {
+    if (!await serverAdminAllowed(c))
+      return c.json({ error: "Only the server admin can do this." }, 403);
+    let body;
+    try {
+      body = await c.req.json();
+    } catch {
+      return c.json({ error: "Invalid JSON body" }, 400);
+    }
+    if (body.channel !== "slack" && body.channel !== "teams")
+      return c.json({ error: "channel must be 'slack' or 'teams'" }, 400);
+    const result = await sendTestNotification(body.channel);
+    return result.ok ? c.json({ ok: true }) : c.json({ error: result.error }, 502);
+  });
   app.patch("/admin/settings", async (c) => {
     if (!await serverAdminAllowed(c))
       return c.json({ error: "Only the server admin can change this." }, 403);
@@ -10473,6 +10596,12 @@ function createApp() {
         addError("slack_webhook_url", "Slack webhook must be an https:// URL (or leave it empty to turn Slack notifications off).");
       else pending.push({ name: "SLACK_WEBHOOK_URL", value: v || null });
     }
+    if ("msteams_webhook_url" in body) {
+      const v = String(body.msteams_webhook_url ?? "").trim();
+      if (v && !/^https:\/\//i.test(v))
+        addError("msteams_webhook_url", "Microsoft Teams webhook must be an https:// URL (or leave it empty to turn Teams notifications off).");
+      else pending.push({ name: "MSTEAMS_WEBHOOK_URL", value: v || null });
+    }
     if ("smtp_url" in body) {
       const v = String(body.smtp_url ?? "").trim();
       if (v && !/^smtps?:\/\//i.test(v))

package/dist/{review-service-Q3NDK5TX.js → review-service-6G7MVTY6.js}

@@ -5,17 +5,18 @@ import {
   getReviewHistory,
   getReviewQueue,
   reject,
+  repointPendingReview,
   submitForReview
-} from "./chunk-PAIP5KHB.js";
-import "./chunk-ZQS5W45U.js";
-import "./chunk-EG77SQHO.js";
+} from "./chunk-MZ4IR5KH.js";
+import "./chunk-IHGPZ6NY.js";
+import "./chunk-JP67WXLA.js";
 import {
   canUserApprove
-} from "./chunk-Q5NRCDD4.js";
+} from "./chunk-KPK656BH.js";
 import "./chunk-GUNJTORH.js";
 import "./chunk-FRQJWGN3.js";
 import "./chunk-XQ46F76G.js";
-import "./chunk-5QQ7WKAI.js";
+import "./chunk-I5KYGMIT.js";
 import "./chunk-SLTQACJW.js";
 export {
   approve,
@@ -25,5 +26,6 @@ export {
   getReviewHistory,
   getReviewQueue,
   reject,
+  repointPendingReview,
   submitForReview
 };

package/dist/{stewardship-service-B6L7UACX.js → stewardship-service-G7IF7ZNP.js}

@@ -21,11 +21,11 @@ import {
   syncFromConfig,
   updateSteward,
   updateStewardRole
-} from "./chunk-Q5NRCDD4.js";
+} from "./chunk-KPK656BH.js";
 import "./chunk-GUNJTORH.js";
 import "./chunk-FRQJWGN3.js";
 import "./chunk-XQ46F76G.js";
-import "./chunk-5QQ7WKAI.js";
+import "./chunk-I5KYGMIT.js";
 import "./chunk-SLTQACJW.js";
 export {
   assignSteward,

package/dist/{version-service-L52F4WVZ.js → version-service-FGL47APL.js}

@@ -12,9 +12,9 @@ import {
   setApprovedVersion,
   systemAuthor,
   upsertVersion
-} from "./chunk-EG77SQHO.js";
+} from "./chunk-JP67WXLA.js";
 import "./chunk-XQ46F76G.js";
-import "./chunk-5QQ7WKAI.js";
+import "./chunk-I5KYGMIT.js";
 import "./chunk-SLTQACJW.js";
 export {
   SYSTEM_AUTHOR_PREFIX,