@promptowl/contextnest-community 1.13.0 → 1.15.0

package/dist/{chunk-PAIP5KHB.js → chunk-C4U75IUR.js}

@@ -2,36 +2,42 @@ import {
   grantCoversNode,
   listUserGrants,
   resolveNodeGrant
-} from "./chunk-ZQS5W45U.js";
+} from "./chunk-5IAKUUZF.js";
 import {
   createVersion,
   getApprovedVersion,
+  getCurrentVersion,
   setApprovedVersion
-} from "./chunk-EG77SQHO.js";
+} from "./chunk-JWVZ3T35.js";
 import {
-  buildDocContext,
-  buildTitleMap,
   canUserAccess,
   canUserApprove,
+  resolveStewardsForNode
+} from "./chunk-GWDOLYFJ.js";
+import {
+  buildDocContext,
+  buildTitleMap,
   describeNode,
   engineCache,
+  insertOrReplace,
   isPublicReader,
   isStewardshipEnabled,
-  resolveStewardsForNode
-} from "./chunk-Q5NRCDD4.js";
+  nestName,
+  notifyEmailForNest,
+  nowExpr,
+  prettyFolderPath,
+  sendEmailToRecipient,
+  titleForNode
+} from "./chunk-7BOG3S5H.js";
 import {
   ConflictError,
   NotFoundError,
   ValidationError
 } from "./chunk-GUNJTORH.js";
-import {
-  insertOrReplace,
-  nowExpr
-} from "./chunk-XQ46F76G.js";
 import {
   config,
   getDb
-} from "./chunk-5QQ7WKAI.js";
+} from "./chunk-BCFKLY4H.js";
 
 // src/governance/review-service.ts
 import { v4 as uuid3 } from "uuid";
@@ -80,6 +86,7 @@ async function notifyReviewRequested(params) {
       [nestId, nodeId, nestId, nodeId]
     );
     const now = (/* @__PURE__ */ new Date()).toISOString();
+    const label = await describeNode(nestId, nodeId);
     let created = 0;
     for (const r of rows) {
       if (r.user_email.toLowerCase() === requestedBy.toLowerCase()) continue;
@@ -91,7 +98,7 @@ async function notifyReviewRequested(params) {
           nestId,
           r.user_email.toLowerCase(),
           reviewId,
-          r.via === nodeId ? `"${nodeId}" has a new version awaiting review (submitted by ${requestedBy})` : `Agent "${r.via}" produced output on "${nodeId}" \u2014 awaiting review`,
+          r.via === nodeId ? `"${label}" has a new version awaiting review (submitted by ${requestedBy})` : `Agent "${await describeNode(nestId, r.via)}" produced output on "${label}" \u2014 awaiting review`,
           now
         ]
       );
@@ -123,6 +130,7 @@ async function notifyReviewResolved(params) {
     recipients.add(requestedBy.toLowerCase());
     recipients.delete(resolvedBy.toLowerCase());
     const now = (/* @__PURE__ */ new Date()).toISOString();
+    const label = await describeNode(nestId, nodeId);
     let created = 0;
     for (const email of recipients) {
       await db.run(
@@ -134,7 +142,7 @@ async function notifyReviewResolved(params) {
           email,
           `review_${status}`,
           reviewId,
-          `"${nodeId}" was ${status} by ${resolvedBy}`,
+          `"${label}" was ${status} by ${resolvedBy}`,
           now
         ]
       );
@@ -146,6 +154,25 @@ async function notifyReviewResolved(params) {
     return 0;
   }
 }
+async function notifyNestInvite(params) {
+  const { nestId, inviteeEmail, permission, nestName: nestName2 } = params;
+  try {
+    await getDb().run(
+      `INSERT INTO notifications (id, nest_id, user_email, kind, subject_id, message, created_at)
+       VALUES (?, ?, ?, 'nest_invite', ?, ?, ?)`,
+      [
+        uuid(),
+        nestId,
+        inviteeEmail.toLowerCase(),
+        nestId,
+        `You were added to "${nestName2}" as ${permission}`,
+        (/* @__PURE__ */ new Date()).toISOString()
+      ]
+    );
+  } catch (err) {
+    console.error("[notify] invite inbox insert failed", nestId, inviteeEmail, err);
+  }
+}
 async function listNotifications(userEmail, opts = {}) {
   const limit = Math.min(opts.limit ?? 50, 200);
   return await getDb().all(
@@ -497,28 +524,169 @@ async function envValues(nestId) {
   return { ...base, ...Object.fromEntries(rows.map((r) => [r.key, r.value])) };
 }
 
-// src/notify/dispatch.ts
+// src/notify/webhook.ts
+async function resolveNestName(nestId) {
+  try {
+    const row = await getDb().get("SELECT name FROM nests WHERE id = ?", [
+      nestId
+    ]);
+    if (row?.name) return row.name;
+  } catch {
+  }
+  return nestId;
+}
+async function rawPost(url, body, timeoutMs) {
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), timeoutMs);
+  try {
+    return await fetch(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      signal: ctrl.signal
+    });
+  } finally {
+    clearTimeout(timer);
+  }
+}
+var warned = /* @__PURE__ */ new Set();
+async function postWebhook(url, body, who) {
+  try {
+    await rawPost(url, body, 3e3);
+  } catch (err) {
+    if (!warned.has(who)) {
+      warned.add(who);
+      console.warn(
+        `[notify] delivery failed for ${who} (muting further warnings):`,
+        err instanceof Error ? err.message : err
+      );
+    }
+  }
+}
+async function testWebhook(url, body) {
+  try {
+    const res = await rawPost(url, body, 5e3);
+    return res.ok ? { ok: true } : { ok: false, error: `Webhook responded ${res.status} ${res.statusText}.` };
+  } catch (err) {
+    return {
+      ok: false,
+      error: err instanceof Error ? err.message : "Request failed."
+    };
+  }
+}
+
+// src/notify/msteams.ts
+var EMOJI = {
+  ":memo:": "\u{1F4DD}",
+  ":white_check_mark:": "\u2705",
+  ":x:": "\u274C",
+  ":rotating_light:": "\u{1F6A8}",
+  ":key:": "\u{1F511}"
+  // collaborator added (sharing-service)
+};
+var BOLD_SPAN = /(^|\s)\*([^*\n]+)\*(?=\s|[.,;:!?)]|$)/g;
+function slackEmojiToUnicode(s) {
+  return s.replace(/:[a-z0-9_+-]+:/g, (m) => EMOJI[m] ?? m);
+}
+function escapeAdaptiveText(s) {
+  return s.replace(/\\/g, "\\\\").replace(/\[/g, "\\[").replace(/\]/g, "\\]");
+}
+function toAdaptiveText(s) {
+  return slackEmojiToUnicode(escapeAdaptiveText(s)).replace(BOLD_SPAN, "$1**$2**");
+}
+function toPlainText(s) {
+  return slackEmojiToUnicode(s).replace(BOLD_SPAN, "$1$2");
+}
+function msTeamsPayload(title, message) {
+  return {
+    type: "message",
+    attachments: [
+      {
+        contentType: "application/vnd.microsoft.card.adaptive",
+        contentUrl: null,
+        content: {
+          $schema: "http://adaptivecards.io/schemas/adaptive-card.json",
+          type: "AdaptiveCard",
+          version: "1.4",
+          msteams: { width: "Full" },
+          fallbackText: `[${toPlainText(title)}] ${toPlainText(message)}`,
+          body: [
+            {
+              // Same pipeline as the message: the nest name is user-
+              // controlled text too and must not carry link syntax.
+              type: "TextBlock",
+              text: toAdaptiveText(title),
+              weight: "Bolder",
+              size: "Medium",
+              wrap: true
+            },
+            {
+              type: "TextBlock",
+              text: toAdaptiveText(message),
+              wrap: true
+            }
+          ]
+        }
+      }
+    ]
+  };
+}
+async function notifyMsTeamsForNest(nestId, message) {
+  if (!config.MSTEAMS_WEBHOOK_URL) return;
+  const nestName2 = await resolveNestName(nestId);
+  return notifyMsTeams(nestName2, message);
+}
+async function notifyMsTeams(title, message) {
+  const url = config.MSTEAMS_WEBHOOK_URL;
+  if (!url) return;
+  await postWebhook(url, msTeamsPayload(title, message), "msteams");
+}
+
+// src/notify/slack.ts
+async function notifySlackForNest(nestId, message) {
+  if (!config.SLACK_WEBHOOK_URL) return;
+  const nestName2 = await resolveNestName(nestId);
+  return notifySlack(`*[${nestName2}]* ${message}`);
+}
 function escapeMrkdwn(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
+async function notifySlack(text) {
+  const url = config.SLACK_WEBHOOK_URL;
+  if (!url) return;
+  await postWebhook(url, { text: escapeMrkdwn(text) }, "slack");
+}
+
+// src/notify/dispatch.ts
 var EVENT_EMOJI = {
   review_requested: ":memo:",
   review_approved: ":white_check_mark:",
   review_rejected: ":x:",
-  run_failed: ":rotating_light:"
+  run_failed: ":rotating_light:",
+  deletion_requested: ":wastebasket:",
+  deletion_deleted: ":wastebasket:",
+  deletion_declined: ":no_entry_sign:"
 };
-function formatBody(channel, nestName, ev) {
-  const line = `[${nestName}] ${ev.message}`;
+var DIGEST_DELIVERED_KINDS = /* @__PURE__ */ new Set([
+  "review_requested",
+  "review_approved",
+  "review_rejected",
+  "deletion_requested",
+  "deletion_deleted",
+  "deletion_declined"
+]);
+function formatBody(channel, nestName2, ev) {
+  const line = `[${nestName2}] ${ev.message}`;
   if (channel === "slack") {
-    return { text: escapeMrkdwn(`${EVENT_EMOJI[ev.kind] ?? ""} *[${nestName}]* ${ev.message}`) };
+    return { text: escapeMrkdwn(`${EVENT_EMOJI[ev.kind] ?? ""} *[${nestName2}]* ${ev.message}`) };
   }
   if (channel === "teams") {
-    return { text: line };
+    return msTeamsPayload(nestName2, `${EVENT_EMOJI[ev.kind] ?? ""} ${ev.message}`.trim());
   }
   return {
     kind: ev.kind,
     nest_id: ev.nestId,
-    nest_name: nestName,
+    nest_name: nestName2,
     message: ev.message,
     subject_id: ev.subjectId ?? null,
     actor: ev.actor ?? null,
@@ -557,46 +725,23 @@ async function resolveUrl(nestId, raw) {
   }
   return isSafeConnectorUrl(raw) ? raw : null;
 }
-var warned = /* @__PURE__ */ new Set();
-async function post(url, body, who) {
-  try {
-    const ctrl = new AbortController();
-    const timer = setTimeout(() => ctrl.abort(), 3e3);
-    try {
-      await fetch(url, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify(body),
-        signal: ctrl.signal
-      });
-    } finally {
-      clearTimeout(timer);
-    }
-  } catch (err) {
-    if (!warned.has(who)) {
-      warned.add(who);
-      console.warn(
-        `[connectors] delivery failed for ${who} (muting further warnings):`,
-        err instanceof Error ? err.message : err
-      );
-    }
-  }
-}
 async function dispatchEvent(ev) {
   const db = getDb();
-  let nestName = ev.nestId;
-  try {
-    const row = await db.get("SELECT name FROM nests WHERE id = ?", [ev.nestId]);
-    if (row?.name) nestName = row.name;
-  } catch {
-  }
-  if (config.SLACK_WEBHOOK_URL) {
-    void post(
+  const nestName2 = await resolveNestName(ev.nestId);
+  if (config.SLACK_WEBHOOK_URL && !DIGEST_DELIVERED_KINDS.has(ev.kind)) {
+    void postWebhook(
       config.SLACK_WEBHOOK_URL,
-      formatBody("slack", nestName, ev),
+      formatBody("slack", nestName2, ev),
       "server-slack"
     );
   }
+  if (config.MSTEAMS_WEBHOOK_URL && !DIGEST_DELIVERED_KINDS.has(ev.kind)) {
+    void postWebhook(
+      config.MSTEAMS_WEBHOOK_URL,
+      formatBody("teams", nestName2, ev),
+      "server-msteams"
+    );
+  }
   let rows = [];
   try {
     rows = await db.all(
@@ -615,308 +760,20 @@ async function dispatchEvent(ev) {
     if (!kinds.includes("*") && !kinds.includes(ev.kind)) continue;
     const url = await resolveUrl(ev.nestId, r.url);
     if (!url) continue;
-    void post(url, formatBody(r.channel, nestName, ev), `connector:${r.id}`);
-  }
-}
-
-// src/notify/slack.ts
-var warnedOnce = false;
-async function notifySlackForNest(nestId, message) {
-  if (!config.SLACK_WEBHOOK_URL) return;
-  let nestName = nestId;
-  try {
-    const row = await getDb().get("SELECT name FROM nests WHERE id = ?", [
-      nestId
-    ]);
-    if (row?.name) nestName = row.name;
-  } catch {
-  }
-  return notifySlack(`*[${nestName}]* ${message}`);
-}
-function escapeMrkdwn2(s) {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
-async function notifySlack(text) {
-  const url = config.SLACK_WEBHOOK_URL;
-  if (!url) return;
-  try {
-    const ctrl = new AbortController();
-    const timer = setTimeout(() => ctrl.abort(), 3e3);
-    try {
-      await fetch(url, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ text: escapeMrkdwn2(text) }),
-        signal: ctrl.signal
-      });
-    } finally {
-      clearTimeout(timer);
-    }
-  } catch (err) {
-    if (!warnedOnce) {
-      warnedOnce = true;
-      console.warn(
-        "[slack] notification failed (suppressing further warnings):",
-        err instanceof Error ? err.message : err
-      );
-    }
-  }
-}
-
-// src/notify/email-render.ts
-function escapeHtml(s) {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-}
-var EVENT = {
-  ":white_check_mark:": { icon: "\u2705", color: "#16a34a" },
-  ":x:": { icon: "\u274C", color: "#dc2626" },
-  ":memo:": { icon: "\u{1F4DD}", color: "#d97706" },
-  ":key:": { icon: "\u{1F511}", color: "#2563eb" }
-};
-var ALL_EMOJI = Object.fromEntries(
-  Object.entries(EVENT).map(([code, m]) => [code, m.icon])
-);
-function renderText(message) {
-  return message.replace(/:[a-z_]+:/g, (m) => ALL_EMOJI[m] ?? "").replace(/\*/g, "").replace(/[ \t]{2,}/g, " ").trim();
-}
-var STATUS_META = {
-  approved: { subjectWord: "approved", label: "Approved", color: "#16a34a" },
-  rejected: { subjectWord: "rejected", label: "Rejected", color: "#dc2626" },
-  pending_review: {
-    subjectWord: "awaiting review",
-    label: "Pending review",
-    color: "#d97706"
-  },
-  shared: { subjectWord: "shared with you", label: "Shared", color: "#2563eb" }
-};
-function renderEmail(d) {
-  const meta = STATUS_META[d.status];
-  const title = d.docTitle.replace(/[\r\n]+/g, " ").trim();
-  const heading = d.status === "shared" ? `New collaborator on ${title}` : `${title} is ${meta.subjectWord}`;
-  const subject = heading.replace(/[\r\n]+/g, " ").trim();
-  const vLabel = d.version != null ? `v${d.version}` : "";
-  const detailsHeader = d.status === "shared" ? "Details" : "Document details";
-  const linkLabel = d.status === "shared" ? "Open nest" : "Open document";
-  const byT = d.actor ? ` by ${d.actor}` : "";
-  const noteT = d.note ? ` with the note: "${d.note}"` : "";
-  const vT = vLabel ? ` ${vLabel}` : "";
-  let lineT;
-  switch (d.status) {
-    case "approved":
-      lineT = `${title}${vT} has been approved${byT}${noteT}.`;
-      break;
-    case "rejected":
-      lineT = `${title}${vT} has been rejected${byT}${noteT}.`;
-      break;
-    case "pending_review":
-      lineT = `A review has been requested for ${title}${vT}${byT}${noteT}.`;
-      break;
-    case "shared":
-      lineT = `${d.actor || "A user"} was added to ${title} as ${d.permission || "a collaborator"}${d.by ? ` by ${d.by}` : ""}.`;
-      break;
-  }
-  const text = [
-    "Hi,",
-    "",
-    lineT,
-    "",
-    "Document details:",
-    `  Path: ${d.path}`,
-    `  Status: ${meta.label}`,
-    ...d.version != null ? [`  Version: v${d.version}`] : [],
-    ...d.link ? [`  Open: ${d.link}`] : [],
-    "",
-    "Regards,",
-    "ContextNest"
-  ].join("\n");
-  const doc = `<strong>${escapeHtml(title)}</strong>`;
-  const byH = d.actor ? ` by ${escapeHtml(d.actor)}` : "";
-  const noteH = d.note ? ` with the note: &ldquo;${escapeHtml(d.note)}&rdquo;` : "";
-  const vH = vLabel ? ` ${vLabel}` : "";
-  let lineH;
-  switch (d.status) {
-    case "approved":
-      lineH = `${doc}${vH} has been approved${byH}${noteH}.`;
-      break;
-    case "rejected":
-      lineH = `${doc}${vH} has been rejected${byH}${noteH}.`;
-      break;
-    case "pending_review":
-      lineH = `A review has been requested for ${doc}${vH}${byH}${noteH}.`;
-      break;
-    case "shared":
-      lineH = `${escapeHtml(d.actor || "A user")} was added to ${doc} as <strong>${escapeHtml(d.permission || "a collaborator")}</strong>${d.by ? ` by ${escapeHtml(d.by)}` : ""}.`;
-      break;
-  }
-  const detailRow = (label, valueHtml) => `<tr>
-      <td style="padding:5px 0;font-size:13px;color:#6b7280;width:90px;vertical-align:top;">${label}</td>
-      <td style="padding:5px 0;font-size:13px;color:#111827;vertical-align:top;">${valueHtml}</td>
-    </tr>`;
-  const detailRows = detailRow("Path", escapeHtml(d.path)) + detailRow(
-    "Status",
-    `<span style="display:inline-block;padding:2px 9px;border-radius:9999px;background:#f3f4f6;color:${meta.color};font-size:12px;font-weight:600;">${meta.label}</span>`
-  ) + (d.version != null ? detailRow("Version", `v${d.version}`) : "");
-  const buttonRow = d.link ? `<tr><td style="padding:20px 24px 0;">
-        <table role="presentation" cellpadding="0" cellspacing="0" border="0"><tr>
-          <td bgcolor="${meta.color}" style="border-radius:6px;">
-            <a href="${escapeHtml(d.link)}" target="_blank" style="display:inline-block;padding:10px 20px;font-size:14px;font-weight:600;color:#ffffff;text-decoration:none;">${linkLabel}</a>
-          </td>
-        </tr></table>
-      </td></tr>` : "";
-  const html = `<div style="margin:0;padding:24px;background:#f6f8fa;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;color:#111827;">
-  <table role="presentation" width="480" cellpadding="0" cellspacing="0" border="0" align="center" style="width:100%;max-width:480px;margin:0 auto;background:#ffffff;border:1px solid #e5e7eb;border-radius:12px;">
-    <tr><td style="padding:20px 24px 0;">
-      <div style="font-size:12px;font-weight:700;color:#6b7280;letter-spacing:0.06em;text-transform:uppercase;">ContextNest</div>
-    </td></tr>
-    <tr><td style="padding:10px 24px 0;">
-      <h1 style="margin:0;font-size:19px;line-height:1.35;font-weight:700;color:#111827;">${escapeHtml(heading)}</h1>
-    </td></tr>
-    <tr><td style="padding:16px 24px 0;font-size:14px;line-height:1.6;color:#374151;">
-      Hi,<br><br>${lineH}
-    </td></tr>
-    <tr><td style="padding:20px 24px 0;">
-      <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" style="border:1px solid #eef0f2;border-radius:8px;">
-        <tr><td style="padding:12px 16px;">
-          <div style="font-size:11px;font-weight:600;color:#9ca3af;letter-spacing:0.04em;text-transform:uppercase;padding-bottom:4px;">${detailsHeader}</div>
-          <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0">${detailRows}</table>
-        </td></tr>
-      </table>
-    </td></tr>
-    ${buttonRow}
-    <tr><td style="padding:22px 24px 24px;font-size:14px;line-height:1.6;color:#374151;">
-      Regards,<br>ContextNest
-    </td></tr>
-    <tr><td style="padding:14px 24px;border-top:1px solid #f0f0f0;font-size:11px;line-height:1.5;color:#9ca3af;">
-      Automated governance notification from ContextNest. You received this because email notifications are enabled on this server.
-    </td></tr>
-  </table>
-</div>`;
-  return { subject, text, html };
-}
-function renderHtml(message, nestName) {
-  const lead = message.match(/^(:[a-z_]+:)\s*/);
-  const meta = lead && EVENT[lead[1]] || { icon: "\u{1F514}", color: "#475569" };
-  const rest = lead ? message.slice(lead[0].length) : message;
-  const body = escapeHtml(rest).replace(/\*([^*]+)\*/g, "<strong>$1</strong>").replace(/\n/g, "<br>");
-  const safeNest = escapeHtml(nestName);
-  return `<div style="background:#f6f8fa;padding:24px;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;">
-  <table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="max-width:480px;margin:0 auto;background:#ffffff;border:1px solid #e5e7eb;border-radius:12px;overflow:hidden;">
-    <tr><td style="padding:20px 24px 16px;border-bottom:1px solid #f0f0f0;">
-      <div style="font-size:15px;font-weight:700;color:#111827;letter-spacing:-0.01em;">ContextNest</div>
-      <div style="font-size:13px;color:#6b7280;margin-top:2px;">${safeNest}</div>
-    </td></tr>
-    <tr><td style="padding:24px;">
-      <table role="presentation" cellpadding="0" cellspacing="0"><tr>
-        <td valign="top" style="font-size:22px;line-height:1;padding-right:14px;">${meta.icon}</td>
-        <td valign="top" style="font-size:15px;line-height:1.55;color:#111827;border-left:3px solid ${meta.color};padding-left:14px;">${body}</td>
-      </tr></table>
-    </td></tr>
-    <tr><td style="padding:14px 24px;border-top:1px solid #f0f0f0;font-size:11px;line-height:1.5;color:#9ca3af;">
-      Automated governance notification from ContextNest. You received this because email notifications are enabled on this server.
-    </td></tr>
-  </table>
-</div>`;
-}
-
-// src/notify/email.ts
-var transporterPromise = null;
-var configuredUrl = null;
-var warnedOnce2 = false;
-var SMTP_TIMEOUT_DEFAULTS = [
-  ["connectionTimeout", 5e3],
-  ["greetingTimeout", 5e3],
-  ["socketTimeout", 1e4]
-];
-function withTimeouts(url) {
-  const query = url.includes("?") ? url.slice(url.indexOf("?") + 1) : "";
-  const missing = SMTP_TIMEOUT_DEFAULTS.filter(
-    ([name]) => !new RegExp(`(^|&)${name}=`, "i").test(query)
-  ).map(([name, ms]) => `${name}=${ms}`);
-  if (missing.length === 0) return url;
-  return url + (url.includes("?") ? "&" : "?") + missing.join("&");
-}
-async function verifySmtp(url) {
-  let transporter = null;
-  try {
-    const nodemailer = await import("nodemailer");
-    transporter = nodemailer.default.createTransport(withTimeouts(url), {
-      disableFileAccess: true,
-      disableUrlAccess: true
-    });
-    await transporter.verify();
-    return { ok: true };
-  } catch (err) {
-    return { ok: false, error: err instanceof Error ? err.message : String(err) };
-  } finally {
-    try {
-      transporter?.close?.();
-    } catch {
-    }
+    void postWebhook(url, formatBody(r.channel, nestName2, ev), `connector:${r.id}`);
   }
 }
-async function getTransporter() {
-  const url = config.SMTP_URL;
-  if (!url) return null;
-  if (!transporterPromise || configuredUrl !== url) {
-    configuredUrl = url;
-    transporterPromise = import("nodemailer").then(
-      (nodemailer) => nodemailer.default.createTransport(withTimeouts(url), {
-        // Per-message defaults (belt-and-braces; also set on each sendMail).
-        disableFileAccess: true,
-        disableUrlAccess: true
-      })
-    );
-    transporterPromise.catch(() => {
-      transporterPromise = null;
-      configuredUrl = null;
-    });
-  }
-  return transporterPromise;
-}
-async function notifyEmailForNest(nestId, message, details) {
-  const from = config.NOTIFY_EMAIL_FROM;
-  const to = config.NOTIFY_EMAIL_TO;
-  if (!config.SMTP_URL || !from || !to) return;
-  try {
-    const transporter = await getTransporter();
-    if (!transporter) return;
-    let subject;
-    let text;
-    let html;
-    if (details) {
-      ({ subject, text, html } = renderEmail(details));
-    } else {
-      let name = nestId;
-      try {
-        const row = await getDb().get("SELECT name FROM nests WHERE id = ?", [
-          nestId
-        ]);
-        if (row?.name) name = row.name;
-      } catch {
-      }
-      const safeName = name.replace(/[\r\n]+/g, " ").trim();
-      subject = `ContextNest \xB7 ${safeName}`;
-      text = renderText(message);
-      html = renderHtml(message, safeName);
-    }
-    await transporter.sendMail({
-      from,
-      to,
-      subject,
-      text,
-      html,
-      disableFileAccess: true,
-      disableUrlAccess: true
-    });
-  } catch (err) {
-    if (!warnedOnce2) {
-      warnedOnce2 = true;
-      console.warn(
-        "[email] notification failed (suppressing further warnings):",
-        err instanceof Error ? err.message : err
-      );
-    }
-  }
+async function sendTestNotification(channel) {
+  const url = channel === "slack" ? config.SLACK_WEBHOOK_URL : config.MSTEAMS_WEBHOOK_URL;
+  const label = channel === "slack" ? "Slack" : "Microsoft Teams";
+  if (!url)
+    return { ok: false, error: `Save a ${label} webhook URL first, then test.` };
+  const ev = {
+    kind: "test",
+    nestId: "",
+    message: "Test notification from ContextNest \u2014 your connector is working."
+  };
+  return testWebhook(url, formatBody(channel, "ContextNest", ev));
 }
 
 // src/notify/notify.ts
@@ -935,22 +792,46 @@ async function flush(nestId) {
   if (!buf) return;
   buffers.delete(nestId);
   const text = buildText(buf.events.map((e) => e.line));
-  const details = buf.events.length === 1 ? buf.events[0].details : void 0;
+  const emailEvents = buf.events.filter((e) => !e.skipEmail);
+  const emailText = buildText(emailEvents.map((e) => e.line));
+  const emailDetails = emailEvents.length === 1 ? emailEvents[0].details : void 0;
   await Promise.allSettled([
     notifySlackForNest(nestId, text),
-    notifyEmailForNest(nestId, text, details)
+    notifyMsTeamsForNest(nestId, text),
+    emailEvents.length > 0 ? notifyEmailForNest(nestId, emailText, emailDetails) : Promise.resolve()
   ]);
 }
-async function notifyNestEvent(nestId, message, details) {
-  if (!config.SLACK_WEBHOOK_URL && !config.SMTP_URL) return;
+async function notifyNestEvent(nestId, message, details, opts) {
+  if (!config.SLACK_WEBHOOK_URL && !config.MSTEAMS_WEBHOOK_URL && !config.SMTP_URL)
+    return;
   const buf = buffers.get(nestId);
   if (buf) {
-    buf.events.push({ line: message, details });
+    buf.events.push({ line: message, details, skipEmail: opts?.skipEmail });
     return;
   }
   const timer = setTimeout(() => void flush(nestId), config.NOTIFY_DEBOUNCE_MS);
   timer.unref?.();
-  buffers.set(nestId, { events: [{ line: message, details }], timer });
+  buffers.set(nestId, {
+    events: [{ line: message, details, skipEmail: opts?.skipEmail }],
+    timer
+  });
+}
+
+// src/shared/node-write-lock.ts
+var nodeWriteChains = /* @__PURE__ */ new Map();
+function nodeWriteKey(nestId, nodeId) {
+  return `${nestId}::${nodeId}`;
+}
+function withNodeWriteLock(key, fn) {
+  const prev = (nodeWriteChains.get(key) ?? Promise.resolve()).catch(() => {
+  });
+  const run = prev.then(fn);
+  nodeWriteChains.set(key, run);
+  void run.catch(() => {
+  }).finally(() => {
+    if (nodeWriteChains.get(key) === run) nodeWriteChains.delete(key);
+  });
+  return run;
 }
 
 // src/governance/safe-publish.ts
@@ -965,6 +846,12 @@ async function safePublishDocument(storage, docId, options) {
   await storage.writeDocument(docId, serializeDocument(cleanedNode));
   return publishDocument(storage, docId, options);
 }
+function serializeNodeSafe(node) {
+  return serializeDocument({
+    ...node,
+    frontmatter: stripUndefinedDeep(node.frontmatter)
+  });
+}
 function stripUndefinedDeep(value) {
   if (Array.isArray(value)) {
     return value.filter((v) => v !== void 0).map((v) => stripUndefinedDeep(v));
@@ -1036,187 +923,270 @@ async function submitForReview(params) {
     requestedBy: params.requestedBy,
     reviewId: id
   });
+  try {
+    const stewards = await resolveStewardsForNode(params.nestId, params.nodeId);
+    const reviewers = [
+      ...new Set(
+        stewards.filter((s) => s.steward.role === "reviewer").map((s) => s.steward.userEmail.toLowerCase())
+      )
+    ].filter((email) => email !== params.requestedBy.toLowerCase());
+    if (reviewers.length > 0) {
+      void sendEmailToRecipient(reviewers, {
+        status: "pending_review",
+        docTitle: reviewCtx.docTitle,
+        path: reviewCtx.path,
+        link: reviewCtx.link,
+        actor: params.requestedBy,
+        version: params.version,
+        note: params.note || null
+      });
+    }
+  } catch (err) {
+    console.error(
+      "[notify] reviewer email fan-out failed",
+      params.nestId,
+      params.nodeId,
+      err
+    );
+  }
   return await getReviewRequest(id);
 }
-async function approve(params) {
+async function repointPendingReview(params) {
   const db = getDb();
   const pending = await db.get(
-    "SELECT * FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' ORDER BY requested_at DESC LIMIT 1",
+    "SELECT id, version FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' ORDER BY requested_at DESC LIMIT 1",
     [params.nestId, params.nodeId]
   );
-  if (!pending) {
-    throw new Error("No pending review for this node");
-  }
-  if (!params.override) {
-    const check = await canUserApprove(
-      params.nestId,
-      params.nodeId,
-      params.approvedBy
+  if (!pending || pending.version === params.newVersion) return;
+  await db.transaction(async (tx) => {
+    await tx.run("UPDATE review_requests SET version = ? WHERE id = ?", [
+      params.newVersion,
+      pending.id
+    ]);
+    await tx.run(
+      "UPDATE node_versions SET status = 'draft' WHERE nest_id = ? AND node_id = ? AND version = ?",
+      [params.nestId, params.nodeId, pending.version]
     );
-    if (!check.allowed) {
-      throw new Error(check.reason);
+    await tx.run(
+      "UPDATE node_versions SET status = 'pending_review' WHERE nest_id = ? AND node_id = ? AND version = ?",
+      [params.nestId, params.nodeId, params.newVersion]
+    );
+  });
+}
+async function approve(params) {
+  return withNodeWriteLock(nodeWriteKey(params.nestId, params.nodeId), async () => {
+    const db = getDb();
+    const version = await getCurrentVersion(params.nestId, params.nodeId);
+    const pending = await db.get(
+      "SELECT * FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' ORDER BY requested_at DESC LIMIT 1",
+      [params.nestId, params.nodeId]
+    );
+    if (!pending) {
+      throw new Error("No pending review for this node");
     }
-  }
-  await db.run(
-    `UPDATE review_requests
+    if (!params.override) {
+      const check = await canUserApprove(
+        params.nestId,
+        params.nodeId,
+        params.approvedBy
+      );
+      if (!check.allowed) {
+        throw new Error(check.reason);
+      }
+    }
+    await db.run(
+      `UPDATE review_requests
      SET status = 'approved', resolved_by = ?, resolved_at = ${nowExpr(db)},
          resolution_note = ?, is_override = ?
      WHERE id = ?`,
-    [params.approvedBy, params.note || null, params.override ? 1 : 0, pending.id]
-  );
-  void dispatchEvent({
-    kind: "review_approved",
-    nestId: params.nestId,
-    subjectId: params.nodeId,
-    actor: params.approvedBy,
-    message: `*${await describeNode(params.nestId, params.nodeId)}* v${params.version} approved by ${params.approvedBy}`
-  });
-  await notifyReviewResolved({
-    nestId: params.nestId,
-    nodeId: params.nodeId,
-    status: "approved",
-    resolvedBy: params.approvedBy,
-    requestedBy: pending.requested_by,
-    reviewId: pending.id
-  });
-  await db.run(
-    "UPDATE node_versions SET status = 'published' WHERE nest_id = ? AND node_id = ? AND version = ?",
-    [params.nestId, params.nodeId, params.version]
-  );
-  await db.run(
-    insertOrReplace(
-      db,
-      `INSERT INTO approved_versions (nest_id, node_id, approved_version, approved_by)
-       VALUES (?, ?, ?, ?)`,
-      ["nest_id", "node_id"],
-      `approved_version = excluded.approved_version, approved_by = excluded.approved_by, approved_at = ${nowExpr(db)}`
-    ),
-    [params.nestId, params.nodeId, params.version, params.approvedBy]
-  );
-  try {
-    const { storage } = await engineCache.get(params.nestId);
-    const result = await safePublishDocument(storage, params.nodeId, {
-      editedBy: params.approvedBy,
-      note: params.note || `Approved review request ${pending.id}`
+      [params.approvedBy, params.note || null, params.override ? 1 : 0, pending.id]
+    );
+    void dispatchEvent({
+      kind: "review_approved",
+      nestId: params.nestId,
+      subjectId: params.nodeId,
+      actor: params.approvedBy,
+      message: `*${await describeNode(params.nestId, params.nodeId)}* v${version} approved by ${params.approvedBy}`
+    });
+    await notifyReviewResolved({
+      nestId: params.nestId,
+      nodeId: params.nodeId,
+      status: "approved",
+      resolvedBy: params.approvedBy,
+      requestedBy: pending.requested_by,
+      reviewId: pending.id
     });
-    const engineVersion = result.versionEntry.version;
-    if (engineVersion !== params.version) {
-      const node = result.node;
-      const tags = node.frontmatter.tags || [];
-      await createVersion({
-        nestId: params.nestId,
-        nodeId: params.nodeId,
-        version: engineVersion,
-        content: node.body || "",
-        author: params.approvedBy,
-        status: "published",
-        tags,
-        changeNote: params.note || `Approved review request ${pending.id}`
+    await db.run(
+      "UPDATE node_versions SET status = 'published' WHERE nest_id = ? AND node_id = ? AND version = ?",
+      [params.nestId, params.nodeId, version]
+    );
+    await db.run(
+      insertOrReplace(
+        db,
+        `INSERT INTO approved_versions (nest_id, node_id, approved_version, approved_by)
+       VALUES (?, ?, ?, ?)`,
+        ["nest_id", "node_id"],
+        `approved_version = excluded.approved_version, approved_by = excluded.approved_by, approved_at = ${nowExpr(db)}`
+      ),
+      [params.nestId, params.nodeId, version, params.approvedBy]
+    );
+    try {
+      const { storage } = await engineCache.get(params.nestId);
+      const result = await safePublishDocument(storage, params.nodeId, {
+        editedBy: params.approvedBy,
+        note: params.note || `Approved review request ${pending.id}`
       });
-      await setApprovedVersion(
-        params.nestId,
-        params.nodeId,
-        engineVersion,
-        params.approvedBy
+      const engineVersion = result.versionEntry.version;
+      if (engineVersion !== version) {
+        const node = result.node;
+        const tags = node.frontmatter.tags || [];
+        await createVersion({
+          nestId: params.nestId,
+          nodeId: params.nodeId,
+          version: engineVersion,
+          content: node.body || "",
+          author: params.approvedBy,
+          status: "published",
+          tags,
+          changeNote: params.note || `Approved review request ${pending.id}`
+        });
+        await setApprovedVersion(
+          params.nestId,
+          params.nodeId,
+          engineVersion,
+          params.approvedBy
+        );
+      }
+    } catch (err) {
+      console.error(
+        `publishDocument failed for ${params.nestId}/${params.nodeId} on approve:`,
+        err
       );
     }
-  } catch (err) {
-    console.error(
-      `publishDocument failed for ${params.nestId}/${params.nodeId} on approve:`,
-      err
+    const approveCtx = await buildDocContext(params.nestId, params.nodeId, params.baseUrl);
+    void notifyNestEvent(
+      params.nestId,
+      `:white_check_mark: *${approveCtx.label}* v${version} approved by ${params.approvedBy}`,
+      {
+        status: "approved",
+        docTitle: approveCtx.docTitle,
+        path: approveCtx.path,
+        link: approveCtx.link,
+        actor: params.approvedBy,
+        version
+      },
+      // The verdict emails the submitter directly (below), not the shared
+      // NOTIFY_EMAIL_TO team inbox — skip the team-channel email; Slack/Teams fire.
+      { skipEmail: true }
     );
-  }
-  const approveCtx = await buildDocContext(params.nestId, params.nodeId, params.baseUrl);
-  void notifyNestEvent(
-    params.nestId,
-    `:white_check_mark: *${approveCtx.label}* v${params.version} approved by ${params.approvedBy}`,
-    {
-      status: "approved",
-      docTitle: approveCtx.docTitle,
-      path: approveCtx.path,
-      link: approveCtx.link,
-      actor: params.approvedBy,
-      version: params.version
+    if (pending.requested_by?.toLowerCase() !== params.approvedBy.toLowerCase()) {
+      void sendEmailToRecipient(pending.requested_by, {
+        status: "approved",
+        docTitle: approveCtx.docTitle,
+        path: approveCtx.path,
+        link: approveCtx.link,
+        actor: params.approvedBy,
+        version,
+        note: params.note || null
+      });
     }
-  );
-  return await getReviewRequest(pending.id);
+    return await getReviewRequest(pending.id);
+  });
 }
 async function reject(params) {
-  const db = getDb();
-  const pending = await db.get(
-    "SELECT * FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' ORDER BY requested_at DESC LIMIT 1",
-    [params.nestId, params.nodeId]
-  );
-  if (!pending) {
-    throw new Error("No pending review for this node");
-  }
-  const check = await canUserApprove(
-    params.nestId,
-    params.nodeId,
-    params.rejectedBy
-  );
-  if (!check.allowed) {
-    throw new Error(check.reason);
-  }
-  await db.run(
-    `UPDATE review_requests
+  return withNodeWriteLock(nodeWriteKey(params.nestId, params.nodeId), async () => {
+    const db = getDb();
+    const version = await getCurrentVersion(params.nestId, params.nodeId);
+    const pending = await db.get(
+      "SELECT * FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' ORDER BY requested_at DESC LIMIT 1",
+      [params.nestId, params.nodeId]
+    );
+    if (!pending) {
+      throw new Error("No pending review for this node");
+    }
+    const check = await canUserApprove(
+      params.nestId,
+      params.nodeId,
+      params.rejectedBy
+    );
+    if (!check.allowed) {
+      throw new Error(check.reason);
+    }
+    await db.run(
+      `UPDATE review_requests
      SET status = 'rejected', resolved_by = ?, resolved_at = ${nowExpr(db)}, resolution_note = ?
      WHERE id = ?`,
-    [params.rejectedBy, params.note, pending.id]
-  );
-  await db.run(
-    "UPDATE node_versions SET status = 'rejected' WHERE nest_id = ? AND node_id = ? AND version = ?",
-    [params.nestId, params.nodeId, params.version]
-  );
-  const rejectCtx = await buildDocContext(params.nestId, params.nodeId, params.baseUrl);
-  void dispatchEvent({
-    kind: "review_rejected",
-    nestId: params.nestId,
-    subjectId: params.nodeId,
-    actor: params.rejectedBy,
-    message: `*${rejectCtx.label}* v${params.version} rejected by ${params.rejectedBy}${params.note ? ` \u2014 "${params.note}"` : ""}`
-  });
-  void notifyNestEvent(
-    params.nestId,
-    `:x: *${rejectCtx.label}* v${params.version} rejected by ${params.rejectedBy} \u2014 "${params.note}"`,
-    {
-      status: "rejected",
-      docTitle: rejectCtx.docTitle,
-      path: rejectCtx.path,
-      link: rejectCtx.link,
+      [params.rejectedBy, params.note, pending.id]
+    );
+    await db.run(
+      "UPDATE node_versions SET status = 'rejected' WHERE nest_id = ? AND node_id = ? AND version = ?",
+      [params.nestId, params.nodeId, version]
+    );
+    const rejectCtx = await buildDocContext(params.nestId, params.nodeId, params.baseUrl);
+    void dispatchEvent({
+      kind: "review_rejected",
+      nestId: params.nestId,
+      subjectId: params.nodeId,
       actor: params.rejectedBy,
-      version: params.version,
-      note: params.note || null
+      message: `*${rejectCtx.label}* v${version} rejected by ${params.rejectedBy}${params.note ? ` \u2014 "${params.note}"` : ""}`
+    });
+    void notifyNestEvent(
+      params.nestId,
+      `:x: *${rejectCtx.label}* v${version} rejected by ${params.rejectedBy} \u2014 "${params.note}"`,
+      {
+        status: "rejected",
+        docTitle: rejectCtx.docTitle,
+        path: rejectCtx.path,
+        link: rejectCtx.link,
+        actor: params.rejectedBy,
+        version,
+        note: params.note || null
+      },
+      // Verdict emails the submitter directly (below), not the team inbox.
+      { skipEmail: true }
+    );
+    if (pending.requested_by?.toLowerCase() !== params.rejectedBy.toLowerCase()) {
+      void sendEmailToRecipient(pending.requested_by, {
+        status: "rejected",
+        docTitle: rejectCtx.docTitle,
+        path: rejectCtx.path,
+        link: rejectCtx.link,
+        actor: params.rejectedBy,
+        version,
+        note: params.note || null
+      });
     }
-  );
-  await notifyReviewResolved({
-    nestId: params.nestId,
-    nodeId: params.nodeId,
-    status: "rejected",
-    resolvedBy: params.rejectedBy,
-    requestedBy: pending.requested_by,
-    reviewId: pending.id
+    await notifyReviewResolved({
+      nestId: params.nestId,
+      nodeId: params.nodeId,
+      status: "rejected",
+      resolvedBy: params.rejectedBy,
+      requestedBy: pending.requested_by,
+      reviewId: pending.id
+    });
+    return await getReviewRequest(pending.id);
   });
-  return await getReviewRequest(pending.id);
 }
 async function cancelReview(params) {
-  const db = getDb();
-  const pending = await db.get(
-    "SELECT * FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' ORDER BY requested_at DESC LIMIT 1",
-    [params.nestId, params.nodeId]
-  );
-  if (!pending) return null;
-  await db.run(
-    `UPDATE review_requests
+  return withNodeWriteLock(nodeWriteKey(params.nestId, params.nodeId), async () => {
+    const db = getDb();
+    const pending = await db.get(
+      "SELECT * FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' ORDER BY requested_at DESC LIMIT 1",
+      [params.nestId, params.nodeId]
+    );
+    if (!pending) return null;
+    await db.run(
+      `UPDATE review_requests
      SET status = 'cancelled', resolved_by = ?, resolved_at = ${nowExpr(db)}
      WHERE id = ?`,
-    [params.cancelledBy, pending.id]
-  );
-  await db.run(
-    "UPDATE node_versions SET status = 'draft' WHERE nest_id = ? AND node_id = ? AND version = ?",
-    [params.nestId, params.nodeId, pending.version]
-  );
-  return await getReviewRequest(pending.id);
+      [params.cancelledBy, pending.id]
+    );
+    await db.run(
+      "UPDATE node_versions SET status = 'draft' WHERE nest_id = ? AND node_id = ? AND version = ?",
+      [params.nestId, params.nodeId, pending.version]
+    );
+    return await getReviewRequest(pending.id);
+  });
 }
 async function getReviewQueue(params) {
   const db = getDb();
@@ -1295,6 +1265,297 @@ async function getPendingReview(nestId, nodeId) {
   );
   return row ? rowToReviewRequest(row) : null;
 }
+async function deletionTargetTitle(request, titles) {
+  if (request.targetType === "folder") return prettyFolderPath(request.nodeId);
+  if (request.targetType === "nest") return await nestName(request.nestId);
+  return titles?.get(request.nodeId) ?? await titleForNode(request.nestId, request.nodeId);
+}
+async function nestAdminEmails(nestId) {
+  const db = getDb();
+  const rows = await db.all(
+    `SELECT u.email FROM nests n JOIN users u ON u.id = n.user_id WHERE n.id = ?
+     UNION
+     SELECT u.email FROM nest_collaborators nc JOIN users u ON u.id = nc.user_id
+      WHERE nc.nest_id = ? AND nc.permission IN ('owner', 'admin')`,
+    [nestId, nestId]
+  );
+  return [...new Set(rows.map((r) => r.email.toLowerCase()))];
+}
+async function inboxInsert(nestId, recipients, kind, subjectId, message) {
+  const db = getDb();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  for (const email of recipients) {
+    try {
+      await db.run(
+        `INSERT INTO notifications (id, nest_id, user_email, kind, subject_id, message, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`,
+        [uuid3(), nestId, email.toLowerCase(), kind, subjectId, message, now]
+      );
+    } catch (err) {
+      console.error("[notify] deletion inbox insert failed", nestId, email, err);
+    }
+  }
+}
+async function deletionTargetContext(request, baseUrl) {
+  if (request.targetType === "document") {
+    const ctx = await buildDocContext(request.nestId, request.nodeId, baseUrl);
+    return { noun: "document", ...ctx };
+  }
+  const name = await nestName(request.nestId);
+  const label = request.targetType === "folder" ? prettyFolderPath(request.nodeId) : name;
+  return {
+    noun: request.targetType,
+    label,
+    docTitle: label,
+    path: name,
+    link: baseUrl ? `${baseUrl}/?nest=${encodeURIComponent(request.nestId)}` : ""
+  };
+}
+async function notifyDeletionRequested(request, baseUrl) {
+  try {
+    const ctx = await deletionTargetContext(request, baseUrl);
+    const line = `Deletion requested for ${ctx.noun} *${ctx.label}* by ${request.requestedBy} \u2014 "${request.reason}"`;
+    const admins = (await nestAdminEmails(request.nestId)).filter(
+      (e) => e !== request.requestedBy.toLowerCase()
+    );
+    await inboxInsert(
+      request.nestId,
+      admins,
+      "deletion_requested",
+      request.id,
+      `${ctx.noun === "document" ? "" : `${ctx.noun} `}"${ctx.docTitle}" was flagged for deletion by ${request.requestedBy} \u2014 "${request.reason}"`
+    );
+    void dispatchEvent({
+      kind: "deletion_requested",
+      nestId: request.nestId,
+      subjectId: request.nodeId,
+      actor: request.requestedBy,
+      message: line
+    });
+    void notifyNestEvent(
+      request.nestId,
+      `:wastebasket: ${line}`,
+      {
+        status: "deletion_requested",
+        docTitle: ctx.docTitle,
+        path: ctx.path,
+        link: ctx.link,
+        actor: request.requestedBy,
+        note: request.reason
+      },
+      // The admins are emailed directly below; don't also hit the shared
+      // NOTIFY_EMAIL_TO team inbox with the same event.
+      { skipEmail: true }
+    );
+    if (admins.length > 0) {
+      void sendEmailToRecipient(admins, {
+        status: "deletion_requested",
+        docTitle: ctx.docTitle,
+        path: ctx.path,
+        link: ctx.link,
+        actor: request.requestedBy,
+        note: request.reason
+      });
+    }
+  } catch (err) {
+    console.error(
+      "[notify] deletion request fan-out failed",
+      request.nestId,
+      request.nodeId,
+      err
+    );
+  }
+}
+async function notifyDeletionResolved(params) {
+  try {
+    const { outcome, resolvedBy, note } = params;
+    const verb = outcome === "deleted" ? "deleted" : "declined the deletion of";
+    const line = `${resolvedBy} ${verb} *${params.docTitle}*${note ? ` \u2014 "${note}"` : ""}`;
+    const recipient = params.requestedBy.toLowerCase();
+    const canInbox = !(params.targetType === "nest" && outcome === "deleted");
+    if (canInbox && recipient !== resolvedBy.toLowerCase()) {
+      await inboxInsert(
+        params.nestId,
+        [recipient],
+        `deletion_${outcome}`,
+        params.requestId,
+        outcome === "deleted" ? `"${params.docTitle}" was deleted by ${resolvedBy} \u2014 your request was accepted` : `Your deletion request for "${params.docTitle}" was declined by ${resolvedBy}${note ? ` \u2014 "${note}"` : ""}`
+      );
+    }
+    void dispatchEvent({
+      kind: `deletion_${outcome}`,
+      nestId: params.nestId,
+      subjectId: params.nodeId,
+      actor: resolvedBy,
+      message: line
+    });
+    void notifyNestEvent(
+      params.nestId,
+      `${outcome === "deleted" ? ":wastebasket:" : ":no_entry_sign:"} ${line}`,
+      void 0,
+      // Verdict emails the requester directly (below), not the team inbox.
+      { skipEmail: true }
+    );
+    if (recipient !== resolvedBy.toLowerCase()) {
+      const link = params.baseUrl ? `${params.baseUrl}/?nest=${encodeURIComponent(params.nestId)}` : "";
+      void sendEmailToRecipient(recipient, {
+        status: outcome === "deleted" ? "deletion_deleted" : "deletion_declined",
+        docTitle: params.docTitle,
+        path: params.nestId,
+        link: outcome === "deleted" ? link : void 0,
+        actor: resolvedBy,
+        note: note || null
+      });
+    }
+  } catch (err) {
+    console.error(
+      "[notify] deletion verdict fan-out failed",
+      params.nestId,
+      params.nodeId,
+      err
+    );
+  }
+}
+async function requestDeletion(params) {
+  const db = getDb();
+  const targetType = params.targetType || "document";
+  const noun = targetType === "document" ? "node" : targetType === "folder" ? "folder" : "nest";
+  const existing = await db.get(
+    "SELECT id FROM deletion_requests WHERE nest_id = ? AND node_id = ? AND target_type = ? AND status = 'pending'",
+    [params.nestId, params.nodeId, targetType]
+  );
+  if (existing) {
+    throw new ConflictError(`A deletion request is already pending for this ${noun}`);
+  }
+  const id = uuid3();
+  try {
+    await db.run(
+      `INSERT INTO deletion_requests (id, nest_id, node_id, target_type, requested_by, reason)
+       VALUES (?, ?, ?, ?, ?, ?)`,
+      [
+        id,
+        params.nestId,
+        params.nodeId,
+        targetType,
+        params.requestedBy,
+        params.reason
+      ]
+    );
+  } catch (err) {
+    console.error(
+      "[deletion] request insert failed",
+      params.nestId,
+      params.nodeId,
+      err
+    );
+    throw new ConflictError(`A deletion request is already pending for this ${noun}`);
+  }
+  const request = await getDeletionRequest(id);
+  await notifyDeletionRequested(request, params.baseUrl);
+  return request;
+}
+async function getLatestDeletionRequest(nestId, nodeId) {
+  const db = getDb();
+  const row = await db.get(
+    `SELECT * FROM deletion_requests WHERE nest_id = ? AND node_id = ?
+       ORDER BY created_at DESC LIMIT 1`,
+    [nestId, nodeId]
+  );
+  return row ? rowToDeletionRequest(row) : null;
+}
+async function getDeletionRequest(id) {
+  const db = getDb();
+  const row = await db.get(
+    "SELECT * FROM deletion_requests WHERE id = ?",
+    [id]
+  );
+  return row ? rowToDeletionRequest(row) : null;
+}
+async function listDeletionRequests(params) {
+  const db = getDb();
+  const status = params.status || "pending";
+  const where = [];
+  const args = [];
+  if (params.nestId) {
+    where.push("nest_id = ?");
+    args.push(params.nestId);
+  }
+  if (params.nestIds) {
+    if (params.nestIds.length === 0) return [];
+    where.push(`nest_id IN (${params.nestIds.map(() => "?").join(",")})`);
+    args.push(...params.nestIds);
+  }
+  if (status !== "all") {
+    where.push("status = ?");
+    args.push(status);
+  }
+  const rows = await db.all(
+    `SELECT * FROM deletion_requests${where.length ? ` WHERE ${where.join(" AND ")}` : ""} ORDER BY created_at DESC`,
+    args
+  );
+  if (rows.length === 0) return [];
+  const titlesByNest = /* @__PURE__ */ new Map();
+  for (const nid of new Set(rows.map((r) => r.nest_id))) {
+    titlesByNest.set(nid, await buildTitleMap(nid));
+  }
+  const out = [];
+  for (const r of rows) {
+    const request = rowToDeletionRequest(r);
+    out.push({
+      ...request,
+      title: await deletionTargetTitle(request, titlesByNest.get(r.nest_id))
+    });
+  }
+  return out;
+}
+async function dropDeletionRequest(id) {
+  await getDb().run("DELETE FROM deletion_requests WHERE id = ?", [id]);
+}
+async function declineDeletion(params) {
+  const db = getDb();
+  const pending = await getDeletionRequest(params.id);
+  if (!pending || pending.nestId !== params.nestId || pending.status !== "pending") {
+    return null;
+  }
+  const { changes } = await db.run(
+    `UPDATE deletion_requests
+       SET status = 'declined', resolved_by = ?, resolved_at = ${nowExpr(db)},
+           resolution_note = ?
+     WHERE id = ? AND status = 'pending'`,
+    [params.declinedBy, params.note, params.id]
+  );
+  if (changes === 0) return null;
+  const declined = await getDeletionRequest(params.id);
+  if (declined) {
+    await notifyDeletionResolved({
+      nestId: params.nestId,
+      nodeId: declined.nodeId,
+      docTitle: await deletionTargetTitle(declined),
+      outcome: "declined",
+      requestedBy: declined.requestedBy,
+      resolvedBy: params.declinedBy,
+      requestId: declined.id,
+      note: params.note,
+      baseUrl: params.baseUrl
+    });
+  }
+  return declined;
+}
+function rowToDeletionRequest(row) {
+  return {
+    id: row.id,
+    nestId: row.nest_id,
+    nodeId: row.node_id,
+    targetType: row.target_type || "document",
+    requestedBy: row.requested_by,
+    reason: row.reason,
+    status: row.status,
+    createdAt: row.created_at,
+    resolvedBy: row.resolved_by || void 0,
+    resolvedAt: row.resolved_at || void 0,
+    resolutionNote: row.resolution_note || void 0
+  };
+}
 async function getReviewRequest(id) {
   const db = getDb();
   const row = await db.get(
@@ -1322,9 +1583,12 @@ function rowToReviewRequest(row) {
 
 export {
   safePublishDocument,
+  serializeNodeSafe,
+  stripUndefinedDeep,
   listWatchers,
   addWatcher,
   removeWatcher,
+  notifyNestInvite,
   listNotifications,
   markNotificationsRead,
   resolveCallerEmail,
@@ -1340,13 +1604,24 @@ export {
   envValues,
   isSafeConnectorUrl,
   dispatchEvent,
-  verifySmtp,
+  sendTestNotification,
   notifyNestEvent,
+  nodeWriteKey,
+  withNodeWriteLock,
   submitForReview,
+  repointPendingReview,
   approve,
   reject,
   cancelReview,
   getReviewQueue,
   getReviewHistory,
-  getPendingReview
+  getPendingReview,
+  deletionTargetTitle,
+  notifyDeletionResolved,
+  requestDeletion,
+  getLatestDeletionRequest,
+  getDeletionRequest,
+  listDeletionRequests,
+  dropDeletionRequest,
+  declineDeletion
 };