@promptowl/contextnest-community 1.22.0 → 1.24.0

package/dist/{chunk-W5ILNGPD.js → chunk-KIAAEHWL.js}

@@ -8,7 +8,7 @@ import {
   config,
   getDb,
   isEmailish
-} from "./chunk-J2OQ3MEB.js";
+} from "./chunk-LA3VTQ22.js";
 import {
   ANON_USER_ID
 } from "./chunk-YB3LKF7U.js";
@@ -138,6 +138,12 @@ function startTelemetryLoop() {
 function nowExpr(db) {
   return db.dialect === "sqlite" ? "datetime('now')" : "to_char((now() AT TIME ZONE 'utc'), 'YYYY-MM-DD HH24:MI:SS')";
 }
+function suffixOf(db, column, length) {
+  return db.dialect === "sqlite" ? `substr(${column}, -${length})` : `right(${column}, ${length})`;
+}
+function nowMsExpr(db) {
+  return db.dialect === "sqlite" ? "strftime('%Y-%m-%d %H:%M:%f','now')" : "to_char((now() AT TIME ZONE 'utc'), 'YYYY-MM-DD HH24:MI:SS.MS')";
+}
 function insertOrIgnore(db, insertSql) {
   return db.dialect === "sqlite" ? insertSql.replace(/^\s*INSERT\s+INTO/i, "INSERT OR IGNORE INTO") : `${insertSql} ON CONFLICT DO NOTHING`;
 }
@@ -657,6 +663,7 @@ function renderText(message) {
 }
 var STATUS_META = {
   approved: { subjectWord: "approved", label: "Approved", color: "#16a34a" },
+  mention: { subjectWord: "mentioned you", label: "Mention", color: "#7c3aed" },
   rejected: { subjectWord: "rejected", label: "Rejected", color: "#dc2626" },
   pending_review: {
     subjectWord: "awaiting review",
@@ -715,6 +722,17 @@ var TEMPLATES = {
     lineH: (x) => `${x.doc}${x.vH} has been approved${x.byH}${x.noteH}.`,
     rows: governanceRows
   },
+  // A mention names one person, so this is the one template addressed to
+  // "you". `note` carries the comment's own words when there are any — a
+  // mention with no context reads as a summons.
+  mention: {
+    heading: (x) => `${x.d.actor || "Someone"} mentioned you in ${x.title}`,
+    detailsHeader: "Document details",
+    linkLabel: "Open document",
+    lineT: (x) => `You were mentioned in ${x.title}${x.byT}${x.noteT}.`,
+    lineH: (x) => `You were mentioned in ${x.doc}${x.byH}${x.noteH}.`,
+    rows: (x) => [plainRow("Nest", x.d.path)]
+  },
   rejected: {
     heading: (x) => `${x.title} is ${x.meta.subjectWord}`,
     detailsHeader: "Document details",
@@ -1278,8 +1296,11 @@ async function listNotifications(userEmail, opts = {}) {
               CASE WHEN dr.target_type = 'document' THEN dr.node_id END,
               -- A mention names the document directly; there's no request row.
               CASE WHEN n.kind = 'mention' THEN n.subject_id END
-            ) AS node_id
+            ) AS node_id,
+            -- Name resolved here so the inbox never fetches the nest list for it.
+            COALESCE(ns.name, n.nest_id) AS nest_name
        FROM notifications n
+       LEFT JOIN nests ns ON ns.id = n.nest_id
        LEFT JOIN review_requests rr ON rr.id = n.subject_id
        LEFT JOIN deletion_requests dr ON dr.id = n.subject_id
       WHERE LOWER(n.user_email) = LOWER(?)${opts.unreadOnly ? " AND n.read_at IS NULL" : ""}
@@ -1304,6 +1325,12 @@ async function markNotificationsRead(userEmail, ids) {
     );
   }
 }
+async function markNotificationsReadBySubject(subjectId, kind) {
+  await getDb().run(
+    "UPDATE notifications SET read_at = ? WHERE subject_id = ? AND kind = ? AND read_at IS NULL",
+    [(/* @__PURE__ */ new Date()).toISOString(), subjectId, kind]
+  );
+}
 
 // src/governance/teams-service.ts
 var VALID_TEAM_ROLES = ["admin", "editor", "viewer"];
@@ -2195,22 +2222,23 @@ var LIVE_ONLY_N = "n.archived_at IS NULL";
 async function listNests(userId, opts = {}) {
   const db = getDb();
   const scope = opts.archived ? "archived_at IS NOT NULL" : LIVE_ONLY;
+  const orderBy = opts.archived ? "archived_at DESC" : "created_at DESC";
   if (userId === ANON_USER_ID) {
     return await db.all(
-      `SELECT * FROM nests WHERE user_id = ? AND ${scope} ORDER BY created_at DESC`,
+      `SELECT * FROM nests WHERE user_id = ? AND ${scope} ORDER BY ${orderBy}`,
       [ANON_USER_ID]
     );
   }
   const includeAnon = config.AUTH_MODE === "open" || await isLicenseAdminUserId(userId);
   if (!includeAnon) {
     return await db.all(
-      `SELECT * FROM nests WHERE user_id = ? AND ${scope} ORDER BY created_at DESC`,
+      `SELECT * FROM nests WHERE user_id = ? AND ${scope} ORDER BY ${orderBy}`,
       [userId]
     );
   }
   return await db.all(
     `SELECT * FROM nests WHERE (user_id = ? OR user_id = ?) AND ${scope}
-      ORDER BY created_at DESC`,
+      ORDER BY ${orderBy}`,
     [userId, ANON_USER_ID]
   );
 }
@@ -2463,6 +2491,9 @@ var FlatNestStorage = class extends NestStorage2 {
   }
 };
 
+// src/nodes/node-index.ts
+import { listSuggestions } from "@promptowl/contextnest-engine";
+
 // src/shared/node-id.ts
 function assertSafeNodeId(rawId) {
   let id = rawId;
@@ -2591,13 +2622,21 @@ async function ensureNodeIndex(nestId) {
   return run;
 }
 async function rebuildNodeIndex(nestId) {
-  const { engineCache: engineCache2 } = await import("./engine-XKRP7GOQ.js");
-  const { documentsWithSuggestions } = await import("./external-edit-service-TXW7SXSF.js");
+  const { engineCache: engineCache2 } = await import("./engine-S3QBQ7LH.js");
+  const { documentsWithSuggestions } = await import("./external-edit-service-6FNFPOJJ.js");
   const { storage, dropDiscoveryCache } = await engineCache2.get(nestId);
   dropDiscoveryCache();
   const startedAt = writeGeneration.get(nestId) ?? 0;
   const documents = await storage.discoverDocuments({ includeRetired: true });
   const staged = await documentsWithSuggestions(nestId);
+  const stagedMetas = (await Promise.all(
+    [...staged].map(
+      (id) => listSuggestions(storage, id).catch((err) => {
+        console.error("[node-index] listSuggestions failed", nestId, id, err);
+        return [];
+      })
+    )
+  )).flat();
   const db = getDb();
   const insertSql = insertOrReplace(
     db,
@@ -2605,18 +2644,15 @@ async function rebuildNodeIndex(nestId) {
     ["nest_id", "node_id"],
     UPSERT_SET
   );
-  const stagedSql = insertOrIgnore(
-    db,
-    "INSERT INTO node_suggestions (nest_id, node_id) VALUES (?, ?)"
-  );
+  const stagedSql = insertOrIgnore(db, SUGGESTION_INSERT);
   await db.transaction(async (tx) => {
     await tx.run("DELETE FROM node_index WHERE nest_id = ?", [nestId]);
     for (const doc of documents) {
       await tx.run(insertSql, [nestId, ...rowValues(doc)]);
     }
     await tx.run("DELETE FROM node_suggestions WHERE nest_id = ?", [nestId]);
-    for (const id of staged) {
-      await tx.run(stagedSql, [nestId, id]);
+    for (const m of stagedMetas) {
+      await tx.run(stagedSql, suggestionValues(nestId, m));
     }
     if ((writeGeneration.get(nestId) ?? 0) !== startedAt) return;
     await tx.run(
@@ -2626,30 +2662,42 @@ async function rebuildNodeIndex(nestId) {
   });
   return documents.length;
 }
-async function setSuggestionFlag(nestId, nodeId, present) {
+var SUGGESTION_INSERT = "INSERT INTO node_suggestions (nest_id, node_id, suggestion_id, source, actor, detected_at, target_hash, proposed_hash, note) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)";
+var suggestionValues = (nestId, m) => [
+  nestId,
+  m.document_id,
+  m.suggestion_id,
+  m.source,
+  m.actor,
+  m.detected_at,
+  m.target_hash,
+  m.proposed_hash,
+  m.note ?? null
+];
+async function syncSuggestionRows(nestId, nodeId, metas) {
   try {
     const db = getDb();
-    if (!present) {
-      await db.run(
+    const insertSql = insertOrIgnore(db, SUGGESTION_INSERT);
+    await db.transaction(async (tx) => {
+      await tx.run(
         "DELETE FROM node_suggestions WHERE nest_id = ? AND node_id = ?",
         [nestId, nodeId]
       );
-      return;
-    }
-    await db.run(
-      insertOrIgnore(
-        db,
-        "INSERT INTO node_suggestions (nest_id, node_id) VALUES (?, ?)"
-      ),
-      [nestId, nodeId]
-    );
+      for (const m of metas) await tx.run(insertSql, suggestionValues(nestId, m));
+    });
   } catch (err) {
-    console.error("[node-index] suggestion flag failed", nestId, nodeId, err);
+    console.error("[node-index] suggestion rows failed", nestId, nodeId, err);
   }
 }
+async function listSuggestionRows(nestId) {
+  return await getDb().all(
+    "SELECT * FROM node_suggestions WHERE nest_id = ? ORDER BY detected_at DESC",
+    [nestId]
+  );
+}
 async function nodesWithSuggestions(nestId) {
   const rows = await getDb().all(
-    "SELECT node_id FROM node_suggestions WHERE nest_id = ?",
+    "SELECT DISTINCT node_id FROM node_suggestions WHERE nest_id = ?",
     [nestId]
   );
   return new Set(rows.map((r) => r.node_id));
@@ -2826,6 +2874,8 @@ async function opContext(nestId, actor, onProgress) {
 
 export {
   nowExpr,
+  suffixOf,
+  nowMsExpr,
   insertOrIgnore,
   insertOrReplace,
   trackEvent,
@@ -2889,7 +2939,8 @@ export {
   markIndexStale,
   ensureNodeIndex,
   rebuildNodeIndex,
-  setSuggestionFlag,
+  syncSuggestionRows,
+  listSuggestionRows,
   nodesWithSuggestions,
   indexedNodeIds,
   readIndexedNodes,
@@ -2914,6 +2965,7 @@ export {
   notifyNestInvite,
   listNotifications,
   markNotificationsRead,
+  markNotificationsReadBySubject,
   createTeam,
   findTeamByExternalId,
   listTeamsForUser,

package/dist/{chunk-J2OQ3MEB.js → chunk-LA3VTQ22.js}

@@ -334,6 +334,28 @@ var config = {
   get OIDC_DEPARTMENT_TAGGING() {
     return process.env.OIDC_DEPARTMENT_TAGGING === "true";
   },
+  /**
+   * Widen the add-a-person suggestions (GET /people/suggest) from "people you
+   * already work with" to every registered account on this server.
+   *
+   * OFF BY DEFAULT, and the default is the point. On a single-company
+   * self-hosted server every account is a colleague, so the whole directory is
+   * the useful answer and this saves asking someone for their address. On the
+   * PromptOwl-hosted deployment, one server holds many unrelated customers —
+   * so the same list is one customer's staff being offered another customer's
+   * email addresses. The hosted deployment leaves this unset; a self-hosted
+   * operator who knows their user table is their own staff turns it on.
+   *
+   * Narrows nothing when off: the default scoping (shared nests and teams,
+   * plus everything for a server admin, who administers the accounts anyway)
+   * is unchanged. Suggestions never gate the add either way — an address that
+   * appears in no list is still valid to type, so this only ever affects what
+   * is *offered*, never who can be invited. Superadmin-togglable at runtime
+   * via /admin/settings.
+   */
+  get PEOPLE_SUGGEST_ALL_USERS() {
+    return process.env.PEOPLE_SUGGEST_ALL_USERS === "true";
+  },
   /**
    * Path to the .env file the server reads its config from and the license
    * install flow persists PROMPTOWL_KEY into. Defaults UNDER DATA_ROOT (not
@@ -1719,6 +1741,46 @@ function runMigrations(db) {
     widenNestVisibilityWithGuard(db);
     recordMigration("041_nest_visibility_org");
   }
+  if (!hasMigration("042_community_sites")) {
+    db.transaction(() => {
+      db.exec(`
+        CREATE TABLE IF NOT EXISTS community_sites (
+          id TEXT PRIMARY KEY,
+          name TEXT NOT NULL,
+          url TEXT NOT NULL UNIQUE,
+          secret TEXT NOT NULL,
+          is_active INTEGER NOT NULL DEFAULT 1,
+          created_at TEXT NOT NULL DEFAULT (datetime('now')),
+          updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+        );
+      `);
+      recordMigration("042_community_sites");
+    })();
+  }
+  if (!hasMigration("043_node_suggestion_details")) {
+    db.transaction(() => {
+      db.exec(`
+        DROP TABLE IF EXISTS node_suggestions;
+        CREATE TABLE node_suggestions (
+          nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+          node_id TEXT NOT NULL,
+          suggestion_id TEXT NOT NULL,
+          source TEXT NOT NULL,
+          actor TEXT NOT NULL,
+          detected_at TEXT NOT NULL,
+          target_hash TEXT NOT NULL,
+          proposed_hash TEXT NOT NULL,
+          note TEXT,
+          created_at TEXT NOT NULL DEFAULT (datetime('now')),
+          PRIMARY KEY (nest_id, node_id, suggestion_id)
+        );
+        CREATE INDEX IF NOT EXISTS idx_node_suggestions_nest_detected
+          ON node_suggestions(nest_id, detected_at DESC);
+        UPDATE nests SET index_synced_at = NULL;
+      `);
+      recordMigration("043_node_suggestion_details");
+    })();
+  }
 }
 function fkViolationCounts(db) {
   const rows = db.pragma("foreign_key_check");
@@ -1993,7 +2055,7 @@ async function initDb() {
   if (config.DB_DRIVER === "postgres") {
     const { Pool } = await import("pg");
     const { PostgresAdapter } = await import("./adapter.postgres-6VZCMPQL.js");
-    const { runPostgresMigrations } = await import("./migrations.postgres-KKICIH2C.js");
+    const { runPostgresMigrations } = await import("./migrations.postgres-AIQ7WSU7.js");
     const pool = new Pool(buildPgConfig());
     adapter = new PostgresAdapter(pool);
     await runPostgresMigrations(adapter);

package/dist/{chunk-ZAV4QUZA.js → chunk-XUIWAWDO.js}

@@ -2,13 +2,14 @@ import {
   engineCache,
   indexedNodeIds,
   isNestArchived,
+  listSuggestionRows,
   markIndexStale,
   resolveNestPath,
-  setSuggestionFlag
-} from "./chunk-W5ILNGPD.js";
+  syncSuggestionRows
+} from "./chunk-KIAAEHWL.js";
 import {
   getDb
-} from "./chunk-J2OQ3MEB.js";
+} from "./chunk-LA3VTQ22.js";
 
 // src/governance/external-edit-service.ts
 import { readFile, readdir } from "fs/promises";
@@ -82,7 +83,7 @@ async function scanDocumentForDriftInternal(nestId, documentId, actor) {
   if (await bodyMatchesLatestVersion(storage, documentId, drift.actualHash)) {
     return null;
   }
-  const { hasUnsealedDraft } = await import("./version-service-TKNYJMCM.js");
+  const { hasUnsealedDraft } = await import("./version-service-KIOQME6U.js");
   if (await hasUnsealedDraft(nestId, documentId)) {
     return null;
   }
@@ -91,7 +92,7 @@ async function scanDocumentForDriftInternal(nestId, documentId, actor) {
   const existing = await listSuggestions(storage, documentId);
   const dup = existing.find((s) => s.proposed_hash === drift.actualHash);
   if (dup) {
-    await setSuggestionFlag(nestId, documentId, true);
+    await syncSuggestionRows(nestId, documentId, existing);
     return { meta: dup, created: false };
   }
   const result = await stageSuggestion({
@@ -103,13 +104,13 @@ async function scanDocumentForDriftInternal(nestId, documentId, actor) {
     actor,
     docTier: "standard"
   });
-  await setSuggestionFlag(nestId, documentId, true);
+  await syncSuggestionRows(nestId, documentId, [...existing, result.meta]);
   return { meta: result.meta, created: true };
 }
 async function refreshSuggestionFlag(nestId, storage, documentId) {
   try {
     const remaining = await listSuggestions(storage, documentId);
-    await setSuggestionFlag(nestId, documentId, remaining.length > 0);
+    await syncSuggestionRows(nestId, documentId, remaining);
   } catch (err) {
     console.error("[external-edit] flag refresh failed", nestId, documentId, err);
   }
@@ -170,33 +171,27 @@ async function getPendingChange(nestId, documentId) {
   return null;
 }
 async function listNestExternalEdits(nestId) {
+  const rows = await listSuggestionRows(nestId);
+  if (rows.length === 0) return [];
   const { storage } = await engineCache.get(nestId);
-  const docs = await storage.discoverDocuments();
-  const lists = await Promise.all(
-    docs.map(async (doc) => {
-      const metas = await listSuggestions(storage, doc.id);
-      const fresh = [];
-      for (const meta of metas) {
-        if (await bodyMatchesLatestVersion(storage, doc.id, meta.proposed_hash)) {
-          continue;
-        }
-        fresh.push(meta);
-      }
-      return fresh;
-    })
+  const kept = await Promise.all(
+    rows.map(
+      async (r) => await bodyMatchesLatestVersion(storage, r.node_id, r.proposed_hash) ? null : r
+    )
+  );
+  return kept.flatMap(
+    (r) => r ? [{
+      suggestion_id: r.suggestion_id,
+      nest_id: nestId,
+      document_id: r.node_id,
+      source: r.source,
+      detected_at: r.detected_at,
+      actor: r.actor,
+      target_hash: r.target_hash,
+      proposed_hash: r.proposed_hash,
+      note: r.note ?? void 0
+    }] : []
   );
-  const entries = lists.flat().map((meta) => ({
-    suggestion_id: meta.suggestion_id,
-    nest_id: nestId,
-    document_id: meta.document_id,
-    source: meta.source,
-    detected_at: meta.detected_at,
-    actor: meta.actor,
-    target_hash: meta.target_hash,
-    proposed_hash: meta.proposed_hash,
-    note: meta.note
-  }));
-  return entries.sort((a, b) => b.detected_at.localeCompare(a.detected_at));
 }
 async function getExternalEditDetail(nestId, documentId, suggestionId) {
   const { storage } = await engineCache.get(nestId);
@@ -259,7 +254,7 @@ async function listExternalEditVerdicts(nestId, documentId) {
 async function mirrorVersion(input) {
   const { storage } = await engineCache.get(input.nestId);
   const node = await storage.readDocument(input.documentId);
-  const { upsertVersion, setApprovedVersion } = await import("./version-service-TKNYJMCM.js");
+  const { upsertVersion, setApprovedVersion } = await import("./version-service-KIOQME6U.js");
   await upsertVersion({
     nestId: input.nestId,
     nodeId: input.documentId,

package/dist/{chunk-6WESEA75.js → chunk-ZTT4U4NE.js}

@@ -2,10 +2,10 @@ import {
   buildTitleMap,
   insertOrReplace,
   nowExpr
-} from "./chunk-W5ILNGPD.js";
+} from "./chunk-KIAAEHWL.js";
 import {
   getDb
-} from "./chunk-J2OQ3MEB.js";
+} from "./chunk-LA3VTQ22.js";
 
 // src/governance/version-service.ts
 import { createHash } from "crypto";

package/dist/{client-CSCHXUNX.js → client-KEY4PYJH.js}

@@ -2,7 +2,7 @@ import {
   getDb,
   initDb,
   resetDb
-} from "./chunk-J2OQ3MEB.js";
+} from "./chunk-LA3VTQ22.js";
 import "./chunk-YB3LKF7U.js";
 export {
   getDb,

package/dist/{engine-XKRP7GOQ.js → engine-S3QBQ7LH.js}

@@ -2,9 +2,9 @@ import {
   engineApi,
   engineCache,
   opContext
-} from "./chunk-W5ILNGPD.js";
+} from "./chunk-KIAAEHWL.js";
 import "./chunk-YVMSM7LS.js";
-import "./chunk-J2OQ3MEB.js";
+import "./chunk-LA3VTQ22.js";
 import "./chunk-YB3LKF7U.js";
 import "./chunk-FRQJWGN3.js";
 export {

package/dist/{external-edit-service-TXW7SXSF.js → external-edit-service-6FNFPOJJ.js}

@@ -11,10 +11,10 @@ import {
   scanNestForDrift,
   startDriftScanner,
   stopDriftScanner
-} from "./chunk-ZAV4QUZA.js";
-import "./chunk-W5ILNGPD.js";
+} from "./chunk-XUIWAWDO.js";
+import "./chunk-KIAAEHWL.js";
 import "./chunk-YVMSM7LS.js";
-import "./chunk-J2OQ3MEB.js";
+import "./chunk-LA3VTQ22.js";
 import "./chunk-YB3LKF7U.js";
 import "./chunk-FRQJWGN3.js";
 export {

package/dist/{grants-service-UZ2MGDO5.js → grants-service-UT3EQ3R7.js}

@@ -6,9 +6,9 @@ import {
   listGrants,
   listUserGrants,
   resolveNodeGrant
-} from "./chunk-MY4JIWQD.js";
+} from "./chunk-I3CSD6CK.js";
 import "./chunk-YVMSM7LS.js";
-import "./chunk-J2OQ3MEB.js";
+import "./chunk-LA3VTQ22.js";
 import "./chunk-YB3LKF7U.js";
 export {
   createGrant,