@promptowl/contextnest-community 1.23.0 → 1.24.0

package/dist/index.js

@@ -38,7 +38,7 @@ import {
   submitForReview,
   withNodeWriteLock,
   withdrawDeletionRequest
-} from "./chunk-MLQU4I5J.js";
+} from "./chunk-5EZOPA47.js";
 import {
   canCreateInNest,
   canManageStewards,
@@ -58,7 +58,7 @@ import {
   resolveUserRoles,
   syncFromConfig,
   updateSteward
-} from "./chunk-2YPY2HGZ.js";
+} from "./chunk-2TPQTN4Y.js";
 import {
   createGrant,
   deleteGrant,
@@ -67,7 +67,7 @@ import {
   listGrants,
   listUserGrants,
   resolveNodeGrant
-} from "./chunk-UOMW7TT6.js";
+} from "./chunk-I3CSD6CK.js";
 import {
   generateApiKey,
   getKeyPrefix,
@@ -93,7 +93,7 @@ import {
   listMyDrafts,
   setApprovedVersion,
   upsertVersion
-} from "./chunk-5CVZMHHB.js";
+} from "./chunk-ZTT4U4NE.js";
 import {
   approveExternalEdit,
   getExternalEditDetail,
@@ -105,7 +105,7 @@ import {
   scanDocumentForDrift,
   scanNestForDrift,
   startDriftScanner
-} from "./chunk-XYD6V2LH.js";
+} from "./chunk-XUIWAWDO.js";
 import {
   addMember,
   addWatcher,
@@ -211,7 +211,7 @@ import {
   updateMemberRole,
   validateLicense,
   verifySmtp
-} from "./chunk-QLXC6542.js";
+} from "./chunk-KIAAEHWL.js";
 import {
   AppError,
   ConflictError,
@@ -229,7 +229,7 @@ import {
   initDb,
   isEmailListish,
   isEmailish
-} from "./chunk-QWNXWRWO.js";
+} from "./chunk-LA3VTQ22.js";
 import {
   ANON_EMAIL,
   ANON_USER_ID,
@@ -1696,6 +1696,15 @@ authRoutes.get("/admin-status", async (c) => {
     me
   });
 });
+authRoutes.patch("/profile", authMiddleware, async (c) => {
+  const userId = c.get("userId");
+  const body = await c.req.json();
+  if (typeof body.name !== "string") throw new ValidationError("name is required");
+  const name = body.name.trim();
+  if (name.length > 80) throw new ValidationError("name must be 80 characters or fewer");
+  await getDb().run("UPDATE users SET name = ? WHERE id = ?", [name || null, userId]);
+  return c.json({ ok: true, name: name || null });
+});
 authRoutes.post("/password", authMiddleware, async (c) => {
   const body = await c.req.json();
   if (!body.current || !body.next) {
@@ -2559,6 +2568,19 @@ var ACCEPTED_NODE_TYPES = /* @__PURE__ */ new Set([
   "artifact",
   "table"
 ]);
+function assertAcceptedType(type) {
+  if (type === "artifact" && !config.TYPE_ARTIFACT_ENABLED) {
+    throw new ValidationError("Artifact nodes are disabled on this server");
+  }
+  if (type === "table" && !config.TYPE_TABLE_ENABLED) {
+    throw new ValidationError("Table nodes are disabled on this server");
+  }
+  if (!ACCEPTED_NODE_TYPES.has(type)) {
+    throw new ValidationError(
+      `unknown node type "${type}"; allowed: ${[...ACCEPTED_NODE_TYPES].sort().join(", ")}`
+    );
+  }
+}
 function toNodeResponse(node) {
   const fm = node.frontmatter;
   const title = fm.title === void 0 || fm.title === null ? "" : String(fm.title);
@@ -3009,17 +3031,7 @@ async function createNodeOnce(nestId, input, userEmail, opts = {}) {
   }
   const tags = requireTags(input.tags);
   const requestedType = input.type || "document";
-  if (requestedType === "artifact" && !config.TYPE_ARTIFACT_ENABLED) {
-    throw new ValidationError("Artifact nodes are disabled on this server");
-  }
-  if (requestedType === "table" && !config.TYPE_TABLE_ENABLED) {
-    throw new ValidationError("Table nodes are disabled on this server");
-  }
-  if (!ACCEPTED_NODE_TYPES.has(requestedType)) {
-    throw new ValidationError(
-      `unknown node type "${requestedType}"; allowed: ${[...ACCEPTED_NODE_TYPES].sort().join(", ")}`
-    );
-  }
+  assertAcceptedType(requestedType);
   if (input.schedule !== void 0 && !isRunnableType(input.type)) {
     throw new ValidationError(
       `schedule is only valid for runnable node types (${RUNNABLE_NODE_TYPES.join(
@@ -3282,6 +3294,20 @@ async function updateNode(nestId, nodeId, patch, userEmail, opts = {}) {
         };
         opInput.title = patch.title;
       }
+      if (patch.type !== void 0 && patch.type !== node.frontmatter.type) {
+        assertAcceptedType(patch.type);
+        if (patch.type === "skill") {
+          opInput.trigger = `when asked to ${String(node.frontmatter.title || nodeId).toLowerCase()}`;
+        }
+        if (isRunnableType(node.frontmatter.type) && !isRunnableType(patch.type)) {
+          const metadata = { ...node.frontmatter.metadata };
+          delete metadata.schedule;
+          node = { ...node, frontmatter: { ...node.frontmatter, metadata } };
+          opInput.metadata = { ...opInput.metadata, schedule: null };
+        }
+        node = { ...node, frontmatter: { ...node.frontmatter, type: patch.type } };
+        opInput.type = patch.type;
+      }
       if (patch.schedule !== void 0) {
         if (!isRunnableType(node.frontmatter.type)) {
           throw new ValidationError(
@@ -4590,12 +4616,19 @@ sharingRoutes.patch("/reader-mode", async (c) => {
 import { Hono as Hono5 } from "hono";
 import { v4 as uuid7 } from "uuid";
 var grantRoutes = new Hono5();
-async function requireManage(c, nestId) {
-  if (!await canManageStewards(nestId, c.get("userId"))) {
+async function requireManage(c, nestId, opts = {}) {
+  if (config.AUTH_MODE === "open") return;
+  const access = await resolveNestAccess(nestId, c.get("userId"));
+  if (access.rawPermission !== "owner" && access.rawPermission !== "admin") {
     throw new ForbiddenError(
       "Only a nest admin, the nest owner, or the server admin can manage sharing."
     );
   }
+  if (access.archived && !opts.readOnly) {
+    throw new ForbiddenError(
+      "This nest is archived, so it is read-only. Restore it to change sharing."
+    );
+  }
 }
 async function resolveGrantee(email) {
   const db = getDb();
@@ -4685,7 +4718,7 @@ grantRoutes.post("/", async (c) => {
 });
 grantRoutes.get("/", async (c) => {
   const nestId = c.req.param("nestId");
-  await requireManage(c, nestId);
+  await requireManage(c, nestId, { readOnly: true });
   const grants = await listGrants(nestId);
   const db = getDb();
   const withEmail = await Promise.all(
@@ -6208,7 +6241,7 @@ nodeRoutes.post("/", async (c) => {
 nodeRoutes.get("/:nodeId{.+}/stewards", async (c) => {
   const nestId = c.req.param("nestId");
   const nodeId = c.req.param("nodeId");
-  const { resolveStewardsWithFallback: resolveStewardsWithFallback2 } = await import("./stewardship-service-32UHIRQ5.js");
+  const { resolveStewardsWithFallback: resolveStewardsWithFallback2 } = await import("./stewardship-service-4DHNRULG.js");
   const { stewards, fallbackToOwner, ownerEmail } = await resolveStewardsWithFallback2(
     nestId,
     nodeId
@@ -6229,7 +6262,7 @@ nodeRoutes.get("/:nodeId{.+}/stewards", async (c) => {
 nodeRoutes.get("/:nodeId{.+}/reviews", async (c) => {
   const nestId = c.req.param("nestId");
   const nodeId = c.req.param("nodeId");
-  const { getReviewHistory: getReviewHistory2 } = await import("./review-service-A7PNLWG5.js");
+  const { getReviewHistory: getReviewHistory2 } = await import("./review-service-HHGOTO6P.js");
   const history = await getReviewHistory2(nestId, nodeId);
   return c.json({ reviews: history });
 });
@@ -6368,7 +6401,8 @@ nodeRoutes.get("/:nodeId{.+}", async (c) => {
     }
   }
   response.myGrant = await resolveNodeGrant(nestId, userId, nodeId);
-  if (publicReader) {
+  const approvedOnly = c.req.query("approved_only") === "1" || c.req.query("approved_only") === "true";
+  if (publicReader || approvedOnly) {
     const approved = await getApprovedVersion(nestId, nodeId);
     if (approved != null) {
       let approvedRaw = "";
@@ -6399,6 +6433,9 @@ nodeRoutes.get("/:nodeId{.+}", async (c) => {
       }
       return c.json({ node: response });
     }
+    if (approvedOnly) {
+      throw new NotFoundError("This document has no approved version yet.");
+    }
   }
   response.status = node.pendingChange ? "external_edit_pending" : await getDisplayStatus(nestId, nodeId);
   if (response.status === "pending_review") {
@@ -6423,6 +6460,9 @@ nodeRoutes.patch("/:nodeId{.+}", async (c) => {
   const nestId = c.req.param("nestId");
   const nodeId = c.req.param("nodeId");
   const body = await c.req.json();
+  if (body.type !== void 0 && typeof body.type !== "string") {
+    throw new ValidationError("type must be a string");
+  }
   const baseVersionHeader = c.req.header("X-Base-Version");
   if (baseVersionHeader) {
     const baseVersion = parseInt(baseVersionHeader, 10);
@@ -6453,7 +6493,8 @@ nodeRoutes.patch("/:nodeId{.+}", async (c) => {
       status: body.status,
       changeNote: body.changeNote,
       schedule: body.schedule,
-      prime: body.prime
+      prime: body.prime,
+      type: body.type
     },
     authorEmail
   );
@@ -6957,7 +6998,18 @@ var STOPWORDS = /* @__PURE__ */ new Set([
   "ok",
   "please",
   "thanks",
-  "thank"
+  "thank",
+  // Greetings and fillers a chat turn opens with — never a topic.
+  "hello",
+  "hi",
+  "hey",
+  "there",
+  "good",
+  "morning",
+  "afternoon",
+  "evening",
+  "bye",
+  "cheers"
 ]);
 function tokenizePrompt(prompt) {
   const words = prompt.toLowerCase().split(/[^a-z0-9_-]+/).filter(Boolean).filter((w) => w.length >= 3 && !STOPWORDS.has(w));
@@ -6999,6 +7051,34 @@ async function compilePrompt(prompt, nestId, titles) {
     unmatched
   };
 }
+function scorePrompt(doc, tokens) {
+  if (tokens.length === 0) return { score: 0, via: null };
+  const title = doc.frontmatter.title || "";
+  const tags = (doc.frontmatter.tags || []).map(normalizeTag);
+  const body = (doc.body || "").toLowerCase();
+  let sum = 0;
+  let via = null;
+  for (const t of tokens) {
+    const inTitle = titleScore(title, t);
+    if (inTitle > 0) {
+      sum += inTitle;
+      via = "title";
+    } else if (tags.some((tag) => tag.startsWith(t))) {
+      sum += 2;
+      if (via !== "title") via = "tag";
+    } else if (startsWord(body, t)) {
+      sum += 1;
+      via ??= "fulltext";
+    }
+  }
+  return { score: sum / (4 * tokens.length), via };
+}
+function startsWord(text, term) {
+  for (let i = text.indexOf(term); i !== -1; i = text.indexOf(term, i + 1)) {
+    if (i === 0 || !/[a-z0-9]/.test(text[i - 1])) return true;
+  }
+  return false;
+}
 
 // src/nodes/readable-body.ts
 async function resolveReadableBody(nestId, nodeId, userId, workingBody) {
@@ -7393,7 +7473,8 @@ queryRoutes.post("/context", async (c) => {
   const baseUrl = requestBaseUrl(c.req.url);
   const { query: queryEngine, storage } = await engineCache.get(nestId);
   const maxTokens = Math.max(50, body.max_tokens ?? 4e3);
-  const hops = body.hops ?? 2;
+  const promptPath = !body.selector?.trim() && !!body.prompt;
+  const hops = body.hops ?? (promptPath ? 0 : 2);
   const includeDrafts = body.include_drafts === true;
   const isVisible = (d) => includeDrafts || d.frontmatter.status === "published";
   let selector = body.selector?.trim() || null;
@@ -7427,7 +7508,7 @@ queryRoutes.post("/context", async (c) => {
         compileDetail.matchedTitles.map((t) => t.toLowerCase())
       );
       titleMatches = allDocs.filter(
-        (d) => matchedLower.has(d.frontmatter.title.toLowerCase())
+        (d) => matchedLower.has(d.frontmatter.title.toLowerCase()) && isVisible(d)
       );
     }
   }
@@ -7491,6 +7572,27 @@ queryRoutes.post("/context", async (c) => {
       }
     }
   }
+  const relevance = /* @__PURE__ */ new Map();
+  let fallback = null;
+  if (compileDetail) {
+    const tokens = tokenizePrompt(body.prompt);
+    const compiled = new Set(documents.map((d) => d.id));
+    for (const d of allDocs) {
+      const { score, via } = scorePrompt(d, tokens);
+      if (compiled.has(d.id)) relevance.set(d.id, { score, via: via ?? "hop" });
+      else if (score > 0 && isVisible(d)) {
+        relevance.set(d.id, { score, via });
+        documents.push(d);
+      }
+    }
+    if (compiled.size === 0 && documents.length > 0) fallback = "fulltext";
+    const top = Math.max(0, ...documents.map((d) => relevance.get(d.id).score));
+    documents = documents.filter((d) => {
+      const r = relevance.get(d.id);
+      return compiled.has(d.id) || r.via === "hop" || r.score >= top / 2;
+    });
+    documents.sort((a, b) => relevance.get(b.id).score - relevance.get(a.id).score);
+  }
   const userId = c.get("userId");
   const userEmail = await resolveCallerEmail(userId);
   const beforePermission = documents.length;
@@ -7508,10 +7610,14 @@ queryRoutes.post("/context", async (c) => {
   for (const doc of readable) {
     const block = formatContextBlock(doc, doc.url);
     const blockTokens = approxTokens(block);
-    if (tokenCount + blockTokens > maxTokens && included.length > 0) break;
+    if (tokenCount + blockTokens > maxTokens) continue;
     included.push(doc);
     tokenCount += blockTokens;
   }
+  if (included.length === 0 && readable.length > 0) {
+    included.push(readable[0]);
+    tokenCount = approxTokens(formatContextBlock(readable[0], readable[0].url));
+  }
   const truncatedByBudget = accessible.length - included.length;
   const contextMarkdown = included.map((n) => formatContextBlock(n, n.url)).join("\n\n---\n\n");
   trackEvent("context.resolve", {
@@ -7528,7 +7634,8 @@ queryRoutes.post("/context", async (c) => {
       title: n.frontmatter.title,
       url: n.url,
       tags: n.frontmatter.tags || [],
-      type: n.frontmatter.type || "document"
+      type: n.frontmatter.type || "document",
+      ...relevance.get(n.id)
     })),
     trace: {
       selector_used: selector,
@@ -7536,7 +7643,8 @@ queryRoutes.post("/context", async (c) => {
       compiled: compileDetail ? {
         matched_tags: compileDetail.matchedTags,
         matched_titles: compileDetail.matchedTitles,
-        unmatched_tokens: compileDetail.unmatched
+        unmatched_tokens: compileDetail.unmatched,
+        fallback
       } : null,
       total_matched: documents.length,
       permission_filtered: permissionFiltered,
@@ -7721,11 +7829,11 @@ queryRoutes.get("/export", async (c) => {
     let tokens = 0;
     for (const f of fields) {
       const t = approxTokens(nodeToMarkdown(f));
-      if (tokens + t > maxTokens && kept.length > 0) break;
+      if (tokens + t > maxTokens) continue;
       kept.push(f);
       tokens += t;
     }
-    included = kept;
+    included = kept.length > 0 ? kept : fields.slice(0, 1);
   }
   trackEvent("nest.export", {
     nestId,
@@ -10256,21 +10364,20 @@ ${list}${more}
 Submit one with \`context_submit_review\`.`;
     }
     case "context_submit_review": {
-      const docs = await storage.discoverDocuments();
-      const node = docs.find(
-        (n) => n.frontmatter.title.toLowerCase() === args.title.toLowerCase()
-      );
-      if (!node) return toolError(`Node not found: ${args.title}`, "DOCUMENT_NOT_FOUND");
+      const resolved = await resolveTargetNode(storage, args);
+      if (typeof resolved === "string") return toolError(resolved, "DOCUMENT_NOT_FOUND");
+      const node = resolved;
+      const nodeLabel = args.title || args.id;
       const submitCheck = await canUserEdit(ctx.nestId, node.id, userEmail);
       if (!submitCheck.allowed) {
         return toolError(
-          `You don't have permission to submit "${args.title}" for review: ${submitCheck.reason}`,
+          `You don't have permission to submit "${nodeLabel}" for review: ${submitCheck.reason}`,
           "UNAUTHORIZED_ACTION"
         );
       }
       const currentVersion = await getCurrentVersion(ctx.nestId, node.id);
       if (currentVersion === 0)
-        return toolError(`No versions found for "${args.title}"`, "VERSION_NOT_FOUND");
+        return toolError(`No versions found for "${nodeLabel}"`, "VERSION_NOT_FOUND");
       try {
         const request = await submitForReview({
           nestId: ctx.nestId,
@@ -10281,16 +10388,16 @@ Submit one with \`context_submit_review\`.`;
           priority: args.priority,
           baseUrl: ctx.baseUrl
         });
-        const resolved = await resolveStewardsForNode(
+        const resolved2 = await resolveStewardsForNode(
           ctx.nestId,
           node.id
         );
-        const stewardList = resolved.length > 0 ? `
+        const stewardList = resolved2.length > 0 ? `
 
 **Stewards who can review:**
-${resolved.map((r) => `- ${r.steward.userEmail} (${r.source})`).join("\n")}` : "";
+${resolved2.map((r) => `- ${r.steward.userEmail} (${r.source})`).join("\n")}` : "";
         return {
-          text: `Submitted "${args.title}" v${currentVersion} for review (${request.priority} priority).${stewardList}`,
+          text: `Submitted "${nodeLabel}" v${currentVersion} for review (${request.priority} priority).${stewardList}`,
           // No catalog shape to conform to — `context_submit_review` is a
           // governance-namespace operation and that namespace is declared but
           // unimplemented in the engine (`api/index.ts`, NAMESPACES). So this
@@ -10311,7 +10418,7 @@ ${resolved.map((r) => `- ${r.steward.userEmail} (${r.source})`).join("\n")}` : "
               requested_by: request.requestedBy,
               requested_at: request.requestedAt
             },
-            reviewers: resolved.map((r) => r.steward.userEmail)
+            reviewers: resolved2.map((r) => r.steward.userEmail)
           }
         };
       } catch (err) {
@@ -10456,8 +10563,8 @@ ${list}`,
       if (!target) return "target is required (a node id or folder prefix).";
       if (!["read", "write"].includes(role)) return "role must be read or write.";
       try {
-        const { createGrant: createGrant2 } = await import("./grants-service-TBGTCO5K.js");
-        const db = (await import("./client-LWDMNKX3.js")).getDb();
+        const { createGrant: createGrant2 } = await import("./grants-service-UT3EQ3R7.js");
+        const db = (await import("./client-KEY4PYJH.js")).getDb();
         const { normalizeEmail: normalizeEmail2 } = await import("./email-R7DFS6E5.js");
         const e = normalizeEmail2(String(args.email || ""));
         if (!e) return "email is required.";
@@ -11747,7 +11854,20 @@ import { Hono as Hono23 } from "hono";
 import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { WebStandardStreamableHTTPServerTransport as WebStandardStreamableHTTPServerTransport2 } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 import { z as z2 } from "zod";
-var SERVER_WRITE_TOOLS = /* @__PURE__ */ new Set(["nest_create", "context_create"]);
+var SERVER_WRITE_TOOLS = /* @__PURE__ */ new Set([
+  "nest_create",
+  "context_create",
+  "context_update",
+  "context_delete",
+  "context_move",
+  "context_submit_review"
+]);
+var FANOUT_READ_TOOLS = /* @__PURE__ */ new Set([
+  "context_search",
+  "context_list",
+  "context_query",
+  "context_overview"
+]);
 async function getUserEmail3(userId) {
   const db = getDb();
   const user = await db.get("SELECT email FROM users WHERE id = ?", [
@@ -11847,77 +11967,83 @@ var NEST_ARG = {
     description: "Target nest \u2014 id, or exact name/slug (case-insensitive)"
   }
 };
+var NEST_ARG_OPTIONAL = {
+  nest: {
+    type: "string",
+    description: "Target nest \u2014 id or name. Omit to search/list across ALL accessible nests."
+  }
+};
 var SERVER_TOOL_DEFINITIONS = [
   {
     name: "nest_index",
-    description: "Grounded index of every nest these credentials can read: name, id, permission, document count. Call this FIRST, then target a nest with the other tools.",
+    description: "Grounded index of every nest these credentials can read: name, id, permission, document count. Call this FIRST.",
     inputSchema: { type: "object", properties: {} }
   },
+  // ─── Fan-out reads (nest optional) ─────────────────────────────────────
   {
     name: "context_query",
-    description: "Run a structured selector query against one nest. Selector grammar: #tag, type:X, [[Title]], scope:X, combined with +AND, |OR, -NOT.",
+    description: "Run a structured selector query. Omit `nest` to query ALL accessible nests. Selector: #tag, type:X, [[Title]], scope:X, +AND, |OR, -NOT.",
     inputSchema: {
       type: "object",
       properties: {
-        ...NEST_ARG,
+        ...NEST_ARG_OPTIONAL,
         query: { type: "string", description: "Selector query" },
         hops: {
           type: "number",
           description: "Graph traversal depth from the matches (default: 2)"
         }
       },
-      required: ["nest", "query"]
+      required: ["query"]
     }
   },
   {
     name: "context_search",
-    description: "Full-text keyword search across one nest \u2014 the same index-backed match as REST GET /search. Returns `count` (everything found) and the first `limit` hits.",
+    description: "Full-text keyword search. Omit `nest` to search ALL accessible nests. Returns count and first `limit` hits.",
     inputSchema: {
       type: "object",
       properties: {
-        ...NEST_ARG,
+        ...NEST_ARG_OPTIONAL,
         query: { type: "string", description: "Search terms" },
         limit: {
           type: "number",
           description: "Max hits to return (default 20, max 200)"
         }
       },
-      required: ["nest", "query"]
-    }
-  },
-  {
-    name: "context_get",
-    description: "Get the FULL content of a node in a nest by title or id.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        ...NEST_ARG,
-        title: { type: "string", description: "Title of the node" },
-        id: { type: "string", description: "ID of the node" }
-      },
-      required: ["nest"]
+      required: ["query"]
     }
   },
   {
     name: "context_list",
-    description: "Browse one nest's contents with optional type, tag, or limit filters.",
+    description: "Browse contents with optional type, tag, or limit filters. Omit `nest` to list ALL accessible nests.",
     inputSchema: {
       type: "object",
       properties: {
-        ...NEST_ARG,
+        ...NEST_ARG_OPTIONAL,
         type: { type: "string", description: "Filter by node type" },
         tag: { type: "string", description: "Filter by tag" },
         limit: { type: "number", description: "Max nodes to return" }
-      },
-      required: ["nest"]
+      }
     }
   },
   {
     name: "context_overview",
-    description: "Map of one nest: node count, types, tags, title+snippet per node.",
+    description: "Map of nests: node count, types, tags, title+snippet per node. Omit `nest` for ALL accessible nests.",
     inputSchema: {
       type: "object",
-      properties: { ...NEST_ARG },
+      properties: { ...NEST_ARG_OPTIONAL }
+    }
+  },
+  // ─── Targeted reads (nest required) ────────────────────────────────────
+  {
+    name: "context_get",
+    description: "Get the FULL content of a node in a nest by title or id.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        ...NEST_ARG,
+        title: { type: "string", description: "Title of the node" },
+        id: { type: "string", description: "ID of the node" }
+      },
       required: ["nest"]
     }
   },
@@ -11969,9 +12095,10 @@ var SERVER_TOOL_DEFINITIONS = [
       required: ["name"]
     }
   },
+  // ─── Writes (nest required) ────────────────────────────────────────────
   {
     name: "context_create",
-    description: "Create a new knowledge node (document) in a nest. Needs write permission on that nest. A `folder` path creates the folder implicitly \u2014 folders exist through the nodes placed in them.",
+    description: "Create a new document in a nest. Needs write permission. A `folder` path creates the folder implicitly.",
     inputSchema: {
       type: "object",
       properties: {
@@ -11988,6 +12115,66 @@ var SERVER_TOOL_DEFINITIONS = [
       },
       required: ["nest", "title", "content"]
     }
+  },
+  {
+    name: "context_update",
+    description: "Update an existing node by title or id. Needs write permission. Use `content` to replace, `append` to add.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        ...NEST_ARG,
+        title: { type: "string", description: "Title of node to update" },
+        id: { type: "string", description: "Node id (use when title is ambiguous)" },
+        content: { type: "string", description: "New content (replaces)" },
+        append: { type: "string", description: "Content to append" },
+        tags: { type: "array", items: { type: "string" }, description: "Tags to add" },
+        status: { type: "string", description: "New status: draft|pending_review|approved|published" },
+        changeNote: { type: "string", description: "Why this changed \u2014 recorded in history" }
+      },
+      required: ["nest"]
+    }
+  },
+  {
+    name: "context_delete",
+    description: "Delete a node by title or id. Needs write permission. Irreversible.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        ...NEST_ARG,
+        title: { type: "string", description: "Title of node to delete" },
+        id: { type: "string", description: "Node id (use when title is ambiguous)" }
+      },
+      required: ["nest"]
+    }
+  },
+  {
+    name: "context_move",
+    description: "Move a node to a different folder. The id changes; history and links follow. Needs write permission.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        ...NEST_ARG,
+        title: { type: "string", description: "Title of node to move" },
+        id: { type: "string", description: "Node id (use when title is ambiguous)" },
+        folder: { type: "string", description: 'Destination folder (e.g. "gtm/deals"); "" for root' }
+      },
+      required: ["nest", "folder"]
+    }
+  },
+  {
+    name: "context_submit_review",
+    description: "Submit a node for steward review. Stewards will be notified. Use on governed nests.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        ...NEST_ARG,
+        title: { type: "string", description: "Title of node to submit" },
+        id: { type: "string", description: "Node id (use when title is ambiguous)" },
+        note: { type: "string", description: "Note for the reviewer" },
+        priority: { type: "string", description: "Priority: low, normal, high, urgent" }
+      },
+      required: ["nest"]
+    }
   }
 ];
 async function handleServerToolCall(toolName, args, userId, userEmail, nestScope, baseUrl) {
@@ -12021,8 +12208,49 @@ async function handleServerToolCall(toolName, args, userId, userEmail, nestScope
       throw err;
     }
   }
-  const inaccessible = `Nest not found or not accessible: "${args.nest}". Use nest_index to see what these credentials can read.`;
-  const nest = await resolveNestRef(String(args.nest ?? ""), userId);
+  const nestArg = args.nest;
+  if (!nestArg && FANOUT_READ_TOOLS.has(toolName)) {
+    const nests = await buildNestIndex(userId, nestScope);
+    if (!nests.length) return "No nests accessible with these credentials.";
+    const nonEmpty = nests.filter((n) => (n.document_count ?? 0) > 0);
+    if (!nonEmpty.length) {
+      return "All accessible nests are empty. Use context_create to add documents first.";
+    }
+    const results = await Promise.allSettled(
+      nonEmpty.map(async (n) => {
+        const engine2 = await engineCache.get(n.id);
+        const result = await handleToolCall(toolName, args, {
+          storage: engine2.storage,
+          queryEngine: engine2.query,
+          versionManager: engine2.versions,
+          nestId: n.id,
+          userId,
+          userEmail,
+          baseUrl
+        });
+        return { nest: n, result };
+      })
+    );
+    const parts = [];
+    for (const r of results) {
+      if (r.status === "fulfilled") {
+        const { nest: n, result } = r.value;
+        const text = typeof result === "string" ? result : result.text;
+        parts.push(`## ${n.name} (${n.id})
+
+${text}`);
+      }
+    }
+    if (!parts.length) {
+      return "No results found across any accessible nests.";
+    }
+    return parts.join("\n\n---\n\n");
+  }
+  const inaccessible = `Nest not found or not accessible: "${nestArg}". Use nest_index to see what these credentials can read.`;
+  if (!nestArg) {
+    return "This tool requires a `nest` argument. Use nest_index to see available nests.";
+  }
+  const nest = await resolveNestRef(String(nestArg), userId);
   if (!nest) return inaccessible;
   if (nestScope && nest.id !== nestScope) return inaccessible;
   if (!await canRead(nest.id, userId)) return inaccessible;
@@ -12164,26 +12392,47 @@ Other read endpoints (all under \`${B}/nests/<nest-id>\`):
 - \`GET /nodes/<node-id>?format=raw\` \u2014 direct consumption path: the node BODY as plain text (no JSON envelope; add \`&frontmatter=1\` for the stored YAML block)
 - \`GET /export?format=markdown\` \u2014 whole nest as one markdown file (optional \`selector\`, \`max_tokens\`)
 - \`GET /graph\` \u2014 ontology graph (nodes, links, tags, stewards)
+- \`GET /folders\` \u2014 folder tree; \`GET /nodes?folder=<path>\` \u2014 one folder level
+- \`POST /table-query\` \u2014 exact rows from a table node: \`{ "table": "[[Title]]", "query": "where <col> <op> <value> [select cols] [limit N]" }\`
+- \`GET /nodes/<node-id>/versions\` \u2014 history (who, when, approval state); \`/versions/<n>\` \u2014 one version
+- \`GET /nodes/<node-id>/comments\` \u2014 review threads (anchored quotes, replies, open/resolved)
 
 Write endpoints (need write permission):
 - \`POST /nodes\` \u2014 \`{ "title", "content", "tags"?, "type"?, "folder"? }\`
 - \`PATCH /nodes/<node-id>\` \u2014 \`{ "content"? , "append"?, "tags"?, "title"? }\`
-- \`DELETE /nodes/<node-id>\`
-- Governance: \`POST /nodes/<id>/submit-review\`, \`/approve\`, \`/reject\`
+- \`DELETE /nodes/<node-id>\`; \`POST /nodes/<id>/request-deletion\` when you lack delete rights
+- \`POST /nodes/<id>/move\` \u2014 \`{ "folder" }\`; history and comments follow
+- \`POST /nodes/<id>/revert\` \u2014 \`{ "targetVersion" }\` restores a past version as a new one
+- \`POST /nodes/<id>/comments\` \u2014 leave or reply to a review comment
+- Governance: \`POST /nodes/<id>/submit-review\`, \`/approve\`, \`/reject\`, \`/cancel-review\`
+- \`GET /review-queue\` \u2014 what is waiting on a steward in this nest
+
+## Your inbox (server-level)
+
+- \`GET ${B}/me/work\` \u2014 reviews waiting on you and handoffs, across every nest
+- \`GET ${B}/me/drafts\` \u2014 your documents never submitted for review
+- \`GET ${B}/me/notifications\` \u2014 watcher and review notifications
 
 ## MCP (Model Context Protocol)
 
 Streamable HTTP, stateless. Two endpoints:
 
-- \`${B}/mcp\` \u2014 server-level, one connection for everything readable.
-  Tools: \`nest_index\` (call first), then \`context_query\`, \`context_search\`,
-  \`context_get\`, \`context_list\`, \`context_overview\`, \`context_resolve\` \u2014
-  each takes a \`nest\` argument (id or exact name) plus the same
-  selector/hops/max_tokens parameters as the REST API. Two bootstrap writes:
-  \`nest_create\` (new nest owned by the caller) and \`context_create\`
-  (new document in a writable nest; a \`folder\` path creates the folder).
-- \`${B}/nests/<nest-id>/mcp\` \u2014 per-nest, full toolset including writes and
-  governance (create/update, submit/approve/reject, stewards, sharing).
+- \`${B}/mcp\` \u2014 server-level, one connection for everything.
+  Tools: \`nest_index\` (call first), then:
+  - Fan-out reads (omit \`nest\` to search/list ALL nests): \`context_search\`,
+    \`context_list\`, \`context_query\`, \`context_overview\`
+  - Targeted reads (\`nest\` required): \`context_get\`, \`context_resolve\`, \`context_comments\`
+  - Writes (\`nest\` required): \`nest_create\`, \`context_create\`, \`context_update\`,
+    \`context_delete\`, \`context_move\`, \`context_submit_review\`
+- \`${B}/nests/<nest-id>/mcp\` \u2014 per-nest, the full toolset. Same names as the
+  server-level tools without the \`nest\` argument, plus:
+  - read: \`context_init\` (operating instructions \u2014 call first), \`context_export\`, \`context_table_query\`, \`context_versions\`
+  - write: \`context_update\`, \`context_delete\`, \`context_move\`, \`context_request_deletion\`
+  - review: \`context_submit_review\`, \`context_approve\`, \`context_reject\`, \`context_review_queue\`, \`context_my_drafts\`
+  - comments: \`context_comment\`, \`context_resolve_comment\`
+  - people: \`context_stewards\`, \`context_assign_steward\`, \`context_share_nest\`, \`context_grant\`
+  - admin: \`context_deletion_queue\`, \`context_resolve_deletion\`, \`context_unsynced_list\`, \`context_sync_folder\`
+  - \`workflow_*\` (runs, edges, edge types) when the nest's workflow plane is on
   Sharing a slice is one call: \`context_grant\` with
   \`{ "email", "target_type": "document" | "folder", "target", "role": "read" | "write" }\`
   \u2014 \`target\` is a node id (\`nodes/win-loss-log\`) or a folder prefix
@@ -13022,6 +13271,7 @@ governanceRoutes.get("/external-edits", async (c) => {
     await scanNestForDrift(nestId, "user:refresh");
   }
   const entries = await listNestExternalEdits(nestId);
+  if (c.req.query("count") === "1") return c.json({ total: entries.length });
   return c.json({ entries, total: entries.length });
 });
 governanceRoutes.post("/external-edits/scan", async (c) => {
@@ -13488,6 +13738,21 @@ async function ensureAnonymousUser() {
   return ANON_USER_ID;
 }
 
+// src/shared/posthog-key.ts
+var POSTHOG_KEY_MIN_TOKEN = 20;
+function posthogKeyError(value) {
+  const v = value.trim();
+  if (!v) return null;
+  if (!v.startsWith("phc_"))
+    return "PostHog project key must start with phc_ \u2014 copy the project API key from PostHog settings.";
+  const token = v.slice(4);
+  if (!/^[A-Za-z0-9]*$/.test(token))
+    return "PostHog project key may only contain letters and digits after phc_ \u2014 check for spaces or punctuation.";
+  if (token.length < POSTHOG_KEY_MIN_TOKEN)
+    return `PostHog project key looks too short \u2014 a real key is about 47 characters long (phc_ plus ${POSTHOG_KEY_MIN_TOKEN}+ letters and digits). Copy the whole key from PostHog settings.`;
+  return null;
+}
+
 // src/app.ts
 import { serveStatic } from "@hono/node-server/serve-static";
 import { fileURLToPath } from "url";
@@ -13901,7 +14166,9 @@ function createApp() {
     }
     if ("posthog_key" in body) {
       const v = String(body.posthog_key ?? "").trim();
-      pending.push({ name: "POSTHOG_KEY", value: v || null });
+      const keyError = posthogKeyError(v);
+      if (keyError) addError("posthog_key", keyError);
+      else pending.push({ name: "POSTHOG_KEY", value: v || null });
     }
     if ("posthog_host" in body) {
       const v = String(body.posthog_host ?? "").trim().replace(/\/$/, "");
@@ -14666,7 +14933,7 @@ function createApp() {
     const isCommentAction = /\/comments$/.test(path) || /\/comments\/[^/]+\/resolve$/.test(path);
     const isDeletionRequestAction = /\/request-deletion$/.test(path) || /\/deletion-requests\/[^/]+\/withdraw$/.test(path);
     const isStewardRoster = path.includes("/stewards") && !path.includes("/nodes/");
-    if (isStewardRoster && permission !== "owner" && permission !== "admin") {
+    if (isStewardRoster && access.rawPermission !== "owner" && access.rawPermission !== "admin") {
       return c.json(
         {
           error: "You don't have permission to manage stewards. Only a nest admin, the nest owner, or the server admin can do this."
@@ -14674,6 +14941,13 @@ function createApp() {
         403
       );
     }
+    if (isStewardRoster && access.archived && c.req.method !== "GET") {
+      return deny(
+        403,
+        "This nest is archived, so it is read-only. Restore it to change stewards.",
+        { archived: true }
+      );
+    }
     const resource = parts[1];
     if (resource === "visibility" || resource === "reader-mode") {
       required = "admin";
@@ -14712,6 +14986,13 @@ function createApp() {
     const grantLevel = grantRole ? permissionLevel(grantRole) : grantNestVisible ? permissionLevel("read") : 0;
     const effectiveLevel = Math.max(permissionLevel(permission), grantLevel);
     if (!stewardEditorBypass && effectiveLevel < permissionLevel(required)) {
+      if (access.archived && permissionLevel(access.rawPermission) >= permissionLevel(required)) {
+        return deny(
+          403,
+          "This nest is archived, so it is read-only. Restore it to make changes.",
+          { archived: true }
+        );
+      }
       return deny(
         403,
         `You don't have access to perform this action on this nest. Required permission: '${required}', your permission: '${permission}'. Ask the nest owner or a server admin to grant you ${required} access.`,