@promptowl/contextnest-community 1.24.0 → 1.26.0

package/dist/{chunk-ZTT4U4NE.js → chunk-IEAWRHMV.js}

@@ -2,13 +2,88 @@ import {
   buildTitleMap,
   insertOrReplace,
   nowExpr
-} from "./chunk-KIAAEHWL.js";
+} from "./chunk-SWA5M5XX.js";
+import {
+  ValidationError
+} from "./chunk-LHWOJPFE.js";
 import {
   getDb
-} from "./chunk-LA3VTQ22.js";
+} from "./chunk-TRSGPS27.js";
 
 // src/governance/version-service.ts
 import { createHash } from "crypto";
+
+// src/shared/client-metadata.ts
+import {
+  clientField,
+  clientMetadataSchema,
+  CLIENT_METADATA_MAX_VALUE_LENGTH
+} from "@promptowl/contextnest-engine/api";
+import { z } from "zod";
+var clientToolField = {
+  client: z.any().optional().describe(clientField.client.description ?? "")
+};
+function boundedValue(raw) {
+  const cut = raw.slice(0, CLIENT_METADATA_MAX_VALUE_LENGTH);
+  const last = cut.charCodeAt(cut.length - 1);
+  return last >= 55296 && last <= 56319 ? cut.slice(0, -1) : cut;
+}
+function orAbsent(value) {
+  return Object.keys(value).length > 0 ? value : void 0;
+}
+function parseClientMetadata(raw) {
+  if (raw === void 0 || raw === null) return void 0;
+  const parsed = clientMetadataSchema.safeParse(raw);
+  if (!parsed.success) {
+    const detail = parsed.error.issues.map((i) => i.path.length ? `${i.path.join(".")}: ${i.message}` : i.message).join("; ");
+    throw new ValidationError(`Invalid client metadata \u2014 ${detail}`);
+  }
+  return orAbsent(parsed.data);
+}
+function mergeClient(derived, supplied) {
+  return orAbsent({ ...derived, ...supplied });
+}
+function derivedClient(c, connection) {
+  if (process.env.CONTEXTNEST_NO_ATTRIBUTION === "1") return {};
+  const agent = process.env.CONTEXTNEST_AGENT || connection?.agent || c.get("apiKeyLabel") || "";
+  const session = process.env.CONTEXTNEST_SESSION_ID || connection?.session_id || c.req.header("Mcp-Session-Id") || "";
+  return {
+    // Truncated to the engine's bound, not rejected: a derived value must never
+    // be the reason an otherwise valid call fails validation.
+    ...agent ? { agent: boundedValue(String(agent)) } : {},
+    ...session ? { session_id: boundedValue(String(session)) } : {}
+  };
+}
+function connectionClient(server) {
+  const name = server.server.getClientVersion()?.name;
+  const sessionId = server.server.transport?.sessionId;
+  return {
+    ...name ? { agent: name } : {},
+    ...sessionId ? { session_id: sessionId } : {}
+  };
+}
+function attributeRequest(c, supplied, connection) {
+  const client = mergeClient(
+    derivedClient(c, connection),
+    parseClientMetadata(supplied)
+  );
+  if (client) c.set("clientMetadata", client);
+  return client;
+}
+function serializeClient(value) {
+  return value ? JSON.stringify(value) : null;
+}
+function deserializeClient(raw) {
+  if (typeof raw !== "string" || !raw) return void 0;
+  try {
+    const parsed = JSON.parse(raw);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? orAbsent(parsed) : void 0;
+  } catch {
+    return void 0;
+  }
+}
+
+// src/governance/version-service.ts
 function hashContent(content) {
   return createHash("sha256").update(content).digest("hex");
 }
@@ -20,8 +95,8 @@ async function createVersion(params) {
   const db = getDb();
   const contentHash = hashContent(params.content);
   await db.run(
-    `INSERT INTO node_versions (nest_id, node_id, version, content_hash, author, status, change_note, tags_json)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,
+    `INSERT INTO node_versions (nest_id, node_id, version, content_hash, author, status, change_note, tags_json, client_json)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,
     [
       params.nestId,
       params.nodeId,
@@ -30,7 +105,8 @@ async function createVersion(params) {
       params.author,
       params.status,
       params.changeNote || null,
-      params.tags ? JSON.stringify(params.tags) : null
+      params.tags ? JSON.stringify(params.tags) : null,
+      serializeClient(params.client)
     ]
   );
   return {
@@ -39,7 +115,8 @@ async function createVersion(params) {
     editedBy: params.author,
     editedAt: (/* @__PURE__ */ new Date()).toISOString(),
     changeNote: params.changeNote,
-    status: params.status
+    status: params.status,
+    client: params.client
   };
 }
 async function upsertVersion(params) {
@@ -47,13 +124,13 @@ async function upsertVersion(params) {
   const contentHash = hashContent(params.content);
   const sql = insertOrReplace(
     db,
-    `INSERT INTO node_versions (nest_id, node_id, version, content_hash, author, status, change_note, tags_json)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,
+    `INSERT INTO node_versions (nest_id, node_id, version, content_hash, author, status, change_note, tags_json, client_json)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,
     ["nest_id", "node_id", "version"],
     // Reset created_at on conflict too: SQLite's INSERT OR REPLACE deletes+
     // reinserts (created_at → now), so mirror that on Postgres — otherwise a
     // draft edited in place would keep its original (import-time) "edited at".
-    `content_hash = excluded.content_hash, author = excluded.author, status = excluded.status, change_note = excluded.change_note, tags_json = excluded.tags_json, created_at = ${nowExpr(db)}`
+    `content_hash = excluded.content_hash, author = excluded.author, status = excluded.status, change_note = excluded.change_note, tags_json = excluded.tags_json, client_json = excluded.client_json, created_at = ${nowExpr(db)}`
   );
   await db.run(sql, [
     params.nestId,
@@ -63,7 +140,8 @@ async function upsertVersion(params) {
     params.author,
     params.status,
     params.changeNote || null,
-    params.tags ? JSON.stringify(params.tags) : null
+    params.tags ? JSON.stringify(params.tags) : null,
+    serializeClient(params.client)
   ]);
   return {
     version: params.version,
@@ -71,7 +149,8 @@ async function upsertVersion(params) {
     editedBy: params.author,
     editedAt: (/* @__PURE__ */ new Date()).toISOString(),
     changeNote: params.changeNote,
-    status: params.status
+    status: params.status,
+    client: params.client
   };
 }
 async function getVersions(nestId, nodeId) {
@@ -354,11 +433,19 @@ function rowToVersion(row) {
     editedBy: row.author,
     editedAt: row.created_at,
     changeNote: row.change_note || void 0,
-    status: row.status
+    status: row.status,
+    client: deserializeClient(row.client_json)
   };
 }
 
 export {
+  clientToolField,
+  parseClientMetadata,
+  mergeClient,
+  connectionClient,
+  attributeRequest,
+  serializeClient,
+  deserializeClient,
   hashContent,
   SYSTEM_AUTHOR_PREFIX,
   systemAuthor,

package/dist/{chunk-YVMSM7LS.js → chunk-LHWOJPFE.js}

@@ -31,6 +31,12 @@ var ValidationError = class extends AppError {
     this.name = "ValidationError";
   }
 };
+var PayloadTooLargeError = class extends AppError {
+  constructor(message) {
+    super(413, message);
+    this.name = "PayloadTooLargeError";
+  }
+};
 var ConflictError = class extends AppError {
   constructor(message) {
     super(409, message);
@@ -61,6 +67,7 @@ export {
   ForbiddenError,
   UnauthorizedError,
   ValidationError,
+  PayloadTooLargeError,
   ConflictError,
   LockedError,
   VaultBusyError,

package/dist/{chunk-5EZOPA47.js → chunk-M6PGYMBD.js}

@@ -4,19 +4,19 @@ import {
   resolveNestWideRoles,
   resolveStewardsForNode,
   stewardCoverageForUser
-} from "./chunk-2TPQTN4Y.js";
+} from "./chunk-DGPTJXIV.js";
 import {
   grantCoversNode,
   listUserGrants,
   resolveNodeGrant
-} from "./chunk-I3CSD6CK.js";
+} from "./chunk-RPGFHESR.js";
 import {
   createVersion,
   getApprovedVersion,
   getApprovedVersions,
   getCurrentVersion,
   setApprovedVersion
-} from "./chunk-ZTT4U4NE.js";
+} from "./chunk-IEAWRHMV.js";
 import {
   buildDocContext,
   buildTitleMap,
@@ -28,25 +28,28 @@ import {
   isStewardshipEnabled,
   markNotificationsReadBySubject,
   nestName,
-  notifyEmailForNest,
   notifyReviewRequested,
   notifyReviewResolved,
   nowExpr,
   opContext,
   prettyFolderPath,
   resolveNestPermission,
-  sendEmailToRecipient,
   titleForNode
-} from "./chunk-KIAAEHWL.js";
+} from "./chunk-SWA5M5XX.js";
 import {
   ConflictError,
   NotFoundError,
   ValidationError
-} from "./chunk-YVMSM7LS.js";
+} from "./chunk-LHWOJPFE.js";
+import {
+  notifyEmailForNest,
+  sendEmailToRecipient,
+  transportSettings
+} from "./chunk-I5EDEZBQ.js";
 import {
   config,
   getDb
-} from "./chunk-LA3VTQ22.js";
+} from "./chunk-TRSGPS27.js";
 
 // src/governance/review-service.ts
 import { v4 as uuid2 } from "uuid";
@@ -712,7 +715,7 @@ async function flush(nestId) {
   ]);
 }
 async function notifyNestEvent(nestId, message, details, opts) {
-  if (!config.SLACK_WEBHOOK_URL && !config.MSTEAMS_WEBHOOK_URL && !config.SMTP_URL)
+  if (!config.SLACK_WEBHOOK_URL && !config.MSTEAMS_WEBHOOK_URL && !transportSettings())
     return;
   const buf = buffers.get(nestId);
   if (buf) {
@@ -788,7 +791,8 @@ async function submitForReview(params) {
         );
         if (!alreadySealed) {
           await versionManager.createVersion(node, params.requestedBy, {
-            note: params.note || "Submitted for review"
+            note: params.note || "Submitted for review",
+            ...params.client ? { client: params.client } : {}
           });
         }
       } catch (err) {
@@ -955,7 +959,8 @@ async function approve(params) {
           author: params.approvedBy,
           status: "published",
           tags,
-          changeNote: note
+          changeNote: note,
+          client: params.client
         });
         await setApprovedVersion(
           params.nestId,
@@ -1129,6 +1134,10 @@ async function getReviewQueue(params) {
     );
     args.push(...statuses);
   }
+  if (params.requestedByEmail) {
+    whereClauses.push("requested_by = ?");
+    args.push(params.requestedByEmail);
+  }
   const where = whereClauses.length > 0 ? `WHERE ${whereClauses.join(" AND ")}` : "";
   const total = Number(
     (await db.get(

package/dist/{chunk-F66VCBLA.js → chunk-PICUHQEM.js}

@@ -1,3 +1,17 @@
+import {
+  sendEmailToRecipient
+} from "./chunk-I5EDEZBQ.js";
+import {
+  config,
+  getDb
+} from "./chunk-TRSGPS27.js";
+import {
+  normalizeEmail
+} from "./chunk-FRQJWGN3.js";
+
+// src/auth/invited-user.ts
+import { v4 as uuid } from "uuid";
+
 // src/auth/keys.ts
 import { randomBytes, createHash, timingSafeEqual } from "crypto";
 import bcrypt from "bcryptjs";
@@ -124,6 +138,40 @@ function normalizeKeyLabel(raw) {
   return trimmed;
 }
 
+// src/auth/invited-user.ts
+async function createInvitedUser(rawEmail, opts = {}) {
+  const email = normalizeEmail(rawEmail);
+  const id = uuid();
+  const tempPassword = uuid().replace(/-/g, "").slice(0, 16);
+  await getDb().run(
+    "INSERT INTO users (id, email, name, password_hash, is_invited) VALUES (?, ?, ?, ?, 1)",
+    [id, email, null, await hashPassword(tempPassword)]
+  );
+  const base = (opts.baseUrl || config.PUBLIC_BASE_URL || "").replace(/\/$/, "");
+  void sendEmailToRecipient(email, {
+    status: "invited",
+    docTitle: "ContextNest",
+    path: "",
+    actor: email,
+    by: opts.invitedBy || void 0,
+    tempPassword,
+    promptowlSignIn: config.PROMPTOWL_SIGN_IN_GATE === "open",
+    // ?invite= prefills the login page and guides them to sign in.
+    link: base ? `${base}/?invite=${encodeURIComponent(email)}` : ""
+  });
+  return { id, tempPassword };
+}
+async function findOrCreateInvitedUser(rawEmail, opts = {}) {
+  const email = normalizeEmail(rawEmail);
+  const existing = await getDb().get(
+    "SELECT id FROM users WHERE LOWER(email) = ?",
+    [email]
+  );
+  if (existing) return { id: existing.id, created: false };
+  const { id } = await createInvitedUser(email, opts);
+  return { id, created: true };
+}
+
 export {
   generateApiKey,
   hashApiKey,
@@ -131,6 +179,7 @@ export {
   parseBearerToken,
   hashPassword,
   verifyPassword,
-  MAX_API_KEYS_PER_USER,
-  verifyKeyRequest
+  verifyKeyRequest,
+  createInvitedUser,
+  findOrCreateInvitedUser
 };

package/dist/{chunk-I3CSD6CK.js → chunk-RPGFHESR.js}

@@ -1,9 +1,9 @@
 import {
   ValidationError
-} from "./chunk-YVMSM7LS.js";
+} from "./chunk-LHWOJPFE.js";
 import {
   getDb
-} from "./chunk-LA3VTQ22.js";
+} from "./chunk-TRSGPS27.js";
 
 // src/governance/grants-service.ts
 import { v4 as uuid } from "uuid";