@promptowl/contextnest-community 1.4.0 → 1.6.0

package/dist/migrations.postgres-NVJAGBSF.js

@@ -0,0 +1,273 @@
+import {
+  ANON_USER_ID
+} from "./chunk-SLTQACJW.js";
+
+// src/db/migrations.postgres.ts
+var NOW = "to_char((now() AT TIME ZONE 'utc'), 'YYYY-MM-DD HH24:MI:SS')";
+var HISTORICAL_MIGRATIONS = [
+  "002_steward_parity",
+  "003_sessions_and_single_api_key",
+  "004_license_cache_owner_email",
+  "005_anon_nest_public_default",
+  "006_node_versions_published_status",
+  "007_drop_steward_capability_flags",
+  "008_drop_steward_folder_scope",
+  "009_lowercase_emails",
+  "010_sso_used_jti",
+  "011_comments"
+];
+async function runPostgresMigrations(db) {
+  await db.exec(`
+    CREATE TABLE IF NOT EXISTS users (
+      id TEXT PRIMARY KEY,
+      email TEXT UNIQUE NOT NULL,
+      name TEXT,
+      password_hash TEXT NOT NULL,
+      created_at TEXT NOT NULL DEFAULT ${NOW},
+      is_admin INTEGER NOT NULL DEFAULT 0,
+      is_invited INTEGER NOT NULL DEFAULT 0
+    );
+    -- Case-insensitive email uniqueness (replaces SQLite COLLATE NOCASE index).
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_users_email_nocase ON users (lower(email));
+
+    CREATE TABLE IF NOT EXISTS nests (
+      id TEXT PRIMARY KEY,
+      user_id TEXT NOT NULL REFERENCES users(id),
+      name TEXT NOT NULL,
+      slug TEXT NOT NULL,
+      description TEXT,
+      visibility TEXT NOT NULL DEFAULT 'private'
+        CHECK(visibility IN ('private', 'public')),
+      created_at TEXT NOT NULL DEFAULT ${NOW},
+      stewardship_enabled INTEGER NOT NULL DEFAULT 0,
+      is_imported INTEGER NOT NULL DEFAULT 0,
+      allow_self_approve INTEGER NOT NULL DEFAULT 0,
+      UNIQUE(user_id, slug)
+    );
+    CREATE INDEX IF NOT EXISTS idx_nests_user ON nests(user_id);
+
+    CREATE TABLE IF NOT EXISTS api_keys (
+      id TEXT PRIMARY KEY,
+      user_id TEXT NOT NULL REFERENCES users(id),
+      key_hash TEXT UNIQUE NOT NULL,
+      key_prefix TEXT NOT NULL,
+      nest_id TEXT REFERENCES nests(id) ON DELETE CASCADE,
+      label TEXT,
+      created_at TEXT NOT NULL DEFAULT ${NOW},
+      last_used_at TEXT
+    );
+    CREATE INDEX IF NOT EXISTS idx_keys_user ON api_keys(user_id);
+    CREATE INDEX IF NOT EXISTS idx_keys_hash ON api_keys(key_hash);
+    -- One api_key row per user (migration 003).
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_api_keys_user_unique ON api_keys(user_id);
+
+    CREATE TABLE IF NOT EXISTS nest_collaborators (
+      id TEXT PRIMARY KEY,
+      nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+      user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+      permission TEXT NOT NULL CHECK(permission IN ('read', 'write', 'admin')),
+      granted_by TEXT NOT NULL REFERENCES users(id),
+      granted_at TEXT NOT NULL DEFAULT ${NOW}
+    );
+    CREATE INDEX IF NOT EXISTS idx_nest_collab_nest ON nest_collaborators(nest_id);
+    CREATE INDEX IF NOT EXISTS idx_nest_collab_user ON nest_collaborators(user_id);
+
+    CREATE TABLE IF NOT EXISTS annotation_threads (
+      id TEXT PRIMARY KEY,
+      nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+      node_id TEXT NOT NULL,
+      snapshot_version INTEGER,
+      anchor_json TEXT,
+      status TEXT NOT NULL DEFAULT 'open'
+        CHECK(status IN ('open', 'resolved')),
+      created_by TEXT NOT NULL,
+      created_at TEXT NOT NULL DEFAULT ${NOW},
+      resolved_by TEXT,
+      resolved_at TEXT
+    );
+    CREATE TABLE IF NOT EXISTS annotation_comments (
+      id TEXT PRIMARY KEY,
+      thread_id TEXT NOT NULL REFERENCES annotation_threads(id) ON DELETE CASCADE,
+      author TEXT NOT NULL,
+      body TEXT NOT NULL,
+      created_at TEXT NOT NULL DEFAULT ${NOW}
+    );
+    CREATE INDEX IF NOT EXISTS idx_annot_threads_node
+      ON annotation_threads(nest_id, node_id);
+    CREATE INDEX IF NOT EXISTS idx_annot_comments_thread
+      ON annotation_comments(thread_id);
+
+    CREATE TABLE IF NOT EXISTS license_cache (
+      key TEXT PRIMARY KEY,
+      tier TEXT NOT NULL,
+      org TEXT,
+      limits_json TEXT,
+      owner_email TEXT,
+      validated_at TEXT NOT NULL DEFAULT ${NOW}
+    );
+
+    CREATE TABLE IF NOT EXISTS telemetry_events (
+      id BIGINT GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
+      event TEXT NOT NULL,
+      data_json TEXT,
+      created_at TEXT NOT NULL DEFAULT ${NOW},
+      sent INTEGER NOT NULL DEFAULT 0
+    );
+
+    -- Stewards in final shape (after migrations 002/007/008):
+    -- role IN (editor|reviewer|viewer); no can_approve/can_reject; no folder scope.
+    CREATE TABLE IF NOT EXISTS stewards (
+      id TEXT PRIMARY KEY,
+      nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+      scope TEXT NOT NULL CHECK(scope IN ('document', 'tag', 'nest')),
+      node_pattern TEXT,
+      tag_name TEXT,
+      user_email TEXT NOT NULL,
+      user_id TEXT REFERENCES users(id),
+      role TEXT NOT NULL DEFAULT 'reviewer'
+        CHECK(role IN ('editor', 'reviewer', 'viewer')),
+      assigned_by TEXT NOT NULL,
+      assigned_at TEXT NOT NULL DEFAULT ${NOW},
+      is_active INTEGER NOT NULL DEFAULT 1
+    );
+    CREATE INDEX IF NOT EXISTS idx_stewards_nest ON stewards(nest_id);
+    CREATE INDEX IF NOT EXISTS idx_stewards_email ON stewards(user_email);
+    CREATE INDEX IF NOT EXISTS idx_stewards_scope ON stewards(nest_id, scope);
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_stewards_uniq_nest
+      ON stewards(nest_id, user_email)
+      WHERE scope = 'nest' AND is_active = 1;
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_stewards_uniq_document
+      ON stewards(nest_id, node_pattern, user_email)
+      WHERE scope = 'document' AND node_pattern IS NOT NULL AND is_active = 1;
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_stewards_uniq_tag
+      ON stewards(nest_id, tag_name, user_email)
+      WHERE scope = 'tag' AND tag_name IS NOT NULL AND is_active = 1;
+    CREATE INDEX IF NOT EXISTS idx_stewards_tag_lookup
+      ON stewards(nest_id, tag_name)
+      WHERE scope = 'tag' AND is_active = 1;
+    CREATE INDEX IF NOT EXISTS idx_stewards_doc_lookup
+      ON stewards(nest_id, node_pattern)
+      WHERE scope = 'document' AND is_active = 1;
+
+    CREATE TABLE IF NOT EXISTS review_requests (
+      id TEXT PRIMARY KEY,
+      nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+      node_id TEXT NOT NULL,
+      version INTEGER NOT NULL,
+      requested_by TEXT NOT NULL,
+      requested_at TEXT NOT NULL DEFAULT ${NOW},
+      request_note TEXT,
+      status TEXT NOT NULL DEFAULT 'pending'
+        CHECK(status IN ('pending', 'approved', 'rejected', 'cancelled')),
+      resolved_by TEXT,
+      resolved_at TEXT,
+      resolution_note TEXT,
+      is_override INTEGER NOT NULL DEFAULT 0,
+      priority TEXT NOT NULL DEFAULT 'normal'
+        CHECK(priority IN ('low', 'normal', 'high', 'urgent'))
+    );
+    CREATE INDEX IF NOT EXISTS idx_reviews_nest ON review_requests(nest_id);
+    CREATE INDEX IF NOT EXISTS idx_reviews_node ON review_requests(nest_id, node_id);
+    CREATE INDEX IF NOT EXISTS idx_reviews_status ON review_requests(nest_id, status);
+
+    -- node_versions in final shape (after migration 006: 'published' status).
+    CREATE TABLE IF NOT EXISTS node_versions (
+      id BIGINT GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
+      nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+      node_id TEXT NOT NULL,
+      version INTEGER NOT NULL,
+      content_hash TEXT NOT NULL,
+      author TEXT NOT NULL,
+      status TEXT NOT NULL DEFAULT 'draft'
+        CHECK(status IN ('draft', 'pending_review', 'approved', 'published', 'rejected')),
+      change_note TEXT,
+      tags_json TEXT,
+      created_at TEXT NOT NULL DEFAULT ${NOW},
+      UNIQUE(nest_id, node_id, version)
+    );
+    CREATE INDEX IF NOT EXISTS idx_versions_node ON node_versions(nest_id, node_id);
+
+    CREATE TABLE IF NOT EXISTS approved_versions (
+      nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+      node_id TEXT NOT NULL,
+      approved_version INTEGER NOT NULL,
+      approved_by TEXT NOT NULL,
+      approved_at TEXT NOT NULL DEFAULT ${NOW},
+      PRIMARY KEY (nest_id, node_id)
+    );
+
+    -- node_tag_index (migration 002).
+    CREATE TABLE IF NOT EXISTS node_tag_index (
+      nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+      node_id TEXT NOT NULL,
+      tag_name TEXT NOT NULL,
+      PRIMARY KEY (nest_id, node_id, tag_name)
+    );
+    CREATE INDEX IF NOT EXISTS idx_node_tag_by_tag
+      ON node_tag_index(nest_id, tag_name);
+
+    -- sessions (migration 003).
+    CREATE TABLE IF NOT EXISTS sessions (
+      id TEXT PRIMARY KEY,
+      user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+      expires_at TEXT NOT NULL,
+      created_at TEXT NOT NULL DEFAULT ${NOW},
+      last_seen_at TEXT NOT NULL DEFAULT ${NOW},
+      user_agent TEXT
+    );
+    CREATE INDEX IF NOT EXISTS idx_sessions_user ON sessions(user_id);
+    CREATE INDEX IF NOT EXISTS idx_sessions_expires ON sessions(expires_at);
+
+    -- sso_used_jti (migration 010).
+    CREATE TABLE IF NOT EXISTS sso_used_jti (
+      jti TEXT PRIMARY KEY,
+      used_at TEXT NOT NULL DEFAULT ${NOW},
+      expires_at TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS idx_sso_used_jti_expires
+      ON sso_used_jti(expires_at);
+
+    -- comments (migration 011).
+    CREATE TABLE IF NOT EXISTS comments (
+      id TEXT PRIMARY KEY,
+      nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+      node_id TEXT NOT NULL,
+      version INTEGER,
+      anchor_start INTEGER,
+      anchor_end INTEGER,
+      anchor_text TEXT,
+      parent_id TEXT REFERENCES comments(id) ON DELETE CASCADE,
+      author TEXT NOT NULL,
+      body TEXT NOT NULL,
+      status TEXT NOT NULL DEFAULT 'open'
+        CHECK(status IN ('open', 'resolved')),
+      created_at TEXT NOT NULL DEFAULT ${NOW},
+      resolved_by TEXT,
+      resolved_at TEXT
+    );
+    CREATE INDEX IF NOT EXISTS idx_comments_node
+      ON comments(nest_id, node_id, created_at);
+    CREATE INDEX IF NOT EXISTS idx_comments_open
+      ON comments(nest_id, node_id, status);
+    CREATE INDEX IF NOT EXISTS idx_comments_thread
+      ON comments(parent_id);
+
+    CREATE TABLE IF NOT EXISTS schema_migrations (
+      id TEXT PRIMARY KEY,
+      applied_at TEXT NOT NULL DEFAULT ${NOW}
+    );
+  `);
+  for (const id of HISTORICAL_MIGRATIONS) {
+    await db.run(
+      "INSERT INTO schema_migrations (id) VALUES (?) ON CONFLICT DO NOTHING",
+      [id]
+    );
+  }
+  await db.run(
+    "UPDATE nests SET visibility = 'public' WHERE user_id = ? AND visibility = 'private'",
+    [ANON_USER_ID]
+  );
+}
+export {
+  runPostgresMigrations
+};

package/dist/{review-service-ZBYZYH5H.js → review-service-QJ3FBOML.js}

@@ -6,12 +6,13 @@ import {
   getReviewQueue,
   reject,
   submitForReview
-} from "./chunk-TTXTEUFT.js";
-import "./chunk-HIH7I232.js";
+} from "./chunk-MZGFKBOK.js";
+import "./chunk-T5L4LYU4.js";
 import {
   canUserApprove
-} from "./chunk-XNPD2Q6E.js";
-import "./chunk-RMU3LOPH.js";
+} from "./chunk-2TUMMVBG.js";
+import "./chunk-7V33Z6CS.js";
+import "./chunk-SLTQACJW.js";
 export {
   approve,
   canUserApprove,

package/dist/{stewardship-service-HFQPGASU.js → stewardship-service-VIKF3VZB.js}

@@ -20,8 +20,9 @@ import {
   syncFromConfig,
   updateSteward,
   updateStewardRole
-} from "./chunk-XNPD2Q6E.js";
-import "./chunk-RMU3LOPH.js";
+} from "./chunk-2TUMMVBG.js";
+import "./chunk-7V33Z6CS.js";
+import "./chunk-SLTQACJW.js";
 export {
   assignSteward,
   canCreateInNest,

package/dist/{version-service-REGL5CUT.js → version-service-MUZYTYMW.js}

@@ -11,8 +11,9 @@ import {
   hashContent,
   setApprovedVersion,
   systemAuthor
-} from "./chunk-HIH7I232.js";
-import "./chunk-RMU3LOPH.js";
+} from "./chunk-T5L4LYU4.js";
+import "./chunk-7V33Z6CS.js";
+import "./chunk-SLTQACJW.js";
 export {
   SYSTEM_AUTHOR_PREFIX,
   checkConflict,