@promptowl/contextnest-community 1.7.0 → 1.9.0

package/dist/chunk-VC3QNHHB.js

@@ -0,0 +1,664 @@
+import {
+  createVersion,
+  setApprovedVersion
+} from "./chunk-HRQWNRVI.js";
+import {
+  buildDocContext,
+  buildTitleMap,
+  canUserApprove,
+  engineCache,
+  resolveStewardsForNode
+} from "./chunk-BYS4HDME.js";
+import {
+  insertOrReplace,
+  nowExpr
+} from "./chunk-XQ46F76G.js";
+import {
+  config,
+  getDb
+} from "./chunk-DPHV6Q26.js";
+
+// src/governance/review-service.ts
+import { v4 as uuid } from "uuid";
+
+// src/notify/slack.ts
+var warnedOnce = false;
+async function notifySlackForNest(nestId, message) {
+  if (!config.SLACK_WEBHOOK_URL) return;
+  let nestName = nestId;
+  try {
+    const row = await getDb().get("SELECT name FROM nests WHERE id = ?", [
+      nestId
+    ]);
+    if (row?.name) nestName = row.name;
+  } catch {
+  }
+  return notifySlack(`*[${nestName}]* ${message}`);
+}
+function escapeMrkdwn(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+async function notifySlack(text) {
+  const url = config.SLACK_WEBHOOK_URL;
+  if (!url) return;
+  try {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), 3e3);
+    try {
+      await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ text: escapeMrkdwn(text) }),
+        signal: ctrl.signal
+      });
+    } finally {
+      clearTimeout(timer);
+    }
+  } catch (err) {
+    if (!warnedOnce) {
+      warnedOnce = true;
+      console.warn(
+        "[slack] notification failed (suppressing further warnings):",
+        err instanceof Error ? err.message : err
+      );
+    }
+  }
+}
+
+// src/notify/email-render.ts
+function escapeHtml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+var EVENT = {
+  ":white_check_mark:": { icon: "\u2705", color: "#16a34a" },
+  ":x:": { icon: "\u274C", color: "#dc2626" },
+  ":memo:": { icon: "\u{1F4DD}", color: "#d97706" },
+  ":key:": { icon: "\u{1F511}", color: "#2563eb" }
+};
+var ALL_EMOJI = Object.fromEntries(
+  Object.entries(EVENT).map(([code, m]) => [code, m.icon])
+);
+function renderText(message) {
+  return message.replace(/:[a-z_]+:/g, (m) => ALL_EMOJI[m] ?? "").replace(/\*/g, "").replace(/[ \t]{2,}/g, " ").trim();
+}
+var STATUS_META = {
+  approved: { subjectWord: "approved", label: "Approved", color: "#16a34a" },
+  rejected: { subjectWord: "rejected", label: "Rejected", color: "#dc2626" },
+  pending_review: {
+    subjectWord: "awaiting review",
+    label: "Pending review",
+    color: "#d97706"
+  },
+  shared: { subjectWord: "shared with you", label: "Shared", color: "#2563eb" }
+};
+function renderEmail(d) {
+  const meta = STATUS_META[d.status];
+  const title = d.docTitle.replace(/[\r\n]+/g, " ").trim();
+  const heading = d.status === "shared" ? `New collaborator on ${title}` : `${title} is ${meta.subjectWord}`;
+  const subject = heading.replace(/[\r\n]+/g, " ").trim();
+  const vLabel = d.version != null ? `v${d.version}` : "";
+  const detailsHeader = d.status === "shared" ? "Details" : "Document details";
+  const linkLabel = d.status === "shared" ? "Open nest" : "Open document";
+  const byT = d.actor ? ` by ${d.actor}` : "";
+  const noteT = d.note ? ` with the note: "${d.note}"` : "";
+  const vT = vLabel ? ` ${vLabel}` : "";
+  let lineT;
+  switch (d.status) {
+    case "approved":
+      lineT = `${title}${vT} has been approved${byT}${noteT}.`;
+      break;
+    case "rejected":
+      lineT = `${title}${vT} has been rejected${byT}${noteT}.`;
+      break;
+    case "pending_review":
+      lineT = `A review has been requested for ${title}${vT}${byT}${noteT}.`;
+      break;
+    case "shared":
+      lineT = `${d.actor || "A user"} was added to ${title} as ${d.permission || "a collaborator"}${d.by ? ` by ${d.by}` : ""}.`;
+      break;
+  }
+  const text = [
+    "Hi,",
+    "",
+    lineT,
+    "",
+    "Document details:",
+    `  Path: ${d.path}`,
+    `  Status: ${meta.label}`,
+    ...d.version != null ? [`  Version: v${d.version}`] : [],
+    ...d.link ? [`  Open: ${d.link}`] : [],
+    "",
+    "Regards,",
+    "ContextNest"
+  ].join("\n");
+  const doc = `<strong>${escapeHtml(title)}</strong>`;
+  const byH = d.actor ? ` by ${escapeHtml(d.actor)}` : "";
+  const noteH = d.note ? ` with the note: &ldquo;${escapeHtml(d.note)}&rdquo;` : "";
+  const vH = vLabel ? ` ${vLabel}` : "";
+  let lineH;
+  switch (d.status) {
+    case "approved":
+      lineH = `${doc}${vH} has been approved${byH}${noteH}.`;
+      break;
+    case "rejected":
+      lineH = `${doc}${vH} has been rejected${byH}${noteH}.`;
+      break;
+    case "pending_review":
+      lineH = `A review has been requested for ${doc}${vH}${byH}${noteH}.`;
+      break;
+    case "shared":
+      lineH = `${escapeHtml(d.actor || "A user")} was added to ${doc} as <strong>${escapeHtml(d.permission || "a collaborator")}</strong>${d.by ? ` by ${escapeHtml(d.by)}` : ""}.`;
+      break;
+  }
+  const detailRow = (label, valueHtml) => `<tr>
+      <td style="padding:5px 0;font-size:13px;color:#6b7280;width:90px;vertical-align:top;">${label}</td>
+      <td style="padding:5px 0;font-size:13px;color:#111827;vertical-align:top;">${valueHtml}</td>
+    </tr>`;
+  const detailRows = detailRow("Path", escapeHtml(d.path)) + detailRow(
+    "Status",
+    `<span style="display:inline-block;padding:2px 9px;border-radius:9999px;background:#f3f4f6;color:${meta.color};font-size:12px;font-weight:600;">${meta.label}</span>`
+  ) + (d.version != null ? detailRow("Version", `v${d.version}`) : "");
+  const buttonRow = d.link ? `<tr><td style="padding:20px 24px 0;">
+        <table role="presentation" cellpadding="0" cellspacing="0" border="0"><tr>
+          <td bgcolor="${meta.color}" style="border-radius:6px;">
+            <a href="${escapeHtml(d.link)}" target="_blank" style="display:inline-block;padding:10px 20px;font-size:14px;font-weight:600;color:#ffffff;text-decoration:none;">${linkLabel}</a>
+          </td>
+        </tr></table>
+      </td></tr>` : "";
+  const html = `<div style="margin:0;padding:24px;background:#f6f8fa;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;color:#111827;">
+  <table role="presentation" width="480" cellpadding="0" cellspacing="0" border="0" align="center" style="width:100%;max-width:480px;margin:0 auto;background:#ffffff;border:1px solid #e5e7eb;border-radius:12px;">
+    <tr><td style="padding:20px 24px 0;">
+      <div style="font-size:12px;font-weight:700;color:#6b7280;letter-spacing:0.06em;text-transform:uppercase;">ContextNest</div>
+    </td></tr>
+    <tr><td style="padding:10px 24px 0;">
+      <h1 style="margin:0;font-size:19px;line-height:1.35;font-weight:700;color:#111827;">${escapeHtml(heading)}</h1>
+    </td></tr>
+    <tr><td style="padding:16px 24px 0;font-size:14px;line-height:1.6;color:#374151;">
+      Hi,<br><br>${lineH}
+    </td></tr>
+    <tr><td style="padding:20px 24px 0;">
+      <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0" style="border:1px solid #eef0f2;border-radius:8px;">
+        <tr><td style="padding:12px 16px;">
+          <div style="font-size:11px;font-weight:600;color:#9ca3af;letter-spacing:0.04em;text-transform:uppercase;padding-bottom:4px;">${detailsHeader}</div>
+          <table role="presentation" width="100%" cellpadding="0" cellspacing="0" border="0">${detailRows}</table>
+        </td></tr>
+      </table>
+    </td></tr>
+    ${buttonRow}
+    <tr><td style="padding:22px 24px 24px;font-size:14px;line-height:1.6;color:#374151;">
+      Regards,<br>ContextNest
+    </td></tr>
+    <tr><td style="padding:14px 24px;border-top:1px solid #f0f0f0;font-size:11px;line-height:1.5;color:#9ca3af;">
+      Automated governance notification from ContextNest. You received this because email notifications are enabled on this server.
+    </td></tr>
+  </table>
+</div>`;
+  return { subject, text, html };
+}
+function renderHtml(message, nestName) {
+  const lead = message.match(/^(:[a-z_]+:)\s*/);
+  const meta = lead && EVENT[lead[1]] || { icon: "\u{1F514}", color: "#475569" };
+  const rest = lead ? message.slice(lead[0].length) : message;
+  const body = escapeHtml(rest).replace(/\*([^*]+)\*/g, "<strong>$1</strong>").replace(/\n/g, "<br>");
+  const safeNest = escapeHtml(nestName);
+  return `<div style="background:#f6f8fa;padding:24px;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;">
+  <table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="max-width:480px;margin:0 auto;background:#ffffff;border:1px solid #e5e7eb;border-radius:12px;overflow:hidden;">
+    <tr><td style="padding:20px 24px 16px;border-bottom:1px solid #f0f0f0;">
+      <div style="font-size:15px;font-weight:700;color:#111827;letter-spacing:-0.01em;">ContextNest</div>
+      <div style="font-size:13px;color:#6b7280;margin-top:2px;">${safeNest}</div>
+    </td></tr>
+    <tr><td style="padding:24px;">
+      <table role="presentation" cellpadding="0" cellspacing="0"><tr>
+        <td valign="top" style="font-size:22px;line-height:1;padding-right:14px;">${meta.icon}</td>
+        <td valign="top" style="font-size:15px;line-height:1.55;color:#111827;border-left:3px solid ${meta.color};padding-left:14px;">${body}</td>
+      </tr></table>
+    </td></tr>
+    <tr><td style="padding:14px 24px;border-top:1px solid #f0f0f0;font-size:11px;line-height:1.5;color:#9ca3af;">
+      Automated governance notification from ContextNest. You received this because email notifications are enabled on this server.
+    </td></tr>
+  </table>
+</div>`;
+}
+
+// src/notify/email.ts
+var transporterPromise = null;
+var configuredUrl = null;
+var warnedOnce2 = false;
+var SMTP_TIMEOUT_DEFAULTS = [
+  ["connectionTimeout", 5e3],
+  ["greetingTimeout", 5e3],
+  ["socketTimeout", 1e4]
+];
+function withTimeouts(url) {
+  const query = url.includes("?") ? url.slice(url.indexOf("?") + 1) : "";
+  const missing = SMTP_TIMEOUT_DEFAULTS.filter(
+    ([name]) => !new RegExp(`(^|&)${name}=`, "i").test(query)
+  ).map(([name, ms]) => `${name}=${ms}`);
+  if (missing.length === 0) return url;
+  return url + (url.includes("?") ? "&" : "?") + missing.join("&");
+}
+async function getTransporter() {
+  const url = config.SMTP_URL;
+  if (!url) return null;
+  if (!transporterPromise || configuredUrl !== url) {
+    configuredUrl = url;
+    transporterPromise = import("nodemailer").then(
+      (nodemailer) => nodemailer.default.createTransport(withTimeouts(url), {
+        // Per-message defaults (belt-and-braces; also set on each sendMail).
+        disableFileAccess: true,
+        disableUrlAccess: true
+      })
+    );
+    transporterPromise.catch(() => {
+      transporterPromise = null;
+      configuredUrl = null;
+    });
+  }
+  return transporterPromise;
+}
+async function notifyEmailForNest(nestId, message, details) {
+  const from = config.NOTIFY_EMAIL_FROM;
+  const to = config.NOTIFY_EMAIL_TO;
+  if (!config.SMTP_URL || !from || !to) return;
+  try {
+    const transporter = await getTransporter();
+    if (!transporter) return;
+    let subject;
+    let text;
+    let html;
+    if (details) {
+      ({ subject, text, html } = renderEmail(details));
+    } else {
+      let name = nestId;
+      try {
+        const row = await getDb().get("SELECT name FROM nests WHERE id = ?", [
+          nestId
+        ]);
+        if (row?.name) name = row.name;
+      } catch {
+      }
+      const safeName = name.replace(/[\r\n]+/g, " ").trim();
+      subject = `ContextNest \xB7 ${safeName}`;
+      text = renderText(message);
+      html = renderHtml(message, safeName);
+    }
+    await transporter.sendMail({
+      from,
+      to,
+      subject,
+      text,
+      html,
+      disableFileAccess: true,
+      disableUrlAccess: true
+    });
+  } catch (err) {
+    if (!warnedOnce2) {
+      warnedOnce2 = true;
+      console.warn(
+        "[email] notification failed (suppressing further warnings):",
+        err instanceof Error ? err.message : err
+      );
+    }
+  }
+}
+
+// src/notify/notify.ts
+var DIGEST_LINE_CAP = 10;
+var buffers = /* @__PURE__ */ new Map();
+function buildText(lines) {
+  if (lines.length === 1) return lines[0];
+  const shown = lines.slice(0, DIGEST_LINE_CAP).map((l) => `\u2022 ${l}`).join("\n");
+  const more = lines.length > DIGEST_LINE_CAP ? `
+\u2026and ${lines.length - DIGEST_LINE_CAP} more` : "";
+  return `${lines.length} updates:
+${shown}${more}`;
+}
+async function flush(nestId) {
+  const buf = buffers.get(nestId);
+  if (!buf) return;
+  buffers.delete(nestId);
+  const text = buildText(buf.events.map((e) => e.line));
+  const details = buf.events.length === 1 ? buf.events[0].details : void 0;
+  await Promise.allSettled([
+    notifySlackForNest(nestId, text),
+    notifyEmailForNest(nestId, text, details)
+  ]);
+}
+async function notifyNestEvent(nestId, message, details) {
+  if (!config.SLACK_WEBHOOK_URL && !config.SMTP_URL) return;
+  const buf = buffers.get(nestId);
+  if (buf) {
+    buf.events.push({ line: message, details });
+    return;
+  }
+  const timer = setTimeout(() => void flush(nestId), config.NOTIFY_DEBOUNCE_MS);
+  timer.unref?.();
+  buffers.set(nestId, { events: [{ line: message, details }], timer });
+}
+
+// src/governance/safe-publish.ts
+import {
+  publishDocument,
+  serializeDocument
+} from "@promptowl/contextnest-engine";
+async function safePublishDocument(storage, docId, options) {
+  const node = await storage.readDocument(docId);
+  const cleanedFrontmatter = stripUndefinedDeep(node.frontmatter);
+  const cleanedNode = { ...node, frontmatter: cleanedFrontmatter };
+  await storage.writeDocument(docId, serializeDocument(cleanedNode));
+  return publishDocument(storage, docId, options);
+}
+function stripUndefinedDeep(value) {
+  if (Array.isArray(value)) {
+    return value.filter((v) => v !== void 0).map((v) => stripUndefinedDeep(v));
+  }
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      if (v === void 0) continue;
+      out[k] = stripUndefinedDeep(v);
+    }
+    return out;
+  }
+  return value;
+}
+
+// src/governance/review-service.ts
+async function submitForReview(params) {
+  const db = getDb();
+  const existing = await db.get(
+    "SELECT id FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending'",
+    [params.nestId, params.nodeId]
+  );
+  if (existing) {
+    throw new Error("A review is already pending for this node");
+  }
+  const id = uuid();
+  await db.run(
+    `INSERT INTO review_requests
+     (id, nest_id, node_id, version, requested_by, request_note, priority)
+     VALUES (?, ?, ?, ?, ?, ?, ?)`,
+    [
+      id,
+      params.nestId,
+      params.nodeId,
+      params.version,
+      params.requestedBy,
+      params.note || null,
+      params.priority || "normal"
+    ]
+  );
+  await db.run(
+    "UPDATE node_versions SET status = 'pending_review' WHERE nest_id = ? AND node_id = ? AND version = ?",
+    [params.nestId, params.nodeId, params.version]
+  );
+  const reviewCtx = await buildDocContext(params.nestId, params.nodeId, params.baseUrl);
+  void notifyNestEvent(
+    params.nestId,
+    `:memo: Review requested on *${reviewCtx.label}* (v${params.version}) by ${params.requestedBy}${params.note ? ` \u2014 "${params.note}"` : ""}`,
+    {
+      status: "pending_review",
+      docTitle: reviewCtx.docTitle,
+      path: reviewCtx.path,
+      link: reviewCtx.link,
+      actor: params.requestedBy,
+      version: params.version,
+      note: params.note || null
+    }
+  );
+  return await getReviewRequest(id);
+}
+async function approve(params) {
+  const db = getDb();
+  const pending = await db.get(
+    "SELECT * FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' ORDER BY requested_at DESC LIMIT 1",
+    [params.nestId, params.nodeId]
+  );
+  if (!pending) {
+    throw new Error("No pending review for this node");
+  }
+  if (!params.override) {
+    const check = await canUserApprove(
+      params.nestId,
+      params.nodeId,
+      params.approvedBy
+    );
+    if (!check.allowed) {
+      throw new Error(check.reason);
+    }
+  }
+  await db.run(
+    `UPDATE review_requests
+     SET status = 'approved', resolved_by = ?, resolved_at = ${nowExpr(db)},
+         resolution_note = ?, is_override = ?
+     WHERE id = ?`,
+    [params.approvedBy, params.note || null, params.override ? 1 : 0, pending.id]
+  );
+  await db.run(
+    "UPDATE node_versions SET status = 'published' WHERE nest_id = ? AND node_id = ? AND version = ?",
+    [params.nestId, params.nodeId, params.version]
+  );
+  await db.run(
+    insertOrReplace(
+      db,
+      `INSERT INTO approved_versions (nest_id, node_id, approved_version, approved_by)
+       VALUES (?, ?, ?, ?)`,
+      ["nest_id", "node_id"],
+      `approved_version = excluded.approved_version, approved_by = excluded.approved_by, approved_at = ${nowExpr(db)}`
+    ),
+    [params.nestId, params.nodeId, params.version, params.approvedBy]
+  );
+  try {
+    const { storage } = await engineCache.get(params.nestId);
+    const result = await safePublishDocument(storage, params.nodeId, {
+      editedBy: params.approvedBy,
+      note: params.note || `Approved review request ${pending.id}`
+    });
+    const engineVersion = result.versionEntry.version;
+    if (engineVersion !== params.version) {
+      const node = result.node;
+      const tags = node.frontmatter.tags || [];
+      await createVersion({
+        nestId: params.nestId,
+        nodeId: params.nodeId,
+        version: engineVersion,
+        content: node.body || "",
+        author: params.approvedBy,
+        status: "published",
+        tags,
+        changeNote: params.note || `Approved review request ${pending.id}`
+      });
+      await setApprovedVersion(
+        params.nestId,
+        params.nodeId,
+        engineVersion,
+        params.approvedBy
+      );
+    }
+  } catch (err) {
+    console.error(
+      `publishDocument failed for ${params.nestId}/${params.nodeId} on approve:`,
+      err
+    );
+  }
+  const approveCtx = await buildDocContext(params.nestId, params.nodeId, params.baseUrl);
+  void notifyNestEvent(
+    params.nestId,
+    `:white_check_mark: *${approveCtx.label}* v${params.version} approved by ${params.approvedBy}`,
+    {
+      status: "approved",
+      docTitle: approveCtx.docTitle,
+      path: approveCtx.path,
+      link: approveCtx.link,
+      actor: params.approvedBy,
+      version: params.version
+    }
+  );
+  return await getReviewRequest(pending.id);
+}
+async function reject(params) {
+  const db = getDb();
+  const pending = await db.get(
+    "SELECT * FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' ORDER BY requested_at DESC LIMIT 1",
+    [params.nestId, params.nodeId]
+  );
+  if (!pending) {
+    throw new Error("No pending review for this node");
+  }
+  const check = await canUserApprove(
+    params.nestId,
+    params.nodeId,
+    params.rejectedBy
+  );
+  if (!check.allowed) {
+    throw new Error(check.reason);
+  }
+  await db.run(
+    `UPDATE review_requests
+     SET status = 'rejected', resolved_by = ?, resolved_at = ${nowExpr(db)}, resolution_note = ?
+     WHERE id = ?`,
+    [params.rejectedBy, params.note, pending.id]
+  );
+  await db.run(
+    "UPDATE node_versions SET status = 'rejected' WHERE nest_id = ? AND node_id = ? AND version = ?",
+    [params.nestId, params.nodeId, params.version]
+  );
+  const rejectCtx = await buildDocContext(params.nestId, params.nodeId, params.baseUrl);
+  void notifyNestEvent(
+    params.nestId,
+    `:x: *${rejectCtx.label}* v${params.version} rejected by ${params.rejectedBy} \u2014 "${params.note}"`,
+    {
+      status: "rejected",
+      docTitle: rejectCtx.docTitle,
+      path: rejectCtx.path,
+      link: rejectCtx.link,
+      actor: params.rejectedBy,
+      version: params.version,
+      note: params.note || null
+    }
+  );
+  return await getReviewRequest(pending.id);
+}
+async function cancelReview(params) {
+  const db = getDb();
+  const pending = await db.get(
+    "SELECT * FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' ORDER BY requested_at DESC LIMIT 1",
+    [params.nestId, params.nodeId]
+  );
+  if (!pending) return null;
+  await db.run(
+    `UPDATE review_requests
+     SET status = 'cancelled', resolved_by = ?, resolved_at = ${nowExpr(db)}
+     WHERE id = ?`,
+    [params.cancelledBy, pending.id]
+  );
+  await db.run(
+    "UPDATE node_versions SET status = 'draft' WHERE nest_id = ? AND node_id = ? AND version = ?",
+    [params.nestId, params.nodeId, pending.version]
+  );
+  return await getReviewRequest(pending.id);
+}
+async function getReviewQueue(params) {
+  const db = getDb();
+  let whereClauses = [];
+  const args = [];
+  if (params.nestId) {
+    whereClauses.push("nest_id = ?");
+    args.push(params.nestId);
+  }
+  if (params.status) {
+    const statuses = Array.isArray(params.status) ? params.status : [params.status];
+    whereClauses.push(
+      `status IN (${statuses.map(() => "?").join(",")})`
+    );
+    args.push(...statuses);
+  }
+  const where = whereClauses.length > 0 ? `WHERE ${whereClauses.join(" AND ")}` : "";
+  const total = (await db.get(
+    `SELECT COUNT(*) as c FROM review_requests ${where}`,
+    args
+  )).c;
+  const limit = params.limit || 50;
+  const offset = params.offset || 0;
+  const rows = await db.all(
+    `SELECT * FROM review_requests ${where}
+       ORDER BY
+         CASE priority WHEN 'urgent' THEN 0 WHEN 'high' THEN 1 WHEN 'normal' THEN 2 ELSE 3 END,
+         requested_at DESC
+       LIMIT ? OFFSET ?`,
+    [...args, limit, offset]
+  );
+  let requests = rows.map(rowToReviewRequest);
+  if (params.stewardEmail) {
+    const filtered = [];
+    for (const r of requests) {
+      const stewards = await resolveStewardsForNode(r.nestId, r.nodeId);
+      if (stewards.some((s) => s.steward.userEmail === params.stewardEmail)) {
+        filtered.push(r);
+      }
+    }
+    requests = filtered;
+  }
+  const titleMapsByNest = /* @__PURE__ */ new Map();
+  const nestIds = new Set(requests.map((r) => r.nestId));
+  for (const nid of nestIds) {
+    titleMapsByNest.set(nid, await buildTitleMap(nid));
+  }
+  requests = requests.map((r) => ({
+    ...r,
+    title: titleMapsByNest.get(r.nestId)?.get(r.nodeId)
+  }));
+  return { requests, total };
+}
+async function getReviewHistory(nestId, nodeId) {
+  const db = getDb();
+  const rows = await db.all(
+    "SELECT * FROM review_requests WHERE nest_id = ? AND node_id = ? ORDER BY requested_at DESC",
+    [nestId, nodeId]
+  );
+  return rows.map(rowToReviewRequest);
+}
+async function getPendingReview(nestId, nodeId) {
+  const db = getDb();
+  const row = await db.get(
+    "SELECT * FROM review_requests WHERE nest_id = ? AND node_id = ? AND status = 'pending' ORDER BY requested_at DESC LIMIT 1",
+    [nestId, nodeId]
+  );
+  return row ? rowToReviewRequest(row) : null;
+}
+async function getReviewRequest(id) {
+  const db = getDb();
+  const row = await db.get(
+    "SELECT * FROM review_requests WHERE id = ?",
+    [id]
+  );
+  return row ? rowToReviewRequest(row) : null;
+}
+function rowToReviewRequest(row) {
+  return {
+    id: row.id,
+    nestId: row.nest_id,
+    nodeId: row.node_id,
+    version: row.version,
+    requestedBy: row.requested_by,
+    requestedAt: row.requested_at,
+    requestNote: row.request_note || void 0,
+    status: row.status,
+    resolvedBy: row.resolved_by || void 0,
+    resolvedAt: row.resolved_at || void 0,
+    resolutionNote: row.resolution_note || void 0,
+    priority: row.priority
+  };
+}
+
+export {
+  safePublishDocument,
+  notifyNestEvent,
+  submitForReview,
+  approve,
+  reject,
+  cancelReview,
+  getReviewQueue,
+  getReviewHistory,
+  getPendingReview
+};

package/dist/chunk-XQ46F76G.js

@@ -0,0 +1,16 @@
+// src/db/sql.ts
+function nowExpr(db) {
+  return db.dialect === "sqlite" ? "datetime('now')" : "to_char((now() AT TIME ZONE 'utc'), 'YYYY-MM-DD HH24:MI:SS')";
+}
+function insertOrIgnore(db, insertSql) {
+  return db.dialect === "sqlite" ? insertSql.replace(/^\s*INSERT\s+INTO/i, "INSERT OR IGNORE INTO") : `${insertSql} ON CONFLICT DO NOTHING`;
+}
+function insertOrReplace(db, insertSql, conflictCols, set) {
+  return db.dialect === "sqlite" ? insertSql.replace(/^\s*INSERT\s+INTO/i, "INSERT OR REPLACE INTO") : `${insertSql} ON CONFLICT (${conflictCols.join(", ")}) DO UPDATE SET ${set}`;
+}
+
+export {
+  nowExpr,
+  insertOrIgnore,
+  insertOrReplace
+};

package/dist/client-GI74NPIW.js

@@ -0,0 +1,11 @@
+import {
+  getDb,
+  initDb,
+  resetDb
+} from "./chunk-DPHV6Q26.js";
+import "./chunk-SLTQACJW.js";
+export {
+  getDb,
+  initDb,
+  resetDb
+};

package/dist/email-R7DFS6E5.js

@@ -0,0 +1,6 @@
+import {
+  normalizeEmail
+} from "./chunk-FRQJWGN3.js";
+export {
+  normalizeEmail
+};