@promptowl/contextnest-community 1.9.0 → 1.10.0

package/CONFIGURATION.md

@@ -56,13 +56,15 @@ The server prints a loud warning at startup when `AUTH_MODE=open` is active.
 | `DB_SSL_CA` | `""` | Path to a CA certificate (PEM) for verify-ca/verify-full TLS when `DB_SSL=true`. |
 | `AUTH_MODE` | `key` | `key` or `open`. See above. |
 | `PROMPTOWL_API_URL` | `https://app.promptowl.ai` | PromptOwl's API origin — used for device auth, license validation, telemetry. Override for air-gapped or test setups. |
-| `PROMPTOWL_KEY` | `""` | Your PromptOwl Community License key (`pk_...`). Unlicensed instances still run and serve reads, but every write returns `503` until a valid key is installed. Can also be set via the browser License Setup Page, which persists it to `ENV_FILE_PATH`. |
+| `PROMPTOWL_KEY` | `""` | Your PromptOwl Community License key (`pk_...`). Unlicensed instances still run and serve reads, but every write returns `503` until a valid key is installed. Can also be set via the browser License Setup Page, which persists it to the database (`server_settings` table) so it survives a rebuild and reaches every instance — see [Runtime settings persistence](#runtime-settings-persistence). Setting it here in the deploy environment takes precedence on the next boot. |
 | `PROMPTOWL_SIGN_IN_GATE` | `open` | Restrict "Sign in with PromptOwl". `open` = anyone may; `admin-only` = only the license owner (admin) may, everyone else uses email/password (admin opens the login page with `?admin=1`); `disabled` = nobody may. Enforced server-side at `POST /auth/promptowl` and surfaced on the health endpoint. Unknown values fall back to `open`. |
+| `MANUAL_SIGN_IN` | `open` | Email + password sign-in mode. `open` = anyone may log in and self-register a new account; `invite-only` = existing/invited users may log in but brand-new self-registration returns `403` (the admin provisions accounts via invite/share/steward and shares the password — there is no self-service "set password", which would be account takeover without email verification); `disabled` = no email/password sign-in at all (`POST /auth/login` and `POST /auth/register` return `403`). Independent of `PROMPTOWL_SIGN_IN_GATE`, so the two methods are controlled separately (e.g. `invite-only` manual + `admin-only` PromptOwl). Also settable from Settings → General. The server refuses `disabled` while PromptOwl sign-in is also `disabled` (that would leave no way to log in). Unknown values fall back to `open`. |
 | `OFFICIAL_COMMUNITY_SSO_SECRET` | `""` | **Official deployment only — leave unset on self-hosted.** Shared HMAC secret enabling the one-click "Open Community" SSO auto-login from PromptOwl. Must exactly match the same-named var on PromptOwl. When unset, `GET /auth/sso` returns `404` and the feature is disabled; self-hosted users keep using the manual device-code flow. |
 | `PUBLIC_BASE_URL` | `""` | This server's canonical external URL (e.g. `https://community.promptowl.ai`). Checked against the SSO ticket's `aud` claim so a ticket minted for this server can't be replayed against another. Only relevant when `OFFICIAL_COMMUNITY_SSO_SECRET` is set; when unset, the audience check is skipped. |
-| `ENV_FILE_PATH` | `$DATA_ROOT/.env` | Path to the `.env` file the license install flow writes `PROMPTOWL_KEY` into (alongside existing vars), and which the server also reads at boot. Defaults **under `DATA_ROOT`** so the browser License Setup Page persists durably in containers — `$cwd` is `/app` in the official image (root-owned, discarded on container recreate), which silently lost the key. Override only if your writable, persisted `.env` lives elsewhere. In containers, providing `PROMPTOWL_KEY` directly via the environment also works and is read at boot. |
+| `ENV_FILE_PATH` | `$DATA_ROOT/.env` | Path to an optional `.env` file the server reads at boot (in addition to `$cwd/.env`). **No longer used for persistence** — the License Setup Page and Settings page now write to the database, not this file (see [Runtime settings persistence](#runtime-settings-persistence)). Kept for operators who bootstrap config from a mounted `.env`. |
 | `TELEMETRY_ENABLED` | `"true"` (set to `"false"` to disable) | Batched, anonymized usage events sent to PromptOwl. Off disables the loop entirely. |
 | `TELEMETRY_INTERVAL_MS` | `3600000` (1 hour) | How often buffered telemetry is flushed to PromptOwl. |
+| `TRACE_RETENTION_DAYS` | `14` | Activity-trace retention window in days (the `api_events` rows behind `GET /admin/trace` and `GET /nests/:id/trace`). Rows older than this are pruned opportunistically (every ~500 inserts). `0` = keep forever (pruning is skipped entirely). Capped at `3650`; invalid/negative values fall back to `14`. Also editable from Settings → Advanced. |
 | `CORS_ORIGINS` | `*` in open mode; `http://localhost:5173,http://localhost:3838` in key mode | Comma-separated allowlist. Set to `*` to allow any origin (**only** safe in open mode — in key mode with Bearer tokens this enables CSRF). |
 | `MAX_BODY_BYTES` | `10485760` (10 MB) | Reject requests whose `Content-Length` exceeds this. Prevents giant-payload DoS. |
 | `LOGO_URL` | _(unset)_ | Custom logo shown in the UI header + login screen. Must start with `https://`, `http://`, or `data:image/` — other schemes (`file://`, relative, `javascript:`) are rejected with a warning and the bundled icon is used. |
@@ -103,6 +105,31 @@ Postgres backend starts empty.
 > shared storage — e.g. mount a GCS bucket via Cloud Storage FUSE, or use a
 > persistent volume — otherwise documents will disappear on redeploy/scale-in.
 
+### Runtime settings persistence
+
+Settings you change at runtime — everything on the **Settings page** (`/admin/settings`:
+sign-in gate, logo, base URL, upload limit, feature flags, Slack/SMTP connectors)
+plus the **installed license key** — are stored in the database (`server_settings`
+table), **not** in a `.env` file. This is deliberate: on Cloud Run the container
+filesystem is ephemeral, so a file-based value was wiped by every rebuild, and each
+horizontally-scaled instance had its own filesystem, so a change on one never
+reached the others. The database (Cloud SQL in production) is durable **and** shared,
+so a UI change persists across rebuilds and is seen by every instance. Rows are
+loaded into the process environment at boot.
+
+**Precedence between the deploy environment and a UI change.** Each stored row
+remembers the deploy-env value in effect when it was written. At boot:
+
+- If the deploy env value for that key is **unchanged**, the stored UI change wins
+  (your Settings-page edit survives an identical rebuild).
+- If the deploy env value **changed** (you redeployed with a new value for that
+  variable), the deploy env wins and the stored row is re-synced to it.
+
+So you can always override any setting from the deploy config, while UI edits made
+to keys you don't set in the environment stay put. Clearing a setting in the UI
+writes a tombstone, so a value you removed is not resurrected from the environment
+on the next boot.
+
 ### Cloud Run + Cloud SQL (PostgreSQL)
 
 Attach the Cloud SQL instance to the service (`--add-cloudsql-instances`) so the

package/dist/{chunk-TIO5XOFD.js → chunk-7PQREKSM.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-3JTODC3Y.js";
 import {
   getDb
-} from "./chunk-DPHV6Q26.js";
+} from "./chunk-BC6KFUZH.js";
 
 // src/governance/grants-service.ts
 import { v4 as uuid } from "uuid";

package/dist/{chunk-DPHV6Q26.js → chunk-BC6KFUZH.js}

@@ -29,7 +29,7 @@ var slackUrlWarned = false;
 var emailFromWarned = false;
 var emailToWarned = false;
 function isEmailish(v) {
-  return /^[^\s@]+@[^\s@]+$/.test(v) && !/[\r\n]/.test(v);
+  return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(v) && !/[\r\n]/.test(v);
 }
 function isEmailListish(v) {
   return v.split(",").every((e) => isEmailish(e.trim()));
@@ -124,6 +124,18 @@ var config = {
   get PROMPTOWL_KEY() {
     return process.env.PROMPTOWL_KEY || "";
   },
+  /** Vercel automation-bypass secret for PO calls; unset = no bypass. */
+  get PROMPTOWL_BYPASS_SECRET() {
+    return process.env.PROMPTOWL_BYPASS_SECRET || "";
+  },
+  /** Outbound headers for PO fetches; bypass header only when secret set. */
+  get PROMPTOWL_FETCH_HEADERS() {
+    const h = { "Content-Type": "application/json" };
+    if (this.PROMPTOWL_BYPASS_SECRET) {
+      h["x-vercel-protection-bypass"] = this.PROMPTOWL_BYPASS_SECRET;
+    }
+    return h;
+  },
   /**
    * Shared secret for one-click SSO auto-login from PromptOwl (PO).
    *
@@ -164,6 +176,24 @@ var config = {
     const v = (process.env.PROMPTOWL_SIGN_IN_GATE || "open").trim().toLowerCase();
     return v === "admin-only" || v === "disabled" ? v : "open";
   },
+  /**
+   * Manual (email + password) sign-in. Three modes, independent of
+   * `PROMPTOWL_SIGN_IN_GATE` (the two methods are controlled separately):
+   *   "open"        — anyone may log in and self-register (default).
+   *   "invite-only" — existing + admin-invited users may log in and an invited
+   *                   placeholder may set its password ("claim"), but brand-new
+   *                   self-registration is refused. Use this when the admin
+   *                   provisions accounts (invite / share / steward) and users
+   *                   shouldn't be able to create their own.
+   *   "disabled"    — no email/password sign-in at all (PromptOwl only).
+   * Enforced at POST /auth/login and POST /auth/register. The /admin/settings
+   * validator refuses "disabled" while PromptOwl is also disabled, so a server
+   * can never be left with no way to sign in.
+   */
+  get MANUAL_SIGN_IN() {
+    const v = (process.env.MANUAL_SIGN_IN || "open").trim().toLowerCase();
+    return v === "invite-only" || v === "disabled" ? v : "open";
+  },
   /**
    * Path to the .env file the server reads its config from and the license
    * install flow persists PROMPTOWL_KEY into. Defaults UNDER DATA_ROOT (not
@@ -181,6 +211,18 @@ var config = {
   get TELEMETRY_INTERVAL_MS() {
     return parseInt(process.env.TELEMETRY_INTERVAL_MS || "3600000", 10);
   },
+  /**
+   * Activity-trace retention window in days (the api_events table behind
+   * GET /admin/trace and GET /nests/:id/trace). 0 = keep forever (pruning is
+   * skipped entirely). Invalid / negative → default 14; capped at 3650 (ten
+   * years) so a typo can't schedule a prune cutoff in the distant past.
+   * Editable at runtime from the admin Settings page (/admin/settings).
+   */
+  get TRACE_RETENTION_DAYS() {
+    const n = parseInt(process.env.TRACE_RETENTION_DAYS || "14", 10);
+    if (!Number.isFinite(n) || n < 0) return 14;
+    return Math.min(n, 3650);
+  },
   /**
    * Optional custom logo URL shown in UI header + login screen.
    * Must be an absolute https://, http://, or data:image/… URL. Other
@@ -206,6 +248,26 @@ var config = {
    * This flag is also the future license-tier hook: gating a paid tier here
    * is a one-line change because every plane route checks it per request.
    */
+  /**
+   * Optional Slack incoming-webhook URL for team notifications (review
+   * submitted/approved/rejected). Empty/unset = connector off. https only —
+   * a webhook carries an implicit secret in its path, so it never travels
+   * plaintext. (Ported from development PR #105.)
+   */
+  get SLACK_WEBHOOK_URL() {
+    const raw = process.env.SLACK_WEBHOOK_URL?.trim();
+    if (!raw) return null;
+    if (!/^https:\/\//i.test(raw)) {
+      if (!slackUrlWarned) {
+        slackUrlWarned = true;
+        console.warn(
+          "[config] SLACK_WEBHOOK_URL rejected: must be an https:// URL. Slack notifications disabled."
+        );
+      }
+      return null;
+    }
+    return raw;
+  },
   get FEATURE_WORKFLOW_PLANE() {
     return process.env.FEATURE_WORKFLOW_PLANE === "true";
   },
@@ -238,6 +300,13 @@ var config = {
     const n = parseInt(process.env.RUN_MAX_STEPS || "10000", 10);
     return Number.isFinite(n) ? Math.min(1e5, Math.max(10, n)) : 1e4;
   },
+  /** Max concurrently-RUNNING root (depth-0) runs per nest. The subagent
+   *  depth/fan-out caps bound a single tree; this bounds how many trees a
+   *  caller can start at once, so root triggers can't flood the nest. */
+  get RUN_MAX_CONCURRENT_ROOTS() {
+    const n = parseInt(process.env.RUN_MAX_CONCURRENT_ROOTS || "50", 10);
+    return Number.isFinite(n) ? Math.min(1e3, Math.max(1, n)) : 50;
+  },
   get AUTH_MODE() {
     return process.env.AUTH_MODE || "key";
   },
@@ -295,26 +364,6 @@ var config = {
     }
     return raw;
   },
-  /**
-   * Optional Slack incoming-webhook URL for team notifications (review
-   * submitted/approved/rejected, nest shared). Empty/unset = connector off.
-   * https only — a webhook carries an implicit secret in its path, so it
-   * never travels plaintext.
-   */
-  get SLACK_WEBHOOK_URL() {
-    const raw = process.env.SLACK_WEBHOOK_URL?.trim();
-    if (!raw) return null;
-    if (!/^https:\/\//i.test(raw)) {
-      if (!slackUrlWarned) {
-        slackUrlWarned = true;
-        console.warn(
-          "[config] SLACK_WEBHOOK_URL rejected: must be an https:// URL. Slack notifications disabled."
-        );
-      }
-      return null;
-    }
-    return raw;
-  },
   /**
    * Per-nest notification digest window in milliseconds. A burst of governance
    * events on one nest inside this window collapses into a single digest
@@ -1078,6 +1127,140 @@ function runMigrations(db) {
     })();
     recordMigration("018_subagent_runs");
   }
+  if (!hasMigration("020_server_settings")) {
+    db.transaction(() => {
+      db.exec(`
+        CREATE TABLE IF NOT EXISTS server_settings (
+          key TEXT PRIMARY KEY,
+          value TEXT,
+          env_at_write TEXT,
+          updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+        );
+      `);
+      recordMigration("020_server_settings");
+    })();
+  }
+  if (!hasMigration("020_schedules")) {
+    db.transaction(() => {
+      db.exec(`
+        CREATE TABLE IF NOT EXISTS schedules (
+          id TEXT PRIMARY KEY,
+          nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+          agent_node TEXT NOT NULL,
+          every_minutes INTEGER NOT NULL CHECK(every_minutes >= 5),
+          enabled INTEGER NOT NULL DEFAULT 1,
+          last_run_at TEXT,
+          created_by TEXT NOT NULL,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL
+        );
+        CREATE UNIQUE INDEX IF NOT EXISTS idx_schedules_agent
+          ON schedules(nest_id, agent_node);
+      `);
+    })();
+    recordMigration("020_schedules");
+  }
+  if (!hasMigration("021_schedule_bounds")) {
+    db.transaction(() => {
+      db.exec(`
+        ALTER TABLE schedules ADD COLUMN max_runs INTEGER;
+        ALTER TABLE schedules ADD COLUMN runs_created INTEGER NOT NULL DEFAULT 0;
+      `);
+    })();
+    recordMigration("021_schedule_bounds");
+  }
+  if (!hasMigration("022_tools_and_watchers")) {
+    db.transaction(() => {
+      db.exec(`
+        CREATE TABLE IF NOT EXISTS nest_env (
+          nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+          key TEXT NOT NULL,
+          value TEXT NOT NULL,
+          updated_by TEXT NOT NULL,
+          updated_at TEXT NOT NULL,
+          PRIMARY KEY (nest_id, key)
+        );
+        CREATE TABLE IF NOT EXISTS watchers (
+          id TEXT PRIMARY KEY,
+          nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+          node_id TEXT NOT NULL,
+          user_email TEXT NOT NULL,
+          created_by TEXT NOT NULL,
+          created_at TEXT NOT NULL
+        );
+        CREATE UNIQUE INDEX IF NOT EXISTS idx_watchers_unique
+          ON watchers(nest_id, node_id, user_email);
+        CREATE TABLE IF NOT EXISTS notifications (
+          id TEXT PRIMARY KEY,
+          nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+          user_email TEXT NOT NULL,
+          kind TEXT NOT NULL,
+          subject_id TEXT,
+          message TEXT NOT NULL,
+          created_at TEXT NOT NULL,
+          read_at TEXT
+        );
+        CREATE INDEX IF NOT EXISTS idx_notifications_user
+          ON notifications(user_email, read_at, created_at);
+      `);
+    })();
+    recordMigration("022_tools_and_watchers");
+  }
+  if (!hasMigration("023_connectors")) {
+    db.transaction(() => {
+      db.exec(`
+        CREATE TABLE IF NOT EXISTS connectors (
+          id TEXT PRIMARY KEY,
+          nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+          channel TEXT NOT NULL CHECK(channel IN ('slack', 'teams', 'webhook')),
+          url TEXT NOT NULL,               -- https://\u2026 or env:KEY
+          events TEXT NOT NULL,            -- JSON array of kinds, or ["*"]
+          enabled INTEGER NOT NULL DEFAULT 1,
+          created_by TEXT NOT NULL,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL
+        );
+        CREATE INDEX IF NOT EXISTS idx_connectors_nest ON connectors(nest_id);
+      `);
+    })();
+    recordMigration("023_connectors");
+  }
+  if (!hasMigration("024_trigger_hooks")) {
+    db.transaction(() => {
+      db.exec(`
+        CREATE TABLE IF NOT EXISTS trigger_hooks (
+          id TEXT PRIMARY KEY,               -- the token (hk_\u2026), capability auth
+          nest_id TEXT NOT NULL REFERENCES nests(id) ON DELETE CASCADE,
+          agent_node TEXT NOT NULL,
+          preset TEXT NOT NULL CHECK(preset IN ('slack', 'teams', 'webhook')),
+          enabled INTEGER NOT NULL DEFAULT 1,
+          fire_count INTEGER NOT NULL DEFAULT 0,
+          last_fired_at TEXT,
+          created_by TEXT NOT NULL,
+          created_at TEXT NOT NULL
+        );
+        CREATE INDEX IF NOT EXISTS idx_hooks_nest ON trigger_hooks(nest_id);
+      `);
+    })();
+    recordMigration("024_trigger_hooks");
+  }
+  if (!hasMigration("025_run_claims")) {
+    db.transaction(() => {
+      db.exec(`
+        ALTER TABLE runs ADD COLUMN claimed_by TEXT;
+        ALTER TABLE runs ADD COLUMN claimed_at TEXT;
+      `);
+    })();
+    recordMigration("025_run_claims");
+  }
+  if (!hasMigration("026_api_events_nest_index")) {
+    db.transaction(() => {
+      db.exec(`
+        CREATE INDEX IF NOT EXISTS idx_api_events_nest_ts ON api_events(nest_id, id);
+      `);
+    })();
+    recordMigration("026_api_events_nest_index");
+  }
 }
 function mergeCaseCollidingUsers(db) {
   const groups = db.prepare(
@@ -1295,7 +1478,7 @@ async function initDb() {
   if (config.DB_DRIVER === "postgres") {
     const { Pool } = await import("pg");
     const { PostgresAdapter } = await import("./adapter.postgres-YOODX2BI.js");
-    const { runPostgresMigrations } = await import("./migrations.postgres-ORSV7UFJ.js");
+    const { runPostgresMigrations } = await import("./migrations.postgres-4XYY3CTF.js");
     const pool = new Pool(buildPgConfig());
     adapter = new PostgresAdapter(pool);
     await runPostgresMigrations(adapter);

package/dist/{chunk-BYS4HDME.js → chunk-KFGZIECB.js}

@@ -9,7 +9,7 @@ import {
 import {
   config,
   getDb
-} from "./chunk-DPHV6Q26.js";
+} from "./chunk-BC6KFUZH.js";
 import {
   ANON_USER_ID
 } from "./chunk-SLTQACJW.js";
@@ -235,7 +235,7 @@ async function flushTelemetry() {
   try {
     const res = await fetch(url, {
       method: "POST",
-      headers: { "Content-Type": "application/json" },
+      headers: config.PROMPTOWL_FETCH_HEADERS,
       body: JSON.stringify(payload)
     });
     console.log(`[telemetry] response: ${res.status} ${res.statusText}`);
@@ -261,8 +261,53 @@ function startTelemetryLoop() {
   );
 }
 
+// src/db/settings.ts
+var deployBaseline = null;
+function norm(v) {
+  return v === void 0 || v === null ? null : v;
+}
+function baseline() {
+  if (!deployBaseline) deployBaseline = { ...process.env };
+  return deployBaseline;
+}
+async function persistSetting(name, value) {
+  const db = getDb();
+  const envAtWrite = norm(baseline()[name]);
+  await db.run(
+    insertOrReplace(
+      db,
+      `INSERT INTO server_settings (key, value, env_at_write, updated_at)
+       VALUES (?, ?, ?, ${nowExpr(db)})`,
+      ["key"],
+      `value = excluded.value, env_at_write = excluded.env_at_write, updated_at = ${nowExpr(db)}`
+    ),
+    [name, value, envAtWrite]
+  );
+}
+async function loadServerSettings() {
+  deployBaseline = { ...process.env };
+  const base = deployBaseline;
+  const db = getDb();
+  const rows = await db.all(
+    "SELECT key, value, env_at_write FROM server_settings"
+  );
+  let applied = 0;
+  for (const row of rows) {
+    const envVal = norm(base[row.key]);
+    if (envVal !== norm(row.env_at_write)) {
+      await persistSetting(row.key, envVal);
+      if (envVal === null) delete process.env[row.key];
+      else process.env[row.key] = envVal;
+    } else {
+      if (row.value === null) delete process.env[row.key];
+      else process.env[row.key] = row.value;
+    }
+    applied++;
+  }
+  return applied;
+}
+
 // src/auth/license.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
 var currentLicense = null;
 function getCurrentLicense() {
   return currentLicense;
@@ -284,21 +329,6 @@ async function isLicenseAdminUserId(userId) {
     return false;
   }
 }
-function upsertEnvVar(filePath, varName, value) {
-  const prefix = `${varName}=`;
-  let lines = [];
-  if (existsSync2(filePath)) {
-    lines = readFileSync2(filePath, "utf8").split(/\r?\n/);
-  }
-  const filtered = lines.filter((line) => !line.trimStart().startsWith(prefix));
-  if (value !== null) {
-    filtered.push(`${prefix}${value}`);
-  }
-  while (filtered.length && filtered[filtered.length - 1] === "") {
-    filtered.pop();
-  }
-  writeFileSync2(filePath, filtered.join("\n") + "\n", "utf8");
-}
 async function installLicenseKey(key) {
   const trimmed = key.trim();
   if (!trimmed.startsWith("pk_")) {
@@ -315,12 +345,12 @@ async function installLicenseKey(key) {
     return { ...info, persisted: false };
   }
   try {
-    upsertEnvVar(config.ENV_FILE_PATH, "PROMPTOWL_KEY", trimmed);
+    await persistSetting("PROMPTOWL_KEY", trimmed);
     return { ...info, persisted: true };
   } catch (err) {
     const persistError = err instanceof Error ? err.message : String(err);
     console.warn(
-      `[license] validated but FAILED to persist to ${config.ENV_FILE_PATH}: ${persistError}`
+      `[license] validated but FAILED to persist to the database: ${persistError}`
     );
     return { ...info, persisted: false, persistError };
   }
@@ -360,12 +390,12 @@ async function handleLicenseRevoked() {
     console.warn("[license] failed to wipe sessions:", err);
   }
   try {
-    upsertEnvVar(config.ENV_FILE_PATH, "PROMPTOWL_KEY", null);
+    await persistSetting("PROMPTOWL_KEY", null);
     console.warn(
-      `[license] revoked \u2014 removed PROMPTOWL_KEY from ${config.ENV_FILE_PATH}`
+      "[license] revoked \u2014 cleared persisted PROMPTOWL_KEY from the database"
     );
   } catch (err) {
-    console.warn("[license] failed to strip key from .env:", err);
+    console.warn("[license] failed to clear persisted key:", err);
   }
   process.env.PROMPTOWL_KEY = "";
   currentLicense = {
@@ -430,7 +460,7 @@ async function _validateLicenseImpl(forceFresh) {
     const promptowlUrl = config.PROMPTOWL_API_URL.replace(/\/$/, "");
     const res = await fetch(`${promptowlUrl}/api/license/validate`, {
       method: "POST",
-      headers: { "Content-Type": "application/json" },
+      headers: config.PROMPTOWL_FETCH_HEADERS,
       body: JSON.stringify({ key })
     });
     if (!res.ok) {
@@ -890,6 +920,12 @@ async function buildTitleMap(nestId) {
 function folderForNode(nodeId) {
   return nodeId.replace(/^nodes\//, "").split("/").slice(0, -1).join("/");
 }
+async function describeNode(nestId, nodeId) {
+  const titles = await buildTitleMap(nestId);
+  const title = titles.get(nodeId) || nodeId;
+  const folder = folderForNode(nodeId);
+  return folder ? `${title} (in ${folder})` : title;
+}
 async function nestName(nestId) {
   try {
     const row = await getDb().get("SELECT name FROM nests WHERE id = ?", [
@@ -1219,13 +1255,22 @@ async function createStewardRecord(params) {
       "SELECT id FROM users WHERE email = ?",
       [email]
     );
+    let userId = userRow?.id;
+    if (!userId) {
+      const { hashPassword } = await import("./keys-73STFJJB.js");
+      userId = uuid2();
+      await db.run(
+        "INSERT INTO users (id, email, name, password_hash, is_invited) VALUES (?, ?, ?, ?, 1)",
+        [userId, email, null, await hashPassword(uuid2())]
+      );
+    }
     const created = await assignSteward({
       nestId: params.nestId,
       scope: params.scope,
       nodePattern,
       tagName,
       userEmail: email,
-      userId: userRow?.id,
+      userId,
       role: user.role ?? "reviewer",
       assignedBy: params.assignedBy,
       assignedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -1541,10 +1586,11 @@ function rowToSteward(row) {
 export {
   trackEvent,
   startTelemetryLoop,
+  persistSetting,
+  loadServerSettings,
   getCurrentLicense,
   isLicenseAdminEmail,
   isLicenseAdminUserId,
-  upsertEnvVar,
   installLicenseKey,
   startLicenseSafetyPoll,
   isSuspended,
@@ -1573,6 +1619,7 @@ export {
   deleteNest,
   engineCache,
   buildTitleMap,
+  describeNode,
   nestName,
   docLink,
   buildDocContext,

package/dist/{chunk-HRQWNRVI.js → chunk-UHUU3VAK.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-XQ46F76G.js";
 import {
   getDb
-} from "./chunk-DPHV6Q26.js";
+} from "./chunk-BC6KFUZH.js";
 
 // src/governance/version-service.ts
 import { createHash } from "crypto";