@chainpatrol/cli 0.17.0 → 0.18.0

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # @chainpatrol/cli
 
+## 0.18.0
+
+### Minor Changes
+
+- 0825606: Drop `automated` from the per-service shape of `orgs list` / `orgs get`
+  (and the matching `/user/orgs` and `/user/orgs/{slug}` public APIs) for
+  every service except `takedowns`. `automated` only ever had operational
+  meaning for takedowns — it controls whether ChainPatrol files the
+  takedown on its own. The `isAutomated*Active` columns on
+  reporting/reviewing/protection have no runtime effect, so exposing them
+  in the public API only invited misleading filters and CSV columns.
+
+  Concretely:
+
+  - API response: `services.reporting`, `services.reviewing`, and
+    `services.protection` now return `{ "active": boolean }` only.
+    `services.takedowns` still returns `{ "active": boolean, "automated":
+boolean }`. `detection` and `darkWebMonitoring` are unchanged.
+  - API services filter: same — `reporting`, `reviewing`, and
+    `protection` no longer accept an `automated` filter. Only
+    `takedowns` does.
+  - CLI: `--service-automated` / `--service-manual` now only accept
+    `takedowns`. Passing any other service name errors out with a
+    clearer message.
+  - CLI CSV output: drops the `reportingAutomated` / `reviewingAutomated`
+    / `protectionAutomated` columns. Only `takedownsAutomated` remains.
+  - Skill description and OpenAPI endpoint descriptions explain the
+    new shape.
+
+  Server-side work in @chainpatrol/external-trpc and @chainpatrol/validation
+  supports the new shape; both are private packages and don't need
+  version bumps.
+
 ## 0.17.0
 
 ### Minor Changes

package/dist/{chunk-75H4KTIQ.js → chunk-MDDC4F6Q.js}

@@ -626,10 +626,10 @@ Use \`--all\` to snapshot every org you have access to instead of a single slug.
 
 Returns every organization the caller can see, with each org's
 subscription status (\`PROSPECT\`, \`TRIAL\`, \`ACTIVE\`, \`INTEGRATION\`) and
-which services are active and automated. Use it to answer questions like
-"which customers have takedowns enabled but automation off?" or "which
-prospects don't have detection turned on yet?" \u2014 filters compose with AND
-and are applied server-side, so one call returns the final list.
+which services are active. Use it to answer questions like "which
+customers have takedowns enabled but automation off?" or "which prospects
+don't have detection turned on yet?" \u2014 filters compose with AND and are
+applied server-side, so one call returns the final list.
 
 \`\`\`bash
 chainpatrol --json orgs list \\
@@ -638,6 +638,40 @@ chainpatrol --json orgs list \\
   --service-manual takedowns
 \`\`\`
 
+#### Per-service response shape \u2014 \`automated\` is takedowns-only
+
+Every service exposes an \`active\` boolean. **Only \`takedowns\`
+additionally exposes \`automated\`** \u2014 that is the one service where the
+manual-vs-automated distinction changes real platform behavior (whether
+ChainPatrol files the takedown on its own, or queues it for a human to
+file). \`reporting\`, \`reviewing\`, and \`protection\` have backing
+\`isAutomated*Active\` columns in the database, but those flags have no
+operational effect today, so the API deliberately omits them from both
+the response and the \`services\` filter \u2014 surfacing them would invite
+misleading filters like "reporting.automated=true" that don't mean
+anything. \`detection\` and \`darkWebMonitoring\` have always been
+single-flag services.
+
+So per-org JSON looks like:
+
+\`\`\`json
+{
+  "services": {
+    "reporting":         { "active": true },
+    "reviewing":         { "active": true },
+    "protection":        { "active": false },
+    "takedowns":         { "active": true, "automated": false },
+    "detection":         { "active": true },
+    "darkWebMonitoring": { "active": false }
+  }
+}
+\`\`\`
+
+When a user asks about "automated reporting / reviewing / protection",
+explain that the flag exists in the DB but has no operational effect and
+isn't exposed by the public API \u2014 only \`takedowns.automated\` carries a
+real meaning.
+
 Filter flags (all optional, all comma-separated lists):
 
 - \`--query <text>\` partial name match (substring, case-insensitive)
@@ -646,11 +680,11 @@ Filter flags (all optional, all comma-separated lists):
   through this filter \u2014 \`orgs list\` only ever returns live customers.
 - \`--service-active <list>\` services that must be active
 - \`--service-inactive <list>\` services that must be inactive
-- \`--service-automated <list>\` services whose automation must be ON
-  (\`reporting\`, \`reviewing\`, \`protection\`, \`takedowns\` \u2014 the four
-  with an automation toggle)
-- \`--service-manual <list>\` services whose automation must be OFF
-  (same four)
+- \`--service-automated <list>\` services whose automation must be ON.
+  **Only \`takedowns\` is accepted** \u2014 the other services don't have a
+  meaningful automation toggle. Passing any other service name errors out.
+- \`--service-manual <list>\` services whose automation must be OFF.
+  Same restriction \u2014 only \`takedowns\`.
 
 Service names: \`reporting\`, \`reviewing\`, \`protection\`, \`takedowns\`,
 \`detection\`, \`darkWebMonitoring\`.
@@ -662,11 +696,13 @@ enforced server-side.
 ### \`orgs get\` \u2014 Get a single organization by slug
 
 Look up one organization the caller has access to. Returns the same per-org
-shape as a single row from \`orgs list\` (subscription status + per-service
-active/automated flags), so anything you could read from \`orgs list\` you
-can also read here without paging or filtering. Use it when the user names
-a specific customer ("show me acme's setup", "is takedowns automation on
-for morpho?") and you don't need the rest of the catalogue.
+shape as a single row from \`orgs list\` \u2014 \`active\` for every service,
+plus \`automated\` on \`takedowns\` only (see the note above on why other
+services don't expose an automation flag). Anything you could read from
+\`orgs list\` you can also read here without paging or filtering. Use it
+when the user names a specific customer ("show me acme's setup", "is
+takedowns automation on for morpho?") and you don't need the rest of the
+catalogue.
 
 \`\`\`bash
 chainpatrol orgs get <slug>

package/dist/cli.js

@@ -13,7 +13,7 @@ import {
   getCliVersion,
   isSkillInstalled,
   readInstalledSkillVersion
-} from "./chunk-75H4KTIQ.js";
+} from "./chunk-MDDC4F6Q.js";
 import "./chunk-NQT77IB7.js";
 import {
   DateTime
@@ -513,15 +513,15 @@ var HELP = {
     examples: ["chainpatrol orgs asset-groups list --output csv"]
   },
   "orgs list": {
-    description: "List organizations with their subscription status and per-service active/automated flags. All filters compose with AND.",
+    description: "List organizations with their subscription status and per-service active flag (plus `automated` for takedowns only \u2014 that's the one service where manual-vs-automated changes real platform behavior). All filters compose with AND.",
     usage: "chainpatrol orgs list [filters]",
     options: [
       "--query <text>             Partial name match (substring, case-insensitive)",
       "--subscription-status <l>  Comma-separated list (PROSPECT,TRIAL,ACTIVE,INTEGRATION)",
       "--service-active <l>       Comma-separated services that must be active",
       "--service-inactive <l>     Comma-separated services that must be inactive",
-      "--service-automated <l>    Services whose automation must be ON (reporting,reviewing,protection,takedowns)",
-      "--service-manual <l>       Services whose automation must be OFF (reporting,reviewing,protection,takedowns)"
+      "--service-automated <l>    Services whose automation must be ON (only `takedowns` is accepted \u2014 the other services have no meaningful automation toggle)",
+      "--service-manual <l>       Services whose automation must be OFF (only `takedowns` is accepted)"
     ],
     examples: [
       "chainpatrol orgs list --subscription-status ACTIVE",
@@ -530,7 +530,7 @@ var HELP = {
     ]
   },
   "orgs get": {
-    description: "Get a single organization by slug. Returns the same shape as one row of `orgs list` (subscription status + per-service active/automated flags). Caller must have access: org-scoped API keys must match the slug, user sessions/keys need an active membership unless the user is staff.",
+    description: "Get a single organization by slug. Returns the same shape as one row of `orgs list` (subscription status + per-service active flag, with `automated` exposed only for takedowns \u2014 the one service where manual-vs-automated changes real platform behavior). Caller must have access: org-scoped API keys must match the slug, user sessions/keys need an active membership unless the user is staff.",
     usage: "chainpatrol orgs get <slug>",
     options: [
       "--org <slug>           Use the saved default org instead of a positional argument."
@@ -1538,7 +1538,7 @@ async function main() {
     }
     case "orgs": {
       if (subcommand === "list") {
-        const { runOrgsList } = await import("./list-OEJV4UNQ.js");
+        const { runOrgsList } = await import("./list-XUYCZG7S.js");
         await runOrgsList({
           query: cli.flags.query,
           subscriptionStatus: cli.flags.subscriptionStatus,
@@ -1554,7 +1554,7 @@ async function main() {
       if (subcommand === "get") {
         const positionalSlug = action;
         const slug = positionalSlug ?? await tryResolveOrg();
-        const { runOrgsGet } = await import("./get-BPTWCJ6H.js");
+        const { runOrgsGet } = await import("./get-YFYSJFBC.js");
         await runOrgsGet({
           slug,
           json: jsonMode,
@@ -1664,12 +1664,12 @@ async function main() {
     case "setup":
     case "install":
     case "i": {
-      const { setupSkill } = await import("./setup-skill-RPVW2CCQ.js");
+      const { setupSkill } = await import("./setup-skill-Z6SBI6GC.js");
       setupSkill({ json: jsonMode, cloud: cli.flags.cloud });
       break;
     }
     case "uninstall": {
-      const { uninstallSkill } = await import("./setup-skill-RPVW2CCQ.js");
+      const { uninstallSkill } = await import("./setup-skill-Z6SBI6GC.js");
       uninstallSkill({ json: jsonMode });
       break;
     }

package/dist/{get-BPTWCJ6H.js → get-YFYSJFBC.js}

@@ -16,11 +16,12 @@ import "./chunk-U73SABXK.js";
 // src/commands/orgs/get.ts
 function summarizeServices(org) {
   const parts = [];
-  for (const service of ["reporting", "reviewing", "protection", "takedowns"]) {
-    const entry = org.services[service];
-    if (!entry.active) continue;
-    parts.push(`${service}=${entry.automated ? "auto" : "manual"}`);
+  if (org.services.takedowns.active) {
+    parts.push(`takedowns=${org.services.takedowns.automated ? "auto" : "manual"}`);
   }
+  if (org.services.reporting.active) parts.push("reporting");
+  if (org.services.reviewing.active) parts.push("reviewing");
+  if (org.services.protection.active) parts.push("protection");
   if (org.services.detection.active) parts.push("detection");
   if (org.services.darkWebMonitoring.active) parts.push("darkWebMonitoring");
   return parts.length > 0 ? parts.join(" ") : "(no services enabled)";
@@ -52,12 +53,10 @@ async function runOrgsGet(options) {
         name: organization.name,
         subscriptionStatus: organization.subscriptionStatus,
         reportingActive: organization.services.reporting.active,
-        reportingAutomated: organization.services.reporting.automated,
         reviewingActive: organization.services.reviewing.active,
-        reviewingAutomated: organization.services.reviewing.automated,
         protectionActive: organization.services.protection.active,
-        protectionAutomated: organization.services.protection.automated,
         takedownsActive: organization.services.takedowns.active,
+        // `takedowns` is the only service with a meaningful automation flag.
         takedownsAutomated: organization.services.takedowns.automated,
         detectionActive: organization.services.detection.active,
         darkWebMonitoringActive: organization.services.darkWebMonitoring.active

package/dist/{list-OEJV4UNQ.js → list-XUYCZG7S.js}

@@ -20,8 +20,14 @@ var VALID_SUBSCRIPTION_STATUSES = /* @__PURE__ */ new Set([
   "ACTIVE",
   "INTEGRATION"
 ]);
-var DUAL_SERVICES = ["reporting", "reviewing", "protection", "takedowns"];
-var SINGLE_SERVICES = ["detection", "darkWebMonitoring"];
+var DUAL_SERVICES = ["takedowns"];
+var SINGLE_SERVICES = [
+  "reporting",
+  "reviewing",
+  "protection",
+  "detection",
+  "darkWebMonitoring"
+];
 var ALL_SERVICES = [...DUAL_SERVICES, ...SINGLE_SERVICES];
 function splitCsv(value) {
   if (!value) return [];
@@ -60,7 +66,7 @@ function parseServiceList(raw, flagName) {
 function requireDualService(service, flagName) {
   if (!DUAL_SERVICES.includes(service)) {
     throw new CliExitError(
-      `Service '${service}' does not have an automation toggle and can't be used with --${flagName}. Use --service-active / --service-inactive instead.`,
+      `Service '${service}' does not have a meaningful automation toggle and can't be used with --${flagName}. Only 'takedowns' supports --service-automated / --service-manual; use --service-active / --service-inactive for the others.`,
       ExitCode.USAGE
     );
   }
@@ -114,10 +120,8 @@ function buildServicesFilter(options) {
 }
 function summarizeServices(org) {
   const parts = [];
-  for (const service of DUAL_SERVICES) {
-    const entry = org.services[service];
-    if (!entry.active) continue;
-    parts.push(`${service}=${entry.automated ? "auto" : "manual"}`);
+  if (org.services.takedowns.active) {
+    parts.push(`takedowns=${org.services.takedowns.automated ? "auto" : "manual"}`);
   }
   for (const service of SINGLE_SERVICES) {
     if (org.services[service].active) parts.push(service);
@@ -150,12 +154,10 @@ async function runOrgsList(options) {
         name: org.name,
         subscriptionStatus: org.subscriptionStatus,
         reportingActive: org.services.reporting.active,
-        reportingAutomated: org.services.reporting.automated,
         reviewingActive: org.services.reviewing.active,
-        reviewingAutomated: org.services.reviewing.automated,
         protectionActive: org.services.protection.active,
-        protectionAutomated: org.services.protection.automated,
         takedownsActive: org.services.takedowns.active,
+        // `takedowns` is the only service with a meaningful automation flag.
         takedownsAutomated: org.services.takedowns.automated,
         detectionActive: org.services.detection.active,
         darkWebMonitoringActive: org.services.darkWebMonitoring.active

package/dist/{setup-skill-RPVW2CCQ.js → setup-skill-Z6SBI6GC.js}

@@ -6,7 +6,7 @@ import {
   readInstalledSkillVersion,
   setupSkill,
   uninstallSkill
-} from "./chunk-75H4KTIQ.js";
+} from "./chunk-MDDC4F6Q.js";
 import "./chunk-NQT77IB7.js";
 export {
   getBundledSkillContent,

package/package.json

@@ -2,7 +2,7 @@
   "name": "@chainpatrol/cli",
   "description": "The official ChainPatrol CLI — terminal interface for threat detection",
   "author": "Umar Ahmed <umar@chainpatrol.io>",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "license": "UNLICENSED",
   "homepage": "https://chainpatrol.com/docs/cli",
   "keywords": [