@chainpatrol/cli 0.19.0 → 0.21.0

package/CHANGELOG.md

@@ -1,5 +1,54 @@
 # @chainpatrol/cli
 
+## 0.21.0
+
+### Minor Changes
+
+- b3e77eb: `orgs list` and `orgs get` now surface each organization's "Obligatory
+  Organization Admin Approval" state (`Organization.requiresCustomerReview`)
+  alongside its per-asset-type scope. The new response field is
+  `obligatoryAdminApproval: { active, assetTypes }` — an empty `assetTypes`
+  list with `active: true` means approval applies to every asset type
+  (matches the in-app UI's behaviour when no narrowing has been configured).
+
+  `orgs list` also accepts three new filters that compose with the
+  existing ones via AND:
+
+  - `--obligatory-approval-active` / `--obligatory-approval-inactive` —
+    filter on the toggle itself.
+  - `--obligatory-approval-asset-type <csv>` — return only orgs whose
+    approval scope covers every listed asset type (an org's empty
+    per-asset-type list still counts as "all types"). Passing this flag
+    implies the feature is on, so it can't be combined with
+    `--obligatory-approval-inactive`.
+
+  Server-side work in `@chainpatrol/external-trpc` and `@chainpatrol/validation`
+  extends the `/user/orgs` and `/user/orgs/{slug}` schemas accordingly; both
+  are private packages and don't need version bumps.
+
+## 0.20.0
+
+### Minor Changes
+
+- e63d269: Add `chainpatrol asset types` — list every supported `AssetType` enum
+  value with its human-readable label and a short description.
+
+  The mapping (e.g. `ARCHIVE_ORG` → "Archive.org" / Wayback snapshot,
+  `PAGE` → "Page" / standalone web page tracked independently of its
+  parent URL, `FIVE_HUNDRED_PX` → "500px") ships bundled with the CLI as
+  a static map, so the command works without auth or a network round
+  trip. Output is available in human, JSON, markdown, and CSV formats —
+  useful when an agent or script needs to translate enum ↔ display name,
+  validate a user-supplied `--asset-type` value, or enumerate the
+  available types before constructing a filter for `asset list`,
+  `threats list`, `takedowns list`, `detections list`, `reports list`,
+  or `orgs assets list`.
+
+  The Claude Code skill is updated to point at the new command whenever
+  a user asks "what is `ARCHIVE_ORG`?", "what does `PAGE` mean?", or
+  "what asset types does ChainPatrol support?". Shell completions and
+  top-level/per-command help text are updated accordingly.
+
 ## 0.19.0
 
 ### Minor Changes

package/dist/{chunk-UDGJEN4M.js → chunk-4N2YKTJ5.js}

@@ -1,7 +1,7 @@
 import {
   installCompletions,
   uninstallCompletions
-} from "./chunk-NQT77IB7.js";
+} from "./chunk-6VTWWGNV.js";
 
 // src/commands/setup-skill.ts
 import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, readFileSync as readFileSync3, rmSync } from "fs";
@@ -199,8 +199,17 @@ description: |
   "fetch org details", "org info",
   "orgs with takedowns off", "automation off across orgs",
   "which customers have X enabled", "service toggles by org",
+  "obligatory admin approval", "obligatory organization admin approval",
+  "obligatory approval", "admin approval enabled", "admin approval orgs",
+  "requires customer review", "requires admin approval",
+  "orgs that require admin approval", "orgs requiring approval",
+  "which orgs require approval for twitter", "approval scope",
+  "admin approval asset types", "approval per asset type",
   "is this URL blocked", "is this domain blocked", "is this address blocked",
   "check this asset", "asset check", "lookup asset status",
+  "what is ARCHIVE_ORG", "what does PAGE mean", "list asset types",
+  "supported asset types", "asset type mapping", "asset type enum",
+  "what asset types are there", "human readable asset type",
   "how many takedowns", "takedowns in the last", "threats taken down",
   "across all clients", "across all customers", "across all orgs",
   "across all brands", "company-wide", "total takedowns", "total threats",
@@ -383,6 +392,29 @@ If any individual lookup fails, the CLI still prints results for the
 successful ones, then exits non-zero so failures aren't silently
 swallowed.
 
+### \`asset types\` \u2014 List every supported asset type and what it means
+
+When a user asks "what is \`ARCHIVE_ORG\`?", "what does \`PAGE\` mean?",
+or "what asset types does ChainPatrol support?" \u2014 don't guess. Run:
+
+\`\`\`bash
+chainpatrol asset types
+chainpatrol --json asset types
+\`\`\`
+
+The mapping is bundled with the CLI (no API or auth required), so this
+is safe to run anywhere. Each row is \`{ type, label, description }\`:
+\`type\` is the canonical enum value used by every \`--asset-type\` flag
+(\`asset list\`, \`threats list\`, \`takedowns list\`, \`detections list\`,
+\`reports list\`, \`orgs assets list\`); \`label\` is the human-friendly
+display name (\`ARCHIVE_ORG\` \u2192 \`Archive.org\`, \`PAGE\` \u2192 \`Page\`,
+\`FIVE_HUNDRED_PX\` \u2192 \`500px\`); \`description\` is a one-line note for
+unobvious entries.
+
+Use this whenever you need to translate between enum and display name,
+validate that a type the user mentioned is real, or enumerate options
+before constructing a filter.
+
 ### \`configs list\` \u2014 List detection configurations
 
 Requires authentication and an organization slug.
@@ -630,14 +662,17 @@ Guide. Key signals in the response:
 
 Use \`--all\` to snapshot every org you have access to instead of a single slug.
 
-### \`orgs list\` \u2014 List organizations with subscription status and service toggles
+### \`orgs list\` \u2014 List organizations with subscription status, service toggles, and admin-approval scope
 
 Returns every organization the caller can see, with each org's
-subscription status (\`PROSPECT\`, \`TRIAL\`, \`ACTIVE\`, \`INTEGRATION\`) and
-which services are active. Use it to answer questions like "which
-customers have takedowns enabled but automation off?" or "which prospects
-don't have detection turned on yet?" \u2014 filters compose with AND and are
-applied server-side, so one call returns the final list.
+subscription status (\`PROSPECT\`, \`TRIAL\`, \`ACTIVE\`, \`INTEGRATION\`),
+which services are active, and the per-org "Obligatory Organization
+Admin Approval" toggle (with its asset-type scope). Use it to answer
+questions like "which customers have takedowns enabled but automation
+off?", "which prospects don't have detection turned on yet?", or "which
+orgs require admin approval before adding Twitter assets to the
+blocklist?" \u2014 filters compose with AND and are applied server-side, so
+one call returns the final list.
 
 \`\`\`bash
 chainpatrol --json orgs list \\
@@ -660,6 +695,34 @@ misleading filters like "reporting.automated=true" that don't mean
 anything. \`detection\` and \`darkWebMonitoring\` have always been
 single-flag services.
 
+#### Obligatory Organization Admin Approval
+
+Each org also has a separate "Obligatory Organization Admin Approval"
+toggle (\`Organization.requiresCustomerReview\` in the schema, surfaced
+on the Services settings page in the app) that gates customer-side
+review of proposals ChainPatrol staff have already approved before
+they're added to the blocklist. It is NOT one of the operational
+services above \u2014 it is an org-policy toggle with its own per-asset-type
+scope.
+
+Each org's response includes:
+
+\`\`\`json
+{
+  "obligatoryAdminApproval": {
+    "active": true,
+    "assetTypes": ["TWITTER", "URL"]
+  }
+}
+\`\`\`
+
+- \`active=true\` + empty \`assetTypes\` means approval applies to
+  **all** asset types \u2014 the org has not narrowed the scope.
+- \`active=true\` + a non-empty \`assetTypes\` list means approval is
+  required only for those asset types.
+- \`active=false\` means no approval is required; \`assetTypes\` is
+  always empty in that case.
+
 So per-org JSON looks like:
 
 \`\`\`json
@@ -671,7 +734,8 @@ So per-org JSON looks like:
     "takedowns":         { "active": true, "automated": false },
     "detection":         { "active": true },
     "darkWebMonitoring": { "active": false }
-  }
+  },
+  "obligatoryAdminApproval": { "active": true, "assetTypes": ["TWITTER"] }
 }
 \`\`\`
 
@@ -680,7 +744,7 @@ explain that the flag exists in the DB but has no operational effect and
 isn't exposed by the public API \u2014 only \`takedowns.automated\` carries a
 real meaning.
 
-Filter flags (all optional, all comma-separated lists):
+Filter flags (all optional, all comma-separated lists where noted):
 
 - \`--query <text>\` partial name match (substring, case-insensitive)
 - \`--subscription-status <list>\` one or more of \`PROSPECT\`, \`TRIAL\`,
@@ -693,6 +757,16 @@ Filter flags (all optional, all comma-separated lists):
   meaningful automation toggle. Passing any other service name errors out.
 - \`--service-manual <list>\` services whose automation must be OFF.
   Same restriction \u2014 only \`takedowns\`.
+- \`--obligatory-approval-active\` \u2014 only orgs with admin approval on
+- \`--obligatory-approval-inactive\` \u2014 only orgs with admin approval off
+- \`--obligatory-approval-asset-type <list>\` \u2014 only orgs whose admin
+  approval scope covers EVERY listed asset type. The match treats an
+  org's empty per-asset-type list as "applies to all asset types", so a
+  fully-broad org matches every value passed here. Passing this flag
+  implies the feature is on, so it can't be combined with
+  \`--obligatory-approval-inactive\`. Use the canonical asset-type enum
+  names (\`TWITTER\`, \`URL\`, \`PAGE\`, \u2026); run \`chainpatrol asset types\`
+  to see them all.
 
 Service names: \`reporting\`, \`reviewing\`, \`protection\`, \`takedowns\`,
 \`detection\`, \`darkWebMonitoring\`.
@@ -701,16 +775,36 @@ Customers see only orgs they're a member of. Staff/superuser sessions see
 every matching org. The response is the same in both cases; visibility is
 enforced server-side.
 
+#### Use case: finding which orgs require admin approval for an asset type
+
+When a user asks "which orgs require admin approval before blocking
+Twitter assets?", reach straight for the filter \u2014 no client-side
+post-processing needed:
+
+\`\`\`bash
+chainpatrol --json orgs list --obligatory-approval-asset-type TWITTER
+\`\`\`
+
+To audit just the broad opt-ins ("which orgs require approval for
+everything?"), filter on the toggle and inspect \`assetTypes\` in the
+output \u2014 an empty array means "all":
+
+\`\`\`bash
+chainpatrol --json orgs list --obligatory-approval-active \\
+  | jq '.organizations[] | select(.obligatoryAdminApproval.assetTypes | length == 0) | .slug'
+\`\`\`
+
 ### \`orgs get\` \u2014 Get a single organization by slug
 
 Look up one organization the caller has access to. Returns the same per-org
 shape as a single row from \`orgs list\` \u2014 \`active\` for every service,
 plus \`automated\` on \`takedowns\` only (see the note above on why other
-services don't expose an automation flag). Anything you could read from
-\`orgs list\` you can also read here without paging or filtering. Use it
-when the user names a specific customer ("show me acme's setup", "is
-takedowns automation on for morpho?") and you don't need the rest of the
-catalogue.
+services don't expose an automation flag), plus \`obligatoryAdminApproval\`
+(\`active\` + \`assetTypes\`). Anything you could read from \`orgs list\` you
+can also read here without paging or filtering. Use it when the user
+names a specific customer ("show me acme's setup", "is takedowns
+automation on for morpho?", "does this org require admin approval for
+Twitter?") and you don't need the rest of the catalogue.
 
 \`\`\`bash
 chainpatrol orgs get <slug>

package/dist/{chunk-NQT77IB7.js → chunk-6VTWWGNV.js}

@@ -66,6 +66,7 @@ _chainpatrol() {
         asset_subcommands=(
           'check:Check asset status against ChainPatrol'
           'list:List assets in the global ChainPatrol blocklist'
+          'types:List supported asset types and their human-readable labels'
         )
         _describe 'subcommand' asset_subcommands
         ;;
@@ -161,7 +162,7 @@ var BASH_COMPLETION = `_chainpatrol() {
       return 0
       ;;
     asset)
-      COMPREPLY=( $(compgen -W "check list" -- "\${cur}") )
+      COMPREPLY=( $(compgen -W "check list types" -- "\${cur}") )
       return 0
       ;;
     configs)

package/dist/cli.js

@@ -13,8 +13,8 @@ import {
   getCliVersion,
   isSkillInstalled,
   readInstalledSkillVersion
-} from "./chunk-UDGJEN4M.js";
-import "./chunk-NQT77IB7.js";
+} from "./chunk-4N2YKTJ5.js";
+import "./chunk-6VTWWGNV.js";
 import {
   DateTime
 } from "./chunk-TFCNKBRC.js";
@@ -92,14 +92,25 @@ var HELP = {
     usage: "chainpatrol logout"
   },
   asset: {
-    description: "Check asset status or list blocked/allowed assets across the global ChainPatrol blocklist.",
-    usage: "chainpatrol asset <check|list>",
+    description: "Check asset status, list blocked/allowed assets across the global ChainPatrol blocklist, or list every supported asset type.",
+    usage: "chainpatrol asset <check|list|types>",
     examples: [
       "chainpatrol asset check https://phish.example",
       "chainpatrol asset list --asset-type URL --from 2026-05-01",
+      "chainpatrol asset types",
       "chainpatrol --json asset check 0xabc123\u2026"
     ]
   },
+  "asset types": {
+    description: "List every asset type supported by ChainPatrol and what each enum value means (e.g. ARCHIVE_ORG \u2192 Archive.org Wayback snapshot, PAGE \u2192 standalone web page). Reads from a static map bundled with the CLI \u2014 no API or auth required. Useful for picking the right --asset-type value for `asset list`, `threats list`, `takedowns list`, etc.",
+    usage: "chainpatrol asset types",
+    examples: [
+      "chainpatrol asset types",
+      "chainpatrol --json asset types",
+      "chainpatrol asset types --output markdown",
+      "chainpatrol asset types --output csv > asset-types.csv"
+    ]
+  },
   "asset list": {
     description: "List assets in the global ChainPatrol blocklist for a given asset type. Defaults to BLOCKED assets updated in the last day. Use --from and --to to widen the window.",
     usage: "chainpatrol asset list --asset-type <type> [--from ISO --to ISO] [filters]",
@@ -636,7 +647,7 @@ function getTopLevelHelp() {
     "    login         Authenticate with ChainPatrol",
     "    logout        Clear stored credentials",
     "    whoami        Show the current authenticated identity",
-    "    asset         Check or list assets in the global ChainPatrol blocklist",
+    "    asset         Check or list assets, or list supported asset types",
     "    configs       Manage detection configs",
     "    detections    Validate, run, list, update detection configs and results",
     "    healthchecks  List and run organization healthchecks",
@@ -905,6 +916,9 @@ ${getTopLevelHelp()}
     serviceInactive: { type: "string" },
     serviceAutomated: { type: "string" },
     serviceManual: { type: "string" },
+    obligatoryApprovalActive: { type: "boolean" },
+    obligatoryApprovalInactive: { type: "boolean" },
+    obligatoryApprovalAssetType: { type: "string" },
     query: { type: "string" },
     assetType: { type: "string" },
     takedownStatus: { type: "string" },
@@ -1183,9 +1197,17 @@ async function main() {
         });
         break;
       }
-      const hint = subcommand ? suggest(subcommand, ["check", "list"]) : null;
+      if (subcommand === "types") {
+        const { runAssetTypes } = await import("./types-PTMFLYUV.js");
+        runAssetTypes({
+          json: jsonMode,
+          outputFormat: cliContext.outputFormat
+        });
+        break;
+      }
+      const hint = subcommand ? suggest(subcommand, ["check", "list", "types"]) : null;
       throw new Error(
-        subcommand ? `Unknown subcommand: asset ${subcommand}${hint ? `. Did you mean "asset ${hint}"?` : ""}` : "Usage: chainpatrol asset <check|list>"
+        subcommand ? `Unknown subcommand: asset ${subcommand}${hint ? `. Did you mean "asset ${hint}"?` : ""}` : "Usage: chainpatrol asset <check|list|types>"
       );
     }
     case "detections": {
@@ -1539,7 +1561,7 @@ async function main() {
     }
     case "orgs": {
       if (subcommand === "list") {
-        const { runOrgsList } = await import("./list-QXA6GLCV.js");
+        const { runOrgsList } = await import("./list-MHICJ2TK.js");
         await runOrgsList({
           query: cli.flags.query,
           subscriptionStatus: cli.flags.subscriptionStatus,
@@ -1547,6 +1569,9 @@ async function main() {
           serviceInactive: cli.flags.serviceInactive,
           serviceAutomated: cli.flags.serviceAutomated,
           serviceManual: cli.flags.serviceManual,
+          obligatoryApprovalActive: cli.flags.obligatoryApprovalActive,
+          obligatoryApprovalInactive: cli.flags.obligatoryApprovalInactive,
+          obligatoryApprovalAssetType: cli.flags.obligatoryApprovalAssetType,
           json: jsonMode,
           outputFormat: cliContext.outputFormat
         });
@@ -1555,7 +1580,7 @@ async function main() {
       if (subcommand === "get") {
         const positionalSlug = action;
         const slug = positionalSlug ?? await tryResolveOrg();
-        const { runOrgsGet } = await import("./get-K7VHV5X2.js");
+        const { runOrgsGet } = await import("./get-XN752KSL.js");
         await runOrgsGet({
           slug,
           json: jsonMode,
@@ -1686,17 +1711,17 @@ async function main() {
     case "setup":
     case "install":
     case "i": {
-      const { setupSkill } = await import("./setup-skill-F7437RT3.js");
+      const { setupSkill } = await import("./setup-skill-UEOROLCF.js");
       setupSkill({ json: jsonMode, cloud: cli.flags.cloud });
       break;
     }
     case "uninstall": {
-      const { uninstallSkill } = await import("./setup-skill-F7437RT3.js");
+      const { uninstallSkill } = await import("./setup-skill-UEOROLCF.js");
       uninstallSkill({ json: jsonMode });
       break;
     }
     case "completions": {
-      const { printCompletions } = await import("./completions-6C6KG5DH.js");
+      const { printCompletions } = await import("./completions-ILC76OX5.js");
       printCompletions(subcommand);
       break;
     }

package/dist/{completions-6C6KG5DH.js → completions-ILC76OX5.js}

@@ -3,7 +3,7 @@ import {
   installCompletions,
   printCompletions,
   uninstallCompletions
-} from "./chunk-NQT77IB7.js";
+} from "./chunk-6VTWWGNV.js";
 export {
   getCompletionScript,
   installCompletions,

package/dist/{get-K7VHV5X2.js → get-XN752KSL.js}

@@ -26,6 +26,11 @@ function summarizeServices(org) {
   if (org.services.darkWebMonitoring.active) parts.push("darkWebMonitoring");
   return parts.length > 0 ? parts.join(" ") : "(no services enabled)";
 }
+function summarizeObligatoryAdminApproval(org) {
+  if (!org.obligatoryAdminApproval.active) return "off";
+  const types = org.obligatoryAdminApproval.assetTypes;
+  return types.length === 0 ? "on (all asset types)" : `on (${types.join(", ")})`;
+}
 async function runOrgsGet(options) {
   const slug = options.slug?.trim();
   if (!slug) {
@@ -45,7 +50,8 @@ async function runOrgsGet(options) {
       `# ${organization.name} (\`${organization.slug}\`)`,
       "",
       `- Subscription status: ${organization.subscriptionStatus}`,
-      `- Services: ${summarizeServices(organization)}`
+      `- Services: ${summarizeServices(organization)}`,
+      `- Obligatory admin approval: ${summarizeObligatoryAdminApproval(organization)}`
     ].join("\n"),
     csv: toCsvRows([
       {
@@ -59,13 +65,20 @@ async function runOrgsGet(options) {
         // `takedowns` is the only service with a meaningful automation flag.
         takedownsAutomated: organization.services.takedowns.automated,
         detectionActive: organization.services.detection.active,
-        darkWebMonitoringActive: organization.services.darkWebMonitoring.active
+        darkWebMonitoringActive: organization.services.darkWebMonitoring.active,
+        obligatoryAdminApprovalActive: organization.obligatoryAdminApproval.active,
+        // Empty list + active=true means "applies to all asset types" — read
+        // the active column alongside this one to interpret.
+        obligatoryAdminApprovalAssetTypes: organization.obligatoryAdminApproval.assetTypes.join("|")
       }
     ]),
     human: () => {
       console.log(`${organization.name}  (slug: ${organization.slug})`);
       console.log(`  subscriptionStatus: ${organization.subscriptionStatus}`);
       console.log(`  services: ${summarizeServices(organization)}`);
+      console.log(
+        `  obligatoryAdminApproval: ${summarizeObligatoryAdminApproval(organization)}`
+      );
     }
   });
 }

package/dist/{list-QXA6GLCV.js → list-MHICJ2TK.js}

@@ -128,13 +128,41 @@ function summarizeServices(org) {
   }
   return parts.length > 0 ? parts.join(" ") : "(no services enabled)";
 }
+function summarizeObligatoryAdminApproval(org) {
+  if (!org.obligatoryAdminApproval.active) return "off";
+  const types = org.obligatoryAdminApproval.assetTypes;
+  return types.length === 0 ? "on (all asset types)" : `on (${types.join(", ")})`;
+}
+function buildObligatoryAdminApprovalFilter(options) {
+  if (options.obligatoryApprovalActive && options.obligatoryApprovalInactive) {
+    throw new CliExitError(
+      "Conflicting flags: --obligatory-approval-active and --obligatory-approval-inactive can't both be passed.",
+      ExitCode.USAGE
+    );
+  }
+  const assetTypeStrings = splitCsv(options.obligatoryApprovalAssetType).map(
+    (value) => value.toUpperCase()
+  );
+  if (assetTypeStrings.length > 0 && options.obligatoryApprovalInactive) {
+    throw new CliExitError(
+      "Conflicting flags: --obligatory-approval-asset-type implies the feature is on, so it can't be combined with --obligatory-approval-inactive.",
+      ExitCode.USAGE
+    );
+  }
+  const filter = {};
+  if (options.obligatoryApprovalActive) filter.active = true;
+  if (options.obligatoryApprovalInactive) filter.active = false;
+  if (assetTypeStrings.length > 0) filter.assetTypes = assetTypeStrings;
+  return Object.keys(filter).length > 0 ? filter : void 0;
+}
 async function runOrgsList(options) {
   const client = options.apiClient ?? createApiClient();
   const outputFormat = options.outputFormat ?? (options.json ? "json" : "human");
   const input = {
     query: options.query ?? "",
     subscriptionStatus: parseSubscriptionStatuses(options.subscriptionStatus),
-    services: buildServicesFilter(options)
+    services: buildServicesFilter(options),
+    obligatoryAdminApproval: buildObligatoryAdminApprovalFilter(options)
   };
   const result = await client.getUserOrgs(input);
   const organizations = result.organizations;
@@ -145,7 +173,7 @@ async function runOrgsList(options) {
       `# Organizations (${organizations.length})`,
       "",
       ...organizations.map(
-        (org) => `- \`${org.slug}\` \u2014 ${org.name} \u2014 ${org.subscriptionStatus} \u2014 ${summarizeServices(org)}`
+        (org) => `- \`${org.slug}\` \u2014 ${org.name} \u2014 ${org.subscriptionStatus} \u2014 ${summarizeServices(org)} \u2014 admin-approval: ${summarizeObligatoryAdminApproval(org)}`
       )
     ].join("\n"),
     csv: toCsvRows(
@@ -160,7 +188,12 @@ async function runOrgsList(options) {
         // `takedowns` is the only service with a meaningful automation flag.
         takedownsAutomated: org.services.takedowns.automated,
         detectionActive: org.services.detection.active,
-        darkWebMonitoringActive: org.services.darkWebMonitoring.active
+        darkWebMonitoringActive: org.services.darkWebMonitoring.active,
+        obligatoryAdminApprovalActive: org.obligatoryAdminApproval.active,
+        // Empty list + active means "applies to all asset types"; we keep
+        // the cell empty in CSV so spreadsheets render it as the natural
+        // "no narrowing" value — pair it with the active column.
+        obligatoryAdminApprovalAssetTypes: org.obligatoryAdminApproval.assetTypes.join("|")
       }))
     ),
     human: () => {
@@ -173,7 +206,7 @@ async function runOrgsList(options) {
       const nameWidth = Math.max(...organizations.map((org) => org.name.length), 4);
       for (const org of organizations) {
         console.log(
-          `  ${org.slug.padEnd(slugWidth)}  ${org.name.padEnd(nameWidth)}  ${org.subscriptionStatus.padEnd(11)}  ${summarizeServices(org)}`
+          `  ${org.slug.padEnd(slugWidth)}  ${org.name.padEnd(nameWidth)}  ${org.subscriptionStatus.padEnd(11)}  ${summarizeServices(org)}  admin-approval=${summarizeObligatoryAdminApproval(org)}`
         );
       }
     }

package/dist/{setup-skill-F7437RT3.js → setup-skill-UEOROLCF.js}

@@ -6,8 +6,8 @@ import {
   readInstalledSkillVersion,
   setupSkill,
   uninstallSkill
-} from "./chunk-UDGJEN4M.js";
-import "./chunk-NQT77IB7.js";
+} from "./chunk-4N2YKTJ5.js";
+import "./chunk-6VTWWGNV.js";
 export {
   getBundledSkillContent,
   getBundledSkillVersion,

package/dist/types-PTMFLYUV.js

@@ -0,0 +1,271 @@
+import {
+  printOutput,
+  toCsvRows
+} from "./chunk-VFT3TD3E.js";
+
+// src/lib/asset-types.ts
+var ASSET_TYPES = [
+  {
+    type: "URL",
+    label: "URL",
+    description: "A full URL or domain (web page). The most common asset type for phishing sites."
+  },
+  {
+    type: "PAGE",
+    label: "Page",
+    description: "A standalone web page tracked independently of its parent URL (e.g. a hosted phishing kit deployed on a shared platform)."
+  },
+  {
+    type: "ADDRESS",
+    label: "Address",
+    description: "A blockchain address (EVM, Bitcoin, Solana, etc.) used by a threat."
+  },
+  {
+    type: "DISCORD",
+    label: "Discord",
+    description: "A Discord server invite or guild."
+  },
+  { type: "LINKEDIN", label: "LinkedIn", description: "A LinkedIn profile or page." },
+  { type: "TWITTER", label: "Twitter", description: "An X (formerly Twitter) account." },
+  { type: "FACEBOOK", label: "Facebook", description: "A Facebook page or profile." },
+  { type: "YOUTUBE", label: "YouTube", description: "A YouTube channel or video." },
+  { type: "REDDIT", label: "Reddit", description: "A Reddit user or subreddit." },
+  {
+    type: "TELEGRAM",
+    label: "Telegram",
+    description: "A Telegram channel, group, or user."
+  },
+  {
+    type: "GOOGLE_APP_STORE",
+    label: "Google Play Store",
+    description: "An Android app on Google Play."
+  },
+  {
+    type: "APPLE_APP_STORE",
+    label: "Apple App Store",
+    description: "An iOS app on the Apple App Store."
+  },
+  {
+    type: "AMAZON_APP_STORE",
+    label: "Amazon App Store",
+    description: "An Android app on the Amazon Appstore."
+  },
+  {
+    type: "MICROSOFT_APP_STORE",
+    label: "Microsoft App Store",
+    description: "An app in the Microsoft Store."
+  },
+  { type: "TIKTOK", label: "TikTok", description: "A TikTok account or video." },
+  { type: "INSTAGRAM", label: "Instagram", description: "An Instagram account." },
+  { type: "THREADS", label: "Threads", description: "A Threads (Meta) account." },
+  { type: "MEDIUM", label: "Medium", description: "A Medium blog or post." },
+  {
+    type: "CHROME_WEB_STORE",
+    label: "Chrome Web Store",
+    description: "A Chrome browser extension."
+  },
+  {
+    type: "MOZILLA_ADDONS",
+    label: "Mozilla Firefox Addons",
+    description: "A Firefox browser add-on."
+  },
+  {
+    type: "OPERA_ADDONS",
+    label: "Opera Addons",
+    description: "An Opera browser add-on."
+  },
+  { type: "EMAIL", label: "Email", description: "An email address." },
+  { type: "PATREON", label: "Patreon", description: "A Patreon page." },
+  { type: "OPENSEA", label: "OpenSea", description: "An OpenSea collection or account." },
+  { type: "FARCASTER", label: "Farcaster", description: "A Farcaster account." },
+  {
+    type: "IPFS",
+    label: "IPFS",
+    description: "An IPFS-hosted resource (CID or gateway URL)."
+  },
+  { type: "GOOGLE_FORM", label: "Google Form", description: "A Google Forms form." },
+  {
+    type: "WHATSAPP",
+    label: "WhatsApp",
+    description: "A WhatsApp number, group, or channel."
+  },
+  { type: "DISCORD_USER", label: "Discord User", description: "A Discord user account." },
+  { type: "QUORA", label: "Quora", description: "A Quora user or space." },
+  {
+    type: "GITHUB",
+    label: "GitHub",
+    description: "A GitHub account, repository, or page."
+  },
+  { type: "TEACHABLE", label: "Teachable", description: "A Teachable course or school." },
+  { type: "SUBSTACK", label: "Substack", description: "A Substack publication." },
+  { type: "DEBANK", label: "Debank", description: "A Debank profile." },
+  { type: "TAWK_TO", label: "Tawk.to Chat", description: "A Tawk.to live-chat widget." },
+  { type: "JOTFORM", label: "Jotform", description: "A Jotform form." },
+  { type: "PRIMAL", label: "Primal", description: "A Primal (Nostr) profile." },
+  { type: "BLUESKY", label: "Bluesky", description: "A Bluesky account." },
+  { type: "SNAPCHAT", label: "Snapchat", description: "A Snapchat account." },
+  { type: "DESO", label: "DeSo", description: "A DeSo profile." },
+  { type: "PINTEREST", label: "Pinterest", description: "A Pinterest account or board." },
+  { type: "FLICKR", label: "Flickr", description: "A Flickr account." },
+  { type: "GALXE", label: "Galxe", description: "A Galxe campaign or space." },
+  { type: "VELOG", label: "Velog", description: "A Velog blog or post." },
+  { type: "NPM", label: "npm", description: "An npm package." },
+  { type: "PYPI", label: "PyPI", description: "A PyPI Python package." },
+  { type: "HEX", label: "Hex", description: "A Hex Erlang/Elixir package." },
+  { type: "DOCKER_HUB", label: "Docker Hub", description: "A Docker Hub image." },
+  {
+    type: "VOCAL_MEDIA",
+    label: "Vocal Media",
+    description: "A Vocal Media profile or story."
+  },
+  { type: "TECKFINE", label: "Teckfine", description: "A Teckfine listing." },
+  {
+    type: "TENDERLY",
+    label: "Tenderly",
+    description: "A Tenderly dashboard or simulation."
+  },
+  { type: "HACKMD", label: "HackMD", description: "A HackMD note." },
+  { type: "ETSY", label: "Etsy", description: "An Etsy shop or listing." },
+  { type: "ZAZZLE", label: "Zazzle", description: "A Zazzle shop or product." },
+  { type: "BASENAME", label: "Basename", description: "A Base ENS (basename) record." },
+  {
+    type: "BILIBILI_TV",
+    label: "Bilibili TV",
+    description: "A Bilibili TV channel or video."
+  },
+  { type: "VIMEO", label: "Vimeo", description: "A Vimeo video or channel." },
+  {
+    type: "DAILYMOTION",
+    label: "Dailymotion",
+    description: "A Dailymotion video or channel."
+  },
+  { type: "PHONE_NUMBER", label: "Phone Number", description: "A phone number." },
+  { type: "SLACK", label: "Slack", description: "A Slack workspace invite." },
+  { type: "CALENDLY", label: "Calendly", description: "A Calendly scheduling page." },
+  {
+    type: "NGROK",
+    label: "Ngrok",
+    description: "An ngrok tunnel (often used to host short-lived phishing endpoints)."
+  },
+  { type: "RARIBLE", label: "Rarible", description: "A Rarible collection or profile." },
+  {
+    type: "RUST_PACKAGE",
+    label: "Rust Package",
+    description: "A crates.io Rust package."
+  },
+  { type: "FLATHUB", label: "Flathub", description: "A Flathub Linux app listing." },
+  { type: "VIDLII", label: "VidLii", description: "A VidLii video or channel." },
+  { type: "VEVIOZ", label: "Vevioz", description: "A Vevioz listing." },
+  { type: "ISSUU", label: "Issuu", description: "An Issuu publication." },
+  {
+    type: "SOUNDCLOUD",
+    label: "SoundCloud",
+    description: "A SoundCloud account or track."
+  },
+  { type: "ZAPPER", label: "Zapper", description: "A Zapper profile or bundle." },
+  { type: "REDNOTE", label: "RedNote", description: "A RedNote (Xiaohongshu) account." },
+  {
+    type: "SAMSUNG_APP_STORE",
+    label: "Samsung Galaxy Store",
+    description: "An app on Samsung Galaxy Store."
+  },
+  {
+    type: "HUAWEI_APP_STORE",
+    label: "Huawei AppGallery",
+    description: "An app on Huawei AppGallery."
+  },
+  {
+    type: "XIAOMI_APP_STORE",
+    label: "Xiaomi GetApps",
+    description: "An app on Xiaomi GetApps."
+  },
+  {
+    type: "TENCENT_APP_STORE",
+    label: "Tencent App Store",
+    description: "An app on the Tencent App Store."
+  },
+  {
+    type: "OPPO_APP_STORE",
+    label: "OPPO App Market",
+    description: "An app on OPPO App Market."
+  },
+  {
+    type: "VIVO_APP_STORE",
+    label: "Vivo App Store",
+    description: "An app on Vivo App Store."
+  },
+  { type: "F_DROID", label: "F-Droid", description: "An app on F-Droid." },
+  { type: "GOOGLE_AD", label: "Google Ad", description: "A Google Ads advertisement." },
+  { type: "BING_AD", label: "Bing Ad", description: "A Microsoft Bing advertisement." },
+  { type: "TWITCH", label: "Twitch", description: "A Twitch channel." },
+  { type: "BEHANCE", label: "Behance", description: "A Behance profile or project." },
+  { type: "ZORA", label: "Zora", description: "A Zora collection or profile." },
+  {
+    type: "META_AD",
+    label: "Meta Ad",
+    description: "A Facebook/Instagram (Meta) advertisement."
+  },
+  { type: "SIGNAL", label: "Signal", description: "A Signal group invite or contact." },
+  { type: "DEVIANTART", label: "DeviantArt", description: "A DeviantArt profile." },
+  { type: "BANDCAMP", label: "Bandcamp", description: "A Bandcamp page." },
+  {
+    type: "ARCHIVE_ORG",
+    label: "Archive.org",
+    description: "An Internet Archive (archive.org) snapshot \u2014 typically a Wayback Machine URL preserving a phishing page."
+  },
+  {
+    type: "FIVE_HUNDRED_PX",
+    label: "500px",
+    description: "A 500px photographer profile."
+  }
+];
+var ASSET_TYPE_LABELS = Object.freeze(
+  Object.fromEntries(ASSET_TYPES.map((entry) => [entry.type, entry.label]))
+);
+
+// src/commands/asset/types.ts
+function toRow(entry) {
+  return {
+    type: entry.type,
+    label: entry.label,
+    description: entry.description ?? ""
+  };
+}
+function runAssetTypes(options) {
+  const outputFormat = options.outputFormat ?? (options.json ? "json" : "human");
+  const rows = ASSET_TYPES.map(toRow);
+  const escapeMarkdownCell = (value) => value.replaceAll("|", "\\|");
+  printOutput({
+    outputFormat,
+    json: { assetTypes: ASSET_TYPES, count: ASSET_TYPES.length },
+    markdown: [
+      "# ChainPatrol asset types",
+      "",
+      `Total: ${ASSET_TYPES.length}`,
+      "",
+      "| Type | Label | Description |",
+      "| --- | --- | --- |",
+      ...rows.map(
+        (row) => `| \`${row.type}\` | ${escapeMarkdownCell(row.label)} | ${escapeMarkdownCell(row.description)} |`
+      )
+    ].join("\n"),
+    csv: toCsvRows(rows),
+    human: () => {
+      const typeColumnWidth = Math.max(...ASSET_TYPES.map((entry) => entry.type.length));
+      const labelColumnWidth = Math.max(
+        ...ASSET_TYPES.map((entry) => entry.label.length)
+      );
+      console.log(`ChainPatrol asset types (${ASSET_TYPES.length})`);
+      console.log("");
+      for (const entry of ASSET_TYPES) {
+        const type = entry.type.padEnd(typeColumnWidth);
+        const label = entry.label.padEnd(labelColumnWidth);
+        const description = entry.description ? `  ${entry.description}` : "";
+        console.log(`${type}  ${label}${description}`);
+      }
+    }
+  });
+}
+export {
+  runAssetTypes
+};

package/package.json

@@ -2,7 +2,7 @@
   "name": "@chainpatrol/cli",
   "description": "The official ChainPatrol CLI — terminal interface for threat detection",
   "author": "Umar Ahmed <umar@chainpatrol.io>",
-  "version": "0.19.0",
+  "version": "0.21.0",
   "license": "UNLICENSED",
   "homepage": "https://chainpatrol.com/docs/cli",
   "keywords": [