@chainpatrol/cli 1.1.0 → 1.3.0

package/CHANGELOG.md

@@ -1,5 +1,94 @@
 # @chainpatrol/cli
 
+## 1.3.0
+
+### Minor Changes
+
+- 08b9976: Broaden the public API surface across Reports, Takedowns, Detections,
+  Detection Configs, and Assets. Everything additive — no removed fields,
+  no renames — so existing callers are unaffected.
+
+  **Detections (`listDetections`)** — new fields on each `DetectionListItem`:
+  `reason` (free-text explanation of why the detection fired), `score` (raw
+  0–1 model score), `configId` (which `ThreatDetectionConfig` produced the
+  hit), `reportedAt` (when it transitioned to `REPORTED`, nullable), and
+  `brands[]` (brand associations).
+
+  **Detection Configs (`listDetectionConfigs`)** — each `ConfigEntry` now
+  carries `description` (nullable), `createdAt`, and `updatedAt` so
+  integrators can spot silent or stale configs.
+
+  **Reports** — `listOrganizationReports` gains `slaDueAt` (SLA deadline),
+  `externalSubmissionLink` (original external source URL when submitted from
+  a third-party surface), and `duplicateOfId` (canonical report ID when this
+  one is a duplicate). Type gaps are also closed: `imageDisplay`,
+  `favoritedAt`, `attachments[]`, and `proposals.asset.scans[]` were already
+  returned by the handler but omitted from the SDK type — they're now
+  declared. `searchReports` (`report/search-external`) response now
+  surfaces the `title` and `createdAt` fields the handler already fetched.
+
+  **Takedowns (`listTakedowns`)** — each `TakedownItem` gains `externalId`
+  (vendor's own reference — CleanDNS report ID / registrar ticket, for
+  reconciliation), `hasFilingDelay`, `hasLivenessCheckDelay` (staff-set
+  flags used by median-time metrics), and `asset.blockedAt`.
+
+  **Takedowns (`getTakedown`)** — the response was previously bare
+  (`{ assetContent, takedownStatus, createdAt, updatedAt }`). It's now
+  fully built out with `asset` details (id / content / type /
+  `livenessStatus` / `blockedAt`) and a nested `takedown` record (id /
+  status / `externalId` / delay flags / assignee / brand / tasks[]). The
+  original top-level fields (`takedownStatus`, `createdAt`, `updatedAt`)
+  are preserved for existing callers.
+
+  **Assets — `livenessStatus` + `blockedAt` parity.** `listAssets`,
+  `listOrganizationAssets`, `assetSearch` (`.asset`), and `listThreats`
+  (`livenessStatus` only, `blockedAt` already there) now consistently
+  return both fields. `listAssets` also fixes a bug where each returned
+  row's `id` was stripped from the response mapper (the column was already
+  selected). Note: `assetCheck` is intentionally deferred — its response
+  goes through `@chainpatrol/asset`'s own `checkAsset()` contract; parity
+  there needs a scoped follow-up in the asset package.
+
+  Server-side work in `@chainpatrol/external-trpc`, `@chainpatrol/core`,
+  `@chainpatrol/validation`, and `@chainpatrol/database` backs the new
+  fields; those are private packages and don't need version bumps. Also
+  adds a `/// @deprecated` doc-comment to `Report.threatLevel` in the
+  Prisma schema — the field is not surfaced through the public API and no
+  in-app UI reads it; the column stays for now, removal is a separate
+  destructive migration.
+
+### Patch Changes
+
+- Updated dependencies [08b9976]
+  - @chainpatrol/sdk@1.3.0
+
+## 1.2.0
+
+### Minor Changes
+
+- 3faffa0: Surface the sibling visibility knobs, brand-facing metadata, and portal
+  customization on the `/user/orgs` and `/user/orgs/{slug}` responses, on
+  `UserOrg` in the SDK, and in `chainpatrol orgs get` / `chainpatrol orgs list`
+  output (human, markdown, CSV, and JSON):
+
+  - `reportVisibility` (`PUBLIC` / `PRIVATE`) — sibling of `portalVisibility`.
+  - `metricsVisibility` (`PUBLIC` / `PRIVATE` / `DISABLED`) — sibling of the
+    above.
+  - `brandMetadata` — `{ websiteUrl, twitterHandle, securityContactEmail,
+industry }`, all nullable.
+  - `portalCustomization` — `{ useCustomDetails, name, slug, avatarUrl,
+bannerEnabled, bannerContent }` for the customer-configurable portal
+    presentation.
+
+  Server-side work in `@chainpatrol/external-trpc` and `@chainpatrol/validation`
+  supports the new fields; both are private packages and don't need version
+  bumps.
+
+### Patch Changes
+
+- Updated dependencies [3faffa0]
+  - @chainpatrol/sdk@1.2.0
+
 ## 1.1.0
 
 ### Minor Changes

package/dist/cli.js

@@ -1606,7 +1606,7 @@ async function main() {
     }
     case "orgs": {
       if (subcommand === "list") {
-        const { runOrgsList } = await import("./list-N2TGW7MP.js");
+        const { runOrgsList } = await import("./list-BAPTZNTM.js");
         await runOrgsList({
           query: cli.flags.query,
           subscriptionStatus: cli.flags.subscriptionStatus,
@@ -1628,7 +1628,7 @@ async function main() {
       if (subcommand === "get") {
         const positionalSlug = action;
         const slug = positionalSlug ?? await tryResolveOrg();
-        const { runOrgsGet } = await import("./get-BZCAHKID.js");
+        const { runOrgsGet } = await import("./get-SM5KGJVA.js");
         await runOrgsGet({
           slug,
           json: jsonMode,

package/dist/{get-BZCAHKID.js → get-SM5KGJVA.js}

@@ -56,6 +56,27 @@ function summarizeLegalDocuments(org) {
   const poa = org.legalDocuments.powerOfAttorney.present ? "yes" : "no";
   return `LOA=${loa} POA=${poa}`;
 }
+function summarizeVisibility(org) {
+  return `portal=${org.portalVisibility} reports=${org.reportVisibility} metrics=${org.metricsVisibility}`;
+}
+function summarizeBrandMetadata(org) {
+  const { websiteUrl, twitterHandle, securityContactEmail, industry } = org.brandMetadata;
+  const parts = [];
+  if (industry) parts.push(`industry=${industry}`);
+  if (websiteUrl) parts.push(`website=${websiteUrl}`);
+  if (twitterHandle) parts.push(`twitter=${twitterHandle}`);
+  if (securityContactEmail) parts.push(`security-contact=${securityContactEmail}`);
+  return parts.length > 0 ? parts.join(" ") : "(none set)";
+}
+function summarizePortalCustomization(org) {
+  const c = org.portalCustomization;
+  const parts = [];
+  parts.push(c.useCustomDetails ? "custom-details=on" : "custom-details=off");
+  if (c.name) parts.push(`name=${c.name}`);
+  if (c.slug) parts.push(`slug=${c.slug}`);
+  parts.push(c.bannerEnabled ? "banner=on" : "banner=off");
+  return parts.join(" ");
+}
 function summarizeTrademarks(org) {
   const count = org.trademarkRegistrations.length;
   if (count === 0) return "none";
@@ -82,7 +103,11 @@ async function runOrgsGet(options) {
       "",
       `- Contact URL: ${organization.contactUrl ?? "(not set)"}`,
       `- Subscription status: ${organization.subscriptionStatus}`,
-      `- Portal visibility: ${organization.portalVisibility}`,
+      `- Visibility: ${summarizeVisibility(organization)}`,
+      `- Brand metadata: ${summarizeBrandMetadata(organization)}`,
+      `- Portal customization: ${summarizePortalCustomization(organization)}`,
+      organization.portalCustomization.avatarUrl ? `  - Custom avatar: ${organization.portalCustomization.avatarUrl}` : "",
+      organization.portalCustomization.bannerEnabled && organization.portalCustomization.bannerContent ? `  - Banner content: ${organization.portalCustomization.bannerContent}` : "",
       `- Services: ${summarizeServices(organization)}`,
       `- Integrations: ${summarizeIntegrations(organization)}`,
       `- Obligatory admin approval: ${summarizeObligatoryAdminApproval(organization)}`,
@@ -102,6 +127,18 @@ async function runOrgsGet(options) {
         contactUrl: organization.contactUrl ?? "",
         subscriptionStatus: organization.subscriptionStatus,
         portalVisibility: organization.portalVisibility,
+        reportVisibility: organization.reportVisibility,
+        metricsVisibility: organization.metricsVisibility,
+        industry: organization.brandMetadata.industry ?? "",
+        websiteUrl: organization.brandMetadata.websiteUrl ?? "",
+        twitterHandle: organization.brandMetadata.twitterHandle ?? "",
+        securityContactEmail: organization.brandMetadata.securityContactEmail ?? "",
+        portalUseCustomDetails: organization.portalCustomization.useCustomDetails,
+        portalName: organization.portalCustomization.name ?? "",
+        portalSlug: organization.portalCustomization.slug ?? "",
+        portalAvatarUrl: organization.portalCustomization.avatarUrl ?? "",
+        portalBannerEnabled: organization.portalCustomization.bannerEnabled,
+        portalBannerContent: organization.portalCustomization.bannerContent ?? "",
         reportingActive: organization.services.reporting.active,
         reviewingActive: organization.services.reviewing.active,
         protectionActive: organization.services.protection.active,
@@ -135,7 +172,17 @@ async function runOrgsGet(options) {
       console.log(`${organization.name}  (slug: ${organization.slug})`);
       console.log(`  contactUrl: ${organization.contactUrl ?? "(not set)"}`);
       console.log(`  subscriptionStatus: ${organization.subscriptionStatus}`);
-      console.log(`  portalVisibility: ${organization.portalVisibility}`);
+      console.log(`  visibility: ${summarizeVisibility(organization)}`);
+      console.log(`  brandMetadata: ${summarizeBrandMetadata(organization)}`);
+      console.log(`  portalCustomization: ${summarizePortalCustomization(organization)}`);
+      if (organization.portalCustomization.avatarUrl) {
+        console.log(`    custom avatar: ${organization.portalCustomization.avatarUrl}`);
+      }
+      if (organization.portalCustomization.bannerEnabled && organization.portalCustomization.bannerContent) {
+        console.log(
+          `    banner content: ${organization.portalCustomization.bannerContent}`
+        );
+      }
       console.log(`  services: ${summarizeServices(organization)}`);
       console.log(`  integrations: ${summarizeIntegrations(organization)}`);
       console.log(

package/dist/{list-N2TGW7MP.js → list-BAPTZNTM.js}

@@ -215,6 +215,9 @@ function summarizeLegalDocuments(org) {
   const poa = org.legalDocuments.powerOfAttorney.present ? "yes" : "no";
   return `LOA=${loa} POA=${poa}`;
 }
+function summarizeVisibility(org) {
+  return `portal=${org.portalVisibility} reports=${org.reportVisibility} metrics=${org.metricsVisibility}`;
+}
 function summarizeTrademarks(org) {
   const count = org.trademarkRegistrations.length;
   return count === 0 ? "0" : `${count}`;
@@ -238,7 +241,7 @@ async function runOrgsList(options) {
       `# Organizations (${organizations.length})`,
       "",
       ...organizations.map(
-        (org) => `- \`${org.slug}\` \u2014 ${org.name} \u2014 ${org.subscriptionStatus} \u2014 portal: ${org.portalVisibility} \u2014 contact: ${org.contactUrl ?? "(not set)"} \u2014 ${summarizeServices(org)} \u2014 integrations: ${summarizeIntegrations(org)} \u2014 admin-approval: ${summarizeObligatoryAdminApproval(org)} \u2014 pending-approval: ${summarizePendingApprovals(org)} \u2014 legal: ${summarizeLegalDocuments(org)} \u2014 trademarks: ${summarizeTrademarks(org)}`
+        (org) => `- \`${org.slug}\` \u2014 ${org.name} \u2014 ${org.subscriptionStatus} \u2014 visibility: ${summarizeVisibility(org)} \u2014 contact: ${org.contactUrl ?? "(not set)"} \u2014 ${summarizeServices(org)} \u2014 integrations: ${summarizeIntegrations(org)} \u2014 admin-approval: ${summarizeObligatoryAdminApproval(org)} \u2014 pending-approval: ${summarizePendingApprovals(org)} \u2014 legal: ${summarizeLegalDocuments(org)} \u2014 trademarks: ${summarizeTrademarks(org)}`
       )
     ].join("\n"),
     csv: toCsvRows(
@@ -248,6 +251,18 @@ async function runOrgsList(options) {
         contactUrl: org.contactUrl ?? "",
         subscriptionStatus: org.subscriptionStatus,
         portalVisibility: org.portalVisibility,
+        reportVisibility: org.reportVisibility,
+        metricsVisibility: org.metricsVisibility,
+        industry: org.brandMetadata.industry ?? "",
+        websiteUrl: org.brandMetadata.websiteUrl ?? "",
+        twitterHandle: org.brandMetadata.twitterHandle ?? "",
+        securityContactEmail: org.brandMetadata.securityContactEmail ?? "",
+        portalUseCustomDetails: org.portalCustomization.useCustomDetails,
+        portalName: org.portalCustomization.name ?? "",
+        portalSlug: org.portalCustomization.slug ?? "",
+        portalAvatarUrl: org.portalCustomization.avatarUrl ?? "",
+        portalBannerEnabled: org.portalCustomization.bannerEnabled,
+        portalBannerContent: org.portalCustomization.bannerContent ?? "",
         reportingActive: org.services.reporting.active,
         reviewingActive: org.services.reviewing.active,
         protectionActive: org.services.protection.active,
@@ -286,7 +301,7 @@ async function runOrgsList(options) {
       for (const org of organizations) {
         const contact = org.contactUrl ?? "(no contact)";
         console.log(
-          `  ${org.slug.padEnd(slugWidth)}  ${org.name.padEnd(nameWidth)}  ${org.subscriptionStatus.padEnd(11)}  portal=${org.portalVisibility.padEnd(8)}  ${contact}  ${summarizeServices(org)}  integrations=${summarizeIntegrations(org)}  admin-approval=${summarizeObligatoryAdminApproval(org)}  pending-approval=${summarizePendingApprovals(org)}  legal=${summarizeLegalDocuments(org)}  trademarks=${summarizeTrademarks(org)}`
+          `  ${org.slug.padEnd(slugWidth)}  ${org.name.padEnd(nameWidth)}  ${org.subscriptionStatus.padEnd(11)}  visibility=${summarizeVisibility(org)}  ${contact}  ${summarizeServices(org)}  integrations=${summarizeIntegrations(org)}  admin-approval=${summarizeObligatoryAdminApproval(org)}  pending-approval=${summarizePendingApprovals(org)}  legal=${summarizeLegalDocuments(org)}  trademarks=${summarizeTrademarks(org)}`
         );
       }
     }

package/package.json

@@ -2,7 +2,7 @@
   "name": "@chainpatrol/cli",
   "description": "The official ChainPatrol CLI — terminal interface for threat detection",
   "author": "Umar Ahmed <umar@chainpatrol.io>",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "license": "UNLICENSED",
   "homepage": "https://chainpatrol.com/docs/cli",
   "keywords": [
@@ -33,7 +33,7 @@
     "lint": "npx oxlint ."
   },
   "dependencies": {
-    "@chainpatrol/sdk": "1.1.0",
+    "@chainpatrol/sdk": "1.3.0",
     "ink": "^7.0.1",
     "meow": "^14.1.0",
     "open": "^11.0.0",