@chainpatrol/sdk 1.5.0 → 1.7.0

package/CHANGELOG.md

@@ -1,5 +1,66 @@
 # @chainpatrol/sdk
 
+## 1.7.0
+
+### Minor Changes
+
+- f98f547: Expose asset scan IDs and creation timestamps in asset search results.
+- 9f19c88: Adds time-to-takedown metrics: `client.getMetricsTakedownTime()` in the SDK and
+  `chainpatrol metrics takedown-time --org <slug>` in the CLI, both backed by the
+  new `POST /metrics/takedown-time` endpoint. Returns the median time from
+  takedown start to completion per asset type, over an optional date range.
+
+  Also adds `parseIsoDateEndOfDay` to `@chainpatrol/sdk/api`: a date-only bound
+  such as `2026-08-18` now covers that whole day instead of cutting off at
+  midnight UTC. Server-side work lives in @chainpatrol/external-trpc and
+  @chainpatrol/validation; both are private packages and don't need version bumps.
+
+- b037a0b: `GET /organization/assets` now accepts an optional `slug`, so callers whose
+  credentials reach more than one organization (user-scoped API keys, staff and
+  member sessions) can pick one instead of getting a flat 401. Organization-scoped
+  keys keep working unchanged when they omit it.
+
+  In the SDK, `client.listOrganizationAssets()` takes a `slug`. In the CLI,
+  `chainpatrol orgs assets list` forwards `--org <slug>` when one is set — the
+  existing no-flag invocation still resolves the org from an org-scoped key.
+
+  Server-side work lives in @chainpatrol/external-trpc and @chainpatrol/validation;
+  both are private packages and don't need version bumps.
+
+## 1.6.0
+
+### Minor Changes
+
+- a253313: Adds `reviewOrganizationProposal` for approving, rejecting, or watchlisting the
+  proposals waiting on your organization, backed by
+  `POST /organization/proposals/{proposalId}/review`.
+
+  Approving takes a block `label`, plus a `brandId` for the labels that name an
+  impersonation target. Rejecting takes a `rejectReason` and an optional `note`.
+  Watchlisting parks the asset for re-evaluation. `assetId` is required alongside
+  `proposalId` and must match the proposal's current asset, returning `409`
+  otherwise.
+
+  `listOrganizationReports` now returns `proposals[].id` so a proposal can be
+  addressed.
+
+  Some approvals are declined and need to be handled on the Review page, returning
+  `403`. Reviews over the API are limited to 10 per organization per day, shared
+  across the organization's API credentials, and exceeding that returns `429`.
+  Reviews made from the Review page are not affected.
+
+### Patch Changes
+
+- 108f9f8: `needsCustomerReview` now returns only the reports waiting on your review.
+
+  Reports your organization submitted itself are no longer included, and a
+  proposal you have passed back to ChainPatrol leaves the queue once you hand it
+  over. Your own reports stay fully visible in `listOrganizationReports` without
+  the filter.
+
+  `reviewOrganizationProposal` accepts only proposals in that queue and returns
+  `403` for anything else.
+
 ## 1.5.0
 
 ### Minor Changes

package/dist/api/index.d.mts

@@ -65,8 +65,10 @@ interface ApiClient {
     getMetricsSummary: (input: MetricsSummaryInput) => Promise<MetricsSummaryResult>;
     getMetricsFound: (input: MetricsFoundInput) => Promise<MetricsFoundResult>;
     getMetricsBreakdown: (input: MetricsBreakdownInput) => Promise<MetricsBreakdownResult>;
+    getMetricsTakedownTime: (input: MetricsTakedownTimeInput) => Promise<MetricsTakedownTimeResult>;
     createReport: (input: ReportCreateInput) => Promise<ReportCreateResult>;
     listOrganizationReports: (input: OrganizationReportsListInput) => Promise<OrganizationReportsListResult>;
+    reviewOrganizationProposal: (input: OrganizationProposalsReviewInput) => Promise<OrganizationProposalsReviewResult>;
     searchReports: (input: ReportsSearchInput) => Promise<ReportsSearchResult>;
     listTakedowns: (input: TakedownsListInput) => Promise<TakedownsListResult>;
     listThreats: (input: ThreatsListInput) => Promise<ThreatsListResult>;
@@ -129,6 +131,11 @@ interface AssetSearchResultItem {
         status: string;
         createdAt: string;
     }>;
+    scans: Array<{
+        id: number;
+        /** When the asset scan was created (ISO 8601, UTC). */
+        createdAt: string;
+    }>;
     takedown: {
         id: number;
         status: string;
@@ -415,6 +422,24 @@ interface MetricsBreakdownResult {
         brandName?: string;
     }>;
 }
+interface MetricsTakedownTimeInput {
+    slug: string;
+    startDate?: string;
+    endDate?: string;
+    blockLabel?: string;
+    brandType?: "INDIVIDUAL" | "ORGANIZATION" | "PRODUCT";
+    countryCodes?: string[];
+    brandIds?: number[];
+}
+interface MetricsTakedownTimeResult {
+    byAssetType: Array<{
+        assetType: string;
+        medianTakedownMinutes: number;
+        medianTakedownHours: number;
+        medianTakedownDays: number;
+        count: number;
+    }>;
+}
 interface ReportAssetInput {
     content: string;
     status?: "BLOCKED" | "ALLOWED" | "UNKNOWN";
@@ -544,6 +569,11 @@ interface OrganizationReportsListResult {
         updatedAt: string;
         attachments: OrganizationReportAttachment[];
         proposals: Array<{
+            /**
+             * Pass to `reviewOrganizationProposal` to approve, reject, or watchlist
+             * this proposal.
+             */
+            id: number;
             reviewStatus: string;
             asset: {
                 id: number;
@@ -574,6 +604,75 @@ interface OrganizationReportsListResult {
     nextCursor: number | null;
     totalCount: number;
 }
+/**
+ * Reject reasons the Review page offers. These feed ChainPatrol's
+ * detection-tuning breakdown, so pick the closest one rather than relying on
+ * `note`.
+ */
+declare const PROPOSAL_REJECT_REASONS: readonly ["irrelevant", "no_malicious_activity", "insufficient_evidence", "not_targeting_org", "decayed"];
+type ProposalRejectReason = (typeof PROPOSAL_REJECT_REASONS)[number];
+/**
+ * Reasons for parking an asset on the watchlist. `OTHER` requires a `note`,
+ * which is then treated as the reason.
+ */
+declare const PROPOSAL_WATCHLIST_REASONS: readonly ["DEAD", "PARKING", "NOT_ENOUGH_EVIDENCE", "OTHER"];
+type ProposalWatchlistReason = (typeof PROPOSAL_WATCHLIST_REASONS)[number];
+type CustomerReviewDecision = "APPROVE" | "REJECT" | "WATCHLIST";
+interface OrganizationProposalsReviewInput {
+    /** From `proposals[].id` on `listOrganizationReports`. */
+    proposalId: number;
+    /**
+     * From `proposals[].asset.id` on the same proposal. Required, and must match
+     * the proposal's current asset — a mismatch returns 409. Proves the request was
+     * built from a proposal you read rather than a guessed or stale ID.
+     */
+    assetId: number;
+    /**
+     * Optional for organization-scoped API keys. Required when your credentials
+     * can reach more than one organization.
+     */
+    slug?: string;
+    /**
+     * `WATCHLIST` rejects the proposal and parks the asset so it is re-evaluated
+     * if it comes back alive.
+     */
+    decision: CustomerReviewDecision;
+    /** Required when `decision` is `APPROVE`. */
+    label?: string;
+    /**
+     * Optional for most labels, but required for `Brand Impersonation` and
+     * `Employee Impersonation`, which name a specific impersonation target.
+     */
+    brandId?: number;
+    /** Required when `decision` is `REJECT`. */
+    rejectReason?: ProposalRejectReason;
+    /** Required when `decision` is `WATCHLIST`. */
+    watchlistReason?: ProposalWatchlistReason;
+    /** Free-text detail. Required when `watchlistReason` is `OTHER`. */
+    note?: string;
+}
+interface OrganizationProposalsReviewResult {
+    proposal: {
+        id: number;
+        reviewStatus: string;
+        asset: {
+            id: number;
+            type: string;
+            content: string;
+            status: string;
+        };
+    };
+    review: {
+        id: number;
+        /** A `WATCHLIST` request is recorded as `REJECT` with the asset parked. */
+        decision: string;
+        label: string;
+        brandId: number | null;
+        comment: string;
+        createdAt: string;
+    };
+    watchlisted: boolean;
+}
 declare const DETECTION_CONFIDENCE_LEVELS: readonly ["none", "low", "medium", "high"];
 type DetectionConfidence = (typeof DETECTION_CONFIDENCE_LEVELS)[number];
 type DetectionReportStatus = "REPORTED" | "NOT_REPORTED";
@@ -677,6 +776,7 @@ interface ThreatsListResult {
     next_page: string | null;
 }
 interface OrganizationAssetsListInput {
+    slug?: string;
     type?: string;
     groupId?: number;
     query?: string;
@@ -719,7 +819,7 @@ interface AssetGroupItem {
 interface OrganizationAssetGroupsListResult {
     groups: AssetGroupItem[];
 }
-type BrandType = "ORGANIZATION" | "INDIVIDUAL";
+type BrandType = "ORGANIZATION" | "INDIVIDUAL" | "PRODUCT";
 interface BrandLegalDocument {
     present: boolean;
     fileName: string | null;
@@ -1241,8 +1341,10 @@ declare class ChainPatrolApiClient implements ApiClient {
     getMetricsSummary(input: MetricsSummaryInput): Promise<MetricsSummaryResult>;
     getMetricsFound(input: MetricsFoundInput): Promise<MetricsFoundResult>;
     getMetricsBreakdown(input: MetricsBreakdownInput): Promise<MetricsBreakdownResult>;
+    getMetricsTakedownTime(input: MetricsTakedownTimeInput): Promise<MetricsTakedownTimeResult>;
     createReport(input: ReportCreateInput): Promise<ReportCreateResult>;
     listOrganizationReports(input: OrganizationReportsListInput): Promise<OrganizationReportsListResult>;
+    reviewOrganizationProposal(input: OrganizationProposalsReviewInput): Promise<OrganizationProposalsReviewResult>;
     listTakedowns(input: TakedownsListInput): Promise<TakedownsListResult>;
     getOrganizationMetrics(input: OrganizationMetricsInput): Promise<OrganizationMetricsResult>;
     listHealthchecks(): Promise<HealthchecksListResult>;
@@ -1262,5 +1364,12 @@ declare class ChainPatrolApiClient implements ApiClient {
 
 declare function parseIsoDate(value: string | undefined): Date | undefined;
 declare function parseIsoDateString(value: string | undefined): string | undefined;
+/**
+ * Same validation as `parseIsoDate`, but a date-only value covers the whole day
+ * rather than collapsing to its first instant. An endpoint filtering on "up to
+ * and including this date" would otherwise cut off at midnight UTC and drop
+ * everything recorded on the day the caller asked for.
+ */
+declare function parseIsoDateEndOfDay(value: string | undefined): Date | undefined;
 
-export { ACTOR_KINDS, type ActorKind, type ApiClient, type ApiCredential, type AssetCheckInput, type AssetCheckResult, type AssetCheckSourceEntry, type AssetCheckStatus, type AssetGroupItem, type AssetListInput, type AssetListItem, type AssetListResult, type AssetSearchInput, type AssetSearchResult, type AssetSearchResultItem, type BrandItem, type BrandLegalDocument, type BrandLegalDocuments, type BrandTrademarkRegistrationItem, type BrandType, ChainPatrolApiClient, type ChainPatrolApiClientOptions, type ConfigEntry, type CredentialProvider, DETECTION_CONFIDENCE_LEVELS, DETECTION_REPORTED_FILTERS, type DetectionBrand, type DetectionConfidence, type DetectionConfigRunInput, type DetectionConfigRunResult, type DetectionConfigUpdateInput, type DetectionConfigUpdateResult, type DetectionConfigValidateInput, type DetectionConfigValidateResult, type DetectionDriftInput, type DetectionDriftResult, type DetectionListInput, type DetectionListItem, type DetectionListResult, type DetectionReportStatus, type DetectionReportedFilter, type DetectionSource, type HealthcheckCategory, type HealthcheckFinding, type HealthcheckRegistryEntry, type HealthcheckResult, type HealthcheckSeverity, type HealthchecksListResult, LIVENESS_FILTER_VALUES, LIVENESS_STATUSES, type LivenessFilterValue, type LivenessStatus, type MetricsBreakdownInput, type MetricsBreakdownResult, type MetricsFoundInput, type MetricsFoundResult, type MetricsSummaryInput, type MetricsSummaryResult, ORGANIZATION_METRICS_INCLUDE_FIELDS, type OperationsQueuesSnapshotInput, type OperationsQueuesSnapshotResult, type OrganizationAssetGroupsListResult, type OrganizationAssetItem, type OrganizationAssetsListInput, type OrganizationAssetsListResult, type OrganizationBrandsListResult, type OrganizationMetricsIncludeField, type OrganizationMetricsInput, type OrganizationMetricsResult, type OrganizationMetricsResultMetrics, type OrganizationMetricsServicesFilter, type OrganizationMetricsVisibility, type OrganizationPortalVisibility, type OrganizationReportAssetScan, type OrganizationReportAssetScanEnrichment, type OrganizationReportAttachment, type OrganizationReportVisibility, type OrganizationReportsListInput, type OrganizationReportsListResult, type PendingApprovalService, type PendingServiceApproval, REPORT_REVIEW_DECISIONS, REPORT_STATUSES, type ReportAssetInput, type ReportCreateInput, type ReportCreateResult, type ReportReviewDecision, type ReportStatus, type ReportsSearchInput, type ReportsSearchResult, type ReportsSearchResultItem, TAKEDOWN_SORT_KEYS, TAKEDOWN_STATUSES, type TakedownItem, type TakedownProviderRef, type TakedownSortKey, type TakedownStatus, type TakedownsListInput, type TakedownsListResult, type ThreatItem, type ThreatsListInput, type ThreatsListResult, type UserMeResult, type UserOrg, type UserOrgBrandMetadata, type UserOrgGetInput, type UserOrgGetResult, type UserOrgIntegrations, type UserOrgLegalDocument, type UserOrgLegalDocuments, type UserOrgPortalCustomization, type UserOrgTrademarkRegistration, type UserOrgsInput, type UserOrgsObligatoryAdminApprovalFilter, type UserOrgsPendingServiceApprovalFilter, type UserOrgsResult, type UserOrgsServiceFilters, type UserOrgsSubscriptionStatus, type ValidateApiKeyResult, WATCHLIST_FILTER_VALUES, type WatchlistFilterValue, parseIsoDate, parseIsoDateString, staticApiKey, staticBearerToken };
+export { ACTOR_KINDS, type ActorKind, type ApiClient, type ApiCredential, type AssetCheckInput, type AssetCheckResult, type AssetCheckSourceEntry, type AssetCheckStatus, type AssetGroupItem, type AssetListInput, type AssetListItem, type AssetListResult, type AssetSearchInput, type AssetSearchResult, type AssetSearchResultItem, type BrandItem, type BrandLegalDocument, type BrandLegalDocuments, type BrandTrademarkRegistrationItem, type BrandType, ChainPatrolApiClient, type ChainPatrolApiClientOptions, type ConfigEntry, type CredentialProvider, type CustomerReviewDecision, DETECTION_CONFIDENCE_LEVELS, DETECTION_REPORTED_FILTERS, type DetectionBrand, type DetectionConfidence, type DetectionConfigRunInput, type DetectionConfigRunResult, type DetectionConfigUpdateInput, type DetectionConfigUpdateResult, type DetectionConfigValidateInput, type DetectionConfigValidateResult, type DetectionDriftInput, type DetectionDriftResult, type DetectionListInput, type DetectionListItem, type DetectionListResult, type DetectionReportStatus, type DetectionReportedFilter, type DetectionSource, type HealthcheckCategory, type HealthcheckFinding, type HealthcheckRegistryEntry, type HealthcheckResult, type HealthcheckSeverity, type HealthchecksListResult, LIVENESS_FILTER_VALUES, LIVENESS_STATUSES, type LivenessFilterValue, type LivenessStatus, type MetricsBreakdownInput, type MetricsBreakdownResult, type MetricsFoundInput, type MetricsFoundResult, type MetricsSummaryInput, type MetricsSummaryResult, type MetricsTakedownTimeInput, type MetricsTakedownTimeResult, ORGANIZATION_METRICS_INCLUDE_FIELDS, type OperationsQueuesSnapshotInput, type OperationsQueuesSnapshotResult, type OrganizationAssetGroupsListResult, type OrganizationAssetItem, type OrganizationAssetsListInput, type OrganizationAssetsListResult, type OrganizationBrandsListResult, type OrganizationMetricsIncludeField, type OrganizationMetricsInput, type OrganizationMetricsResult, type OrganizationMetricsResultMetrics, type OrganizationMetricsServicesFilter, type OrganizationMetricsVisibility, type OrganizationPortalVisibility, type OrganizationProposalsReviewInput, type OrganizationProposalsReviewResult, type OrganizationReportAssetScan, type OrganizationReportAssetScanEnrichment, type OrganizationReportAttachment, type OrganizationReportVisibility, type OrganizationReportsListInput, type OrganizationReportsListResult, PROPOSAL_REJECT_REASONS, PROPOSAL_WATCHLIST_REASONS, type PendingApprovalService, type PendingServiceApproval, type ProposalRejectReason, type ProposalWatchlistReason, REPORT_REVIEW_DECISIONS, REPORT_STATUSES, type ReportAssetInput, type ReportCreateInput, type ReportCreateResult, type ReportReviewDecision, type ReportStatus, type ReportsSearchInput, type ReportsSearchResult, type ReportsSearchResultItem, TAKEDOWN_SORT_KEYS, TAKEDOWN_STATUSES, type TakedownItem, type TakedownProviderRef, type TakedownSortKey, type TakedownStatus, type TakedownsListInput, type TakedownsListResult, type ThreatItem, type ThreatsListInput, type ThreatsListResult, type UserMeResult, type UserOrg, type UserOrgBrandMetadata, type UserOrgGetInput, type UserOrgGetResult, type UserOrgIntegrations, type UserOrgLegalDocument, type UserOrgLegalDocuments, type UserOrgPortalCustomization, type UserOrgTrademarkRegistration, type UserOrgsInput, type UserOrgsObligatoryAdminApprovalFilter, type UserOrgsPendingServiceApprovalFilter, type UserOrgsResult, type UserOrgsServiceFilters, type UserOrgsSubscriptionStatus, type ValidateApiKeyResult, WATCHLIST_FILTER_VALUES, type WatchlistFilterValue, parseIsoDate, parseIsoDateEndOfDay, parseIsoDateString, staticApiKey, staticBearerToken };

package/dist/api/index.d.ts

@@ -65,8 +65,10 @@ interface ApiClient {
     getMetricsSummary: (input: MetricsSummaryInput) => Promise<MetricsSummaryResult>;
     getMetricsFound: (input: MetricsFoundInput) => Promise<MetricsFoundResult>;
     getMetricsBreakdown: (input: MetricsBreakdownInput) => Promise<MetricsBreakdownResult>;
+    getMetricsTakedownTime: (input: MetricsTakedownTimeInput) => Promise<MetricsTakedownTimeResult>;
     createReport: (input: ReportCreateInput) => Promise<ReportCreateResult>;
     listOrganizationReports: (input: OrganizationReportsListInput) => Promise<OrganizationReportsListResult>;
+    reviewOrganizationProposal: (input: OrganizationProposalsReviewInput) => Promise<OrganizationProposalsReviewResult>;
     searchReports: (input: ReportsSearchInput) => Promise<ReportsSearchResult>;
     listTakedowns: (input: TakedownsListInput) => Promise<TakedownsListResult>;
     listThreats: (input: ThreatsListInput) => Promise<ThreatsListResult>;
@@ -129,6 +131,11 @@ interface AssetSearchResultItem {
         status: string;
         createdAt: string;
     }>;
+    scans: Array<{
+        id: number;
+        /** When the asset scan was created (ISO 8601, UTC). */
+        createdAt: string;
+    }>;
     takedown: {
         id: number;
         status: string;
@@ -415,6 +422,24 @@ interface MetricsBreakdownResult {
         brandName?: string;
     }>;
 }
+interface MetricsTakedownTimeInput {
+    slug: string;
+    startDate?: string;
+    endDate?: string;
+    blockLabel?: string;
+    brandType?: "INDIVIDUAL" | "ORGANIZATION" | "PRODUCT";
+    countryCodes?: string[];
+    brandIds?: number[];
+}
+interface MetricsTakedownTimeResult {
+    byAssetType: Array<{
+        assetType: string;
+        medianTakedownMinutes: number;
+        medianTakedownHours: number;
+        medianTakedownDays: number;
+        count: number;
+    }>;
+}
 interface ReportAssetInput {
     content: string;
     status?: "BLOCKED" | "ALLOWED" | "UNKNOWN";
@@ -544,6 +569,11 @@ interface OrganizationReportsListResult {
         updatedAt: string;
         attachments: OrganizationReportAttachment[];
         proposals: Array<{
+            /**
+             * Pass to `reviewOrganizationProposal` to approve, reject, or watchlist
+             * this proposal.
+             */
+            id: number;
             reviewStatus: string;
             asset: {
                 id: number;
@@ -574,6 +604,75 @@ interface OrganizationReportsListResult {
     nextCursor: number | null;
     totalCount: number;
 }
+/**
+ * Reject reasons the Review page offers. These feed ChainPatrol's
+ * detection-tuning breakdown, so pick the closest one rather than relying on
+ * `note`.
+ */
+declare const PROPOSAL_REJECT_REASONS: readonly ["irrelevant", "no_malicious_activity", "insufficient_evidence", "not_targeting_org", "decayed"];
+type ProposalRejectReason = (typeof PROPOSAL_REJECT_REASONS)[number];
+/**
+ * Reasons for parking an asset on the watchlist. `OTHER` requires a `note`,
+ * which is then treated as the reason.
+ */
+declare const PROPOSAL_WATCHLIST_REASONS: readonly ["DEAD", "PARKING", "NOT_ENOUGH_EVIDENCE", "OTHER"];
+type ProposalWatchlistReason = (typeof PROPOSAL_WATCHLIST_REASONS)[number];
+type CustomerReviewDecision = "APPROVE" | "REJECT" | "WATCHLIST";
+interface OrganizationProposalsReviewInput {
+    /** From `proposals[].id` on `listOrganizationReports`. */
+    proposalId: number;
+    /**
+     * From `proposals[].asset.id` on the same proposal. Required, and must match
+     * the proposal's current asset — a mismatch returns 409. Proves the request was
+     * built from a proposal you read rather than a guessed or stale ID.
+     */
+    assetId: number;
+    /**
+     * Optional for organization-scoped API keys. Required when your credentials
+     * can reach more than one organization.
+     */
+    slug?: string;
+    /**
+     * `WATCHLIST` rejects the proposal and parks the asset so it is re-evaluated
+     * if it comes back alive.
+     */
+    decision: CustomerReviewDecision;
+    /** Required when `decision` is `APPROVE`. */
+    label?: string;
+    /**
+     * Optional for most labels, but required for `Brand Impersonation` and
+     * `Employee Impersonation`, which name a specific impersonation target.
+     */
+    brandId?: number;
+    /** Required when `decision` is `REJECT`. */
+    rejectReason?: ProposalRejectReason;
+    /** Required when `decision` is `WATCHLIST`. */
+    watchlistReason?: ProposalWatchlistReason;
+    /** Free-text detail. Required when `watchlistReason` is `OTHER`. */
+    note?: string;
+}
+interface OrganizationProposalsReviewResult {
+    proposal: {
+        id: number;
+        reviewStatus: string;
+        asset: {
+            id: number;
+            type: string;
+            content: string;
+            status: string;
+        };
+    };
+    review: {
+        id: number;
+        /** A `WATCHLIST` request is recorded as `REJECT` with the asset parked. */
+        decision: string;
+        label: string;
+        brandId: number | null;
+        comment: string;
+        createdAt: string;
+    };
+    watchlisted: boolean;
+}
 declare const DETECTION_CONFIDENCE_LEVELS: readonly ["none", "low", "medium", "high"];
 type DetectionConfidence = (typeof DETECTION_CONFIDENCE_LEVELS)[number];
 type DetectionReportStatus = "REPORTED" | "NOT_REPORTED";
@@ -677,6 +776,7 @@ interface ThreatsListResult {
     next_page: string | null;
 }
 interface OrganizationAssetsListInput {
+    slug?: string;
     type?: string;
     groupId?: number;
     query?: string;
@@ -719,7 +819,7 @@ interface AssetGroupItem {
 interface OrganizationAssetGroupsListResult {
     groups: AssetGroupItem[];
 }
-type BrandType = "ORGANIZATION" | "INDIVIDUAL";
+type BrandType = "ORGANIZATION" | "INDIVIDUAL" | "PRODUCT";
 interface BrandLegalDocument {
     present: boolean;
     fileName: string | null;
@@ -1241,8 +1341,10 @@ declare class ChainPatrolApiClient implements ApiClient {
     getMetricsSummary(input: MetricsSummaryInput): Promise<MetricsSummaryResult>;
     getMetricsFound(input: MetricsFoundInput): Promise<MetricsFoundResult>;
     getMetricsBreakdown(input: MetricsBreakdownInput): Promise<MetricsBreakdownResult>;
+    getMetricsTakedownTime(input: MetricsTakedownTimeInput): Promise<MetricsTakedownTimeResult>;
     createReport(input: ReportCreateInput): Promise<ReportCreateResult>;
     listOrganizationReports(input: OrganizationReportsListInput): Promise<OrganizationReportsListResult>;
+    reviewOrganizationProposal(input: OrganizationProposalsReviewInput): Promise<OrganizationProposalsReviewResult>;
     listTakedowns(input: TakedownsListInput): Promise<TakedownsListResult>;
     getOrganizationMetrics(input: OrganizationMetricsInput): Promise<OrganizationMetricsResult>;
     listHealthchecks(): Promise<HealthchecksListResult>;
@@ -1262,5 +1364,12 @@ declare class ChainPatrolApiClient implements ApiClient {
 
 declare function parseIsoDate(value: string | undefined): Date | undefined;
 declare function parseIsoDateString(value: string | undefined): string | undefined;
+/**
+ * Same validation as `parseIsoDate`, but a date-only value covers the whole day
+ * rather than collapsing to its first instant. An endpoint filtering on "up to
+ * and including this date" would otherwise cut off at midnight UTC and drop
+ * everything recorded on the day the caller asked for.
+ */
+declare function parseIsoDateEndOfDay(value: string | undefined): Date | undefined;
 
-export { ACTOR_KINDS, type ActorKind, type ApiClient, type ApiCredential, type AssetCheckInput, type AssetCheckResult, type AssetCheckSourceEntry, type AssetCheckStatus, type AssetGroupItem, type AssetListInput, type AssetListItem, type AssetListResult, type AssetSearchInput, type AssetSearchResult, type AssetSearchResultItem, type BrandItem, type BrandLegalDocument, type BrandLegalDocuments, type BrandTrademarkRegistrationItem, type BrandType, ChainPatrolApiClient, type ChainPatrolApiClientOptions, type ConfigEntry, type CredentialProvider, DETECTION_CONFIDENCE_LEVELS, DETECTION_REPORTED_FILTERS, type DetectionBrand, type DetectionConfidence, type DetectionConfigRunInput, type DetectionConfigRunResult, type DetectionConfigUpdateInput, type DetectionConfigUpdateResult, type DetectionConfigValidateInput, type DetectionConfigValidateResult, type DetectionDriftInput, type DetectionDriftResult, type DetectionListInput, type DetectionListItem, type DetectionListResult, type DetectionReportStatus, type DetectionReportedFilter, type DetectionSource, type HealthcheckCategory, type HealthcheckFinding, type HealthcheckRegistryEntry, type HealthcheckResult, type HealthcheckSeverity, type HealthchecksListResult, LIVENESS_FILTER_VALUES, LIVENESS_STATUSES, type LivenessFilterValue, type LivenessStatus, type MetricsBreakdownInput, type MetricsBreakdownResult, type MetricsFoundInput, type MetricsFoundResult, type MetricsSummaryInput, type MetricsSummaryResult, ORGANIZATION_METRICS_INCLUDE_FIELDS, type OperationsQueuesSnapshotInput, type OperationsQueuesSnapshotResult, type OrganizationAssetGroupsListResult, type OrganizationAssetItem, type OrganizationAssetsListInput, type OrganizationAssetsListResult, type OrganizationBrandsListResult, type OrganizationMetricsIncludeField, type OrganizationMetricsInput, type OrganizationMetricsResult, type OrganizationMetricsResultMetrics, type OrganizationMetricsServicesFilter, type OrganizationMetricsVisibility, type OrganizationPortalVisibility, type OrganizationReportAssetScan, type OrganizationReportAssetScanEnrichment, type OrganizationReportAttachment, type OrganizationReportVisibility, type OrganizationReportsListInput, type OrganizationReportsListResult, type PendingApprovalService, type PendingServiceApproval, REPORT_REVIEW_DECISIONS, REPORT_STATUSES, type ReportAssetInput, type ReportCreateInput, type ReportCreateResult, type ReportReviewDecision, type ReportStatus, type ReportsSearchInput, type ReportsSearchResult, type ReportsSearchResultItem, TAKEDOWN_SORT_KEYS, TAKEDOWN_STATUSES, type TakedownItem, type TakedownProviderRef, type TakedownSortKey, type TakedownStatus, type TakedownsListInput, type TakedownsListResult, type ThreatItem, type ThreatsListInput, type ThreatsListResult, type UserMeResult, type UserOrg, type UserOrgBrandMetadata, type UserOrgGetInput, type UserOrgGetResult, type UserOrgIntegrations, type UserOrgLegalDocument, type UserOrgLegalDocuments, type UserOrgPortalCustomization, type UserOrgTrademarkRegistration, type UserOrgsInput, type UserOrgsObligatoryAdminApprovalFilter, type UserOrgsPendingServiceApprovalFilter, type UserOrgsResult, type UserOrgsServiceFilters, type UserOrgsSubscriptionStatus, type ValidateApiKeyResult, WATCHLIST_FILTER_VALUES, type WatchlistFilterValue, parseIsoDate, parseIsoDateString, staticApiKey, staticBearerToken };
+export { ACTOR_KINDS, type ActorKind, type ApiClient, type ApiCredential, type AssetCheckInput, type AssetCheckResult, type AssetCheckSourceEntry, type AssetCheckStatus, type AssetGroupItem, type AssetListInput, type AssetListItem, type AssetListResult, type AssetSearchInput, type AssetSearchResult, type AssetSearchResultItem, type BrandItem, type BrandLegalDocument, type BrandLegalDocuments, type BrandTrademarkRegistrationItem, type BrandType, ChainPatrolApiClient, type ChainPatrolApiClientOptions, type ConfigEntry, type CredentialProvider, type CustomerReviewDecision, DETECTION_CONFIDENCE_LEVELS, DETECTION_REPORTED_FILTERS, type DetectionBrand, type DetectionConfidence, type DetectionConfigRunInput, type DetectionConfigRunResult, type DetectionConfigUpdateInput, type DetectionConfigUpdateResult, type DetectionConfigValidateInput, type DetectionConfigValidateResult, type DetectionDriftInput, type DetectionDriftResult, type DetectionListInput, type DetectionListItem, type DetectionListResult, type DetectionReportStatus, type DetectionReportedFilter, type DetectionSource, type HealthcheckCategory, type HealthcheckFinding, type HealthcheckRegistryEntry, type HealthcheckResult, type HealthcheckSeverity, type HealthchecksListResult, LIVENESS_FILTER_VALUES, LIVENESS_STATUSES, type LivenessFilterValue, type LivenessStatus, type MetricsBreakdownInput, type MetricsBreakdownResult, type MetricsFoundInput, type MetricsFoundResult, type MetricsSummaryInput, type MetricsSummaryResult, type MetricsTakedownTimeInput, type MetricsTakedownTimeResult, ORGANIZATION_METRICS_INCLUDE_FIELDS, type OperationsQueuesSnapshotInput, type OperationsQueuesSnapshotResult, type OrganizationAssetGroupsListResult, type OrganizationAssetItem, type OrganizationAssetsListInput, type OrganizationAssetsListResult, type OrganizationBrandsListResult, type OrganizationMetricsIncludeField, type OrganizationMetricsInput, type OrganizationMetricsResult, type OrganizationMetricsResultMetrics, type OrganizationMetricsServicesFilter, type OrganizationMetricsVisibility, type OrganizationPortalVisibility, type OrganizationProposalsReviewInput, type OrganizationProposalsReviewResult, type OrganizationReportAssetScan, type OrganizationReportAssetScanEnrichment, type OrganizationReportAttachment, type OrganizationReportVisibility, type OrganizationReportsListInput, type OrganizationReportsListResult, PROPOSAL_REJECT_REASONS, PROPOSAL_WATCHLIST_REASONS, type PendingApprovalService, type PendingServiceApproval, type ProposalRejectReason, type ProposalWatchlistReason, REPORT_REVIEW_DECISIONS, REPORT_STATUSES, type ReportAssetInput, type ReportCreateInput, type ReportCreateResult, type ReportReviewDecision, type ReportStatus, type ReportsSearchInput, type ReportsSearchResult, type ReportsSearchResultItem, TAKEDOWN_SORT_KEYS, TAKEDOWN_STATUSES, type TakedownItem, type TakedownProviderRef, type TakedownSortKey, type TakedownStatus, type TakedownsListInput, type TakedownsListResult, type ThreatItem, type ThreatsListInput, type ThreatsListResult, type UserMeResult, type UserOrg, type UserOrgBrandMetadata, type UserOrgGetInput, type UserOrgGetResult, type UserOrgIntegrations, type UserOrgLegalDocument, type UserOrgLegalDocuments, type UserOrgPortalCustomization, type UserOrgTrademarkRegistration, type UserOrgsInput, type UserOrgsObligatoryAdminApprovalFilter, type UserOrgsPendingServiceApprovalFilter, type UserOrgsResult, type UserOrgsServiceFilters, type UserOrgsSubscriptionStatus, type ValidateApiKeyResult, WATCHLIST_FILTER_VALUES, type WatchlistFilterValue, parseIsoDate, parseIsoDateEndOfDay, parseIsoDateString, staticApiKey, staticBearerToken };

package/dist/api/index.js

@@ -19,6 +19,18 @@ var __spreadValues = (a, b) => {
   return a;
 };
 var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+var __objRest = (source, exclude) => {
+  var target = {};
+  for (var prop in source)
+    if (__hasOwnProp.call(source, prop) && exclude.indexOf(prop) < 0)
+      target[prop] = source[prop];
+  if (source != null && __getOwnPropSymbols)
+    for (var prop of __getOwnPropSymbols(source)) {
+      if (exclude.indexOf(prop) < 0 && __propIsEnum.call(source, prop))
+        target[prop] = source[prop];
+    }
+  return target;
+};
 var __async = (__this, __arguments, generator) => {
   return new Promise((resolve, reject) => {
     var fulfilled = (value) => {
@@ -44,6 +56,19 @@ var __async = (__this, __arguments, generator) => {
 var REPORT_REVIEW_DECISIONS = ["APPROVE", "REJECT", "SKIP", "ESCALATE"];
 var REPORT_STATUSES = ["TODO", "IN_PROGRESS", "CLOSED"];
 var ACTOR_KINDS = ["human", "automation"];
+var PROPOSAL_REJECT_REASONS = [
+  "irrelevant",
+  "no_malicious_activity",
+  "insufficient_evidence",
+  "not_targeting_org",
+  "decayed"
+];
+var PROPOSAL_WATCHLIST_REASONS = [
+  "DEAD",
+  "PARKING",
+  "NOT_ENOUGH_EVIDENCE",
+  "OTHER"
+];
 var DETECTION_CONFIDENCE_LEVELS = ["none", "low", "medium", "high"];
 var DETECTION_REPORTED_FILTERS = ["reported", "not_reported"];
 var LIVENESS_FILTER_VALUES = ["ALIVE", "DEAD", "UNKNOWN"];
@@ -105,6 +130,15 @@ function parseIsoDateString(value) {
   var _a;
   return (_a = parseIsoDate(value)) == null ? void 0 : _a.toISOString();
 }
+var DATE_ONLY_REGEX = /^\d{4}-\d{2}-\d{2}$/;
+var MS_PER_DAY = 24 * 60 * 60 * 1e3;
+function parseIsoDateEndOfDay(value) {
+  const parsed = parseIsoDate(value);
+  if (!parsed || !value || !DATE_ONLY_REGEX.test(value)) {
+    return parsed;
+  }
+  return new Date(parsed.getTime() + MS_PER_DAY - 1);
+}
 
 // src/api/client.ts
 var DEFAULT_BASE_URL = "https://app.chainpatrol.io";
@@ -288,6 +322,15 @@ var ChainPatrolApiClient = class {
       endDate: parseIsoDate(input.endDate)
     }));
   }
+  getMetricsTakedownTime(input) {
+    return this.request("/metrics/takedown-time", __spreadProps(__spreadValues({}, input), {
+      startDate: parseIsoDate(input.startDate),
+      // Dates serialize as full timestamps, so a date-only `endDate` has to be
+      // widened here — the API can no longer tell it apart from an explicit
+      // midnight cut-off once it arrives.
+      endDate: parseIsoDateEndOfDay(input.endDate)
+    }));
+  }
   createReport(input) {
     return this.request("/report/create", input);
   }
@@ -317,6 +360,13 @@ var ChainPatrolApiClient = class {
       needsCustomerReview: optionalBooleanParam(input.needsCustomerReview)
     });
   }
+  reviewOrganizationProposal(input) {
+    const _a = input, { proposalId } = _a, body = __objRest(_a, ["proposalId"]);
+    return this.request(
+      `/organization/proposals/${proposalId}/review`,
+      body
+    );
+  }
   listTakedowns(input) {
     var _a, _b;
     return this.request("/takedowns/list", {
@@ -443,6 +493,7 @@ var ChainPatrolApiClient = class {
   }
   listOrganizationAssets(input) {
     return this.requestGet("/organization/assets", {
+      slug: input.slug,
       type: input.type,
       groupId: input.groupId !== void 0 ? String(input.groupId) : void 0,
       query: input.query,
@@ -474,12 +525,15 @@ exports.DETECTION_REPORTED_FILTERS = DETECTION_REPORTED_FILTERS;
 exports.LIVENESS_FILTER_VALUES = LIVENESS_FILTER_VALUES;
 exports.LIVENESS_STATUSES = LIVENESS_STATUSES;
 exports.ORGANIZATION_METRICS_INCLUDE_FIELDS = ORGANIZATION_METRICS_INCLUDE_FIELDS;
+exports.PROPOSAL_REJECT_REASONS = PROPOSAL_REJECT_REASONS;
+exports.PROPOSAL_WATCHLIST_REASONS = PROPOSAL_WATCHLIST_REASONS;
 exports.REPORT_REVIEW_DECISIONS = REPORT_REVIEW_DECISIONS;
 exports.REPORT_STATUSES = REPORT_STATUSES;
 exports.TAKEDOWN_SORT_KEYS = TAKEDOWN_SORT_KEYS;
 exports.TAKEDOWN_STATUSES = TAKEDOWN_STATUSES;
 exports.WATCHLIST_FILTER_VALUES = WATCHLIST_FILTER_VALUES;
 exports.parseIsoDate = parseIsoDate;
+exports.parseIsoDateEndOfDay = parseIsoDateEndOfDay;
 exports.parseIsoDateString = parseIsoDateString;
 exports.staticApiKey = staticApiKey;
 exports.staticBearerToken = staticBearerToken;