@dayofweek/dcli 1.10.0 → 1.12.0

package/README.md

@@ -153,6 +153,35 @@ dcli data get <dataset> --limit 100 --json
 Responses are `{ dataset, total, truncated, rows }`. The CLI has no built-in
 dataset names; new datasets appear in the listing without a CLI update.
 
+## Time tracking (staff)
+
+Hours registered against time projects. The server owns every rule — project
+and participation periods, hour frames, self-financing, the reportable basis,
+who may approve — and the CLI only carries JSON.
+
+```bash
+dcli time projects list --json
+dcli time projects show <projectId> --json
+dcli time projects upsert --file project.json          # create, or update with projectId
+
+dcli time entries list --project <id> --from 2026-06-01 --to 2026-09-30 --json
+dcli time entries import --project <id> --file entries.json --dry-run
+dcli time entries import --project <id> --file entries.json --approved
+
+dcli time months list --json
+dcli time months submit --project <id> --month 2026-08
+dcli time months approve --project <id> --month 2026-08 --user-email someone@example.com
+dcli time months return --project <id> --month 2026-08 --user-email ... --comment "..."
+```
+
+`entries import` is idempotent: each entry carries an import key (explicit, or
+derived from person + date + activity + description), so re-running a file
+updates rather than duplicates. Approved rows are locked and reported as
+`skip_locked`; any invalid entry aborts the whole batch with nothing written.
+Because real rows are written, the command refuses to run without `--dry-run`
+first and `--approved` afterwards. Payload shapes are documented in the
+`time-tracking` reference that `dcli skill install` fetches for staff.
+
 ## Feedback backlog
 
 The customer feedback backlog that humans and coding agents work together.
@@ -188,6 +217,38 @@ customer is irreversible and outward-facing, so it cannot happen as a side
 effect of reading the inbox — a person approves the exact text first, and
 `--approved` records that they did.
 
+## Cross-org reads (staff)
+
+Admin tokens can read across every organization. Both listings are
+cursor-paged: filters apply within each scanned page, so a page can be short
+or empty while more rows remain — `--all` walks the pages for you.
+
+```bash
+dcli admin entities --category supply --all --json      # every producer, every org
+dcli admin entities --role producer --with-roles --json  # first page, roles attached
+dcli admin entities --search huseby --json
+dcli admin entities --limit 500 --cursor <nextCursor> --json
+
+dcli admin market-intel stats --json                     # the market intelligence register, counted
+dcli admin market-intel list --type farm --region Agder --all --json
+dcli admin market-intel list --bbox 57.95,6.35,59.70,9.40 --json
+dcli admin market-intel get <id> --json
+```
+
+Entity rows carry `typeName` and `typeCategory` resolved from the entity's
+type — count on those, not on the legacy `entityType` string. The market
+intelligence register is a separate table from the entity hierarchy (every row
+has coordinates; `linkedEntity` names the hierarchy entity it points at, if
+any), so "how many producers do we know of" reads both.
+
+An area's actors can be tied to the platform entity they are:
+
+```bash
+dcli brain actors list --area <areaId> --match --json    # unlinked actors get name-matched candidates (admins)
+dcli brain actors link --area <areaId> --actor <actorId> --entity <entityId>
+dcli brain actors link --area <areaId> --actor <actorId> --unlink
+```
+
 ## Legacy platform commands
 
 Existing read/proposal workflows remain compatible:

package/dist/bin/dcli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { Command } from "commander";
-import { ApiError, DayOfWeekClient, toArrayBuffer } from "../client.js";
+import { ApiError, DayOfWeekClient, toArrayBuffer, collectAdminPages } from "../client.js";
 import { getToken, getApiUrl, saveConfig, loadConfig, saveCredential, deleteCredential } from "../config.js";
 import { browserLogin } from "../auth/login.js";
 import { parseBrainResource } from "../uri.js";
@@ -326,8 +326,29 @@ brainActors
     .command("list")
     .description("List an area's actors (active, sorted by name)")
     .requiredOption("--area <areaId>", "Area id (from `brain list`)")
+    .option("--match", "Suggest matching platform entities for unlinked actors (admins)")
     .action(async (opts) => {
-    output(await getClient().listBrainActors(opts.area));
+    output(await getClient().listBrainActors(opts.area, { match: opts.match }));
+});
+brainActors
+    .command("link")
+    .description("Link an actor to the platform entity it is (or --unlink)")
+    .requiredOption("--area <areaId>", "Area id (from `brain list`)")
+    .requiredOption("--actor <actorId>", "Actor id (from `brain actors list`)")
+    .option("--entity <entityId>", "Platform entity id (from `admin entities` or `read entities`)")
+    .option("--unlink", "Remove the current link")
+    .action(async (opts) => {
+    if (!opts.entity && !opts.unlink) {
+        throw new Error("Provide --entity <entityId> to link, or --unlink to remove the link");
+    }
+    if (opts.entity && opts.unlink) {
+        throw new Error("--entity and --unlink are mutually exclusive");
+    }
+    output(await getClient().linkBrainActor({
+        areaId: opts.area,
+        actorId: opts.actor,
+        entityId: opts.unlink ? null : opts.entity,
+    }));
 });
 brainActors
     .command("add")
@@ -1330,6 +1351,127 @@ feedback
         rejectedReason: opts.rejectedReason,
     }));
 });
+// ── Time tracking ────────────────────────────────────────────────────────────
+//
+// Hours per project. The server owns the rules (project and participation
+// periods, hour frames, self-financing, the reportable basis, approvals);
+// this group parses flags, reads JSON files and prints the response. The
+// only local rule is the irreversibility gate on import: real rows are
+// written, so --dry-run first, then --approved.
+const time = program.command("time").description("Hours per project: projects, entries, monthly sheets");
+const timeProjects = time.command("projects").description("Time projects: setup and overview");
+timeProjects
+    .command("list")
+    .description("List time projects with totals and frame usage")
+    .option("--org <org>", "Organization slug or id (admin only)")
+    .action(async (opts) => {
+    output(await getClient().listTimeProjects(opts.org));
+});
+timeProjects
+    .command("show <projectId>")
+    .description("One project: setup, person×activity×month matrix, entries with computed split, monthly sheets")
+    .option("--org <org>", "Organization slug or id (admin only)")
+    .action(async (projectId, opts) => {
+    output(await getClient().getTimeProject(projectId, opts.org));
+});
+timeProjects
+    .command("upsert")
+    .description("Create or update a time project from a JSON file (include projectId to update)")
+    .requiredOption("--file <path>", "JSON payload with the project setup (- for stdin)")
+    .option("--org <org>", "Organization slug or id (admin only)")
+    .action(async (opts) => {
+    const raw = opts.file === "-" ? readFileSync(0, "utf8") : readFileSync(opts.file, "utf8");
+    const payload = JSON.parse(raw);
+    if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
+        throw new Error("Payload must be a JSON object with the project setup");
+    }
+    output(await getClient().upsertTimeProject(payload, opts.org));
+});
+const timeEntries = time.command("entries").description("Registered hours");
+timeEntries
+    .command("list")
+    .description("Flat rows with the computed split (counted, self-financed, reportable, reasons)")
+    .option("--project <projectId>", "Only this project")
+    .option("--user <userId>", "Only this person (owners and admins)")
+    .option("--from <YYYY-MM-DD>", "First work date")
+    .option("--to <YYYY-MM-DD>", "Last work date")
+    .option("--status <status>", "draft | submitted | approved")
+    .option("--org <org>", "Organization slug or id (admin only)")
+    .action(async (opts) => {
+    output(await getClient().listTimeEntries({
+        project: opts.project,
+        user: opts.user,
+        from: opts.from,
+        to: opts.to,
+        status: opts.status,
+        org: opts.org,
+    }));
+});
+timeEntries
+    .command("import")
+    .description("Idempotent batch import of hours into one project. Requires --dry-run or --approved")
+    .requiredOption("--project <projectId>", "Target time project")
+    .requiredOption("--file <path>", "JSON: { entries: [...] } or a bare array (- for stdin)")
+    .option("--dry-run", "Validate and report what would happen, write nothing")
+    .option("--approved", "The operator approved the dry-run result")
+    .option("--org <org>", "Organization slug or id (admin only)")
+    .action(async (opts) => {
+    if (!opts.dryRun && !opts.approved) {
+        throw new Error("Refusing to write: run with --dry-run first, show the operator the summary, " +
+            "then repeat with --approved. This writes real hours, not proposals.");
+    }
+    const raw = opts.file === "-" ? readFileSync(0, "utf8") : readFileSync(opts.file, "utf8");
+    const payload = JSON.parse(raw);
+    const entries = Array.isArray(payload) ? payload : payload?.entries;
+    if (!Array.isArray(entries) || entries.length === 0) {
+        throw new Error("Payload needs { entries: [...] } with at least one entry");
+    }
+    output(await getClient().importTimeEntries({
+        projectId: opts.project,
+        entries,
+        dryRun: Boolean(opts.dryRun),
+        org: opts.org,
+    }));
+});
+const timeMonths = time.command("months").description("Monthly sheets: submit, approve, return, reopen");
+timeMonths
+    .command("list")
+    .description("Months waiting for your approval (project owner), or every submitted month (admin)")
+    .option("--org <org>", "Organization slug or id (admin only)")
+    .action(async (opts) => {
+    output(await getClient().listPendingTimeMonths(opts.org));
+});
+for (const action of ["submit", "approve", "return", "reopen"]) {
+    const descriptions = {
+        submit: "Submit a month for approval (your own; admins may pass --user-email)",
+        approve: "Approve a submitted month — locks its rows (project owner or admin)",
+        return: "Return a submitted month as drafts, --comment required (project owner or admin)",
+        reopen: "Reopen an approved month for correction; it needs a new approval",
+    };
+    timeMonths
+        .command(action)
+        .description(descriptions[action])
+        .requiredOption("--project <projectId>", "Time project")
+        .requiredOption("--month <YYYY-MM>", "Month")
+        .option("--user-email <email>", "Whose month (defaults to yourself)")
+        .option("--user <userId>", "Whose month, by user id")
+        .option("--comment <text>", "Comment (required for return)")
+        .option("--org <org>", "Organization slug or id (admin only)")
+        .action(async (opts) => {
+        if (action === "return" && !opts.comment) {
+            throw new Error("--comment is required when returning a month");
+        }
+        output(await getClient().actOnTimeMonth({
+            projectId: opts.project,
+            month: opts.month,
+            action,
+            userId: opts.user,
+            userEmail: opts.userEmail,
+            comment: opts.comment,
+            org: opts.org,
+        }));
+    });
+}
 // ── Admin Commands ───────────────────────────────────────────────────────────
 //
 // These are admin-only. They're registered as hidden subcommands when the
@@ -1349,22 +1491,86 @@ function registerAdminCommands() {
         .description("Admin-only cross-org operations (DoW staff)");
     admin
         .command("entities")
-        .description("List entities across all orgs with admin filters")
-        .option("--type <entityType>", "Filter by entity type")
+        .description("List entities across all orgs with admin filters (cursor-paged)")
+        .option("--type <entityType>", "Filter by type name (farm, producer, restaurant, …)")
+        .option("--category <category>", "Filter by type category (supply, demand, partner, financial, …)")
+        .option("--role <role>", "Only entities holding an active role: customer, partner, investor, producer, market_intel")
+        .option("--with-roles", "Attach each entity's active roles")
         .option("--missing-location", "Only entities lacking metadata.places[].lat/lng")
         .option("--search <query>", "Substring match on name")
         .option("--org <slug>", "Restrict to a single org slug or ID")
-        .option("--limit <count>", "Max results (default 200)", parseInt)
+        .option("--limit <count>", "Rows scanned per page (default 200, max 2000)", parseInt)
+        .option("--cursor <cursor>", "Continue from a previous page's nextCursor")
+        .option("--all", "Walk every page and return all matches")
         .action(async (opts) => {
         const client = getClient();
-        const result = await client.adminListEntities({
+        const fetchPage = (cursor) => client.adminListEntities({
             org: opts.org,
             type: opts.type,
+            category: opts.category,
+            role: opts.role,
+            withRoles: opts.withRoles,
             missingLocation: opts.missingLocation,
             search: opts.search,
             limit: opts.limit,
+            cursor,
         });
-        output(result);
+        output(opts.all ? await collectAdminPages(fetchPage, opts.cursor) : await fetchPage(opts.cursor));
+    });
+    // The market intelligence register is a separate table from the entity
+    // hierarchy: businesses recorded for research and prospecting, each with
+    // coordinates. A platform-wide "how many do we know of" reads both.
+    const marketIntel = admin
+        .command("market-intel")
+        .description("The market intelligence register — businesses recorded for research and prospecting");
+    marketIntel
+        .command("list")
+        .description("List register rows (cursor-paged, newest first)")
+        .option("--type <entityType>", "farm, restaurant, farm_shop, retail_store, distributor, processor, market, cooperative, supplier, customer, competitor, other")
+        .option("--relationship <type>", "prospect, active_customer, supplier, partner, competitor, market_research, other")
+        .option("--priority <priority>", "critical, high, medium, low, watching")
+        .option("--stage <stage>", "Opportunity stage (research, qualified_lead, negotiation, …)")
+        .option("--region <region>", "Exact match on region (case-insensitive)")
+        .option("--search <query>", "Substring match on name")
+        .option("--bbox <latMin,lngMin,latMax,lngMax>", "Only rows inside a lat/lng box")
+        .option("--active", "Only active rows")
+        .option("--inactive", "Only inactive rows")
+        .option("--org <slug>", "Restrict to the owning org")
+        .option("--limit <count>", "Rows scanned per page (default 200, max 2000)", parseInt)
+        .option("--cursor <cursor>", "Continue from a previous page's nextCursor")
+        .option("--all", "Walk every page and return all matches")
+        .action(async (opts) => {
+        if (opts.active && opts.inactive) {
+            throw new Error("--active and --inactive are mutually exclusive");
+        }
+        const client = getClient();
+        const fetchPage = (cursor) => client.adminListMarketIntel({
+            org: opts.org,
+            type: opts.type,
+            relationship: opts.relationship,
+            priority: opts.priority,
+            stage: opts.stage,
+            region: opts.region,
+            search: opts.search,
+            bbox: opts.bbox,
+            active: opts.active ? true : opts.inactive ? false : undefined,
+            limit: opts.limit,
+            cursor,
+        });
+        output(opts.all ? await collectAdminPages(fetchPage, opts.cursor) : await fetchPage(opts.cursor));
+    });
+    marketIntel
+        .command("get <id>")
+        .description("One register record with its latest interactions")
+        .action(async (id) => {
+        output(await getClient().adminGetMarketIntel(id));
+    });
+    marketIntel
+        .command("stats")
+        .description("Counts by type, relationship, priority, stage, region and country")
+        .option("--org <slug>", "Restrict to the owning org")
+        .action(async (opts) => {
+        output(await getClient().adminMarketIntelStats(opts.org));
     });
     admin
         .command("proposals")

package/dist/bundle/dcli.cjs

@@ -4209,6 +4209,21 @@ var ApiError = class extends Error {
     this.name = "ApiError";
   }
 };
+async function collectAdminPages(fetchPage, startCursor) {
+  const results = [];
+  let cursor = startCursor;
+  let scanned = 0;
+  let pages = 0;
+  for (; ; ) {
+    const page = await fetchPage(cursor);
+    results.push(...page.results);
+    scanned += page.scanned ?? page.results.length;
+    pages += 1;
+    if (page.isDone || !page.nextCursor) break;
+    cursor = page.nextCursor;
+  }
+  return { results, total: results.length, scanned, isDone: true, nextCursor: null, truncated: false, pages };
+}
 var DayOfWeekClient = class {
   baseUrl;
   token;
@@ -4427,12 +4442,43 @@ var DayOfWeekClient = class {
     const params = new URLSearchParams();
     if (opts?.org) params.set("org", opts.org);
     if (opts?.type) params.set("type", opts.type);
+    if (opts?.category) params.set("category", opts.category);
+    if (opts?.role) params.set("role", opts.role);
+    if (opts?.withRoles) params.set("with-roles", "1");
     if (opts?.missingLocation) params.set("missing-location", "1");
     if (opts?.search) params.set("search", opts.search);
     if (opts?.limit) params.set("limit", String(opts.limit));
+    if (opts?.cursor) params.set("cursor", opts.cursor);
     const qs = params.toString();
     return this.get(`/admin/entities${qs ? `?${qs}` : ""}`);
   }
+  // The market intelligence register: businesses recorded for research and
+  // prospecting, each with coordinates — a separate table from the entity
+  // hierarchy, so a platform-wide count has to read both.
+  async adminListMarketIntel(opts) {
+    const params = new URLSearchParams();
+    if (opts?.org) params.set("org", opts.org);
+    if (opts?.type) params.set("type", opts.type);
+    if (opts?.relationship) params.set("relationship", opts.relationship);
+    if (opts?.priority) params.set("priority", opts.priority);
+    if (opts?.stage) params.set("stage", opts.stage);
+    if (opts?.region) params.set("region", opts.region);
+    if (opts?.search) params.set("search", opts.search);
+    if (opts?.bbox) params.set("bbox", opts.bbox);
+    if (opts?.active !== void 0) params.set("active", opts.active ? "1" : "0");
+    if (opts?.limit) params.set("limit", String(opts.limit));
+    if (opts?.cursor) params.set("cursor", opts.cursor);
+    const qs = params.toString();
+    return this.get(`/admin/market-intel${qs ? `?${qs}` : ""}`);
+  }
+  /** One register record in full, with its latest interactions. */
+  async adminGetMarketIntel(id) {
+    return this.get(`/admin/market-intel/${encodeURIComponent(id)}`);
+  }
+  /** Counts over the whole register — by type, relationship, priority, stage, region, country. */
+  async adminMarketIntelStats(org) {
+    return this.get(`/admin/market-intel/stats${org ? `?org=${encodeURIComponent(org)}` : ""}`);
+  }
   async adminListProposals(opts) {
     const params = new URLSearchParams();
     if (opts?.status) params.set("status", opts.status);
@@ -4472,9 +4518,19 @@ var DayOfWeekClient = class {
   async listBrainSources(areaId) {
     return this.get(`/brain/sources?area=${encodeURIComponent(areaId)}`);
   }
-  /** An area's actors (people and organizations, the Actors tab). Active only. */
-  async listBrainActors(areaId) {
-    return this.get(`/brain/actors?area=${encodeURIComponent(areaId)}`);
+  /**
+   * An area's actors (people and organizations, the Actors tab). Active only.
+   * With `match`, admins also get `candidates` on unlinked actors — the
+   * platform entities whose name matches — to review before linking.
+   */
+  async listBrainActors(areaId, opts) {
+    const params = new URLSearchParams({ area: areaId });
+    if (opts?.match) params.set("match", "1");
+    return this.get(`/brain/actors?${params.toString()}`);
+  }
+  /** Link an actor to the platform entity it is; `entityId: null` unlinks. */
+  async linkBrainActor(input) {
+    return this.post("/brain/actors/link", input);
   }
   /**
    * Create an actor in an area. Idempotent on (area, name): an existing active
@@ -4717,6 +4773,52 @@ var DayOfWeekClient = class {
   async archiveSharedSkill(skillId) {
     return this.delete(`/brain/skills/${encodeURIComponent(skillId)}`);
   }
+  // ── Time tracking ─────────────────────────────────────────────────────────
+  //
+  // Hours registered against time projects. Every rule (periods, frames,
+  // self-financing, the reportable basis, who may approve) is evaluated by
+  // the server; the client only carries JSON and prints what comes back.
+  async listTimeProjects(org) {
+    const qs = org ? `?org=${encodeURIComponent(org)}` : "";
+    return this.get(`/time/projects${qs}`);
+  }
+  async getTimeProject(projectId, org) {
+    const params = new URLSearchParams({ id: projectId });
+    if (org) params.set("org", org);
+    return this.get(`/time/projects?${params.toString()}`);
+  }
+  async upsertTimeProject(payload, org) {
+    const qs = org ? `?org=${encodeURIComponent(org)}` : "";
+    return this.post(`/time/projects${qs}`, payload);
+  }
+  async listTimeEntries(opts) {
+    const params = new URLSearchParams();
+    if (opts?.project) params.set("project", opts.project);
+    if (opts?.user) params.set("user", opts.user);
+    if (opts?.from) params.set("from", opts.from);
+    if (opts?.to) params.set("to", opts.to);
+    if (opts?.status) params.set("status", opts.status);
+    if (opts?.org) params.set("org", opts.org);
+    const qs = params.toString();
+    return this.get(`/time/entries${qs ? `?${qs}` : ""}`);
+  }
+  async importTimeEntries(input) {
+    const qs = input.org ? `?org=${encodeURIComponent(input.org)}` : "";
+    return this.post(`/time/entries${qs}`, {
+      projectId: input.projectId,
+      dryRun: input.dryRun,
+      entries: input.entries
+    });
+  }
+  async listPendingTimeMonths(org) {
+    const qs = org ? `?org=${encodeURIComponent(org)}` : "";
+    return this.get(`/time/months${qs}`);
+  }
+  async actOnTimeMonth(input) {
+    const { org, ...body } = input;
+    const qs = org ? `?org=${encodeURIComponent(org)}` : "";
+    return this.post(`/time/months${qs}`, body);
+  }
   // ── Schema ────────────────────────────────────────────────────────────────
   async getSchema() {
     return this.get("/schema");
@@ -5165,7 +5267,7 @@ var import_promises4 = require("node:readline/promises");
 // package.json
 var package_default = {
   name: "@dayofweek/dcli",
-  version: "1.10.0",
+  version: "1.12.0",
   description: "CLI for the Day of Week AgTech platform \u2014 read data and submit proposals for review",
   license: "MIT",
   type: "module",
@@ -5496,8 +5598,21 @@ brainSource.command("download <uri>").description("Download exact original bytes
   }));
 });
 var brainActors = brain.command("actors").description("Work with an area's actors (people and organizations)");
-brainActors.command("list").description("List an area's actors (active, sorted by name)").requiredOption("--area <areaId>", "Area id (from `brain list`)").action(async (opts) => {
-  output(await getClient().listBrainActors(opts.area));
+brainActors.command("list").description("List an area's actors (active, sorted by name)").requiredOption("--area <areaId>", "Area id (from `brain list`)").option("--match", "Suggest matching platform entities for unlinked actors (admins)").action(async (opts) => {
+  output(await getClient().listBrainActors(opts.area, { match: opts.match }));
+});
+brainActors.command("link").description("Link an actor to the platform entity it is (or --unlink)").requiredOption("--area <areaId>", "Area id (from `brain list`)").requiredOption("--actor <actorId>", "Actor id (from `brain actors list`)").option("--entity <entityId>", "Platform entity id (from `admin entities` or `read entities`)").option("--unlink", "Remove the current link").action(async (opts) => {
+  if (!opts.entity && !opts.unlink) {
+    throw new Error("Provide --entity <entityId> to link, or --unlink to remove the link");
+  }
+  if (opts.entity && opts.unlink) {
+    throw new Error("--entity and --unlink are mutually exclusive");
+  }
+  output(await getClient().linkBrainActor({
+    areaId: opts.area,
+    actorId: opts.actor,
+    entityId: opts.unlink ? null : opts.entity
+  }));
 });
 brainActors.command("add").description("Add an actor to an area (idempotent on name)").requiredOption("--area <areaId>", "Area id (from `brain list`)").requiredOption("--name <name>", "Actor name (person or organization)").option("--kind <kind>", "person | organization", "organization").option("--role <text>", "Role or relationship in the project").option("--description <text>", "Longer free-text description").action(async (opts) => {
   if (opts.kind !== "person" && opts.kind !== "organization") {
@@ -6150,20 +6265,129 @@ feedback.command("status <itemId>").description("Set status and/or priority on a
     rejectedReason: opts.rejectedReason
   }));
 });
+var time = program2.command("time").description("Hours per project: projects, entries, monthly sheets");
+var timeProjects = time.command("projects").description("Time projects: setup and overview");
+timeProjects.command("list").description("List time projects with totals and frame usage").option("--org <org>", "Organization slug or id (admin only)").action(async (opts) => {
+  output(await getClient().listTimeProjects(opts.org));
+});
+timeProjects.command("show <projectId>").description("One project: setup, person\xD7activity\xD7month matrix, entries with computed split, monthly sheets").option("--org <org>", "Organization slug or id (admin only)").action(async (projectId, opts) => {
+  output(await getClient().getTimeProject(projectId, opts.org));
+});
+timeProjects.command("upsert").description("Create or update a time project from a JSON file (include projectId to update)").requiredOption("--file <path>", "JSON payload with the project setup (- for stdin)").option("--org <org>", "Organization slug or id (admin only)").action(async (opts) => {
+  const raw = opts.file === "-" ? (0, import_node_fs8.readFileSync)(0, "utf8") : (0, import_node_fs8.readFileSync)(opts.file, "utf8");
+  const payload = JSON.parse(raw);
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
+    throw new Error("Payload must be a JSON object with the project setup");
+  }
+  output(await getClient().upsertTimeProject(payload, opts.org));
+});
+var timeEntries = time.command("entries").description("Registered hours");
+timeEntries.command("list").description("Flat rows with the computed split (counted, self-financed, reportable, reasons)").option("--project <projectId>", "Only this project").option("--user <userId>", "Only this person (owners and admins)").option("--from <YYYY-MM-DD>", "First work date").option("--to <YYYY-MM-DD>", "Last work date").option("--status <status>", "draft | submitted | approved").option("--org <org>", "Organization slug or id (admin only)").action(async (opts) => {
+  output(
+    await getClient().listTimeEntries({
+      project: opts.project,
+      user: opts.user,
+      from: opts.from,
+      to: opts.to,
+      status: opts.status,
+      org: opts.org
+    })
+  );
+});
+timeEntries.command("import").description("Idempotent batch import of hours into one project. Requires --dry-run or --approved").requiredOption("--project <projectId>", "Target time project").requiredOption("--file <path>", "JSON: { entries: [...] } or a bare array (- for stdin)").option("--dry-run", "Validate and report what would happen, write nothing").option("--approved", "The operator approved the dry-run result").option("--org <org>", "Organization slug or id (admin only)").action(async (opts) => {
+  if (!opts.dryRun && !opts.approved) {
+    throw new Error(
+      "Refusing to write: run with --dry-run first, show the operator the summary, then repeat with --approved. This writes real hours, not proposals."
+    );
+  }
+  const raw = opts.file === "-" ? (0, import_node_fs8.readFileSync)(0, "utf8") : (0, import_node_fs8.readFileSync)(opts.file, "utf8");
+  const payload = JSON.parse(raw);
+  const entries = Array.isArray(payload) ? payload : payload?.entries;
+  if (!Array.isArray(entries) || entries.length === 0) {
+    throw new Error("Payload needs { entries: [...] } with at least one entry");
+  }
+  output(
+    await getClient().importTimeEntries({
+      projectId: opts.project,
+      entries,
+      dryRun: Boolean(opts.dryRun),
+      org: opts.org
+    })
+  );
+});
+var timeMonths = time.command("months").description("Monthly sheets: submit, approve, return, reopen");
+timeMonths.command("list").description("Months waiting for your approval (project owner), or every submitted month (admin)").option("--org <org>", "Organization slug or id (admin only)").action(async (opts) => {
+  output(await getClient().listPendingTimeMonths(opts.org));
+});
+for (const action of ["submit", "approve", "return", "reopen"]) {
+  const descriptions = {
+    submit: "Submit a month for approval (your own; admins may pass --user-email)",
+    approve: "Approve a submitted month \u2014 locks its rows (project owner or admin)",
+    return: "Return a submitted month as drafts, --comment required (project owner or admin)",
+    reopen: "Reopen an approved month for correction; it needs a new approval"
+  };
+  timeMonths.command(action).description(descriptions[action]).requiredOption("--project <projectId>", "Time project").requiredOption("--month <YYYY-MM>", "Month").option("--user-email <email>", "Whose month (defaults to yourself)").option("--user <userId>", "Whose month, by user id").option("--comment <text>", "Comment (required for return)").option("--org <org>", "Organization slug or id (admin only)").action(async (opts) => {
+    if (action === "return" && !opts.comment) {
+      throw new Error("--comment is required when returning a month");
+    }
+    output(
+      await getClient().actOnTimeMonth({
+        projectId: opts.project,
+        month: opts.month,
+        action,
+        userId: opts.user,
+        userEmail: opts.userEmail,
+        comment: opts.comment,
+        org: opts.org
+      })
+    );
+  });
+}
 function registerAdminCommands() {
   const cfg = loadConfig();
   if (!cfg.isAdmin) return;
   const admin = program2.command("admin", { hidden: true }).description("Admin-only cross-org operations (DoW staff)");
-  admin.command("entities").description("List entities across all orgs with admin filters").option("--type <entityType>", "Filter by entity type").option("--missing-location", "Only entities lacking metadata.places[].lat/lng").option("--search <query>", "Substring match on name").option("--org <slug>", "Restrict to a single org slug or ID").option("--limit <count>", "Max results (default 200)", parseInt).action(async (opts) => {
+  admin.command("entities").description("List entities across all orgs with admin filters (cursor-paged)").option("--type <entityType>", "Filter by type name (farm, producer, restaurant, \u2026)").option("--category <category>", "Filter by type category (supply, demand, partner, financial, \u2026)").option("--role <role>", "Only entities holding an active role: customer, partner, investor, producer, market_intel").option("--with-roles", "Attach each entity's active roles").option("--missing-location", "Only entities lacking metadata.places[].lat/lng").option("--search <query>", "Substring match on name").option("--org <slug>", "Restrict to a single org slug or ID").option("--limit <count>", "Rows scanned per page (default 200, max 2000)", parseInt).option("--cursor <cursor>", "Continue from a previous page's nextCursor").option("--all", "Walk every page and return all matches").action(async (opts) => {
     const client = getClient();
-    const result = await client.adminListEntities({
+    const fetchPage = (cursor) => client.adminListEntities({
       org: opts.org,
       type: opts.type,
+      category: opts.category,
+      role: opts.role,
+      withRoles: opts.withRoles,
       missingLocation: opts.missingLocation,
       search: opts.search,
-      limit: opts.limit
+      limit: opts.limit,
+      cursor
     });
-    output(result);
+    output(opts.all ? await collectAdminPages(fetchPage, opts.cursor) : await fetchPage(opts.cursor));
+  });
+  const marketIntel = admin.command("market-intel").description("The market intelligence register \u2014 businesses recorded for research and prospecting");
+  marketIntel.command("list").description("List register rows (cursor-paged, newest first)").option("--type <entityType>", "farm, restaurant, farm_shop, retail_store, distributor, processor, market, cooperative, supplier, customer, competitor, other").option("--relationship <type>", "prospect, active_customer, supplier, partner, competitor, market_research, other").option("--priority <priority>", "critical, high, medium, low, watching").option("--stage <stage>", "Opportunity stage (research, qualified_lead, negotiation, \u2026)").option("--region <region>", "Exact match on region (case-insensitive)").option("--search <query>", "Substring match on name").option("--bbox <latMin,lngMin,latMax,lngMax>", "Only rows inside a lat/lng box").option("--active", "Only active rows").option("--inactive", "Only inactive rows").option("--org <slug>", "Restrict to the owning org").option("--limit <count>", "Rows scanned per page (default 200, max 2000)", parseInt).option("--cursor <cursor>", "Continue from a previous page's nextCursor").option("--all", "Walk every page and return all matches").action(async (opts) => {
+    if (opts.active && opts.inactive) {
+      throw new Error("--active and --inactive are mutually exclusive");
+    }
+    const client = getClient();
+    const fetchPage = (cursor) => client.adminListMarketIntel({
+      org: opts.org,
+      type: opts.type,
+      relationship: opts.relationship,
+      priority: opts.priority,
+      stage: opts.stage,
+      region: opts.region,
+      search: opts.search,
+      bbox: opts.bbox,
+      active: opts.active ? true : opts.inactive ? false : void 0,
+      limit: opts.limit,
+      cursor
+    });
+    output(opts.all ? await collectAdminPages(fetchPage, opts.cursor) : await fetchPage(opts.cursor));
+  });
+  marketIntel.command("get <id>").description("One register record with its latest interactions").action(async (id) => {
+    output(await getClient().adminGetMarketIntel(id));
+  });
+  marketIntel.command("stats").description("Counts by type, relationship, priority, stage, region and country").option("--org <slug>", "Restrict to the owning org").action(async (opts) => {
+    output(await getClient().adminMarketIntelStats(opts.org));
   });
   admin.command("proposals").description("List agent proposals across all orgs").option("--status <status>", "Filter: pending, approved, rejected, failed").option("--source-agent <name>", "Filter by sourceAgent identifier").option("--limit <count>", "Max results (default 100)", parseInt).action(async (opts) => {
     const client = getClient();

package/dist/client.d.ts

@@ -13,6 +13,27 @@ export declare class ApiError extends Error {
     requestId?: string | undefined;
     constructor(status: number, message: string, code?: string | undefined, requestId?: string | undefined);
 }
+/**
+ * One page of a cursor-paged admin read. Filters apply within the scanned
+ * page, so `results` can be shorter than the page size — even empty — while
+ * `isDone` is still false. `nextCursor` is the only way forward.
+ */
+export type AdminPage<T = any> = {
+    results: T[];
+    total: number;
+    scanned: number;
+    isDone: boolean;
+    nextCursor: string | null;
+    truncated: boolean;
+};
+/**
+ * Walk a cursor-paged admin read to the end and return every match as one
+ * page. This is the loop behind `--all`; without it every caller re-invents
+ * it, or reaches for a giant `--limit` and still misses rows.
+ */
+export declare function collectAdminPages<T>(fetchPage: (cursor?: string) => Promise<AdminPage<T>>, startCursor?: string): Promise<AdminPage<T> & {
+    pages: number;
+}>;
 export declare class DayOfWeekClient {
     private baseUrl;
     private token;
@@ -146,14 +167,31 @@ export declare class DayOfWeekClient {
     adminListEntities(opts?: {
         org?: string;
         type?: string;
+        category?: string;
+        role?: string;
+        withRoles?: boolean;
         missingLocation?: boolean;
         search?: string;
         limit?: number;
-    }): Promise<{
-        results: any[];
-        truncated: boolean;
-        total: number;
-    }>;
+        cursor?: string;
+    }): Promise<AdminPage>;
+    adminListMarketIntel(opts?: {
+        org?: string;
+        type?: string;
+        relationship?: string;
+        priority?: string;
+        stage?: string;
+        region?: string;
+        search?: string;
+        bbox?: string;
+        active?: boolean;
+        limit?: number;
+        cursor?: string;
+    }): Promise<AdminPage>;
+    /** One register record in full, with its latest interactions. */
+    adminGetMarketIntel(id: string): Promise<any>;
+    /** Counts over the whole register — by type, relationship, priority, stage, region, country. */
+    adminMarketIntelStats(org?: string): Promise<any>;
     adminListProposals(opts?: {
         status?: string;
         sourceAgent?: string;
@@ -199,8 +237,20 @@ export declare class DayOfWeekClient {
     }): Promise<any>;
     /** Area sources, metadata only, newest first — the freshness evidence. */
     listBrainSources(areaId: string): Promise<any>;
-    /** An area's actors (people and organizations, the Actors tab). Active only. */
-    listBrainActors(areaId: string): Promise<any>;
+    /**
+     * An area's actors (people and organizations, the Actors tab). Active only.
+     * With `match`, admins also get `candidates` on unlinked actors — the
+     * platform entities whose name matches — to review before linking.
+     */
+    listBrainActors(areaId: string, opts?: {
+        match?: boolean;
+    }): Promise<any>;
+    /** Link an actor to the platform entity it is; `entityId: null` unlinks. */
+    linkBrainActor(input: {
+        areaId: string;
+        actorId: string;
+        entityId: string | null;
+    }): Promise<any>;
     /**
      * Create an actor in an area. Idempotent on (area, name): an existing active
      * actor comes back with `created: false` instead of a duplicate, so imports
@@ -424,6 +474,42 @@ export declare class DayOfWeekClient {
         }>;
     }): Promise<SharedSkillSummary>;
     archiveSharedSkill(skillId: string): Promise<SharedSkillSummary>;
+    listTimeProjects(org?: string): Promise<{
+        projects: any[];
+    }>;
+    getTimeProject(projectId: string, org?: string): Promise<any>;
+    upsertTimeProject(payload: Record<string, unknown>, org?: string): Promise<{
+        projectId: string;
+    }>;
+    listTimeEntries(opts?: {
+        project?: string;
+        user?: string;
+        from?: string;
+        to?: string;
+        status?: string;
+        org?: string;
+    }): Promise<{
+        total: number;
+        rows: any[];
+    }>;
+    importTimeEntries(input: {
+        projectId: string;
+        entries: unknown[];
+        dryRun: boolean;
+        org?: string;
+    }): Promise<any>;
+    listPendingTimeMonths(org?: string): Promise<{
+        approvals: any[];
+    }>;
+    actOnTimeMonth(input: {
+        projectId: string;
+        month: string;
+        action: "submit" | "approve" | "return" | "reopen";
+        userId?: string;
+        userEmail?: string;
+        comment?: string;
+        org?: string;
+    }): Promise<any>;
     getSchema(): Promise<any>;
     private get;
     private post;

package/dist/client.js

@@ -29,6 +29,27 @@ export class ApiError extends Error {
         this.name = "ApiError";
     }
 }
+/**
+ * Walk a cursor-paged admin read to the end and return every match as one
+ * page. This is the loop behind `--all`; without it every caller re-invents
+ * it, or reaches for a giant `--limit` and still misses rows.
+ */
+export async function collectAdminPages(fetchPage, startCursor) {
+    const results = [];
+    let cursor = startCursor;
+    let scanned = 0;
+    let pages = 0;
+    for (;;) {
+        const page = await fetchPage(cursor);
+        results.push(...page.results);
+        scanned += page.scanned ?? page.results.length;
+        pages += 1;
+        if (page.isDone || !page.nextCursor)
+            break;
+        cursor = page.nextCursor;
+    }
+    return { results, total: results.length, scanned, isDone: true, nextCursor: null, truncated: false, pages };
+}
 export class DayOfWeekClient {
     baseUrl;
     token;
@@ -280,15 +301,61 @@ export class DayOfWeekClient {
             params.set("org", opts.org);
         if (opts?.type)
             params.set("type", opts.type);
+        if (opts?.category)
+            params.set("category", opts.category);
+        if (opts?.role)
+            params.set("role", opts.role);
+        if (opts?.withRoles)
+            params.set("with-roles", "1");
         if (opts?.missingLocation)
             params.set("missing-location", "1");
         if (opts?.search)
             params.set("search", opts.search);
         if (opts?.limit)
             params.set("limit", String(opts.limit));
+        if (opts?.cursor)
+            params.set("cursor", opts.cursor);
         const qs = params.toString();
         return this.get(`/admin/entities${qs ? `?${qs}` : ""}`);
     }
+    // The market intelligence register: businesses recorded for research and
+    // prospecting, each with coordinates — a separate table from the entity
+    // hierarchy, so a platform-wide count has to read both.
+    async adminListMarketIntel(opts) {
+        const params = new URLSearchParams();
+        if (opts?.org)
+            params.set("org", opts.org);
+        if (opts?.type)
+            params.set("type", opts.type);
+        if (opts?.relationship)
+            params.set("relationship", opts.relationship);
+        if (opts?.priority)
+            params.set("priority", opts.priority);
+        if (opts?.stage)
+            params.set("stage", opts.stage);
+        if (opts?.region)
+            params.set("region", opts.region);
+        if (opts?.search)
+            params.set("search", opts.search);
+        if (opts?.bbox)
+            params.set("bbox", opts.bbox);
+        if (opts?.active !== undefined)
+            params.set("active", opts.active ? "1" : "0");
+        if (opts?.limit)
+            params.set("limit", String(opts.limit));
+        if (opts?.cursor)
+            params.set("cursor", opts.cursor);
+        const qs = params.toString();
+        return this.get(`/admin/market-intel${qs ? `?${qs}` : ""}`);
+    }
+    /** One register record in full, with its latest interactions. */
+    async adminGetMarketIntel(id) {
+        return this.get(`/admin/market-intel/${encodeURIComponent(id)}`);
+    }
+    /** Counts over the whole register — by type, relationship, priority, stage, region, country. */
+    async adminMarketIntelStats(org) {
+        return this.get(`/admin/market-intel/stats${org ? `?org=${encodeURIComponent(org)}` : ""}`);
+    }
     async adminListProposals(opts) {
         const params = new URLSearchParams();
         if (opts?.status)
@@ -332,9 +399,20 @@ export class DayOfWeekClient {
     async listBrainSources(areaId) {
         return this.get(`/brain/sources?area=${encodeURIComponent(areaId)}`);
     }
-    /** An area's actors (people and organizations, the Actors tab). Active only. */
-    async listBrainActors(areaId) {
-        return this.get(`/brain/actors?area=${encodeURIComponent(areaId)}`);
+    /**
+     * An area's actors (people and organizations, the Actors tab). Active only.
+     * With `match`, admins also get `candidates` on unlinked actors — the
+     * platform entities whose name matches — to review before linking.
+     */
+    async listBrainActors(areaId, opts) {
+        const params = new URLSearchParams({ area: areaId });
+        if (opts?.match)
+            params.set("match", "1");
+        return this.get(`/brain/actors?${params.toString()}`);
+    }
+    /** Link an actor to the platform entity it is; `entityId: null` unlinks. */
+    async linkBrainActor(input) {
+        return this.post("/brain/actors/link", input);
     }
     /**
      * Create an actor in an area. Idempotent on (area, name): an existing active
@@ -600,6 +678,59 @@ export class DayOfWeekClient {
     async archiveSharedSkill(skillId) {
         return this.delete(`/brain/skills/${encodeURIComponent(skillId)}`);
     }
+    // ── Time tracking ─────────────────────────────────────────────────────────
+    //
+    // Hours registered against time projects. Every rule (periods, frames,
+    // self-financing, the reportable basis, who may approve) is evaluated by
+    // the server; the client only carries JSON and prints what comes back.
+    async listTimeProjects(org) {
+        const qs = org ? `?org=${encodeURIComponent(org)}` : "";
+        return this.get(`/time/projects${qs}`);
+    }
+    async getTimeProject(projectId, org) {
+        const params = new URLSearchParams({ id: projectId });
+        if (org)
+            params.set("org", org);
+        return this.get(`/time/projects?${params.toString()}`);
+    }
+    async upsertTimeProject(payload, org) {
+        const qs = org ? `?org=${encodeURIComponent(org)}` : "";
+        return this.post(`/time/projects${qs}`, payload);
+    }
+    async listTimeEntries(opts) {
+        const params = new URLSearchParams();
+        if (opts?.project)
+            params.set("project", opts.project);
+        if (opts?.user)
+            params.set("user", opts.user);
+        if (opts?.from)
+            params.set("from", opts.from);
+        if (opts?.to)
+            params.set("to", opts.to);
+        if (opts?.status)
+            params.set("status", opts.status);
+        if (opts?.org)
+            params.set("org", opts.org);
+        const qs = params.toString();
+        return this.get(`/time/entries${qs ? `?${qs}` : ""}`);
+    }
+    async importTimeEntries(input) {
+        const qs = input.org ? `?org=${encodeURIComponent(input.org)}` : "";
+        return this.post(`/time/entries${qs}`, {
+            projectId: input.projectId,
+            dryRun: input.dryRun,
+            entries: input.entries,
+        });
+    }
+    async listPendingTimeMonths(org) {
+        const qs = org ? `?org=${encodeURIComponent(org)}` : "";
+        return this.get(`/time/months${qs}`);
+    }
+    async actOnTimeMonth(input) {
+        const { org, ...body } = input;
+        const qs = org ? `?org=${encodeURIComponent(org)}` : "";
+        return this.post(`/time/months${qs}`, body);
+    }
     // ── Schema ────────────────────────────────────────────────────────────────
     async getSchema() {
         return this.get("/schema");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dayofweek/dcli",
-  "version": "1.10.0",
-  "description": "CLI for the Day of Week AgTech platform \u2014 read data and submit proposals for review",
+  "version": "1.12.0",
+  "description": "CLI for the Day of Week AgTech platform — read data and submit proposals for review",
   "license": "MIT",
   "type": "module",
   "bin": {