@stage5/lumine 0.2.67 → 0.2.69

package/lib/admin.js

@@ -8,6 +8,7 @@ import {
   readAdminJsonFile,
   validateNewsEditorial,
   writeNewsClaimArtifacts,
+  writeAdminJsonFile,
 } from "./admin-news.js";
 import {
   forEachPaginatedResultItem,
@@ -21,6 +22,8 @@ import {
   runManagedBuildReview,
 } from "./build-review.js";
 import { runAdminRuntimeLogWorkflow } from "./admin-runtime-logs.js";
+import { readApprovedFeaturedPlan, runFeaturedWorkflow } from "./admin-featured.js";
+import { FEATURED_HISTORY_BATCH_SIZE, runBatchedFeaturedHistory } from "./admin-featured-history.js";
 
 const MAX_EDITORIAL_FILE_BYTES = 256 * 1024;
 const MAX_COMPOSED_TEXT_FILE_BYTES = 64 * 1024;
@@ -270,7 +273,9 @@ export async function adminCommand(options) {
         recommendationContentTypes,
         viewFilter,
       });
-    if (operation.name === "build.review") {
+    if (operation.featuredWorkflow) {
+      result = await runFeaturedWorkflow({ options, operation, authToken: auth.token, runId });
+    } else if (operation.name === "build.review") {
       result = await runManagedBuildReview({
         options,
         authToken: auth.token,
@@ -296,7 +301,10 @@ export async function adminCommand(options) {
           "Use --resume with the scan checkpoint instead of combining --all with --cursor.",
         );
       }
-      result = await runAutomaticPagination({
+      const paginate = operation.name === "featured.history" &&
+        operation.pagination.filters.subjectIds.length > FEATURED_HISTORY_BATCH_SIZE
+        ? runBatchedFeaturedHistory : runAutomaticPagination;
+      result = await paginate({
         options,
         operation,
         runId,
@@ -325,9 +333,35 @@ export async function adminCommand(options) {
       result = transformResult(await fetchOperation());
     }
   } catch (error) {
+    if (operation.name === "runtime.evidence" && error.status === 404) {
+      error.code = "CLI_ADMIN_RUNTIME_EVIDENCE_NOT_DEPLOYED";
+      error.message = "The runtime evidence route is not deployed on the requested host. Evidence is unknown; deploy the matching API and activate the collector in an authorized primary-generation release. No restart or host substitution was attempted.";
+      error.data = {
+        ok: false,
+        status: "unavailable",
+        error: { code: error.code, message: error.message, details: { httpStatus: 404 } },
+      };
+    }
+    if (operation.featuredWorkflow && error.featuredProgress) {
+      const serverError = error.data?.error;
+      error.data = {
+        ok: false,
+        status: "partial_failure",
+        error: {
+          code: serverError?.code || error.code || "LUMINE_ADMIN_FEATURED_WORKFLOW_FAILED",
+          message: error.message,
+          details: {
+            ...(serverError && typeof serverError === "object" ? serverError.details : {}),
+            ...error.featuredProgress,
+            retryInstruction: "Resume the exact command with --resume; confirmed items are not replayed.",
+          },
+        },
+      };
+    }
     if (
       operation.mutates &&
       requestId &&
+      !operation.featuredWorkflow &&
       operation.name !== "post.skip-batch"
     ) {
       const retryInstruction = `Retry with --idempotency-key ${requestId}.`;
@@ -367,6 +401,9 @@ export async function adminCommand(options) {
         typeof operation.body.buildReviewUnderstanding === "string",
     });
   }
+  if (operation.name === "comment.edit") {
+    assertComposedCommentEditResult({ result, body: operation.body });
+  }
   if (operation.name === "ai-email-policy.set") {
     assertAiEmailPolicySetResult({ operation, result });
   }
@@ -402,6 +439,7 @@ function transformAdminResult({
     assertSubjectWindowResult({ operation, result: transformed });
   }
   if (operation.name === "builds.candidates") {
+    assertBuildWindowResult({ operation, result: transformed });
     transformed = normalizeAdminBuildCandidatesResult({
       result: transformed,
       siteUrl: options.siteUrl,
@@ -480,6 +518,14 @@ export function assertSubjectWindowResult({ operation, result }) {
 
 async function finishAdminOutput({ options, operation, result }) {
   const paginationStorage = getPaginatedResultStorage(result);
+  if (
+    options.adminOutput &&
+    !paginationStorage &&
+    operation.name !== "news.claim" &&
+    operation.name !== "post.skip-batch"
+  ) {
+    writeAdminResultOutput({ filePath: options.adminOutput, result, operation });
+  }
   if (options.json) {
     if (paginationStorage) {
       await writePaginatedResultJson({
@@ -507,13 +553,33 @@ async function finishAdminOutput({ options, operation, result }) {
   return result;
 }
 
+export function writeAdminResultOutput({ filePath, result, operation }) {
+  try {
+    return writeAdminJsonFile(filePath, result, { privateFile: true });
+  } catch (cause) {
+    const error = new Error(
+      `The canonical ${operation.name} result was received, but --output could not be saved: ${cause.message}. Do not repeat a successful mutation just to save its output.`,
+    );
+    error.code = "LUMINE_ADMIN_OUTPUT_WRITE_FAILED";
+    error.data = {
+      ok: false,
+      status: "error",
+      error: {
+        code: error.code,
+        message: error.message,
+        details: { canonicalResult: result, outputPath: String(filePath) },
+      },
+    };
+    throw error;
+  }
+}
+
 export function normalizeAdminBuildCandidatesResult({ result, siteUrl }) {
-  const builds = Array.isArray(result?.builds) ? result.builds : [];
-  const nextCursor = String(result?.cursor || "").trim() || null;
+  const builds = result.data.builds;
   return {
-    ok: true,
-    status: "success",
+    ...result,
     data: {
+      ...result.data,
       builds: builds.map((build) => {
         const id = Number(build?.id || 0);
         return {
@@ -530,15 +596,128 @@ export function normalizeAdminBuildCandidatesResult({ result, siteUrl }) {
           },
         };
       }),
-      pagination: {
-        nextCursor,
-        hasMore: Boolean(nextCursor),
-        exhausted: !nextCursor,
-      },
     },
   };
 }
 
+export function assertBuildWindowResult({ operation, result }) {
+  const p = result?.data?.pagination;
+  const mode = operation?.pagination?.coverageMode;
+  if (
+    result?.ok !== true ||
+    !Array.isArray(result?.data?.builds) ||
+    !p ||
+    p.mode !== mode ||
+    !Number.isSafeInteger(p.snapshotMaxId) ||
+    p.snapshotMaxId < 0 ||
+    !Number.isSafeInteger(p.snapshotTimeStamp) ||
+    p.snapshotTimeStamp < 0 ||
+    (mode === "legacy"
+      ? p.after !== null
+      : !Number.isSafeInteger(p.after) || p.after < 0) ||
+    (mode === "after" && p.after !== operation.pagination.after) ||
+    typeof p.exhausted !== "boolean" ||
+    p.hasMore !== !p.exhausted ||
+    (p.exhausted
+      ? p.nextCursor !== null
+      : typeof p.nextCursor !== "string" || !p.nextCursor)
+  ) {
+    const error = new Error(
+      "The API did not confirm the requested published-Build window and snapshot. Deploy the matching API; do not substitute an unbounded public browser scan.",
+    );
+    error.code = "LUMINE_ADMIN_BUILD_WINDOW_UNSUPPORTED";
+    throw error;
+  }
+}
+
+export function assertComposedCommentEditResult({ result, body }) {
+  const edit = result?.data?.edit;
+  if (
+    result?.ok === true &&
+    result?.data?.comment?.content === body.content &&
+    (!body.buildReviewUnderstanding ||
+      (edit?.buildReviewContextStored === true &&
+        edit?.reviewedBuildVersionId === body.reviewedBuildVersionId &&
+        Number.isSafeInteger(edit?.managementDraftId) &&
+        edit.managementDraftId > 0))
+  )
+    return;
+  const error = new Error(
+    "The API did not confirm the exact comment edit and its required Build review context. Inspect the canonical result before retrying; deploy the matching API if unsupported.",
+  );
+  error.code = "LUMINE_ADMIN_COMMENT_EDIT_UNCONFIRMED";
+  error.data = {
+    ok: false,
+    status: "validation_error",
+    error: {
+      code: error.code,
+      message: error.message,
+      details: { canonicalResult: result },
+    },
+  };
+  throw error;
+}
+
+function readAdminBuildReviewEvidence(options, parsedTarget) {
+  const version = options.adminReviewedBuildVersion
+    ? parseRequiredInteger(
+        options.adminReviewedBuildVersion,
+        "--reviewed-version",
+        1,
+      )
+    : undefined;
+  const method = options.adminBuildReviewMethod
+    ? parseAdminBuildReviewMethod(options.adminBuildReviewMethod)
+    : undefined;
+  const receipt = options.adminReviewReceipt
+    ? parseBuildReviewReceipt(options.adminReviewReceipt)
+    : null;
+  const understanding = options.adminReviewContext
+    ? readBuildReviewContextFile(options.adminReviewContext)
+    : undefined;
+  if (receipt && (version || method)) {
+    throw cliValidationError(
+      "Pass either --review-receipt or manual --reviewed-version/--reviewed-via evidence, not both.",
+    );
+  }
+  const reviewedBuildVersionId = receipt
+    ? Number(receipt.publishedArtifactVersionId)
+    : version;
+  const buildReviewMethod = receipt ? "runtime" : method;
+  if (understanding && (!reviewedBuildVersionId || !buildReviewMethod)) {
+    throw cliValidationError(
+      "--review-context requires confirmed Build review evidence.",
+    );
+  }
+  if ((reviewedBuildVersionId || buildReviewMethod) && !understanding) {
+    throw cliValidationError(
+      "Build review evidence requires --review-context <context.json>.",
+    );
+  }
+  if (
+    receipt &&
+    parsedTarget.type === "build" &&
+    Number(receipt.buildId) !== parsedTarget.id
+  ) {
+    throw cliValidationError(
+      "The review receipt belongs to a different Build.",
+    );
+  }
+  if (
+    !["build", "comment"].includes(parsedTarget.type) &&
+    (reviewedBuildVersionId || buildReviewMethod)
+  ) {
+    throw cliValidationError(
+      "Build review evidence applies only to build:<id> or a comment:<id> inside a Build.",
+    );
+  }
+  return {
+    ...(reviewedBuildVersionId ? { reviewedBuildVersionId } : {}),
+    ...(buildReviewMethod ? { buildReviewMethod } : {}),
+    ...(understanding ? { buildReviewUnderstanding: understanding } : {}),
+  };
+}
+
 export function assertComposedCommentDraftResult({
   result,
   expectedContent,
@@ -756,7 +935,7 @@ export function canonicalAdminRunScope(run) {
   const raw = run?.runScope;
   if (raw === undefined || raw === null || raw === "") return "full";
   const scope = String(raw);
-  if (scope === "full" || scope === "featured") return scope;
+  if (["full", "featured", "newspaper"].includes(scope)) return scope;
   throw cliValidationError(
     "The API returned an invalid administrator run scope.",
   );
@@ -778,6 +957,12 @@ const FEATURED_RUN_OPERATIONS = new Set([
   "featured.add",
   "featured.reorder",
   "featured.rotate",
+  "featured.plan",
+  "featured.apply",
+  "featured.comments.scan",
+  "featured.comments.acknowledge",
+  "featured.comments.recommend",
+  "featured.comments.report",
   "daily-run.complete",
   "daily-run.fail",
 ]);
@@ -786,6 +971,14 @@ export function assertAdminOperationAllowedForRunScope({
   operation,
   runScope,
 }) {
+  if (runScope === "newspaper") {
+    if (
+      ["news.status", "news.claim", "news.submit", "news.print", "daily-run.complete", "daily-run.fail"].includes(operation.name)
+    ) return;
+    throw cliValidationError(
+      `A newspaper-only run does not authorize ${operation.name}.`,
+    );
+  }
   if (runScope !== "featured") return;
   const subjectCommentAlias =
     operation.name === "post.comments" &&
@@ -794,7 +987,7 @@ export function assertAdminOperationAllowedForRunScope({
     return;
   }
   throw cliValidationError(
-    `A Featured-only run does not authorize ${operation.name}. Complete or fail it before starting a full daily review.`,
+    `A Featured-only run does not authorize ${operation.name}. Use the review-bound Featured comment workflow for encouragement; do not start unrelated daily work to bypass scope.`,
   );
 }
 
@@ -809,6 +1002,7 @@ function adminOperationRequiresRun(operation) {
       "identity.use",
       "identity.inspect",
       "economy.trace",
+      "bot.context",
       "rescue.wordle.audit",
       "daily-run.start",
       "daily-run.status",
@@ -1216,17 +1410,17 @@ export function parseAdminOperation(options) {
     if (action === "start") {
       const runScope = parseDailyRunScope(options.adminScope || "full");
       const commentMode = parseCommentMode(options.commentMode || "off");
-      if (runScope === "featured" && commentMode !== "off") {
+      if (runScope !== "full" && commentMode !== "off") {
         throw cliValidationError(
-          "A Featured-only run requires --comment-mode off.",
+          "A scoped run requires --comment-mode off.",
         );
       }
       return writeOperation(
         "daily-run.start",
         "POST",
-        runScope === "featured"
-          ? "/cli/admin/daily-runs/start/featured"
-          : "/cli/admin/daily-runs/start",
+        runScope === "full"
+          ? "/cli/admin/daily-runs/start"
+          : `/cli/admin/daily-runs/start/${runScope}`,
         {
           identity: options.adminIdentity
             ? parseIdentity(options.adminIdentity)
@@ -1381,11 +1575,13 @@ export function parseAdminOperation(options) {
   }
 
   if (namespace === "builds" && action === "candidates") {
+    const window = parseBuildWindow(options);
     return readOperation(
       "builds.candidates",
-      withQuery("/build/public/list", {
-        sort: "recent",
-        scope: "all",
+      withQuery("/cli/admin/builds/candidates", {
+        sinceRun: window.mode === "since-run" ? "true" : "",
+        after: window.mode === "after" ? window.after : "",
+        includeLegacy: window.mode === "legacy" ? "true" : "",
         cursor: options.adminCursor,
         limit: options.limit,
       }),
@@ -1393,9 +1589,12 @@ export function parseAdminOperation(options) {
         pagination: {
           collectionKey: "builds",
           coverageQueue: "builds",
-          coverageMode: "all",
-          after: null,
-          filters: { sort: "recent", scope: "all" },
+          coverageMode: window.mode,
+          after:
+            window.mode === "after"
+              ? parseAfterForCoverage(window.after)
+              : null,
+          filters: { sort: "published-release", scope: "all" },
         },
       },
     );
@@ -1414,6 +1613,9 @@ export function parseAdminOperation(options) {
       body: undefined,
       mutates: false,
       buildId: parsed.id,
+      // Public artifact inspection also supports a one-comment correction;
+      // it never needs a full daily-management authorization envelope.
+      requiresRun: false,
     };
   }
 
@@ -1483,6 +1685,30 @@ export function parseAdminOperation(options) {
   }
 
   if (namespace === "featured") {
+    if (action === "comments") {
+      if (!["scan", "acknowledge", "recommend", "report"].includes(target)) {
+        throw cliValidationError("Usage: featured comments scan|acknowledge|recommend|report --checkpoint <file>.");
+      }
+      if (options.adminAll || options.adminCursor || options.adminUnviewed || options.adminViewed || options.adminAfter) {
+        throw cliValidationError("The Featured review covers every comment; filtered or caller-supplied cursors are not supported.");
+      }
+      return { ...writeOperation(`featured.comments.${target}`, "POST", "/cli/admin/subjects/featured/reviews", {}),
+        mutates: target !== "report", featuredWorkflow: target };
+    }
+    if (action === "plan") {
+      if (!options.adminPostedAfter) throw cliValidationError("A Featured plan requires --posted-after <timestamp>.");
+      return writeOperation("featured.plan", "POST", "/cli/admin/subjects/featured/plan", {
+        removeIds: parseFeaturedSubjectIds(options.adminRemoveIds, "--remove-subject-ids"),
+        addIds: parseFeaturedSubjectIds(options.adminAddIds, "--add-subject-ids"),
+        ...(options.adminIds ? { finalIds: parseOrderedIds(options.adminIds) } : {}),
+        postedAfter: options.adminPostedAfter,
+      });
+    }
+    if (action === "apply") {
+      readApprovedFeaturedPlan(options.adminFile, options.adminApprove);
+      return { ...writeOperation("featured.apply", "POST", "/cli/admin/subjects/featured/plan/apply", {}),
+        featuredWorkflow: "apply" };
+    }
     if (action === "list") {
       return readOperation("featured.list", "/cli/admin/subjects/featured");
     }
@@ -1491,6 +1717,12 @@ export function parseAdminOperation(options) {
         options.adminIds,
         "--subject-ids",
       );
+      if (subjectIds.length > 20_000) {
+        throw cliValidationError("Featured history accepts at most 20000 subject IDs per CLI scan.");
+      }
+      if (subjectIds.length > FEATURED_HISTORY_BATCH_SIZE && !options.adminAll) {
+        throw cliValidationError("Pass --all to automatically batch history reads larger than 100 subjects.");
+      }
       return readOperation(
         "featured.history",
         withQuery("/cli/admin/subjects/featured/history", {
@@ -1501,6 +1733,7 @@ export function parseAdminOperation(options) {
         {
           pagination: {
             collectionKey: "events",
+            summaryKeys: ["coverage", "subjects"],
             filters: { subjectIds },
           },
         },
@@ -1528,7 +1761,7 @@ export function parseAdminOperation(options) {
   if (namespace === "post") {
     if (action === "get") return postGetOperation(target, options);
     if (action === "comments") {
-      const parsedTarget = parseRecommendationTarget({
+      const parsedTarget = parseAdminCommentTarget({
         target,
         explicitType: options.adminType,
       });
@@ -1729,7 +1962,9 @@ export function parseAdminOperation(options) {
           "ai-costs monthly uses UTC calendar months and does not accept --days.",
         );
       }
-      return readOperation("ai-costs.monthly", "/cli/admin/ai-costs/monthly");
+      return readOperation("ai-costs.monthly", "/cli/admin/ai-costs/monthly", {
+        requiresRun: false,
+      });
     }
     if (action === "day" && !extra) {
       if (options.adminDays) {
@@ -1770,10 +2005,23 @@ export function parseAdminOperation(options) {
     );
   }
 
+  if (namespace === "runtime") {
+    if (action !== "evidence" || !["primary", "target"].includes(target) || extra) {
+      throw cliValidationError("Usage: lumine admin runtime evidence primary|target [--days 1..7].");
+    }
+    return readOperation(
+      "runtime.evidence",
+      withQuery(`/cli/admin/runtime-logs/hosts/${target}/evidence`, {
+        days: parseRequiredInteger(options.adminDays || "7", "--days", 1, 7),
+      }),
+      { requiresRun: false },
+    );
+  }
+
   if (namespace === "runtime-logs") {
     if (
       (action === "start" || action === "status" || action === "read") &&
-      !target &&
+      (!target || (action === "start" && ["primary", "target"].includes(target))) &&
       !extra
     ) {
       if (
@@ -1793,6 +2041,7 @@ export function parseAdminOperation(options) {
         mutates: action !== "status",
         requiresRun: false,
         runtimeLogAction: action === "read" ? "capture" : action,
+        ...(action === "start" && target ? { runtimeLogHost: target } : {}),
       };
     }
     if ((action === "resume" || action === "abandon") && !target && !extra) {
@@ -1888,6 +2137,36 @@ export function parseAdminOperation(options) {
     });
   }
 
+  if (namespace === "bot-output" && action === "context") {
+    const messageId = parseRequiredInteger(target, "bot message ID", 1);
+    const reason = String(options.adminReason || "").trim();
+    if (!reason || reason.length > MAX_IDENTITY_INSPECTION_REASON_LENGTH) {
+      throw cliValidationError(
+        "Explain the private bot investigation with --reason (1–500 characters).",
+      );
+    }
+    if (options.adminAll || options.adminDays) {
+      throw cliValidationError(
+        "Bot context is a narrow message-ID investigation, not an --all or --days scan.",
+      );
+    }
+    return writeOperation(
+      "bot.context",
+      "POST",
+      `/cli/admin/bot-output/${messageId}/context`,
+      {
+        reason,
+        cursor: options.adminCursor || undefined,
+        limit: parseRequiredInteger(
+          options.adminContextLimit ?? 20,
+          "--limit",
+          1,
+          40,
+        ),
+      },
+    );
+  }
+
   if (namespace === "bot-output" && !action) {
     if (options.adminDays && options.adminCursor) {
       throw cliValidationError(
@@ -1939,58 +2218,10 @@ export function parseAdminOperation(options) {
           "comment reply targets a comment: lumine admin comment reply comment:<id>.",
         );
       }
-      const reviewedBuildVersionId = options.adminReviewedBuildVersion
-        ? parseRequiredInteger(
-            options.adminReviewedBuildVersion,
-            "--reviewed-version",
-            1,
-          )
-        : undefined;
-      const buildReviewMethod = options.adminBuildReviewMethod
-        ? parseAdminBuildReviewMethod(options.adminBuildReviewMethod)
-        : undefined;
-      const reviewReceipt = options.adminReviewReceipt
-        ? parseBuildReviewReceipt(options.adminReviewReceipt)
-        : null;
-      const buildReviewUnderstanding = options.adminReviewContext
-        ? readBuildReviewContextFile(options.adminReviewContext)
-        : undefined;
-      if (reviewReceipt && (reviewedBuildVersionId || buildReviewMethod)) {
-        throw cliValidationError(
-          "Pass either --review-receipt or manual --reviewed-version/--reviewed-via evidence, not both.",
-        );
-      }
-      const confirmedBuildVersionId = reviewReceipt
-        ? Number(reviewReceipt.publishedArtifactVersionId)
-        : reviewedBuildVersionId;
-      const confirmedBuildReviewMethod = reviewReceipt
-        ? "runtime"
-        : buildReviewMethod;
-      if (
-        buildReviewUnderstanding &&
-        (!confirmedBuildVersionId || !confirmedBuildReviewMethod)
-      ) {
-        throw cliValidationError(
-          "--review-context requires confirmed Build review evidence.",
-        );
-      }
-      if (
-        (confirmedBuildVersionId || confirmedBuildReviewMethod) &&
-        !buildReviewUnderstanding
-      ) {
-        throw cliValidationError(
-          "Build review evidence requires --review-context <context.json>.",
-        );
-      }
-      if (
-        reviewReceipt &&
-        parsedTarget.type === "build" &&
-        Number(reviewReceipt.buildId) !== parsedTarget.id
-      ) {
-        throw cliValidationError(
-          "The review receipt belongs to a different Build.",
-        );
-      }
+      const reviewEvidence = readAdminBuildReviewEvidence(
+        options,
+        parsedTarget,
+      );
       if (parsedTarget.type === "build") {
         if (!options.adminFile) {
           throw cliValidationError(
@@ -1998,21 +2229,14 @@ export function parseAdminOperation(options) {
           );
         }
         if (
-          !confirmedBuildVersionId ||
-          !confirmedBuildReviewMethod ||
-          !buildReviewUnderstanding
+          !reviewEvidence.reviewedBuildVersionId ||
+          !reviewEvidence.buildReviewMethod ||
+          !reviewEvidence.buildReviewUnderstanding
         ) {
           throw cliValidationError(
             "After reviewing the project, pass review evidence and --review-context <context.json>.",
           );
         }
-      } else if (
-        parsedTarget.type !== "comment" &&
-        (confirmedBuildVersionId || confirmedBuildReviewMethod)
-      ) {
-        throw cliValidationError(
-          "Build review evidence applies only to build:<id> or a comment:<id> inside a Build.",
-        );
       }
       return writeOperation(
         "comment.draft",
@@ -2027,13 +2251,7 @@ export function parseAdminOperation(options) {
           ...(options.adminFile
             ? { content: readComposedTextFile(options.adminFile) }
             : {}),
-          ...(confirmedBuildVersionId
-            ? { reviewedBuildVersionId: confirmedBuildVersionId }
-            : {}),
-          ...(confirmedBuildReviewMethod
-            ? { buildReviewMethod: confirmedBuildReviewMethod }
-            : {}),
-          ...(buildReviewUnderstanding ? { buildReviewUnderstanding } : {}),
+          ...reviewEvidence,
         },
       );
     }
@@ -2058,7 +2276,13 @@ export function parseAdminOperation(options) {
         "comment.edit",
         "PUT",
         `/cli/admin/comments/${commentId}`,
-        { content: readComposedTextFile(options.adminFile) },
+        {
+          content: readComposedTextFile(options.adminFile),
+          ...readAdminBuildReviewEvidence(options, {
+            type: "comment",
+            id: commentId,
+          }),
+        },
         {
           correctionEligible: true,
           correctionCommentId: commentId,
@@ -2243,6 +2467,7 @@ function featuredRotateOperation(options) {
     {
       removeIds,
       addIds,
+      ...(options.adminPostedAfter ? { postedAfter: options.adminPostedAfter } : {}),
     },
   );
 }
@@ -2303,6 +2528,22 @@ export function parseSubjectWindow(options) {
   return { mode, after: mode === "after" ? options.adminAfter : "" };
 }
 
+export function parseBuildWindow(options) {
+  const selected = [
+    options.adminSinceRun ? "since-run" : "",
+    options.adminAfter ? "after" : "",
+    options.adminIncludeLegacy ? "legacy" : "",
+  ].filter(Boolean);
+  if (selected.length > 1) {
+    throw cliValidationError(
+      "Choose one Build window: --since-run, --after, or --include-legacy.",
+    );
+  }
+  const mode = selected[0] || "since-run";
+  if (mode === "after") parseAfterForCoverage(options.adminAfter);
+  return { mode, after: mode === "after" ? options.adminAfter : "" };
+}
+
 function parseUtcDayKey(value) {
   const dayKey = String(value || "").trim();
   const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(dayKey);
@@ -2524,7 +2765,7 @@ export function assertAdminTodoHandoffResult(result, expectedRunScope = null) {
     throw error;
   }
   const handoff = result?.data?.carryoverTodos;
-  if (runScope === "featured") {
+  if (runScope !== "full") {
     if (
       !runId ||
       !handoff ||
@@ -2536,7 +2777,7 @@ export function assertAdminTodoHandoffResult(result, expectedRunScope = null) {
       Number(handoff.newlySurfacedCount) !== 0
     ) {
       const error = cliValidationError(
-        "The API did not confirm that carry-over telemetry was suppressed for the Featured-only run.",
+        "The API did not confirm that carry-over telemetry was suppressed for the scoped run.",
       );
       error.code = "LUMINE_ADMIN_SCOPED_RUN_UNSUPPORTED";
       throw error;
@@ -2617,8 +2858,8 @@ function parseDailyRunScope(value) {
   const scope = String(value || "full")
     .trim()
     .toLowerCase();
-  if (!["full", "featured"].includes(scope)) {
-    throw cliValidationError("--scope must be full or featured.");
+  if (!["full", "featured", "newspaper"].includes(scope)) {
+    throw cliValidationError("--scope must be full, featured, or newspaper.");
   }
   return scope;
 }
@@ -3156,6 +3397,28 @@ async function printSpooledAdminResult({ operation, result, storage }) {
 
 function printAdminResult({ operation, result }) {
   const data = result?.data || {};
+  if (operation.name === "runtime.evidence") {
+    const evidence = data.evidence || {};
+    console.log(`Runtime evidence (${data.host?.requested || "unknown"}): ${evidence.status || "unknown"}.`);
+    console.log(`Samples: ${evidence.coverage?.samples ?? "unknown"}; latest: ${evidence.coverage?.lastAtMs ?? "unknown"}; age ms: ${evidence.coverage?.ageMs ?? "unknown"}.`);
+    for (const recycle of evidence.recycles || []) {
+      console.log(`  ${recycle.id}: ${recycle.outcome}; under load: ${recycle.observedUnderLoad ?? "unknown"}.`);
+    }
+    console.log("Missing evidence is unknown, not healthy. A recovered topology does not verify interrupted user work. Use --json for full evidence.");
+    return;
+  }
+  if (operation.name === "featured.plan") {
+    for (const pair of data.plan?.replacements || []) {
+      console.log(`${pair.remove.id} ${pair.remove.title} -> ${pair.add.id} ${pair.add.title}`);
+    }
+    console.log(`Proposed final order: ${(data.plan?.finalIds || []).join(",")}`);
+    console.log(`Plan hash: ${data.planHash}. Obtain Mikey's approval before using featured apply --file <plan.json> --approve ${data.planHash}.`);
+    return;
+  }
+  if (operation.featuredWorkflow) {
+    console.log(JSON.stringify(data, null, 2));
+    return;
+  }
   if (Array.isArray(data.applications)) {
     console.log(`${data.applications.length} sponsor application(s):`);
     for (const application of data.applications) {
@@ -3300,6 +3563,13 @@ function printAdminResult({ operation, result }) {
         `  ${coverage.queue}: ${coverage.candidateCount} candidate(s), ${coverage.scannedCount} row(s) scanned across ${coverage.pages} page(s).`,
       );
     }
+    for (const item of report.featuredReviews || []) {
+      const coverage = item.coverage;
+      const counts = item.encouragement || {};
+      console.log(
+        `  Featured review #${item.review?.id || coverage?.reviewId}: ${coverage?.reviewed ? `${coverage.coveredSubjectIds.length}/${coverage.subjectCount} Subjects read, ${coverage.commentsRead} comments` : "not acknowledged as read"}; ${coverage?.complete ? "complete" : "incomplete"}; ${counts.newBasicRecommendations || 0} confirmed new basic recommendations, ${counts.alreadyDone || 0} already done, ${counts.rewardEligibilityGrants || 0} reward-permission grants, ${counts.directRewardsCreated || 0} direct rewards.`,
+      );
+    }
     for (const escalation of report.escalations) {
       const target =
         escalation.url ||