@stage5/lumine 0.2.92 → 0.2.95

package/lib/admin.js

@@ -12,6 +12,7 @@ import {
 import path from "node:path";
 import { assertAuthScope, resolveAuth } from "./auth.js";
 import { requestJson } from "./http.js";
+import { formatBytes, parseStorageSizeBytes } from "./util.js";
 import {
   extractNewsClaim,
   readAdminJsonFile,
@@ -31,6 +32,11 @@ import {
   runManagedBuildReview,
 } from "./build-review.js";
 import { runAdminRuntimeLogWorkflow } from "./admin-runtime-logs.js";
+import {
+  dailyRunGather,
+  featuredCandidates,
+  reportServe,
+} from "./admin-daily.js";
 import {
   readApprovedFeaturedPlan,
   runFeaturedWorkflow,
@@ -141,6 +147,238 @@ const REWARD_REVIEW_STATUSES = ["pending", "approved", "all"];
 const CHAT_REPORT_STATUSES = ["open", "reviewing", "resolved", "dismissed"];
 const CHAT_REPORT_LIST_STATUSES = ["pending", ...CHAT_REPORT_STATUSES, "all"];
 const REWARD_REVIEW_DECISIONS = ["approve", "reject", "revoke"];
+// `lumine admin review`: one queue for every Build unlock (XP/Coin rewards,
+// project room, Lumine file storage, AI Card crafting). The per-type commands
+// (reward-review, cardcraft-review, storage) are thin aliases of it.
+const REVIEW_REQUEST_TYPES = [
+  "rewards",
+  "project-limit",
+  "storage-limit",
+  "cardcraft",
+];
+const REVIEW_REQUEST_TYPE_ALIASES = {
+  rewards: "rewards",
+  reward: "rewards",
+  "reward-review": "rewards",
+  "project-limit": "project-limit",
+  project: "project-limit",
+  room: "project-limit",
+  "storage-limit": "storage-limit",
+  storage: "storage-limit",
+  cardcraft: "cardcraft",
+  "card-craft": "cardcraft",
+  crafting: "cardcraft",
+};
+const REVIEW_REQUEST_LIST_STATUSES = [
+  "queue",
+  "pending",
+  "open",
+  "approved",
+  "rejected",
+  "all",
+];
+const REVIEW_REQUEST_LABELS = {
+  rewards: "XP & Coin rewards",
+  "project-limit": "Project room",
+  "storage-limit": "Lumine file storage",
+  cardcraft: "AI Card crafting",
+};
+const REVIEW_REQUEST_USAGE =
+  "Usage: lumine admin review list [--type rewards|project|storage|cardcraft] [--status queue|pending|approved|rejected|all] [--cursor <c>] | show <type:id> [--dir <path>] | approve <type:id> [--config <rules.json>] [--size <500MB|1GB|2GB|n MB>] [--reason <text>] | reject <type:id> [--reason <text>] | revoke <type:id> --reason <text> | propose rewards:<id> --dir <edited-snapshot> --config <rules.json> [--reason <text>]. A bare id works with --type.";
+
+function parseReviewRequestType(value) {
+  const key = String(value || "")
+    .trim()
+    .toLowerCase();
+  const type = REVIEW_REQUEST_TYPE_ALIASES[key];
+  if (!type) {
+    throw cliValidationError(
+      `Unknown request type "${key}". Use rewards, project, storage or cardcraft.`,
+    );
+  }
+  return type;
+}
+
+// "storage:12", "rewards:70", or a bare id with --type (or a fixed type).
+function parseReviewRequestRef(target, { type: fixedType, typeOption } = {}) {
+  const raw = String(target || "").trim();
+  const match = /^([a-z-]+):(\d+)$/i.exec(raw);
+  if (match) {
+    const type = parseReviewRequestType(match[1]);
+    if (fixedType && type !== fixedType) {
+      throw cliValidationError(
+        `This command handles ${REVIEW_REQUEST_LABELS[fixedType]} requests only.`,
+      );
+    }
+    return {
+      type,
+      id: parseRequiredInteger(match[2], "Request ID", 1),
+    };
+  }
+  const type = fixedType || (typeOption ? parseReviewRequestType(typeOption) : "");
+  if (!type) {
+    throw cliValidationError(
+      "Name the request as <type>:<id> (e.g. storage:12) or pass --type.",
+    );
+  }
+  return { type, id: parseRequiredInteger(raw, "Request ID", 1) };
+}
+
+// Builds the operation for list/show/approve/reject/revoke. `fixedType` is set
+// by the per-type aliases; `listStatuses` keeps their own --status choices.
+function buildReviewRequestOperation({
+  action,
+  target,
+  options,
+  fixedType = "",
+  command = "lumine admin review",
+  listStatuses = REVIEW_REQUEST_LIST_STATUSES,
+}) {
+  const reason = String(options.adminReason || "").trim();
+  if (reason.length > 1000) {
+    throw cliValidationError("--reason must be at most 1000 characters.");
+  }
+  if (!action || action === "list") {
+    return readOperation(
+      "review.list",
+      withQuery("/cli/admin/reviews", {
+        status: parseChoice(
+          options.adminStatus || "pending",
+          "--status",
+          listStatuses,
+        ),
+        type:
+          fixedType ||
+          (options.adminType
+            ? String(options.adminType)
+                .split(",")
+                .map((value) => parseReviewRequestType(value))
+                .join(",")
+            : ""),
+        cursor: options.adminCursor
+          ? /^\d+(\.\d\.\d+)?$/.test(String(options.adminCursor))
+            ? String(options.adminCursor)
+            : (() => {
+                throw cliValidationError(
+                  "--cursor must be the value a previous list printed.",
+                );
+              })()
+          : "",
+      }),
+      { requiresRun: false, reviewType: fixedType || null },
+    );
+  }
+  const ref = parseReviewRequestRef(target, {
+    type: fixedType,
+    typeOption: options.adminType,
+  });
+  if (action === "show" || action === "get") {
+    const snapshotDir = String(options.dir || "").trim();
+    if (options.dir && !snapshotDir) {
+      throw cliValidationError("Pass a new or empty directory with --dir <path>.");
+    }
+    if (snapshotDir && ref.type !== "rewards") {
+      throw cliValidationError("--dir writes a reward request's frozen source.");
+    }
+    return readOperation(
+      "review.show",
+      withQuery(`/cli/admin/reviews/${ref.type}/${ref.id}`, {
+        // Reward source is listed with sizes only unless --dir asks for it.
+        files: snapshotDir ? "1" : "0",
+      }),
+      {
+        requiresRun: false,
+        reviewType: ref.type,
+        reviewId: ref.id,
+        snapshotDir,
+      },
+    );
+  }
+  if (!REWARD_REVIEW_DECISIONS.includes(action)) {
+    return null;
+  }
+  if (action === "revoke" && !["rewards", "cardcraft"].includes(ref.type)) {
+    throw cliValidationError(
+      `${REVIEW_REQUEST_LABELS[ref.type]} approvals are not revoked; change the limit instead${ref.type === "storage-limit" ? " (lumine admin storage grant)" : ""}.`,
+    );
+  }
+  if (
+    ["rewards", "cardcraft"].includes(ref.type) &&
+    action !== "approve" &&
+    !reason
+  ) {
+    throw cliValidationError(
+      `${command} ${action} <id> needs --reason <text> the creator will read.`,
+    );
+  }
+  const body = { decision: action, reason };
+  if (options.adminConfigFile) {
+    if (ref.type !== "rewards") {
+      throw cliValidationError(
+        "--config (earning rules) is only used with XP & Coin reward requests.",
+      );
+    }
+    if (action !== "approve") {
+      throw cliValidationError(
+        "--config is only used with approve; rejections and revocations take --reason.",
+      );
+    }
+    // Without --config the app's own proposal (rewards.json + sheet, frozen
+    // in the request) is approved as it stands; --config replaces it.
+    body.config = readRewardConfigFile(options.adminConfigFile);
+  }
+  if (options.storageSize) {
+    if (ref.type !== "storage-limit") {
+      throw cliValidationError(
+        "--size is only used with Lumine file storage requests.",
+      );
+    }
+    if (action !== "approve") {
+      throw cliValidationError("--size is only used with approve.");
+    }
+    body.sizeBytes = parseAdminStorageSize(options.storageSize);
+  }
+  return writeOperation(
+    "review.decide",
+    "POST",
+    `/cli/admin/reviews/${ref.type}/${ref.id}`,
+    body,
+    {
+      requiresRun: false,
+      reviewType: ref.type,
+      reviewId: ref.id,
+      decision: action,
+    },
+  );
+}
+
+// A reviewer counter-proposal for an XP & Coin reward request: the edited copy
+// of the snapshot (from `show --dir`) plus the rules the creator's acceptance
+// publishes.
+function buildRewardProposalOperation(reviewId, options) {
+  const reason = String(options.adminReason || "").trim();
+  if (reason.length > 1000) {
+    throw cliValidationError("--reason must be at most 1000 characters.");
+  }
+  if (!options.adminConfigFile) {
+    throw cliValidationError(
+      "lumine admin reward-review propose <id> needs --config <rules.json> (the rules the creator's acceptance publishes) and --dir <edited snapshot>.",
+    );
+  }
+  const files = readRewardProposalDirectory(options.dir);
+  return writeOperation(
+    "reward-review.propose",
+    "POST",
+    `/cli/admin/reward-reviews/${reviewId}/propose`,
+    {
+      files,
+      config: readRewardConfigFile(options.adminConfigFile),
+      reason,
+    },
+    { requiresRun: false, reviewId, fileCount: files.length },
+  );
+}
+
 const REWARD_PROPOSAL_MAX_FILES = 500;
 const REWARD_PROPOSAL_MAX_BYTES = 5 * 1024 * 1024;
 const REWARD_PROPOSAL_SKIPPED_DIRS = new Set([
@@ -349,6 +587,26 @@ function readEditorialFile(filePath) {
 }
 
 export async function adminCommand(options) {
+  const [namespace, action] = options.positional || [];
+  const composite =
+    namespace === "daily-run" && action === "gather"
+      ? dailyRunGather
+      : namespace === "featured" && action === "candidates"
+        ? featuredCandidates
+        : namespace === "report" && action === "serve"
+          ? reportServe
+          : null;
+  if (composite) {
+    const result = await composite(options);
+    if (options.adminOutput) {
+      writeFileSync(options.adminOutput, JSON.stringify(result), {
+        mode: 0o600,
+      });
+    }
+    console.log(JSON.stringify(result, null, options.json ? 0 : 2));
+    if (result && result.ok === false) process.exitCode = 1;
+    return result;
+  }
   const operation = parseAdminOperation(options);
   if (operation.name === "news.validate") {
     const validation = validateNewsEditorial({
@@ -633,7 +891,11 @@ export async function adminCommand(options) {
   if (operation.name === "daily-run.start") {
     assertAdminTodoHandoffResult(result, operation.body.scope);
   }
-  if (operation.name === "reward-review.show" && operation.snapshotDir) {
+  if (
+    (operation.name === "reward-review.show" ||
+      operation.name === "review.show") &&
+    operation.snapshotDir
+  ) {
     // The snapshot leaves the JSON result and lands on disk, where the agent
     // reads it like any pulled workspace; the result keeps sizes and paths.
     const review = result?.data?.review || {};
@@ -1597,103 +1859,46 @@ export function parseAdminOperation(options) {
     }
   }
 
+  if (namespace === "review" || namespace === "reviews") {
+    // Every Build unlock in one queue. Mikey's own decisions: any time, never
+    // part of a delegated Zero/Ciel daily run.
+    if (action === "propose") {
+      const ref = parseReviewRequestRef(target, {
+        typeOption: options.adminType,
+      });
+      if (ref.type !== "rewards") {
+        throw cliValidationError(
+          "Only XP & Coin reward requests take a proposed copy.",
+        );
+      }
+      return buildRewardProposalOperation(ref.id, options);
+    }
+    const operation = buildReviewRequestOperation({ action, target, options });
+    if (operation) return operation;
+    throw cliValidationError(REVIEW_REQUEST_USAGE);
+  }
+
   if (
     namespace === "reward-review" ||
     namespace === "reward-reviews" ||
     namespace === "rewards"
   ) {
-    // Build XP/Coin reward approvals are the administrator's own decision and
-    // never part of a delegated Zero/Ciel daily run: they can happen any time.
-    const snapshotDir = String(options.dir || "").trim();
-    if (!action || action === "list") {
-      return readOperation(
-        "reward-review.list",
-        withQuery("/cli/admin/reward-reviews", {
-          status: parseChoice(
-            options.adminStatus || "pending",
-            "--status",
-            REWARD_REVIEW_STATUSES,
-          ),
-          beforeId: options.adminCursor
-            ? parseRequiredInteger(options.adminCursor, "--cursor", 1)
-            : "",
-        }),
-        { requiresRun: false },
-      );
-    }
-    if (action === "show" || action === "get") {
-      const reviewId = parseRequiredInteger(target, "Reward review ID", 1);
-      if (options.dir && !snapshotDir) {
-        throw cliValidationError(
-          "Pass a new or empty directory with --dir <path>.",
-        );
-      }
-      return readOperation(
-        "reward-review.show",
-        withQuery(`/cli/admin/reward-reviews/${reviewId}`, {
-          // Without --dir the source is listed with sizes only; with --dir the
-          // full snapshot is fetched and written locally for reading.
-          files: snapshotDir ? "1" : "0",
-        }),
-        { requiresRun: false, reviewId, snapshotDir },
-      );
-    }
+    // Alias of `lumine admin review ... rewards:<id>`; propose stays here.
     if (action === "propose") {
-      // Offer an edited copy of the snapshot as the condition of approval:
-      // the creator accepts (which publishes it) or declines (which rejects).
-      const reviewId = parseRequiredInteger(target, "Reward review ID", 1);
-      const reason = String(options.adminReason || "").trim();
-      if (reason.length > 1000) {
-        throw cliValidationError("--reason must be at most 1000 characters.");
-      }
-      if (!options.adminConfigFile) {
-        throw cliValidationError(
-          "lumine admin reward-review propose <id> needs --config <rules.json> (the rules the creator's acceptance publishes) and --dir <edited snapshot>.",
-        );
-      }
-      const files = readRewardProposalDirectory(options.dir);
-      return writeOperation(
-        "reward-review.propose",
-        "POST",
-        `/cli/admin/reward-reviews/${reviewId}/propose`,
-        {
-          files,
-          config: readRewardConfigFile(options.adminConfigFile),
-          reason,
-        },
-        { requiresRun: false, reviewId, fileCount: files.length },
-      );
-    }
-    if (REWARD_REVIEW_DECISIONS.includes(action)) {
-      const reviewId = parseRequiredInteger(target, "Reward review ID", 1);
-      const reason = String(options.adminReason || "").trim();
-      if (action !== "approve" && !reason) {
-        throw cliValidationError(
-          `lumine admin reward-review ${action} <id> needs --reason <text> the creator will read.`,
-        );
-      }
-      if (reason.length > 1000) {
-        throw cliValidationError("--reason must be at most 1000 characters.");
-      }
-      const body = { decision: action, reason };
-      if (action === "approve") {
-        // Without --config the app's own proposal (rewards.json + sheet, frozen
-        // in the request) is approved as it stands; --config replaces it.
-        if (options.adminConfigFile)
-          body.config = readRewardConfigFile(options.adminConfigFile);
-      } else if (options.adminConfigFile) {
-        throw cliValidationError(
-          "--config is only used with approve; rejections and revocations take --reason.",
-        );
-      }
-      return writeOperation(
-        "reward-review.decide",
-        "POST",
-        `/cli/admin/reward-reviews/${reviewId}`,
-        body,
-        { requiresRun: false, reviewId, decision: action },
+      return buildRewardProposalOperation(
+        parseRequiredInteger(target, "Reward review ID", 1),
+        options,
       );
     }
+    const operation = buildReviewRequestOperation({
+      action,
+      target,
+      options,
+      fixedType: "rewards",
+      command: "lumine admin reward-review",
+      listStatuses: REWARD_REVIEW_STATUSES,
+    });
+    if (operation) return operation;
     throw cliValidationError(
       "Usage: lumine admin reward-review list [--status pending|approved|all] [--cursor <id>] | show <id> [--dir <path>] | approve <id> [--config <rules.json>] [--reason <text>] | propose <id> --dir <edited-snapshot> --config <rules.json> [--reason <text>] | reject <id> --reason <text> | revoke <id> --reason <text>.",
     );
@@ -1704,54 +1909,75 @@ export function parseAdminOperation(options) {
     namespace === "cardcraft-reviews" ||
     namespace === "cardcraft"
   ) {
-    // AI Card crafting recipes (cardcraft.json). Same reviewer as rewards and,
-    // like rewards, never part of a delegated daily run.
+    // Alias of `lumine admin review ... cardcraft:<id>`.
+    const operation = buildReviewRequestOperation({
+      action,
+      target,
+      options,
+      fixedType: "cardcraft",
+      command: "lumine admin cardcraft-review",
+      listStatuses: REWARD_REVIEW_STATUSES,
+    });
+    if (operation) return operation;
+    throw cliValidationError(
+      "Usage: lumine admin cardcraft-review list [--status pending|approved|all] [--cursor <id>] | show <id> | approve <id> [--reason <text>] | reject <id> --reason <text> | revoke <id> --reason <text>.",
+    );
+  }
+
+  if (STORAGE_LIMIT_NAMESPACES.has(namespace)) {
+    // Lumine file storage (Twinkle.files) unlocks: per-creator approvals past
+    // the default quota. Mikey's own decision, any time, never in a daily run.
+    const usage =
+      "Usage: lumine admin storage list [--status pending|approved|rejected|all] [--cursor <id>] | show <user-id-or-username> | approve <request-id> [--size <500MB|1GB|2GB|n MB>] [--reason <text>] | reject <request-id> [--reason <text>] | grant <user-id-or-username> --size <500MB|1GB|2GB|n MB> [--reason <text>].";
+    const reason = String(options.adminReason || "").trim();
+    if (reason.length > 1000) {
+      throw cliValidationError("--reason must be at most 1000 characters.");
+    }
     if (!action || action === "list") {
-      return readOperation(
-        "cardcraft-review.list",
-        withQuery("/cli/admin/cardcraft-reviews", {
-          status: parseChoice(
-            options.adminStatus || "pending",
-            "--status",
-            REWARD_REVIEW_STATUSES,
-          ),
-          beforeId: options.adminCursor
-            ? parseRequiredInteger(options.adminCursor, "--cursor", 1)
-            : "",
-        }),
-        { requiresRun: false },
-      );
+      // Alias of `lumine admin review list --type storage`.
+      return buildReviewRequestOperation({
+        action,
+        target,
+        options,
+        fixedType: "storage-limit",
+        command: "lumine admin storage",
+        listStatuses: ["pending", "approved", "rejected", "all"],
+      });
     }
     if (action === "show" || action === "get") {
-      const reviewId = parseRequiredInteger(target, "Card crafting review ID", 1);
+      const user = parseStorageTargetUser(target);
       return readOperation(
-        "cardcraft-review.show",
-        `/cli/admin/cardcraft-reviews/${reviewId}`,
-        { requiresRun: false, reviewId },
+        "storage.show",
+        `/cli/admin/storage-limits/users/${encodeURIComponent(user)}`,
+        { requiresRun: false },
       );
     }
-    if (REWARD_REVIEW_DECISIONS.includes(action)) {
-      const reviewId = parseRequiredInteger(target, "Card crafting review ID", 1);
-      const reason = String(options.adminReason || "").trim();
-      if (action !== "approve" && !reason) {
+    if (action === "approve" || action === "reject") {
+      // Alias of `lumine admin review approve|reject storage:<id>`.
+      return buildReviewRequestOperation({
+        action,
+        target,
+        options,
+        fixedType: "storage-limit",
+        command: "lumine admin storage",
+      });
+    }
+    if (action === "grant" || action === "set") {
+      const user = parseStorageTargetUser(target);
+      if (!options.storageSize) {
         throw cliValidationError(
-          `lumine admin cardcraft-review ${action} <id> needs --reason <text> the creator will read.`,
+          "lumine admin storage grant <user> needs --size <500MB|1GB|2GB|n MB>.",
         );
       }
-      if (reason.length > 1000) {
-        throw cliValidationError("--reason must be at most 1000 characters.");
-      }
       return writeOperation(
-        "cardcraft-review.decide",
-        "POST",
-        `/cli/admin/cardcraft-reviews/${reviewId}`,
-        { decision: action, reason },
-        { requiresRun: false, reviewId, decision: action },
+        "storage.grant",
+        "PUT",
+        `/cli/admin/storage-limits/users/${encodeURIComponent(user)}`,
+        { sizeBytes: parseAdminStorageSize(options.storageSize), reason },
+        { requiresRun: false },
       );
     }
-    throw cliValidationError(
-      "Usage: lumine admin cardcraft-review list [--status pending|approved|all] [--cursor <id>] | show <id> | approve <id> [--reason <text>] | reject <id> --reason <text> | revoke <id> --reason <text>.",
-    );
+    throw cliValidationError(usage);
   }
 
   if (namespace === "chat-reports" || namespace === "chat-report") {
@@ -4458,6 +4684,190 @@ function printCardCraftReviewResult({ operation, data }) {
     );
 }
 
+const STORAGE_LIMIT_NAMESPACES = new Set([
+  "storage",
+  "storage-limit",
+  "storage-limits",
+  "storage-request",
+  "storage-requests",
+]);
+
+function parseStorageTargetUser(value) {
+  const user = String(value || "")
+    .trim()
+    .replace(/^@/, "");
+  if (!user || !/^[\w.-]+$/.test(user)) {
+    throw cliValidationError("Pass a user id or username.");
+  }
+  return user;
+}
+
+function parseAdminStorageSize(value) {
+  try {
+    return parseStorageSizeBytes(value);
+  } catch (error) {
+    throw cliValidationError(error.message);
+  }
+}
+
+function formatStorageRequestLine(request) {
+  const approved = request.approvedMaxRuntimeFileStorageBytes
+    ? ` → ${formatBytes(request.approvedMaxRuntimeFileStorageBytes)}`
+    : "";
+  return `#${request.requestId} · ${request.status} · ${request.username || `user ${request.userId}`} (${request.userId}) asks ${formatBytes(request.requestedMaxRuntimeFileStorageBytes)}${approved} · using ${formatBytes(request.currentUsageBytes)} at request${request.reason ? ` · "${request.reason}"` : ""}${request.reviewReason ? ` · review: ${request.reviewReason}` : ""}`;
+}
+
+function printStorageLimitResult({ operation, data, result }) {
+  if (operation.name === "storage.list") {
+    const requests = Array.isArray(data.requests) ? data.requests : [];
+    console.log(
+      `${requests.length} storage request(s) (${data.filter || "pending"}):`,
+    );
+    for (const request of requests)
+      console.log(`  ${formatStorageRequestLine(request)}`);
+    if (data.nextCursor) console.log(`More: --cursor ${data.nextCursor}`);
+    return;
+  }
+  if (operation.name === "storage.show") {
+    const storage = data.storage || {};
+    console.log(
+      `${data.user?.username || "user"} (${data.user?.id}): ${formatBytes(storage.runtimeFileStorageBytes)} used of ${formatBytes(storage.maxRuntimeFileStorageBytes)} across ${Number(storage.runtimeFileCount || 0)} file(s) (default ${formatBytes(storage.defaultMaxRuntimeFileStorageBytes)}, cap ${formatBytes(storage.maxApprovableRuntimeFileStorageBytes)}).`,
+    );
+    if (data.override) {
+      console.log(
+        `Approved override: ${formatBytes(data.override.maxRuntimeFileStorageBytes)} by user ${data.override.approvedByUserId}${data.override.reason ? ` · ${data.override.reason}` : ""}`,
+      );
+    }
+    for (const request of data.recentRequests || [])
+      console.log(`  ${formatStorageRequestLine(request)}`);
+    return;
+  }
+  const limit = formatBytes(data.maxRuntimeFileStorageBytes);
+  if (operation.name === "storage.decide") {
+    const request = data.request || {};
+    console.log(
+      result?.changed === false
+        ? `Storage request #${request.requestId} was already ${request.status}. ${request.username || "The creator"}'s limit is ${limit}.`
+        : `Storage request #${request.requestId} ${request.status}. ${request.username || "The creator"}'s Lumine file storage limit is now ${limit}.`,
+    );
+    return;
+  }
+  if (operation.name === "storage.grant") {
+    console.log(
+      result?.changed === false
+        ? `${data.user?.username || "The user"} (${data.user?.id}) already has ${limit} of Lumine file storage.`
+        : `${data.user?.username || "The user"} (${data.user?.id}) now has ${limit} of Lumine file storage.${data.request ? ` Closed pending request #${data.request.requestId} as approved.` : ""}`,
+    );
+  }
+}
+
+function formatReviewAge(seconds) {
+  const at = Number(seconds || 0);
+  if (!at) return "";
+  const minutes = Math.max(0, Math.round((Date.now() / 1000 - at) / 60));
+  if (minutes < 60) return `${minutes}m ago`;
+  const hours = Math.round(minutes / 60);
+  if (hours < 48) return `${hours}h ago`;
+  return `${Math.round(hours / 24)}d ago`;
+}
+
+function formatReviewItemLine(item) {
+  const where =
+    item.appTitle || (item.type === "storage-limit" ? "all their Builds" : "");
+  return [
+    `${item.ref} · ${item.status}${item.details?.isLive ? " (live)" : ""}`,
+    REVIEW_REQUEST_LABELS[item.type] || item.type,
+    `${where ? `${where} · ` : ""}by ${item.requesterUsername || "user"} (${item.requesterId})`,
+    item.summary,
+    item.reason ? `"${item.reason}"` : "",
+    item.reviewReason && item.status !== "pending" ? `note: ${item.reviewReason}` : "",
+    formatReviewAge(item.createdAt),
+  ]
+    .filter(Boolean)
+    .join(" · ");
+}
+
+function printReviewEvents(events) {
+  for (const event of events || [])
+    console.log(
+      `  ${new Date(Number(event.createdAt || 0) * 1000).toISOString()} ${event.action} by ${event.actorId}${event.reason ? `: ${event.reason}` : ""}`,
+    );
+}
+
+function printReviewRequestResult({ operation, data, result }) {
+  if (operation.name === "review.list") {
+    const items = Array.isArray(data.items) ? data.items : [];
+    const scope = operation.reviewType
+      ? REVIEW_REQUEST_LABELS[operation.reviewType]
+      : "Build";
+    console.log(`${items.length} ${scope} request(s) (${data.filter || "pending"}):`);
+    for (const item of items) console.log(`  ${formatReviewItemLine(item)}`);
+    if (data.nextCursor) console.log(`More: --cursor ${data.nextCursor}`);
+    if (items.some((item) => item.decisions?.includes("approve")))
+      console.log(
+        "Decide: lumine admin review approve|reject <ref> (storage: --size; rewards: --config; cardcraft/rewards reject needs --reason).",
+      );
+    return;
+  }
+  const type = operation.reviewType;
+  // Rewards and card crafting keep their detailed printers.
+  if (type === "rewards") {
+    printRewardReviewResult({
+      operation: {
+        ...operation,
+        name:
+          operation.name === "review.decide"
+            ? "reward-review.decide"
+            : "reward-review.show",
+      },
+      data,
+    });
+    return;
+  }
+  if (type === "cardcraft") {
+    printCardCraftReviewResult({
+      operation: {
+        ...operation,
+        name:
+          operation.name === "review.decide"
+            ? "cardcraft-review.decide"
+            : "cardcraft-review.show",
+      },
+      data,
+    });
+    return;
+  }
+  if (operation.name === "review.decide" && type === "storage-limit") {
+    printStorageLimitResult({
+      operation: { ...operation, name: "storage.decide" },
+      data,
+      result,
+    });
+    return;
+  }
+  if (data.item) console.log(formatReviewItemLine(data.item));
+  if (operation.name === "review.decide") {
+    console.log(
+      result?.changed === false
+        ? `Request ${data.item?.ref || ""} was already ${data.item?.status || data.request?.status}.`
+        : `Decision recorded: ${operation.decision}.${type === "project-limit" && operation.decision === "approve" ? " Main and all its branches have the room now." : ""}`,
+    );
+    return;
+  }
+  if (type === "storage-limit" && data.storage) {
+    const storage = data.storage;
+    console.log(
+      `Now: ${formatBytes(storage.runtimeFileStorageBytes)} used of ${formatBytes(storage.maxRuntimeFileStorageBytes)} across ${Number(storage.runtimeFileCount || 0)} file(s) (default ${formatBytes(storage.defaultMaxRuntimeFileStorageBytes)}, cap ${formatBytes(storage.maxApprovableRuntimeFileStorageBytes)}).`,
+    );
+  }
+  if (type === "project-limit" && data.currentLimits) {
+    console.log(
+      `Now: ${data.currentLimits.maxFilesPerProject} files, ${formatBytes(data.currentLimits.maxProjectBytes)} (Main; every branch inherits it).`,
+    );
+  }
+  printReviewEvents(data.events);
+}
+
 function printAdminResult({ operation, result }) {
   const data = result?.data || {};
   if (printChatSafetyResult({ operation, data })) return;
@@ -4465,6 +4875,10 @@ function printAdminResult({ operation, result }) {
     printRewardActivity(data);
     return;
   }
+  if (operation.name.startsWith("review.")) {
+    printReviewRequestResult({ operation, data, result });
+    return;
+  }
   if (operation.name.startsWith("reward-review.")) {
     printRewardReviewResult({ operation, data });
     return;
@@ -4473,6 +4887,10 @@ function printAdminResult({ operation, result }) {
     printCardCraftReviewResult({ operation, data });
     return;
   }
+  if (operation.name.startsWith("storage.")) {
+    printStorageLimitResult({ operation, data, result });
+    return;
+  }
   if (operation.name === "runtime.evidence") {
     const evidence = data.evidence || {};
     console.log(