@stage5/lumine 0.3.11 → 0.3.12

package/lib/admin.js

@@ -2021,6 +2021,32 @@ export function parseAdminOperation(options) {
     }
   }
 
+  if (namespace === "identity" && action === "network") {
+    const networkTarget = String(target || "").trim();
+    const reason = String(options.adminReason || "").trim();
+    if (!networkTarget || !reason) {
+      throw cliValidationError(
+        "Usage: lumine admin identity network <userId|username> --reason <management reason> [--include-private-evidence].",
+      );
+    }
+    if (reason.length > MAX_IDENTITY_INSPECTION_REASON_LENGTH) {
+      throw cliValidationError(
+        `A network-evidence reason must be at most ${MAX_IDENTITY_INSPECTION_REASON_LENGTH} characters.`,
+      );
+    }
+    return writeOperation(
+      "identity.network",
+      "POST",
+      "/cli/admin/identity/network",
+      {
+        target: networkTarget,
+        reason,
+        includePrivateEvidence: options.adminIncludePrivateEvidence === true,
+      },
+      { requiresRun: false },
+    );
+  }
+
   if (namespace === "economy" && action === "trace") {
     const traceTarget = String(target || "").trim();
     const reason = String(options.adminReason || "").trim();
@@ -5661,6 +5687,46 @@ const APPROVAL_LABELS = { dob: "birthdate", mentor: "teacher", meetup: "meetup"
 const approvalDate = (seconds) =>
   seconds ? new Date(Number(seconds) * 1000).toISOString().slice(0, 10) : "?";
 
+// Network evidence (users_actions addresses): a shared network (academy,
+// school) is only counted; a small one lists who shares it.
+function printNetwork(network, indent = "") {
+  const addresses = network?.addresses || [];
+  if (!network) return;
+  if (network.unavailable) {
+    console.log(`${indent}Network: could not be read this time (try again)`);
+    return;
+  }
+  if (!addresses.length) {
+    console.log(`${indent}Network: no recorded addresses`);
+    return;
+  }
+  console.log(`${indent}Network: ${addresses.length} recent address(es)`);
+  for (const a of addresses) {
+    const span = `${approvalDate(a.firstAt)}..${approvalDate(a.lastAt)}`;
+    const older = a.olderHistoryNotRead ? " · older history not read" : "";
+    if (a.kind === "shared_network") {
+      console.log(
+        `${indent}  - ${a.address} [${a.addressId}] · shared network: ${a.otherAccountsAtLeast}+ other accounts (not listed) · ${a.actions} actions ${span}${older}`,
+      );
+      continue;
+    }
+    if (a.kind === "only_this_account") {
+      console.log(
+        `${indent}  - ${a.address} [${a.addressId}] · only this account · ${a.actions} actions ${span}${older}`,
+      );
+      continue;
+    }
+    console.log(
+      `${indent}  - ${a.address} [${a.addressId}] · small network shared with ${a.accounts.length} account(s) · ${a.actions} actions ${span}${older}`,
+    );
+    for (const o of a.accounts) {
+      console.log(
+        `${indent}      ${o.username || "?"} (#${o.userId})${o.linked ? " · their linked account" : ""}${o.exists === false ? " · deleted" : ""} · age ${o.age ?? "?"} · ${o.isTeacherOrStaff ? "teacher/staff" : "member"}${o.userType ? ` · type ${o.userType}` : ""}${o.banned ? " · BANNED" : ""} · ${o.actions} actions ${approvalDate(o.firstAt)}..${approvalDate(o.lastAt)}`,
+      );
+    }
+  }
+}
+
 function printEvidence(evidence) {
   if (!evidence) return;
   const a = evidence.account || {};
@@ -5689,6 +5755,7 @@ function printEvidence(evidence) {
       `  - ${l.username} (#${l.userId}) via ${(l.linkedBy || []).join("+")}${l.sharedDeviceCount ? ` (${l.sharedDeviceCount} device)` : ""} · age ${l.age ?? "?"} · ${l.isTeacherOrStaff ? "teacher/staff" : "member"} · joined ${approvalDate(l.joinedAt)}${l.banned ? " · BANNED" : ""}`,
     );
   }
+  printNetwork(evidence.network);
   console.log(
     `Flags: ${(evidence.flags || []).length ? evidence.flags.join(", ") : "none"}`,
   );
@@ -5907,6 +5974,18 @@ function printAdminResult({ operation, result }) {
     }
     return;
   }
+  if (operation.name === "identity.network") {
+    const account = data.account || {};
+    console.log(`${account.username} (#${account.userId})`);
+    printNetwork(data.network);
+    console.log(
+      `Flags: ${(data.network?.flags || []).length ? data.network.flags.join(", ") : "none"}`,
+    );
+    console.log(
+      "An address many accounts share (an academy, a school) links strangers and is only counted; a small one lists who shares it. Facts, not a finding.",
+    );
+    return;
+  }
   if (operation.name.startsWith("approvals.") || operation.name.startsWith("teachers.")) {
     printApprovalResult({ operation, data });
     return;

package/lib/commands.js

@@ -2989,6 +2989,7 @@ export function printHelp() {
   lumine doctor runtime-assets
   lumine admin identity list|status|use <zero|ciel|auto> [--json]
   lumine admin identity inspect <user-id|username> --reason <management-reason> [--include-private-evidence] [--json]
+  lumine admin identity network <user-id|username> --reason <management-reason> [--include-private-evidence] [--json]   (addresses this account used; who shares the small ones)
   lumine admin economy trace <user-id|username> --reason <management-reason> [--days <1..30>] [--json]
   lumine admin rescue wordle-audit --reason <management-reason> [--days <1..30>] [--json]
   lumine admin ai-bucket create --label <name> --note <text> [--json]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage5/lumine",
-  "version": "0.3.11",
+  "version": "0.3.12",
   "description": "Command line tools for launching Lumine builds on Twinkle.",
   "type": "module",
   "bin": {

package/sdk/LUMINE_ADMIN.md

@@ -1162,7 +1162,7 @@ lumine admin review propose rewards:70 --dir /private/tmp/reward-review-70 --con
 
 ### Management approvals and the teacher audit (any time; also a full-daily-review duty; added 2026-10-04)
 
-Birthdate, teacher-signup (`mentor`) and meetup-achievement requests, each with its evidence: the account, the request, who invited them, accounts linked by verified email, exact device or a manual identity bucket (with each one's age and role), activity, and flags. These are Mikey-only and need no daily run.
+Birthdate, teacher-signup (`mentor`) and meetup-achievement requests, each with its evidence: the account, the request, who invited them, accounts linked by verified email, exact device or a manual identity bucket (with each one's age and role), the internet addresses the account acted from (network evidence, below), activity, and flags. These are Mikey-only and need no daily run.
 
 ```bash
 lumine admin approvals list [--status pending|approved|rejected|all] [--type dob|mentor|meetup]
@@ -1170,8 +1170,20 @@ lumine admin approvals show <id>
 lumine admin approvals approve|reject <id> [--reason <text>]
 lumine admin teachers audit [--limit 1-100]
 lumine admin teachers revoke <userId> --reason <text>
+lumine admin identity network <userId|username> --reason <text> [--include-private-evidence]
 ```
 
+**Network evidence** (`users_actions` addresses, added 2026-10-04): the account's most recently used addresses (up to 8), and for each one who else acted from it.
+- An address more than 8 other accounts use is a **shared network** (an academy, a school, a café): it is only counted, never listed, because it links strangers. Teachers and students at the same academy share one.
+- An address 8 or fewer other accounts use is a **small network** (a home): every account on it is listed with its age, role and account type. The person's own linked accounts (email, device, bucket) are marked `their linked account` and never raise a flag; logged-out visits are not accounts. If the addresses cannot be read (time cap), the pack still answers, with `network_evidence_unavailable`.
+- Addresses are masked (`58.151.x.59`) with a stable `addressId` for comparing reports; `--include-private-evidence` on `identity network` shows the full address. `identity network` commits an access receipt with your reason before reading anything, like `identity inspect`.
+- Only each address's newest 5,000 actions and each person's newest 5,000 are read (index-bounded, replica, time-capped), so `older history not read` can appear.
+
+**Flags.** A linked account counts as a *minor* only with a recorded age under 18, and as a *member* when it holds no teacher/staff role (most accounts record no age, so "member" does not mean student):
+- `shares_device_with_minor_account` / `shares_device_with_member_account`, the same for `shares_email_…` and `same_identity_bucket_…`;
+- `shares_small_network_with_minor_account`, `shares_small_network_with_member_account`, `shares_small_network_with_banned_account`;
+- `linked_account_is_minor`, `own_birthdate_is_minor`, `new_account_with_linked_accounts`, `real_name_differs_from_profile`, `banned_account_in_family`.
+
 - Flags are pointers, not verdicts: a school device can link strangers. Judge each case, recommend, and act only on Mikey's decision.
 - `teachers audit` lists approved teachers, riskiest first.
 - `teachers revoke` removes a teacher status cleanly: