@startanaicompany/crm 2.11.0 → 2.13.0

package/index.js

@@ -411,6 +411,22 @@ keysCmd
     }
   });
 
+keysCmd
+  .command('set-scope <key-id>')
+  .description('Set the scope of an API key (admin only, feature 98b01015)')
+  .requiredOption('--scope <scope>', 'Scope: admin, standard, or agent')
+  .action(async (keyId, opts) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.patch(`/admin/keys/${keyId}/scope`, { scope: opts.scope });
+      console.log(`Key scope updated to: ${opts.scope}`);
+      printJSON(res.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
 // ============================================================
 // LEADS COMMANDS
 // ============================================================
@@ -2217,6 +2233,22 @@ contractsCmd
     }
   });
 
+contractsCmd
+  .command('export-pdf <id>')
+  .description('Export a contract as PDF blob and save to disk (Sprint 50 T1)')
+  .requiredOption('--output <file>', 'Output file path (e.g. contract.pdf)')
+  .action(async (id, opts) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.post(`/contracts/${id}/export-pdf`, {}, { responseType: 'arraybuffer' });
+      fs.writeFileSync(opts.output, Buffer.from(res.data));
+      console.log(`PDF saved to ${opts.output} (${res.data.byteLength} bytes)`);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
 // ============================================================
 // BUDGETS commands — Sprint 5
 // ============================================================
@@ -2776,6 +2808,9 @@ analyticsCmd
         console.log('\nStage Conversion Rates:');
         Object.entries(d.stage_conversion_rates).forEach(([k, v]) => console.log(`  ${k}: ${v}%`));
       }
+      // Sprint 50 T3: win rate (closed_won / (closed_won + closed_lost))
+      if (d.win_rate != null) console.log(`\nWin Rate: ${d.win_rate}%`);
+      else console.log('\nWin Rate: N/A (no closed deals yet)');
     } catch (err) {
       handleError(err);
     }
@@ -3009,7 +3044,7 @@ companiesCmd
         name: opts.name,
         ...(opts.domain && { domain: opts.domain }),
         ...(opts.industry && { industry: opts.industry }),
-        ...(opts.employeeCount !== undefined && { employee_count: parseInt(opts.employeeCount) }),
+        ...(opts.employeeCount !== undefined && { size: String(parseInt(opts.employeeCount)) }),
         ...(opts.website && { website: opts.website }),
       };
       const res = await client.post('/companies', body);
@@ -3034,7 +3069,7 @@ companiesCmd
         ...(opts.name && { name: opts.name }),
         ...(opts.domain !== undefined && { domain: opts.domain }),
         ...(opts.industry !== undefined && { industry: opts.industry }),
-        ...(opts.employeeCount !== undefined && { employee_count: parseInt(opts.employeeCount) }),
+        ...(opts.employeeCount !== undefined && { size: String(parseInt(opts.employeeCount)) }),
         ...(opts.website !== undefined && { website: opts.website }),
       };
       const res = await client.put(`/companies/${id}`, body);
@@ -3190,4 +3225,65 @@ sequencesCmd
     } catch (err) { handleError(err); }
   });
 
+// ============================================================
+// GDPR COMMANDS — Sprint 50 T2
+// ============================================================
+const gdprCmd = program.command('gdpr').description('GDPR data management — erase, export, and consent');
+
+gdprCmd
+  .command('erase <lead-id>')
+  .description('Permanently erase a lead and all associated data (GDPR right to erasure). Requires admin scope key. IRREVERSIBLE.')
+  .action(async (leadId) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.delete(`/leads/${leadId}/erase`);
+      console.log('Lead permanently erased.');
+      printJSON(res.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+gdprCmd
+  .command('export <lead-id>')
+  .description('Export all personal data for a lead as JSON (GDPR data portability)')
+  .option('--output <file>', 'Save JSON to this file path (default: gdpr-export-<id>.json)')
+  .action(async (leadId, opts) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const res = await client.get(`/leads/${leadId}/gdpr-export`);
+      const outFile = opts.output || `gdpr-export-${leadId}.json`;
+      fs.writeFileSync(outFile, JSON.stringify(res.data, null, 2));
+      console.log(`GDPR export saved to ${outFile}`);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
+gdprCmd
+  .command('consent <lead-id>')
+  .description('Update consent settings for a lead')
+  .option('--marketing <bool>', 'Marketing consent (true/false)')
+  .option('--contacted <bool>', 'Contacted consent (true/false)')
+  .action(async (leadId, opts) => {
+    const globalOpts = program.opts();
+    const client = getClient(globalOpts);
+    try {
+      const body = {};
+      if (opts.marketing !== undefined) body.marketing = opts.marketing === 'true' || opts.marketing === true;
+      if (opts.contacted !== undefined) body.contacted = opts.contacted === 'true' || opts.contacted === true;
+      if (Object.keys(body).length === 0) {
+        console.error('Error: at least one of --marketing or --contacted is required');
+        process.exit(1);
+      }
+      const res = await client.patch(`/leads/${leadId}/consent`, body);
+      console.log('Consent updated.');
+      printJSON(res.data);
+    } catch (err) {
+      handleError(err);
+    }
+  });
+
 program.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@startanaicompany/crm",
-  "version": "2.11.0",
+  "version": "2.13.0",
   "description": "AI-first CRM CLI — manage leads and API keys from the terminal",
   "main": "index.js",
   "bin": {