@unisonlabs/sixminute-admin 0.1.1261-next → 0.1.1263-next

package/dist/sixminute-admin.mjs

@@ -16,12 +16,15 @@ var __export = (target, all) => {
 
 // tools/admin/src/main.ts
 import { spawn } from "node:child_process";
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 import { homedir } from "node:os";
 import { fileURLToPath } from "node:url";
 
 // tools/admin/src/build-info.ts
-var BUILT = { version: "0.1.1261-next", commit: "954f16f8ffc4f8282d15240934f4fb969246915e", surface: "e4b83a8db444655b" };
+var BUILT = { version: "0.1.1263-next", commit: "ad5a49aafefa58571d742f90fc5fdb1050d842a8", surface: "301dc344f2374600" };
+
+// tools/admin/src/run.ts
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "node:fs";
 
 // node_modules/.bun/zod@3.25.76/node_modules/zod/v3/external.js
 var exports_external = {};
@@ -4102,6 +4105,53 @@ var OperatorAuditQuerySchema = exports_external.object({
   limit: exports_external.coerce.number().int().min(1).max(1000).default(100)
 });
 var OperatorAuditListSchema = exports_external.object({ actions: exports_external.array(OperatorActionSchema) });
+// packages/contracts/src/narrative-activities.ts
+var NARRATIVE_PRIMARY_LANGUAGES = ["nl", "en", "de", "fr", "es", "it", "pt", "pl", "sv", "da"];
+var NarrativePrimaryLanguageSchema = exports_external.enum(NARRATIVE_PRIMARY_LANGUAGES);
+var NarrativeActivitySchema = exports_external.object({
+  key: exports_external.string().regex(/^[a-z][a-z0-9_]{0,39}$/, "a key of lowercase letters, digits and underscores, starting with a letter"),
+  when: exports_external.string().trim().min(1).max(800),
+  patterns: exports_external.object(Object.fromEntries(NARRATIVE_PRIMARY_LANGUAGES.map((tag) => [tag, exports_external.string().trim().min(1).max(200).optional()]))).strict().refine((patterns) => Object.values(patterns).some((pattern) => pattern !== undefined), "at least one pattern")
+});
+var NarrativeActivitiesSchema = exports_external.array(NarrativeActivitySchema).min(1).max(40).refine((rows) => new Set(rows.map((row) => row.key)).size === rows.length, "every key once");
+var PUBLIC_MAIL_DOMAINS = new Set([
+  "gmail.com",
+  "googlemail.com",
+  "outlook.com",
+  "hotmail.com",
+  "live.com",
+  "msn.com",
+  "icloud.com",
+  "me.com",
+  "mac.com",
+  "yahoo.com",
+  "aol.com",
+  "mail.com",
+  "proton.me",
+  "protonmail.com",
+  "gmx.com",
+  "gmx.de",
+  "gmx.net",
+  "web.de",
+  "t-online.de",
+  "hotmail.nl",
+  "live.nl",
+  "outlook.nl",
+  "ziggo.nl",
+  "kpnmail.nl",
+  "planet.nl",
+  "home.nl",
+  "xs4all.nl",
+  "telenet.be",
+  "skynet.be",
+  "orange.fr",
+  "free.fr",
+  "wanadoo.fr",
+  "laposte.net",
+  "libero.it",
+  "virgilio.it"
+]);
+
 // packages/contracts/src/vocabulary.ts
 var AttributeKeySchema = exports_external.string().regex(/^[a-z][a-z0-9_]{0,39}$/, "an attribute key is a lower-case machine name: a letter, then letters, digits or underscores, at most 40");
 var RESERVED_ATTRIBUTE_KEYS = ["utbms_task", "utbms_activity"];
@@ -4228,8 +4278,20 @@ var ClientSchema = exports_external.object({
   created_at: TimestampSchema,
   updated_at: TimestampSchema
 });
-var NARRATIVE_LANGUAGE_PATTERN = /^[a-z]{2,3}(-[A-Z][a-z]{3})?(-([A-Z]{2}|[0-9]{3}))?$/;
-var NarrativeLanguageSchema = exports_external.string().regex(NARRATIVE_LANGUAGE_PATTERN, "a language tag such as en, nl, de or en-GB: language, then an optional script and region");
+var NARRATIVE_LANGUAGES = [...NARRATIVE_PRIMARY_LANGUAGES, "en-GB", "pt-PT"];
+var NarrativeLanguageSchema = exports_external.enum(NARRATIVE_LANGUAGES);
+var STORED_TAG = /^[a-z]{2,3}(-[A-Z][a-z]{3})?(-([A-Z]{2}|[0-9]{3}))?$/;
+var heldLanguage = (value) => {
+  const read = NarrativeLanguageSchema.safeParse(value);
+  if (read.success)
+    return read.data;
+  if (typeof value !== "string" || !STORED_TAG.test(value))
+    return;
+  const primary = NarrativeLanguageSchema.safeParse(value.split("-", 1)[0]);
+  return primary.success ? primary.data : undefined;
+};
+var StoredNarrativeLanguageSchema = exports_external.preprocess((value) => heldLanguage(value) ?? null, NarrativeLanguageSchema.nullable());
+var StoredFirmLanguageSchema = exports_external.preprocess((value) => heldLanguage(value), NarrativeLanguageSchema.default("en"));
 var MatterAttributeRequiredSchema = exports_external.record(AttributeKeySchema.refine((key) => !key.includes("__"), {
   message: "an attribute key here carries no double underscore"
 }), exports_external.boolean());
@@ -4279,7 +4341,7 @@ var MatterSchema = exports_external.object({
   billing: MatterBillingSchema,
   attribute_sets: MatterAttributeSetsSchema.default({}),
   attribute_required: MatterAttributeRequiredSchema.default({}),
-  narrative_language: NarrativeLanguageSchema.nullable().default(null),
+  narrative_language: StoredNarrativeLanguageSchema,
   sync_source: SyncSourceSchema.default("manual"),
   created_at: TimestampSchema,
   updated_at: TimestampSchema
@@ -4770,6 +4832,25 @@ var TeamConfirmationSchema = exports_external.array(exports_external.object({
   external_ref: exports_external.string().min(1),
   member_id: MemberIdSchema.nullable()
 }));
+var LEGALSENSE_HOST = exports_external.string().min(1).regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?\.legalsense\.nl$/i, "a LegalSense host is <installation>.legalsense.nl");
+var LEGALSENSE_SIGN_IN = {
+  username: exports_external.string().min(1).optional(),
+  password: exports_external.string().min(1).optional(),
+  totp: exports_external.string().regex(/^[0-9]{6}$/, "the code is six digits").optional(),
+  api_token: exports_external.string().trim().min(1).optional()
+};
+function oneSignIn(body, ctx) {
+  const login = body.username !== undefined || body.password !== undefined || body.totp !== undefined;
+  if (body.api_token !== undefined) {
+    if (login)
+      ctx.addIssue({ code: exports_external.ZodIssueCode.custom, path: ["api_token"], message: "a token, or a username and password, not both" });
+    return;
+  }
+  for (const key of ["username", "password"]) {
+    if (body[key] === undefined)
+      ctx.addIssue({ code: exports_external.ZodIssueCode.custom, path: [key], message: "Required" });
+  }
+}
 var ConnectRequestSchema = exports_external.discriminatedUnion("kind", [
   exports_external.object({
     kind: exports_external.literal("urios"),
@@ -4779,18 +4860,15 @@ var ConnectRequestSchema = exports_external.discriminatedUnion("kind", [
     user: exports_external.string().min(1),
     password: exports_external.string().min(1)
   }),
-  exports_external.object({
-    kind: exports_external.literal("legalsense"),
-    host: exports_external.string().min(1).regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?\.legalsense\.nl$/i, "a LegalSense host is <installation>.legalsense.nl"),
-    username: exports_external.string().min(1),
-    password: exports_external.string().min(1),
-    totp: exports_external.string().regex(/^[0-9]{6}$/, "the code is six digits").optional()
-  }),
+  exports_external.object({ kind: exports_external.literal("legalsense"), host: LEGALSENSE_HOST, ...LEGALSENSE_SIGN_IN }),
   exports_external.object({
     kind: exports_external.literal("fake"),
     seed: exports_external.string().optional()
   })
-]);
+]).superRefine((body, ctx) => {
+  if (body.kind === "legalsense")
+    oneSignIn(body, ctx);
+});
 var ConnectorSummarySchema = exports_external.object({
   kind: ConnectorKindSchema,
   status: ConnectorStatusSchema,
@@ -4818,11 +4896,7 @@ var ConnectResultSchema = exports_external.object({
   connector: ConnectorSummarySchema,
   team: TeamProposalSchema.nullable()
 });
-var ConnectorAccountPutSchema = exports_external.object({
-  username: exports_external.string().min(1),
-  password: exports_external.string().min(1),
-  totp: exports_external.string().regex(/^[0-9]{6}$/, "the code is six digits").optional()
-}).strict();
+var ConnectorAccountPutSchema = exports_external.object(LEGALSENSE_SIGN_IN).strict().superRefine(oneSignIn);
 var SyncReportSchema = exports_external.object({
   kind: ConnectorKindSchema,
   started_at: TimestampSchema,
@@ -5907,7 +5981,7 @@ var FirmSettingsSchema = exports_external.object({
   unit_minutes: UnitMinutesSchema.default(6),
   narrative: exports_external.object({
     max_chars: NarrativeMaxCharsSchema.nullable().default(null),
-    language: NarrativeLanguageSchema.default("en"),
+    language: StoredFirmLanguageSchema,
     guidance: NarrativeGuidanceSchema.default(""),
     lowered_to_system: exports_external.object({ kind: ConnectorKindSchema, at: TimestampSchema }).nullable().default(null)
   }).default({}),
@@ -5952,7 +6026,7 @@ var MemberSchema = exports_external.object({
   user_id: UserIdSchema,
   role: RoleSchema,
   active: exports_external.boolean().default(true),
-  narrative_language: NarrativeLanguageSchema.nullable().default(null),
+  narrative_language: StoredNarrativeLanguageSchema,
   entry_size: EntrySizeSchema.nullable().default(null),
   created_at: TimestampSchema,
   updated_at: TimestampSchema
@@ -5994,7 +6068,7 @@ var MeSystemLinkSchema = exports_external.object({
   code: exports_external.string().min(1).nullable(),
   status: exports_external.enum(["connected", "needs_reconnect"]).optional(),
   synced: exports_external.boolean().optional(),
-  narrative_language: NarrativeLanguageSchema.nullable().optional(),
+  narrative_language: StoredNarrativeLanguageSchema.optional(),
   approval: ApprovalModeSchema.optional()
 });
 var MeSchema = exports_external.object({
@@ -6105,7 +6179,7 @@ var MatterPatchSchema = MatterSchema.omit({
   updated_at: true,
   attribute_required: true,
   firm_internal: true
-}).partial();
+}).extend({ narrative_language: NarrativeLanguageSchema.nullable() }).partial();
 var FirmInternalPutSchema = exports_external.object({ firm_internal: exports_external.boolean() });
 var AttributeSetPutSchema = AttributeSetSchema.omit({ updated_at: true });
 var AttributeSetsQuerySchema = exports_external.object({ attribute: AttributeKeySchema.optional() });
@@ -6636,6 +6710,17 @@ var AdminSealedBackfillResultSchema = exports_external.object({
   judged_sealed: exports_external.number().int(),
   done: exports_external.boolean()
 });
+var AdminNarrativeInstructionsSetSchema = exports_external.object({ instructions: NarrativeGuidanceSchema });
+var AdminNarrativeInstructionsSchema = exports_external.object({
+  tenant: exports_external.object({ id: TenantIdSchema, name: exports_external.string() }),
+  instructions: exports_external.string()
+});
+var AdminNarrativeActivitiesSetSchema = exports_external.object({ activities: NarrativeActivitiesSchema });
+var AdminNarrativeActivitiesSchema = exports_external.object({
+  tenant: exports_external.object({ id: TenantIdSchema, name: exports_external.string() }),
+  language: NarrativeLanguageSchema,
+  activities: exports_external.array(NarrativeActivitySchema)
+});
 // packages/contracts/src/admin-firm-acting.ts
 var ACTING_AS_HEADER = "X-Six-Minute-Acting-As";
 var TeamApplyRequestSchema = exports_external.object({
@@ -6841,6 +6926,13 @@ var COMPAT_MARKERS = [
     "services/api/test/t42-intervals.test.ts",
     "services/api/test/t53-bundle.test.ts"
   ]),
+  ...markers("frozen-short", [
+    "services/api/src/platform/models/bundle.ts",
+    "services/api/src/platform/models/compat/activity-types.ts",
+    "services/api/src/platform/models/compat/narrative-short.md",
+    "services/api/test/compat-180.test.ts",
+    "services/api/test/t53-bundle.test.ts"
+  ]),
   ...markers("narrative-languages", ["services/api/src/app.ts", "services/api/src/features/update/legacy-languages.ts"]),
   ...markers("pr4", [
     "boundaries.ts",
@@ -8137,16 +8229,16 @@ function syncLines(report) {
 
 // tools/admin/src/sets.ts
 import { readFileSync as readFileSync2 } from "node:fs";
-function readDocument(path, schema, what) {
+function readDocument(path, schema, what, flag = "from-file") {
   let raw;
   try {
     raw = JSON.parse(readFileSync2(path, "utf8"));
   } catch (err) {
-    throw new AdminUsageError(`--from-file ${path} is not readable JSON: ${err.message}`);
+    throw new AdminUsageError(`--${flag} ${path} is not readable JSON: ${err.message}`);
   }
   const parsed = schema.safeParse(raw);
   if (!parsed.success) {
-    throw new AdminUsageError(`--from-file ${path} is not ${what}: ` + parsed.error.issues.slice(0, 4).map((i) => `${i.path.join(".") || "(root)"} ${i.message}`).join("; "));
+    throw new AdminUsageError(`--${flag} ${path} is not ${what}: ` + parsed.error.issues.slice(0, 4).map((i) => `${i.path.join(".") || "(root)"} ${i.message}`).join("; "));
   }
   return { raw, parsed: parsed.data };
 }
@@ -8545,6 +8637,23 @@ is required; without one every command answers 403.
         setting deletes at the next hourly purge. Summaries, labels and entries
         are not affected.
 
+  sixminute-admin narrative show --env <env> --tenant tenant_... [--file <path>] [--json]
+  sixminute-admin narrative set --env <env> --tenant tenant_... --file <path> [--json]
+        The firm's narrative instructions: the text every narrative of the firm
+        follows, over every default, at most 1,500 characters. show prints it,
+        or writes it to --file; set replaces it with the text of --file (an
+        empty file clears it).
+
+  sixminute-admin narrative activities show --env <env> --tenant tenant_... [--file <path>] [--json]
+  sixminute-admin narrative activities set --env <env> --tenant tenant_... --file <path> [--json]
+        The firm's narrative activities, by rank: the first row whose "when"
+        the evidence meets opens the line. show prints the ranks and keys, or
+        writes the whole table to --file as a JSON array; set replaces the
+        firm's rows with the array in --file, in its order. Edit by show to a
+        file, edit, set. set is refused, and the rows stay as they were, for an
+        empty table, a repeated key, or a table where no row has a pattern in
+        the firm's default narrative language.
+
   sixminute-admin pipeline shadow-report --env <env> --day YYYY-MM-DD [--json]
         The cloud pipeline's shadow against the device for one local day, for
         every person of an internal firm with a shadow recording: intervals
@@ -8907,6 +9016,7 @@ async function runAdmin(argv, deps) {
   const oneWord = ["login", "logout", "whoami", "doctor", "versions", "audit"].includes(group);
   const vocabulary2 = group === "attribute" || group === "matter" && subcommand === "sets";
   const threeDeep = group === "tenant" && subcommand === "internal";
+  const narrativeTable = group === "narrative" && subcommand === "activities";
   let flagArgv;
   const positionals = [];
   if (oneWord)
@@ -8916,6 +9026,11 @@ async function runAdmin(argv, deps) {
     if (verb !== "set")
       throw new AdminUsageError(`unknown command: tenant internal ${verb ?? ""}`.trim());
     flagArgv = more;
+  } else if (narrativeTable) {
+    const [verb, ...more] = rest;
+    if (verb !== "show" && verb !== "set")
+      throw new AdminUsageError(`unknown command: narrative activities ${verb ?? ""}`.trim());
+    flagArgv = more;
   } else if (vocabulary2) {
     const argvOf = group === "attribute" && subcommand === "set" ? rest.slice(1) : rest;
     const forFlags = [];
@@ -8981,6 +9096,10 @@ async function runAdmin(argv, deps) {
     return runRawArchive(run2, subcommand);
   if (group === "retention" && subcommand === "set")
     return runRetentionSet(run2);
+  if (narrativeTable)
+    return runNarrativeActivities(run2, rest[0] === "set");
+  if (group === "narrative" && (subcommand === "show" || subcommand === "set"))
+    return runNarrativeInstructions(run2, subcommand === "set");
   if (group === "backfill" && subcommand === "sealed")
     return runBackfillSealed(run2);
   if (group === "scrub" && subcommand === "plaintext")
@@ -9170,6 +9289,48 @@ async function runRetentionSet(run2) {
     `moved         ${moved}`
   ]);
 }
+async function runNarrativeInstructions(run2, set) {
+  const tenantId = required(run2.flags, "tenant", "whose narrative instructions");
+  const file = set ? required(run2.flags, "file", "the instructions are the text of a file") : optional(run2.flags, "file");
+  let body;
+  if (set) {
+    try {
+      body = { instructions: readFileSync4(file, "utf8") };
+    } catch (err) {
+      throw new AdminUsageError(`--file ${file} is not readable: ${err.message}`);
+    }
+  }
+  const answer = await call(run2.api, set ? "PUT" : "GET", tenantPath(tenantId, "/narrative-instructions"), body);
+  if (answer.status !== 200)
+    return refused(run2, answer, [actingHead(tenantId, answer)]);
+  const done = AdminNarrativeInstructionsSchema.parse(answer.body);
+  const lead = [actingHead(tenantId, answer), `instructions  ${done.instructions.length} characters${set ? ", set" : ""}`];
+  if (!set && file !== undefined) {
+    writeFileSync2(file, done.instructions);
+    return render(run2, { ...done, file }, [...lead, `written       ${file}`]);
+  }
+  return render(run2, done, set || done.instructions === "" ? lead : [...lead, "", ...done.instructions.split(`
+`)]);
+}
+async function runNarrativeActivities(run2, set) {
+  const tenantId = required(run2.flags, "tenant", "whose narrative activities");
+  const file = set ? required(run2.flags, "file", "the table is a JSON array of rows, by rank, in a file") : optional(run2.flags, "file");
+  const body = set ? { activities: readDocument(file, NarrativeActivitiesSchema, "a narrative activity table (a JSON array of rows, by rank)", "file").raw } : undefined;
+  const answer = await call(run2.api, set ? "PUT" : "GET", tenantPath(tenantId, "/narrative-activities"), body);
+  if (answer.status !== 200)
+    return refused(run2, answer, [actingHead(tenantId, answer)]);
+  const done = AdminNarrativeActivitiesSchema.parse(answer.body);
+  if (!set && file !== undefined)
+    writeFileSync2(file, `${JSON.stringify(done.activities, null, 2)}
+`);
+  return render(run2, !set && file !== undefined ? { ...done, file } : done, [
+    actingHead(tenantId, answer),
+    `language      ${done.language}`,
+    `activities    ${done.activities.length}${set ? ", set" : ""}`,
+    ...done.activities.map((row, i) => `  ${String(i + 1).padStart(2)}  ${row.key}  ${Object.keys(row.patterns).join(", ")}`),
+    ...!set && file !== undefined ? [`written       ${file}`] : []
+  ]);
+}
 async function runBackfillSealed(run2) {
   const tenantId = required(run2.flags, "tenant", "whose rows to seal");
   const total = { decisions_sealed: 0, intervals_aged: 0, judged_sealed: 0 };
@@ -9801,7 +9962,7 @@ function adminSurfaceOf(document) {
 // tools/admin/src/main.ts
 function sourceBuild() {
   const document = fileURLToPath(new URL("../../../services/api/openapi.json", import.meta.url));
-  const surface = adminSurfaceOf(JSON.parse(readFileSync4(document, "utf8")));
+  const surface = adminSurfaceOf(JSON.parse(readFileSync5(document, "utf8")));
   return { version: "0.0.0-dev", commit: "source", surface };
 }
 function openBrowser(url) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unisonlabs/sixminute-admin",
-  "version": "0.1.1261-next",
+  "version": "0.1.1263-next",
   "description": "Sixminute operator tool: the admin commands of the Sixminute API, run with your own operator sign-in.",
   "license": "UNLICENSED",
   "repository": {