@unisonlabs/sixminute-admin 0.1.613-next → 0.1.617-next

package/dist/sixminute-admin.mjs

@@ -21,7 +21,7 @@ import { homedir } from "node:os";
 import { fileURLToPath } from "node:url";
 
 // tools/admin/src/build-info.ts
-var BUILT = { version: "0.1.613-next", commit: "15939286f244793828ccd5f14795a6302a06a018", surface: "e738440f007ffca1" };
+var BUILT = { version: "0.1.617-next", commit: "9332e005679d8639cc55297ce08e6c881aa3dc74", surface: "1d814431cdc5d665" };
 
 // tools/admin/src/run.ts
 import { rmSync as rmSync3 } from "node:fs";
@@ -4124,12 +4124,14 @@ var AttributeBindingSchema = exports_external.object({
   field: exports_external.string().min(1)
 });
 var OptionValueSchema = exports_external.string().transform((v) => v.trim()).pipe(exports_external.string().min(1, "an option value is at least one character").max(64, "an option value is at most 64 characters").regex(/^[^\r\n|]+$/, "an option value carries no newline and no pipe: a time entry is one line, and the pipe " + "is a field delimiter in time-entry formats"));
+var MinNarrativeCharsSchema = exports_external.number().int().positive();
 var OptionSchema = exports_external.object({
   value: OptionValueSchema,
   label: exports_external.string().min(1),
   description: exports_external.string().default(""),
   external_ref: exports_external.string().nullable().default(null),
-  active: exports_external.boolean().default(true)
+  active: exports_external.boolean().default(true),
+  min_narrative_chars: MinNarrativeCharsSchema.nullable().default(null)
 });
 var AttributeSetIdSchema = exports_external.string().regex(new RegExp(`^${ID_PREFIXES.attributeSet}_[a-z0-9][a-z0-9_.:-]*$`, "i"), `expected an ${ID_PREFIXES.attributeSet}_ id`);
 var AttributeSetSchema = exports_external.object({
@@ -4236,6 +4238,10 @@ var ClientSchema = exports_external.object({
   created_at: TimestampSchema,
   updated_at: TimestampSchema
 });
+var NarrativeLanguageSchema = exports_external.enum(["en", "nl"]);
+var MatterAttributeRequiredSchema = exports_external.record(AttributeKeySchema.refine((key) => !key.includes("__"), {
+  message: "an attribute key here carries no double underscore"
+}), exports_external.boolean());
 var MatterBillingSchema = exports_external.object({
   narrative_profile: exports_external.string().min(1).default("house")
 }).default({});
@@ -4258,6 +4264,8 @@ var MatterSchema = exports_external.object({
   last_activity_at: TimestampSchema.nullable().default(null),
   billing: MatterBillingSchema,
   attribute_sets: MatterAttributeSetsSchema.default({}),
+  attribute_required: MatterAttributeRequiredSchema.default({}),
+  narrative_language: NarrativeLanguageSchema.nullable().default(null),
   sync_source: SyncSourceSchema.default("manual"),
   created_at: TimestampSchema,
   updated_at: TimestampSchema
@@ -4403,6 +4411,7 @@ var CapabilitiesSchema = exports_external.object({
   identity: IdentityModeSchema,
   change_feed: exports_external.enum(["modified_since", "full_list"]),
   narrative_max_chars: exports_external.number().int().positive().nullable(),
+  note_max_chars: exports_external.number().int().positive().nullable().default(null),
   insolvency_groups: exports_external.boolean(),
   fields: exports_external.array(FieldDeclarationSchema).superRefine((fields, ctx) => {
     const seen = new Map;
@@ -4468,6 +4477,8 @@ var PmsMatterSchema = exports_external.object({
   keywords: exports_external.array(exports_external.string()).default([]),
   default_timekeeper_external_ref: exports_external.string().nullable().default(null),
   field_sets: exports_external.record(exports_external.string(), exports_external.array(exports_external.string().min(1))).default({}),
+  field_required: exports_external.record(exports_external.string(), exports_external.boolean()).default({}),
+  language: NarrativeLanguageSchema.nullable().optional(),
   insolvency: exports_external.boolean().default(false),
   time_entry_blocked: exports_external.boolean().default(false)
 });
@@ -4483,16 +4494,27 @@ var PmsOptionSchema = exports_external.object({
   value: exports_external.string().min(1),
   label: exports_external.string().min(1),
   description: exports_external.string().default(""),
-  active: exports_external.boolean().default(true)
+  active: exports_external.boolean().default(true),
+  min_narrative_chars: MinNarrativeCharsSchema.nullable().default(null)
 });
 var PmsOptionSetSchema = exports_external.object({
   field: exports_external.string().min(1),
   external_ref: exports_external.string().min(1).nullable(),
   name: exports_external.string().min(1),
-  options: exports_external.array(PmsOptionSchema)
+  options: exports_external.array(PmsOptionSchema),
+  complete: exports_external.boolean().optional()
 });
+var ReviewerSettingSchema = exports_external.discriminatedUnion("mode", [
+  exports_external.object({ mode: exports_external.literal("timekeeper") }),
+  exports_external.object({
+    mode: exports_external.literal("person"),
+    external_ref: exports_external.string().min(1),
+    name: exports_external.string().min(1)
+  })
+]);
 var PmsSettingsSchema = exports_external.object({
-  notation: exports_external.string().nullable().default(null)
+  notation: exports_external.string().nullable().default(null),
+  reviewer: ReviewerSettingSchema.nullable().default(null)
 });
 var PmsListsSchema = exports_external.object({
   clients: exports_external.array(PmsClientSchema).default([]),
@@ -4500,7 +4522,8 @@ var PmsListsSchema = exports_external.object({
   timekeepers: exports_external.array(PmsTimekeeperSchema).default([]),
   fields: exports_external.record(exports_external.string(), exports_external.array(PmsOptionSetSchema)).default({}),
   settings: PmsSettingsSchema.nullable().default(null),
-  cursors: exports_external.record(exports_external.string(), exports_external.string()).default({})
+  cursors: exports_external.record(exports_external.string(), exports_external.string()).default({}),
+  retired_timekeepers: exports_external.array(exports_external.string().min(1)).optional()
 });
 var MatterPmsRulesSchema = exports_external.object({
   insolvency: exports_external.boolean().default(false),
@@ -4534,13 +4557,17 @@ var PmsEntryStateSchema = exports_external.object({
   modified_at: TimestampSchema.nullable().default(null),
   raw_status: exports_external.string().nullable().default(null)
 });
+var PmsEntryFactSchema = PmsEntryStateSchema.extend({
+  followed_ref: exports_external.string().min(1).optional()
+});
 var DeliveryStateSchema = exports_external.enum(["released", "accepted", "rejected", "edited"]);
 var PushRefusalSchema = exports_external.enum([
   "matter_not_found",
   "matter_closed",
   "person_not_found",
   "person_inactive",
-  "not_accepted"
+  "not_accepted",
+  "reviewer"
 ]);
 var DeliveryReasonSchema = exports_external.enum([
   "deleted_in_pms",
@@ -4591,6 +4618,13 @@ var ConnectRequestSchema = exports_external.discriminatedUnion("kind", [
     user: exports_external.string().min(1),
     password: exports_external.string().min(1)
   }),
+  exports_external.object({
+    kind: exports_external.literal("legalsense"),
+    host: exports_external.string().min(1).regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?\.legalsense\.nl$/i, "a LegalSense host is <installation>.legalsense.nl"),
+    username: exports_external.string().min(1),
+    password: exports_external.string().min(1),
+    totp: exports_external.string().regex(/^[0-9]{6}$/, "the code is six digits").optional()
+  }),
   exports_external.object({
     kind: exports_external.literal("fake"),
     seed: exports_external.string().optional()
@@ -4612,6 +4646,9 @@ var ConnectorSummarySchema = exports_external.object({
   last_sync_at: TimestampSchema.nullable().default(null),
   last_error: exports_external.string().nullable().default(null)
 }).strict();
+var ConnectorSettingsPutSchema = exports_external.object({
+  reviewer: ReviewerSettingSchema.nullable()
+});
 var ConnectResultSchema = exports_external.object({
   connector: ConnectorSummarySchema,
   team: TeamProposalSchema.nullable()
@@ -4737,7 +4774,7 @@ var ProblemSchema = exports_external.object({
   status: exports_external.number().int().min(400).max(599),
   detail: exports_external.string().optional(),
   instance: exports_external.string().optional(),
-  errors: exports_external.array(exports_external.object({ path: exports_external.string(), message: exports_external.string() })).optional()
+  errors: exports_external.array(exports_external.object({ path: exports_external.string(), message: exports_external.string(), reason: exports_external.string().optional() })).optional()
 });
 var CursorSchema = exports_external.string().min(1);
 var PullQuerySchema = exports_external.object({
@@ -4756,7 +4793,6 @@ var TenantPolicySchema = exports_external.object({
   security_tier: exports_external.enum(["standard", "confidential"]).default("standard"),
   raw_archive: exports_external.boolean().default(false)
 }).default({});
-var NarrativeLanguageSchema = exports_external.enum(["en", "nl"]);
 var NARRATIVE_GUIDANCE_MAX_CHARS = 1500;
 var GUIDANCE_CONTROL = /[\u0000-\u0009\u000B-\u001F\u007F-\u009F]/;
 var NarrativeMaxCharsSchema = exports_external.number().int().min(40).max(1023);
@@ -4833,7 +4869,9 @@ var DeviceRegistrationSchema = exports_external.object({
 });
 var MeConnectorSchema = exports_external.object({
   kind: ConnectorKindSchema,
-  narrative_max_chars: exports_external.number().int().positive().nullable()
+  narrative_max_chars: exports_external.number().int().positive().nullable(),
+  note_max_chars: exports_external.number().int().positive().nullable().optional(),
+  supplies_languages: exports_external.boolean().optional()
 });
 var MeSystemLinkSchema = exports_external.object({
   system: ConnectorKindSchema,
@@ -4850,7 +4888,8 @@ var MeSchema = exports_external.object({
     system_link: MeSystemLinkSchema.nullable().default(null)
   }),
   permissions: exports_external.array(exports_external.string()).default([]),
-  judgment_pipeline: JudgmentPipelineSchema.default("standard")
+  judgment_pipeline: JudgmentPipelineSchema.default("standard"),
+  legalsense_connector: exports_external.boolean().default(false)
 });
 var ProvisionResultSchema = MeSchema.extend({
   action: exports_external.enum(["ready", "refresh"]).default("ready")
@@ -4921,11 +4960,21 @@ var ClientInputSchema = ClientSchema.omit({ created_at: true, updated_at: true }
   id: ClientSchema.shape.id.optional()
 });
 var ClientPatchSchema = ClientSchema.omit({ id: true, created_at: true, updated_at: true }).partial();
-var MatterInputSchema = MatterSchema.omit({ created_at: true, updated_at: true }).extend({
+var MatterInputSchema = MatterSchema.omit({
+  created_at: true,
+  updated_at: true,
+  attribute_required: true,
+  narrative_language: true
+}).extend({
   id: MatterSchema.shape.id.optional(),
   opened_at: MatterSchema.shape.opened_at.optional()
 });
-var MatterPatchSchema = MatterSchema.omit({ id: true, created_at: true, updated_at: true }).partial();
+var MatterPatchSchema = MatterSchema.omit({
+  id: true,
+  created_at: true,
+  updated_at: true,
+  attribute_required: true
+}).partial();
 var AttributeSetPutSchema = AttributeSetSchema.omit({ updated_at: true });
 var AttributeSetsQuerySchema = exports_external.object({ attribute: AttributeKeySchema.optional() });
 var MatterImportSchema = exports_external.object({
@@ -4941,7 +4990,9 @@ var MatterImportSchema = exports_external.object({
       updated_at: true,
       opened_at: true,
       closed_at: true,
-      last_activity_at: true
+      last_activity_at: true,
+      attribute_required: true,
+      narrative_language: true
     }).extend({ opened_at: TimestampSchema.optional() })))
   })))
 });
@@ -6414,9 +6465,14 @@ function summaryLines(summary) {
     `team          ${summary.team_bound} bound, ${summary.team_unbound} unbound`,
     `lists         ${counts.matters} matters, ${counts.clients} clients, ` + `${counts.timekeepers} timekeepers, ${counts.options} options`,
     `last sync     ${summary.last_sync_at ?? "never"}`,
-    `last error    ${summary.last_error ?? "none"}`
+    `last error    ${summary.last_error ?? "none"}`,
+    ...summary.capabilities.accepts_by === "approval" ? [`reviewer      ${reviewerLine(summary)}`] : []
   ];
 }
+function reviewerLine(summary) {
+  const reviewer = summary.settings?.reviewer ?? null;
+  return reviewer === null || reviewer.mode === "timekeeper" ? "each lawyer approves their own time" : `${reviewer.name} (${reviewer.external_ref}) approves every entry`;
+}
 function syncLines(report) {
   const counted = (label, n) => `${label.padEnd(13)} ${n.created} created, ${n.updated} updated, ${n.unchanged} unchanged`;
   const d = report.deliveries;
@@ -6793,6 +6849,17 @@ is required; without one every command answers 403.
         argument is a line in a shell history, and it is never printed.
         Exits 2 when the system refuses the credentials, naming the step it
         refused at, and 2 when the firm is already on another system.
+  sixminute-admin connector connect --env <env> --firm tenant_... --kind legalsense \\
+        --installation <name> --username <u> --password-stdin [--totp <six digits>] [--json]
+        LegalSense takes the installation's NAME and never --host: the host
+        is <name>.legalsense.nl. --username is the seat the firm created for
+        Sixminute, and --totp the six-digit code when that seat has
+        two-factor on. What is kept is the host and the session token
+        LegalSense answers with, sealed under the firm's key; the password
+        and the code are not stored. Sixminute's own integrator pair is the
+        service's (its deploy's secrets), never this tool's: a deploy without
+        it answers that LegalSense is not available. Run it again with the
+        password (and a fresh code) to reconnect a firm that needs it.
 
   sixminute-admin connector team --env <env> --firm tenant_... \\
         [--bind <external-ref>=<member-id>] [--unbind <external-ref>] [--confirm] [--json]
@@ -6805,6 +6872,13 @@ is required; without one every command answers 403.
         what --bind names is bound.
         WITHOUT --confirm it prints what it would send and sends nothing.
 
+  sixminute-admin connector reviewer --env <env> --firm tenant_... \\
+        (--timekeeper | --person <external-ref>) [--json]
+        Who approves a released entry in a system that takes drafts for
+        approval (LegalSense; any other system is refused): --timekeeper,
+        each lawyer their own time (the default), or --person, one active
+        timekeeper of the team table by their ref. A sync never changes it.
+
   sixminute-admin connector status --env <env> --firm tenant_... [--json]
   sixminute-admin connector sync --env <env> --firm tenant_... [--json]
   sixminute-admin connector disconnect --env <env> --firm tenant_... [--json]
@@ -6836,7 +6910,8 @@ var BOOLEAN_FLAGS = new Set([
   "proposed",
   "confirm",
   "password-stdin",
-  "all"
+  "all",
+  "timekeeper"
 ]);
 function parseFlags(argv, offset) {
   const values = new Map;
@@ -7697,19 +7772,33 @@ async function runMember(run2, subcommand) {
   }
   throw new AdminUsageError(`unknown command: member ${subcommand ?? ""}`.trim());
 }
+async function pipedPassword(run2) {
+  const read = run2.deps.readStdin;
+  if (read === undefined)
+    throw new AdminUsageError("--password-stdin was given but this run has no stdin to read");
+  const password = (await read()).replace(/\r?\n$/, "");
+  if (password === "")
+    throw new AdminUsageError("--password-stdin read nothing from stdin; pipe the password into the command");
+  return password;
+}
+function requirePasswordStdin(flags) {
+  if (!switched(flags, "password-stdin")) {
+    throw new AdminUsageError("--password-stdin is required: the password is read from stdin and is never taken as an argument, " + "where it would stay in a shell history.");
+  }
+}
 async function connectBody(run2) {
-  const { flags, deps } = run2;
+  const { flags } = run2;
   const kind = required(flags, "kind", "which practice system this firm uses");
   if (kind === "fake") {
     const seed = flags.values.get("seed");
     return { kind, ...seed === undefined ? {} : { seed } };
   }
+  if (kind === "legalsense")
+    return legalsenseBody(run2);
   if (kind !== "urios") {
-    throw new AdminUsageError(`--kind is urios, or fake for a rehearsal against the in-memory system, got ${JSON.stringify(kind)}`);
-  }
-  if (!switched(flags, "password-stdin")) {
-    throw new AdminUsageError("--password-stdin is required: the password is read from stdin and is never taken as an argument, " + "where it would stay in a shell history.");
+    throw new AdminUsageError("--kind is urios, legalsense, or fake for a rehearsal against the in-memory system, " + `got ${JSON.stringify(kind)}`);
   }
+  requirePasswordStdin(flags);
   const port = flags.values.get("port") ?? "3306";
   if (!/^\d+$/.test(port))
     throw new AdminUsageError(`--port is a number, got ${JSON.stringify(port)}`);
@@ -7719,12 +7808,39 @@ async function connectBody(run2) {
     database: required(flags, "database", "the schema the views live in"),
     user: required(flags, "user", "the account we read and write as")
   };
-  if (deps.readStdin === undefined)
-    throw new AdminUsageError("--password-stdin was given but this run has no stdin to read");
-  const password = (await deps.readStdin()).replace(/\r?\n$/, "");
-  if (password === "")
-    throw new AdminUsageError("--password-stdin read nothing from stdin; pipe the password into the command");
-  return { kind, ...rest, password };
+  return { kind, ...rest, password: await pipedPassword(run2) };
+}
+var INSTALLATION_NAME = /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$/;
+async function legalsenseBody(run2) {
+  const { flags } = run2;
+  if (flags.values.has("host")) {
+    throw new AdminUsageError("--host is not taken for legalsense: give the installation's name with --installation, and the host " + "is <name>.legalsense.nl.");
+  }
+  const installation = required(flags, "installation", "the firm's LegalSense name, as in <name>.legalsense.nl").trim().toLowerCase();
+  if (!INSTALLATION_NAME.test(installation)) {
+    throw new AdminUsageError(`--installation is the name before .legalsense.nl (letters, digits and hyphens), got ${JSON.stringify(installation)}`);
+  }
+  const username = required(flags, "username", "the LegalSense user the firm created for Sixminute");
+  const totp = flags.values.get("totp");
+  if (totp !== undefined && !/^\d{6}$/.test(totp)) {
+    throw new AdminUsageError("--totp is the six-digit code from the seat's authenticator app");
+  }
+  requirePasswordStdin(flags);
+  return {
+    kind: "legalsense",
+    host: `${installation}.legalsense.nl`,
+    username,
+    password: await pipedPassword(run2),
+    ...totp === undefined ? {} : { totp }
+  };
+}
+function reviewerChoice(flags) {
+  const person = flags.values.get("person");
+  const own = switched(flags, "timekeeper");
+  if (own === (person !== undefined)) {
+    throw new AdminUsageError("connector reviewer takes one of --timekeeper (each lawyer approves their own time) or " + "--person <external-ref> (one person of the firm's team approves every entry)");
+  }
+  return person === undefined ? { mode: "timekeeper" } : { mode: "person", external_ref: person };
 }
 async function runConnector(run2, subcommand) {
   const { flags, environment } = run2;
@@ -7774,6 +7890,32 @@ async function runConnector(run2, subcommand) {
     }
     return render(run2, { connector: done.connector }, [...head(answer), ...summaryLines(done.connector), "", ...asked]);
   }
+  if (subcommand === "reviewer") {
+    const choice = reviewerChoice(flags);
+    const connector2 = await call(run2.api, "GET", path(""));
+    if (connector2.status !== 200)
+      return refused(run2, connector2, head(connector2));
+    const current = ConnectorSummarySchema.parse(connector2.body);
+    if (current.capabilities.accepts_by !== "approval") {
+      throw new AdminUsageError(`connector reviewer is for a practice system that takes entries as drafts for approval, and ` + `${current.kind} does not: there is no reviewer to choose.`);
+    }
+    let reviewer = { mode: "timekeeper" };
+    if (choice.mode === "person") {
+      const team = await call(run2.api, "GET", path("/team"));
+      if (team.status !== 200)
+        return refused(run2, team, head(team));
+      const row = TeamProposalSchema.parse(team.body).rows.find((r) => r.external_ref === choice.external_ref);
+      if (row === undefined) {
+        throw new AdminUsageError(`this firm's practice system has no employee ${JSON.stringify(choice.external_ref)}; ` + `"sixminute-admin connector status" prints the table with every ref in it`);
+      }
+      reviewer = { mode: "person", external_ref: row.external_ref, name: row.name };
+    }
+    const answer = await call(run2.api, "PUT", path("/settings"), { reviewer });
+    if (answer.status !== 200)
+      return refused(run2, answer, head(answer));
+    const summary = ConnectorSummarySchema.parse(answer.body);
+    return render(run2, { connector: summary }, [...head(answer), ...summaryLines(summary)]);
+  }
   if (subcommand === "status") {
     const answer = await call(run2.api, "GET", path(""));
     if (answer.status !== 200)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unisonlabs/sixminute-admin",
-  "version": "0.1.613-next",
+  "version": "0.1.617-next",
   "description": "Sixminute operator tool: the admin commands of the Sixminute API, run with your own operator sign-in.",
   "license": "UNLICENSED",
   "repository": {