@unisonlabs/sixminute-admin 0.1.685-next → 0.1.1142-next

package/dist/sixminute-admin.mjs

@@ -21,7 +21,7 @@ import { homedir } from "node:os";
 import { fileURLToPath } from "node:url";
 
 // tools/admin/src/build-info.ts
-var BUILT = { version: "0.1.685-next", commit: "7c82d57b71238697a257dcf3cf6a6606c58e1383", surface: "95a24975187b108d" };
+var BUILT = { version: "0.1.1142-next", commit: "d603f7ebc38a76f80993bb5c16c88e0034ef27fb", surface: "d06d43d7694bfe1d" };
 
 // tools/admin/src/run.ts
 import { rmSync as rmSync3 } from "node:fs";
@@ -4417,6 +4417,8 @@ var CapabilitiesSchema = exports_external.object({
   narrative_max_chars: exports_external.number().int().positive().nullable(),
   note_max_chars: exports_external.number().int().positive().nullable().default(null),
   insolvency_groups: exports_external.boolean(),
+  matter_visibility: exports_external.enum(["firm", "member"]).default("firm"),
+  reviewer: exports_external.enum(["self", "configurable"]).default("configurable"),
   fields: exports_external.array(FieldDeclarationSchema).superRefine((fields, ctx) => {
     const seen = new Map;
     fields.forEach((field, index) => {
@@ -4527,7 +4529,8 @@ var PmsListsSchema = exports_external.object({
   fields: exports_external.record(exports_external.string(), exports_external.array(PmsOptionSetSchema)).default({}),
   settings: PmsSettingsSchema.nullable().default(null),
   cursors: exports_external.record(exports_external.string(), exports_external.string()).default({}),
-  retired_timekeepers: exports_external.array(exports_external.string().min(1)).optional()
+  retired_timekeepers: exports_external.array(exports_external.string().min(1)).optional(),
+  visible_matters: exports_external.array(exports_external.string().min(1)).optional()
 });
 var MatterPmsRulesSchema = exports_external.object({
   insolvency: exports_external.boolean().default(false),
@@ -4571,7 +4574,8 @@ var PushRefusalSchema = exports_external.enum([
   "person_not_found",
   "person_inactive",
   "not_accepted",
-  "reviewer"
+  "reviewer",
+  "sign_in"
 ]);
 var DeliveryReasonSchema = exports_external.enum([
   "deleted_in_pms",
@@ -4657,6 +4661,11 @@ var ConnectResultSchema = exports_external.object({
   connector: ConnectorSummarySchema,
   team: TeamProposalSchema.nullable()
 });
+var ConnectorAccountPutSchema = exports_external.object({
+  username: exports_external.string().min(1),
+  password: exports_external.string().min(1),
+  totp: exports_external.string().regex(/^[0-9]{6}$/, "the code is six digits").optional()
+}).strict();
 var SyncReportSchema = exports_external.object({
   kind: ConnectorKindSchema,
   started_at: TimestampSchema,
@@ -4878,12 +4887,14 @@ var MeConnectorSchema = exports_external.object({
   kind: ConnectorKindSchema,
   narrative_max_chars: exports_external.number().int().positive().nullable(),
   note_max_chars: exports_external.number().int().positive().nullable().optional(),
-  supplies_languages: exports_external.boolean().optional()
+  supplies_languages: exports_external.boolean().optional(),
+  identity: IdentityModeSchema.optional()
 });
 var MeSystemLinkSchema = exports_external.object({
   system: ConnectorKindSchema,
   name: exports_external.string().min(1),
-  code: exports_external.string().min(1).nullable()
+  code: exports_external.string().min(1).nullable(),
+  status: exports_external.enum(["connected", "needs_reconnect"]).optional()
 });
 var MeSchema = exports_external.object({
   user: UserSchema,
@@ -6863,17 +6874,12 @@ is required; without one every command answers 403.
         argument is a line in a shell history, and it is never printed.
         Exits 2 when the system refuses the credentials, naming the step it
         refused at, and 2 when the firm is already on another system.
-  sixminute-admin connector connect --env <env> --firm tenant_... --kind legalsense \\
-        --installation <name> --username <u> --password-stdin [--totp <six digits>] [--json]
-        LegalSense takes the installation's NAME and never --host: the host
-        is <name>.legalsense.nl. --username is the seat the firm created for
-        Sixminute, and --totp the six-digit code when that seat has
-        two-factor on. What is kept is the host and the session token
-        LegalSense answers with, sealed under the firm's key; the password
-        and the code are not stored. Sixminute's own integrator pair is the
-        service's (its deploy's secrets), never this tool's: a deploy without
-        it answers that LegalSense is not available. Run it again with the
-        password (and a fresh code) to reconnect a firm that needs it.
+        LegalSense is NOT connected from this tool: --kind legalsense is
+        refused. Each person signs in to LegalSense in the app with their
+        own account, under Settings, Practice system: an administrator of
+        the firm first, which connects the firm, and then every member for
+        themself. An operator never signs in for anybody. Status, sync and
+        disconnect below work for a LegalSense firm once it is connected.
 
   sixminute-admin connector team --env <env> --firm tenant_... \\
         [--bind <external-ref>=<member-id>] [--unbind <external-ref>] [--confirm] [--json]
@@ -6889,14 +6895,17 @@ is required; without one every command answers 403.
   sixminute-admin connector reviewer --env <env> --firm tenant_... \\
         (--timekeeper | --person <external-ref>) [--json]
         Who approves a released entry in a system that takes drafts for
-        approval (LegalSense; any other system is refused): --timekeeper,
-        each lawyer their own time (the default), or --person, one active
-        timekeeper of the team table by their ref. A sync never changes it.
+        approval and lets the firm choose (any other system is refused, and
+        so is LegalSense, where the lawyer who released an entry is always
+        its reviewer): --timekeeper, each lawyer their own time (the
+        default), or --person, one active timekeeper of the team table by
+        their ref. A sync never changes it.
 
   sixminute-admin connector status --env <env> --firm tenant_... [--json]
   sixminute-admin connector sync --env <env> --firm tenant_... [--json]
   sixminute-admin connector disconnect --env <env> --firm tenant_... [--json]
-        The connector, its fields and its team table; one sync now with its report; and
+        The connector, its fields and its team table (for a system each
+        person signs in to: who has signed in, read-only); one sync now with its report; and
         Disconnect, which takes the team with it and leaves the deliveries,
         the matters and the clients where they are. The attributes it bound
         are unbound and inactive, their sets untouched; the ones no entry
@@ -7774,9 +7783,9 @@ async function connectBody(run2) {
     return { kind, ...seed === undefined ? {} : { seed } };
   }
   if (kind === "legalsense")
-    return legalsenseBody(run2);
+    throw new AdminUsageError(SIGNS_IN_IN_THE_APP);
   if (kind !== "urios") {
-    throw new AdminUsageError("--kind is urios, legalsense, or fake for a rehearsal against the in-memory system, " + `got ${JSON.stringify(kind)}`);
+    throw new AdminUsageError(`--kind is urios, or fake for a rehearsal against the in-memory system, got ${JSON.stringify(kind)}`);
   }
   requirePasswordStdin(flags);
   const port = flags.values.get("port") ?? "3306";
@@ -7790,30 +7799,7 @@ async function connectBody(run2) {
   };
   return { kind, ...rest, password: await pipedPassword(run2) };
 }
-var INSTALLATION_NAME = /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$/;
-async function legalsenseBody(run2) {
-  const { flags } = run2;
-  if (flags.values.has("host")) {
-    throw new AdminUsageError("--host is not taken for legalsense: give the installation's name with --installation, and the host " + "is <name>.legalsense.nl.");
-  }
-  const installation = required(flags, "installation", "the firm's LegalSense name, as in <name>.legalsense.nl").trim().toLowerCase();
-  if (!INSTALLATION_NAME.test(installation)) {
-    throw new AdminUsageError(`--installation is the name before .legalsense.nl (letters, digits and hyphens), got ${JSON.stringify(installation)}`);
-  }
-  const username = required(flags, "username", "the LegalSense user the firm created for Sixminute");
-  const totp = flags.values.get("totp");
-  if (totp !== undefined && !/^\d{6}$/.test(totp)) {
-    throw new AdminUsageError("--totp is the six-digit code from the seat's authenticator app");
-  }
-  requirePasswordStdin(flags);
-  return {
-    kind: "legalsense",
-    host: `${installation}.legalsense.nl`,
-    username,
-    password: await pipedPassword(run2),
-    ...totp === undefined ? {} : { totp }
-  };
-}
+var SIGNS_IN_IN_THE_APP = "LegalSense is not connected from this tool. Each person signs in to LegalSense in the app with their own " + "account, under Settings, Practice system: an administrator of the firm first, which connects the firm, and " + "then every member for themself. An operator never signs in for anybody. Status, sync and disconnect work " + "here once the firm is connected.";
 function reviewerChoice(flags) {
   const person = flags.values.get("person");
   const own = switched(flags, "timekeeper");
@@ -7879,6 +7865,9 @@ async function runConnector(run2, subcommand) {
     if (current.capabilities.accepts_by !== "approval") {
       throw new AdminUsageError(`connector reviewer is for a practice system that takes entries as drafts for approval, and ` + `${current.kind} does not: there is no reviewer to choose.`);
     }
+    if (current.capabilities.reviewer === "self") {
+      throw new AdminUsageError(`in ${current.kind} the person who releases an entry is always its reviewer: there is no reviewer to choose.`);
+    }
     let reviewer = { mode: "timekeeper" };
     if (choice.mode === "person") {
       const team = await call(run2.api, "GET", path("/team"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unisonlabs/sixminute-admin",
-  "version": "0.1.685-next",
+  "version": "0.1.1142-next",
   "description": "Sixminute operator tool: the admin commands of the Sixminute API, run with your own operator sign-in.",
   "license": "UNLICENSED",
   "repository": {