conduyt 1.4.0 → 1.6.0

package/README.md

@@ -37,6 +37,8 @@ conduyt deals list --pipeline <id>      # list deals
 conduyt pipelines                       # list pipelines and stages
 conduyt search "acme corp"              # search across the CRM
 conduyt insights summary                # run an AI insight query
+conduyt privacy export <id>             # GDPR data-portability export (owner/admin)
+conduyt privacy forget <id> --confirm FORGET  # GDPR erasure — IRREVERSIBLE, owner only
 conduyt api GET /api/v1/companies       # raw authenticated request (escape hatch)
 conduyt config show                     # show resolved config (key masked)
 ```

package/dist/index.js

@@ -82,6 +82,8 @@ contacts
     .option("--email <email>", "email")
     .option("--phone <phone>", "phone")
     .option("--company <company>", "company name (auto-creates/links a company)")
+    .option("--source <source>", "lead source (first-write-wins acquisition truth)")
+    .option("--master-status <status>", "lead lifecycle status: open|won|lost|abandoned|disqualified or an account custom (terminal statuses silence all outbound automation)")
     .option("--json <json>", "full JSON body, merged over the flags above (for any field)")
     .action(run(async (client, opts) => {
     const body = {};
@@ -95,8 +97,23 @@ contacts
         body.phone = opts.phone;
     if (opts.company !== undefined)
         body.company = opts.company;
+    if (opts.source !== undefined) {
+        if (opts.source.trim() === "")
+            throw new Error("--source was provided but is blank. Omit it or pass a source.");
+        if (opts.source.length > 100)
+            throw new Error("--source must be at most 100 characters.");
+        body.source = opts.source;
+    }
+    if (opts.masterStatus !== undefined) {
+        if (opts.masterStatus.trim() === "")
+            throw new Error("--master-status was provided but is blank. Omit it or pass a status.");
+        if (opts.masterStatus.length > 40)
+            throw new Error("--master-status must be at most 40 characters.");
+        body.masterStatus = opts.masterStatus;
+    }
     if (opts.json !== undefined)
         Object.assign(body, jsonArg(opts.json, "--json"));
+    assertContactSource(body.source, { allowNull: false });
     return client.post("/api/v1/contacts", body);
 }));
 contacts
@@ -107,6 +124,8 @@ contacts
     .option("--email <email>", "email")
     .option("--phone <phone>", "phone")
     .option("--company <company>", "company name (auto-creates/links a company; pass '' to clear)")
+    .option("--source <source>", "correct the lead's first-touch source (normally set once at creation — update only to fix bad attribution; pass 'null' to clear)")
+    .option("--master-status <status>", "lead lifecycle status: open|won|lost|abandoned|disqualified or an account custom (terminal statuses silence all outbound automation)")
     .option("--json <json>", "full JSON body, merged over the flags above (for any field)")
     .action(run(async (client, id, opts) => {
     assertUuid(id, "contact id");
@@ -121,10 +140,28 @@ contacts
         body.phone = opts.phone;
     if (opts.company !== undefined)
         body.company = opts.company;
+    if (opts.source !== undefined) {
+        if (opts.source !== "null") {
+            if (opts.source.trim() === "") {
+                throw new Error("--source was provided but is blank. Omit it, or pass 'null' to clear the source.");
+            }
+            if (opts.source.length > 100)
+                throw new Error("--source must be at most 100 characters.");
+        }
+        body.source = opts.source === "null" ? null : opts.source;
+    }
+    if (opts.masterStatus !== undefined) {
+        if (opts.masterStatus.trim() === "")
+            throw new Error("--master-status was provided but is blank. Omit it or pass a status.");
+        if (opts.masterStatus.length > 40)
+            throw new Error("--master-status must be at most 40 characters.");
+        body.masterStatus = opts.masterStatus;
+    }
     if (opts.json !== undefined)
         Object.assign(body, jsonArg(opts.json, "--json"));
     if (Object.keys(body).length === 0)
         throw new Error("Nothing to update. Pass at least one field flag or --json.");
+    assertContactSource(body.source, { allowNull: true });
     return client.patch(`/api/v1/contacts/${encodeURIComponent(id)}`, body);
 }));
 contacts
@@ -271,6 +308,7 @@ deals
     .option("--value <n>", "deal value (number)")
     .option("--currency <code>", "ISO currency, e.g. GBP")
     .option("--contact <id>", "contact UUID to link")
+    .option("--source <source>", "attribution source for THIS deal (the trigger that produced it, e.g. sms-reply, booking:demo)")
     .option("--json <json>", "full JSON body, merged over the flags")
     .action(run(async (client, opts) => {
     const body = {};
@@ -295,6 +333,13 @@ deals
         body.currency = opts.currency;
     if (opts.contact !== undefined)
         body.contactId = opts.contact;
+    if (opts.source !== undefined) {
+        if (opts.source.trim() === "")
+            throw new Error("--source was provided but is blank. Omit it or pass a source.");
+        if (opts.source.length > 500)
+            throw new Error("--source must be at most 500 characters.");
+        body.source = opts.source;
+    }
     if (opts.json !== undefined)
         Object.assign(body, jsonArg(opts.json, "--json"));
     assertFiniteValue(body.value);
@@ -317,6 +362,7 @@ deals
     .option("--pipeline <id>", "move to this pipeline UUID")
     .option("--contact <id>", "primary contact UUID")
     .option("--status <status>", "explicit status (open|won|lost); overrides the status auto-derived from --stage")
+    .option("--source <source>", "attribution source for THIS deal (pass 'null' to clear it)")
     .option("--json <json>", "full JSON body, merged over the flags")
     .action(run(async (client, id, opts) => {
     assertUuid(id, "deal id");
@@ -339,6 +385,16 @@ deals
         body.contactId = opts.contact;
     if (opts.status !== undefined)
         body.status = opts.status;
+    if (opts.source !== undefined) {
+        // Mirror the API validator (blank rejected, 500-char cap) so the CLI
+        // fails locally rather than shipping a guaranteed 422.
+        if (opts.source.trim() === "") {
+            throw new Error("--source was provided but is blank. Omit it, or pass 'null' to clear the source.");
+        }
+        if (opts.source.length > 500)
+            throw new Error("--source must be at most 500 characters.");
+        body.source = opts.source === "null" ? null : opts.source;
+    }
     if (opts.stage !== undefined) {
         if (opts.stage.trim() === "")
             throw new Error("--stage was provided but is blank. Omit it or pass a stage name/UUID.");
@@ -1480,6 +1536,36 @@ dnc
     assertUuid(id, "dnc id");
     return client.del(`/api/v1/dnc/${encodeURIComponent(id)}`);
 }));
+// ---- privacy (GDPR) ----
+const privacy = program
+    .command("privacy")
+    .description("GDPR data export and right-to-be-forgotten erasure");
+privacy
+    .command("export <id>")
+    .description("Export a contact's full portable data as JSON (GDPR data portability). Owner/admin key.")
+    .action(run(async (client, id) => {
+    assertUuid(id, "contact id");
+    return client.get(`/api/v1/contacts/${encodeURIComponent(id)}/gdpr-export`);
+}));
+privacy
+    .command("forget <id>")
+    .description("IRREVERSIBLE GDPR right-to-be-forgotten erasure — permanently anonymizes the contact and erases their personal data everywhere it appears (messages, notes, deals, files, automations, exports) across the whole account. Suppression tombstones are kept. THERE IS NO UNDO. Owner key. Requires --confirm FORGET.")
+    // Require an explicit VALUE (--confirm FORGET), not a bare boolean flag: a
+    // boolean --confirm would treat `--confirm false` as true (leaving "false" as
+    // an ignored extra arg) and erase anyway — a real automation footgun for an
+    // irreversible command. Reject excess args so that stray token can't slip by.
+    .allowExcessArguments(false)
+    .option("--confirm <word>", "required — pass exactly FORGET to authorize the irreversible erasure")
+    .action(run(async (client, id, opts) => {
+    assertUuid(id, "contact id");
+    if (opts.confirm !== "FORGET") {
+        fail("Refusing to erase: pass --confirm FORGET to authorize this irreversible erasure. It permanently anonymizes the contact and erases their personal data everywhere — there is no undo.");
+    }
+    // The API demands { confirm: "FORGET" }; the CLI mirrors that literal so
+    // the destructive intent is explicit at both layers. A 409 is retryable
+    // (concurrent merge / in-flight automation).
+    return client.post(`/api/v1/contacts/${encodeURIComponent(id)}/gdpr-forget`, { confirm: "FORGET" });
+}));
 // ---- ai ----
 const ai = program.command("ai").description("AI assistant and insight endpoints");
 ai
@@ -1574,6 +1660,99 @@ program
         p = `/api/v1${p}`;
     return client.request(method.toUpperCase(), p, body);
 }));
+// ---- dialer ----
+const dialer = program.command("dialer").description("Dialer operations");
+dialer
+    .command("sync-local-presence")
+    .description("Reconcile the Local Presence pool from Twilio. Only adopts numbers whose Twilio FriendlyName contains a standalone 'LP' (or 'LocalPres'), that are voice-capable, and that are US +1 E.164 — first 50 sorted matches; pool entries that no longer match are REMOVED. Name the number in Twilio first, then sync. Requires settings:edit")
+    .action(run(async (client) => client.post("/api/v1/dialer/local-presence/sync", {})));
+// ---- lifecycle (master lead status + intake deals) ----
+const lifecycle = program
+    .command("lifecycle")
+    .description("Lifecycle v2 settings: lead master statuses and automatic intake-deal creation");
+lifecycle
+    .command("settings")
+    .description("Show the Lifecycle v2 configuration: masterStatuses.effective (the five defaults plus the account's customs) and intakeDeals (null can mean not configured OR not visible to your key — the setting is admin-visible only)")
+    .action(run(async (client) => {
+    const DEFAULTS = ["open", "won", "lost", "abandoned", "disqualified"];
+    const result = (await client.get("/api/v1/settings"));
+    const raw = result?.data ?? {};
+    const customs = Array.isArray(raw.masterStatuses)
+        ? raw.masterStatuses.filter((x) => typeof x === "string")
+        : [];
+    const intakeDeals = raw.intakeDeals && typeof raw.intakeDeals === "object" ? raw.intakeDeals : null;
+    return {
+        data: {
+            masterStatuses: {
+                defaults: DEFAULTS,
+                customs,
+                effective: [...DEFAULTS, ...customs.filter((c) => !DEFAULTS.includes(c.toLowerCase()))],
+            },
+            intakeDeals,
+            ...(intakeDeals === null
+                ? {
+                    intakeDealsNote: "null = not configured, OR your key's role cannot read this admin-visible setting",
+                }
+                : {}),
+        },
+    };
+}));
+lifecycle
+    .command("set-intake-deals")
+    .description("Configure automatic deal creation on live intake (webhooks, public forms, public bookings). Even under --re-inbound always: bulk imports and staff/calendar/dialer-created appointments never mint, exact replays and same-source events within 10 min are skipped, and terminal-status contacts get no new deals")
+    .option("--enable", "turn intake deals ON")
+    .option("--disable", "turn intake deals OFF")
+    .option("--pipeline <id>", "pipeline UUID the intake deals land in")
+    .option("--stage <id>", "starting stage UUID within that pipeline")
+    .option("--re-inbound <policy>", "policy for existing contacts: always|if_no_open|never")
+    .action(run(async (client, opts) => {
+    if (opts.enable && opts.disable)
+        throw new Error("Pass either --enable or --disable, not both.");
+    if (opts.enable === undefined && opts.disable === undefined) {
+        throw new Error("Pass --enable or --disable.");
+    }
+    if (!opts.pipeline || !opts.stage) {
+        // The API requires the full object, so the CLI must too — a partial
+        // PATCH would 422 with a less obvious message.
+        throw new Error("--pipeline and --stage are required (see `conduyt pipelines list`).");
+    }
+    const body = {
+        enabled: Boolean(opts.enable),
+        pipelineId: opts.pipeline,
+        stageId: opts.stage,
+    };
+    if (opts.reInbound !== undefined) {
+        if (!["always", "if_no_open", "never"].includes(opts.reInbound)) {
+            throw new Error("--re-inbound must be one of: always, if_no_open, never.");
+        }
+        body.reInbound = opts.reInbound;
+    }
+    return client.patch("/api/v1/settings", { intakeDeals: body });
+}));
+lifecycle
+    .command("set-master-statuses [statuses...]")
+    .description("Set the account's CUSTOM lead lifecycle statuses (the five defaults always exist). Pass --clear with no names to remove all customs")
+    .option("--clear", "remove ALL custom statuses (restore defaults-only)")
+    .action(run(async (client, statuses, opts) => {
+    statuses = statuses ?? [];
+    if (statuses.length === 0 && !opts.clear) {
+        throw new Error("Pass at least one status name, or --clear to remove all customs.");
+    }
+    if (statuses.length > 0 && opts.clear) {
+        throw new Error("--clear cannot be combined with status names.");
+    }
+    // Mirror of the API validator: max 20 names, 1-40 chars, letters/
+    // numbers/spaces/-/_ only — fail fast locally instead of a late 422.
+    const clean = statuses.map((s) => s.trim());
+    if (clean.some((s) => !s))
+        throw new Error("Status names must not be blank.");
+    if (clean.length > 20)
+        throw new Error("At most 20 custom statuses.");
+    const bad = clean.find((s) => s.length > 40 || !/^[a-z0-9][a-z0-9 _-]*$/i.test(s));
+    if (bad)
+        throw new Error(`Invalid status name '${bad}' — 1-40 chars; letters, numbers, spaces, - and _ only.`);
+    return client.patch("/api/v1/settings", { masterStatuses: clean });
+}));
 program.parseAsync(process.argv).catch(fail);
 // helpers
 // Parse a --json / --stages style argument, throwing a clear CLI error (caught
@@ -1731,6 +1910,23 @@ function run(handler) {
         }
     };
 }
+// Contact source is the first-write-wins acquisition truth: a blank value
+// must never reach storage, whether it arrived via a flag or --json (the
+// merge runs last, so this validates the FINAL body).
+function assertContactSource(value, opts) {
+    if (value === undefined)
+        return;
+    if (value === null) {
+        if (opts.allowNull)
+            return;
+        throw new Error("source cannot be null on create — omit it instead.");
+    }
+    if (typeof value !== "string" || value.trim() === "") {
+        throw new Error("source must be a non-blank string (or omitted).");
+    }
+    if (value.length > 100)
+        throw new Error("source must be at most 100 characters.");
+}
 function mask(key) {
     if (!key)
         return "(not set)";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "conduyt",
-  "version": "1.4.0",
-  "description": "Command-line interface for Conduyt CRM — manage contacts, deals, pipelines, and run insight queries from your terminal.",
+  "version": "1.6.0",
+  "description": "Command-line interface for Conduyt CRM \u2014 manage contacts, deals, pipelines, and run insight queries from your terminal.",
   "type": "module",
   "main": "dist/index.js",
   "bin": {
@@ -18,7 +18,9 @@
     "build": "tsc",
     "typecheck": "tsc --noEmit",
     "start": "tsx src/index.ts",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run check:version && npm run build && node --import tsx --experimental-test-module-mocks --test src/privacy-forget.test.ts src/contact-source-json.test.ts",
+    "test": "node --import tsx --test src/*.test.ts",
+    "check:version": "node -e \"const p=require('./package.json').version,l=require('./package-lock.json');if(l.version!==p||l.packages[''].version!==p){console.error('lockfile version != '+p);process.exit(1)}console.log('Version sync OK: '+p)\""
   },
   "keywords": [
     "conduyt",
@@ -46,4 +48,4 @@
     "tsx": "^4.19.0",
     "@types/node": "^22.0.0"
   }
-}
+}