connection-centric 0.2.0 → 0.4.0

package/GUIDE.md

@@ -32,6 +32,7 @@ A tool lapses after 90 days unused. The person disconnects it from Me, or with `
 - **company**: the one container a firm holds for work that belongs to no site. Never archived; nobody makes one but Centric, when an Operator approves its Application.
 - **channel**: a named conversation inside a container, and the only place a container's messages live. In a Project it is either visible to externals or staff-only. A Company channel may be private: read only by the people its admins name.
 - **message**: one message in a channel or a Direct. A reply quotes the message it answers. Files sent in a channel are kept as documents.
+- **pinned-message**: a message kept at the top of its channel, Direct or conversation, for everyone in it, at most 50 in one place. In a Project only staff pin; anyone who may pin may unpin. A channel's pins are on the record; a Direct's and a conversation's are not.
 - **direct**: a conversation between two people who share a container, or a person's own with themselves, for notes and what they keep to file later. Name your own `me` (`direct send me`); `direct list` marks it `you`. Nothing in a Direct is part of the record: no task, no issuance, no deleting, and the assistant never reads or corrects one.
 - **task**: an open piece of work in one container, which anyone who can see it may close or reopen. Every task is part of one channel's conversation: made on its own, it is posted there as your message; what is said about it is a reply to that message (`message send --task`). It may carry details, a due day, a priority and a zone. Open past its due day, or with an ask escalated, it is overdue.
 - **ask**: one person's request to another, on a task, closed by closing the task. The person asked may answer not yet, saying why and when to be asked again.
@@ -48,6 +49,9 @@ A tool lapses after 90 days unused. The person disconnects it from Me, or with `
 - **me**: the person themselves: their display name, photo, and their own switch for the assistant.
 - **assistant**: Centric's, which answers a person's questions from what they can see and corrects a message they are writing. It is not a connected tool: it never acts, and asking it needs the person's own switch on.
 - **conversation**: a person's questions to the assistant and its answers, theirs alone; deleted outright.
+- **memory**: a line the assistant keeps about a person because they told it to, read before each of their questions; theirs alone to see, add and delete.
+- **linked-system**: a firm's own system, such as its stores or accounts, that its Company's admins link so its people's assistant can read from it, through its tools that only read.
+- **report-template**: the shape an Assistant report is written to: its sections, each a heading and what goes in it, the period it covers and the places it draws from. A person's own, or a Project's or Company's, written by its staff (a Company's by its admins). An assistant report is written to one by asking the assistant for it, with `assistant question`.
 - **application**: a firm asking Centric for its Company. An Operator approves or rejects it, once.
 - **connected-tool**: this command, or any program a person approved; it acts as them.
 

package/centric.mjs

@@ -105,20 +105,20 @@ async function connect(c, a, server) {
     }
   }
   mkdirSync(dir(), { recursive: true, mode: 0o700 });
-  writeFileSync(file(), JSON.stringify({ server, credential: got.credential, tool: got.tool, identity: got.identity }, null, 2), { mode: 0o600 });
+  writeFileSync(file(), JSON.stringify({ server, credential: got.credential }, null, 2), { mode: 0o600 });
   chmodSync(file(), 0o600); // a file there already keeps its old mode otherwise
   return { tool: got.tool, identity: got.identity, server };
 }
 
 // ── printing ──
-const clip = (s, n = 90) => { s = String(s).replace(/\s+/g, " "); return s.length > n ? `${s.slice(0, n - 1)}…` : s; };
+const clip = (s) => { s = String(s).replace(/\s+/g, " "); return s.length > 70 ? `${s.slice(0, 69)}…` : s; };
 const label = (x) => x.name ?? x.title ?? x.topic_name ?? x.task_title ?? x.document_name ?? x.display_name ?? x.firm_name
-  ?? (x.text != null ? `${x.sender?.display_name ?? "?"}${x.via ? ` (via ${x.via.name})` : ""}: ${clip(x.text, 70)}` : (x.tombstone ?? x).deleted_by_name ? `deleted by ${(x.tombstone ?? x).deleted_by_name}` : null);
+  ?? (x.text != null ? `${x.sender?.display_name ?? "?"}${x.via ? ` (via ${x.via.name})` : ""}: ${clip(x.text)}` : (x.tombstone ?? x).deleted_by_name ? `deleted by ${(x.tombstone ?? x).deleted_by_name}` : null);
 const where = (x) => x.container_name ?? (x.channel ? `${x.channel.name} · ${x.channel.container_name}` : x.direct ? `Direct with ${x.direct.display_name}` : null);
 // A tombstone in channel show is named by the message it stands for; a message with a file, by the document to download.
 const row = (x) => (x && typeof x === "object" ? [x.kind && `[${x.kind}]`, x.id ?? x.zulip_message_id, label(x), where(x), x.document && `document ${x.document.id}`, x.due_on && `due ${x.due_on}`, x.this && "(this one)"].filter((v) => v != null && v !== "").join("  ") : String(x));
 // Words others wrote, on a terminal: control characters (escape sequences among them) go, but a line and a tab stay.
-const plain = (s) => s.replace(/[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g, "");
+const plain = (s) => s.replace(/[^\P{Cc}\t\n]/gu, "");
 // JSON escapes the first 32 itself; the C1 ones a terminal may also obey are escaped too, so nothing is lost.
 const asJson = (v) => JSON.stringify(v).replace(/[\u007f-\u009f]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`);
 function text(v) {
@@ -137,12 +137,14 @@ async function main(argv) {
   let json = argv.includes("--json");
   try {
     const { cmd, given, opts, lead } = parse(argv);
-    json = !!opts.json || json;
+    json ||= opts.json === true || opts.json === "true"; // --json=true too, which argv alone does not show
+    // Help is one JSON value too under --json (rule 9): a program reading stdout gets what it asked for, or an error.
+    const say = (h) => { process.stdout.write(`${json ? asJson({ help: h }) : h}\n`); return 0; };
     if (!cmd) {
-      if (!lead.length || lead[0] === "help") { process.stdout.write(`${help(lead[0] === "help" && (commandOf(lead[1], null) ?? commandOf(lead[1], lead[2])))}\n`); return 0; }
+      if (!lead.length || lead[0] === "help") return say(help(lead[0] === "help" && (commandOf(lead[1], null) ?? commandOf(lead[1], lead[2]))));
       throw new Refused(`no command "${lead.slice(0, 2).join(" ")}"; centric help lists them`);
     }
-    if (opts.help) { process.stdout.write(`${help(cmd)}\n`); return 0; }
+    if (opts.help) return say(help(cmd));
     const file = saved(), server = opts.server || process.env.CENTRIC_SERVER || file.server || DEFAULT_SERVER; // set but empty is not set
     // The credential crosses a network only encrypted: an http:// server is this machine's, for development.
     if (!/^https:\/\//i.test(server) && !/^http:\/\/(localhost|127\.0\.0\.1|\[::1\])(:\d+)?(\/|$)/i.test(server)) throw new Refused(`${server} is not https; a credential is sent only over https, or to this machine`);

package/commands.mjs

@@ -16,7 +16,7 @@ export const CLI_VERSION = JSON.parse(readFileSync(new URL("./package.json", imp
 
 // Rule 2: the verbs, each meaning one thing on every noun. A new verb is added here, and to the spec, before it is used.
 export const VERBS = ["list", "show", "make", "edit", "delete", "archive", "unarchive", "close", "reopen", "not-yet", "grant", "revoke", "appoint", "remove",
-  "issue", "acknowledge", "add", "revise", "restore", "download", "messages", "mark-read", "send", "react", "unreact", "history", "readers",
+  "issue", "acknowledge", "add", "revise", "restore", "download", "messages", "mark-read", "send", "forward", "react", "unreact", "history", "readers",
   "pin", "unpin", "mute", "unmute", "private", "open-to-company", "set-picture", "remove-picture", "set-photo", "remove-photo",
   "approve", "reject", "withdraw", "rotate-key", "dormant", "reactivate", "report", "record-pack", "audit", "question", "correct", "disconnect"];
 
@@ -34,11 +34,13 @@ export class Broken extends Error {
 const refuse = (message, extra) => { throw new Refused(message, extra); };
 
 export const commandName = (cmd) => [cmd.noun, cmd.verb].filter(Boolean).join(" ");
+// A document's revision by its number, or its current one: for the command line, MCP and the assistant's look alike.
+export const revisionOf = (d, n) => (n ? d.revisions.find((x) => x.n === Number(n)) ?? refuse(`there is no revision ${n} of it`) : d.revisions.find((x) => x.id === d.document.current_revision_id));
 const enc = encodeURIComponent;
 const qs = (o) => { const p = new URLSearchParams(Object.entries(o).filter(([, v]) => v != null && v !== false).map(([k, v]) => [k, v === true ? "1" : String(v)])); return p.size ? `?${p}` : ""; };
 // Rule 9: what a list or a place prints, the same everywhere.
 const listed = (items, more = null) => ({ items, more });
-const meShown = async (c) => { const m = await c.get("/api/me"); return { identity: m.identity, assistant: m.assistant, application: m.application, operator: m.operator, containers: m.containers.length }; };
+const meShown = async (c) => { const m = await c.get("/api/me"); return { identity: m.identity, assistant: m.assistant, opened_directs: m.opened_directs, application: m.application, operator: m.operator, containers: m.containers.length }; };
 const newest = (x, y) => (y.last?.id ?? 0) - (x.last?.id ?? 0); // a place with nothing in it yet goes last
 
 // Rule 11: a moment is shown in India's time, ISO 8601 with +05:30; a day stays YYYY-MM-DD. Field names stay the API's.
@@ -50,14 +52,15 @@ export const inIndia = (v) => Array.isArray(v) ? v.map(inIndia)
 // Rule 5: what sits inside a container may be named with --in, so a name is looked for there alone. Every command
 // whose target does takes it, whether or not its table lists it; the command line and MCP both read flags from here.
 const INSIDE = ["channel", "task", "document", "folder", "zone", "membership", "admin"];
-export const flagsOf = (cmd) => (INSIDE.includes(cmd.target?.kind) && !cmd.flags.in ? { ...cmd.flags, in: { kind: "container", about: "where to look for its name" } } : cmd.flags);
+// Undescribed over MCP: the guide says once what --in does, and the list sits in an MCP client's context every turn.
+export const flagsOf = (cmd) => (INSIDE.includes(cmd.target?.kind) && !cmd.flags.in ? { ...cmd.flags, in: { kind: "container", about: "where to look for its name", said: "in the guide" } } : cmd.flags);
 
 // Values as given (from the command line's words or MCP's arguments, both by their flag names) read into what the
 // command uses: each thing to its id, `in` first, since a name is looked for inside it.
 export async function prepare(cmd, given, c) {
   const a = {}, spec = { ...(cmd.target ? { [cmd.target.name]: { ...cmd.target, need: !cmd.target.optional } } : {}), ...flagsOf(cmd) };
   for (const k of Object.keys(given)) if (!spec[k]) refuse(`${commandName(cmd)} takes no ${cmd.target?.name === k ? k : `--${k}`}`);
-  const order = Object.keys(spec).sort((x, y) => (y === "in") - (x === "in") || (y === "company") - (x === "company"));
+  const order = Object.keys(spec).sort((x, y) => Number(y === "in") - Number(x === "in") || Number(y === "company") - Number(x === "company"));
   for (const k of order) {
     const f = spec[k], v = given[k];
     if (v === undefined || v === null || (Array.isArray(v) && !v.length)) { if (f.need) refuse(`${commandName(cmd)} needs ${f === spec[cmd.target?.name] ? `the ${k}` : `--${k}`}`); continue; }
@@ -103,6 +106,7 @@ const TEXT = { kind: "text", need: true, about: "the words, or - to read them fr
 const PATH = { kind: "path", need: true, about: "a file on this computer" };
 const NOTE = { kind: "text", about: "what it is, or what changed" };
 const DRY = { kind: "bool", about: "say what would change, and change nothing" };
+const SEARCH = { kind: "words" }; // only the messages holding these words (Features 523)
 const PAGE = { kind: "path", about: "write it as a page, a file ending .html" };
 // A page the server draws (a report, a record pack), written to this computer: never over a file already there.
 const page = async (c, path, out) => { if (!/\.html?$/i.test(out)) refuse("--out is a page: name it something.html"); const b = await c.bytes(path); await c.save(out, b); return { path: out, bytes: b.length }; };
@@ -130,11 +134,24 @@ export const COMMANDS = [
         ...named.items.map((x) => ({ kind: "mention", ...x })), ...directs.items.map((x) => ({ kind: "direct", ...x })),
       ]);
     } },
-  { noun: "search", verb: null, target: { name: "words", kind: "words" }, flags: {}, about: "Channels, tasks, documents, zones, people and messages, by a word or two.",
+  // Search (CONTEXT.md Search, ADR 0009): the record by its words, every version of a message, the words inside a PDF, and
+  // your own Directs; narrowed by who, where, when, a document's kind and a state.
+  { noun: "search", verb: null, target: { name: "words", kind: "words", optional: true },
+    flags: { from: { kind: "identity", about: "only what this person did" },
+      in: { kind: "container" }, channel: { kind: "channel" }, task: { kind: "task", about: "only in its conversation" },
+      after: { kind: "day", about: "from this day" }, before: { kind: "day", about: "to this day" },
+      kind: { kind: "choice", of: ["photo", "pdf", "video", "voice", "spreadsheet", "other"] },
+      state: { kind: "choice", of: ["open", "closed", "unacknowledged"], about: "tasks open or closed; issuances not acknowledged" },
+      oldest: { kind: "bool", about: "oldest first, not best first" } },
+    about: "The record by its words: messages (earlier versions too), documents and their text, tasks, issuances, deletions, channels, people, your own Directs.",
     async run(c, a) {
-      const [r, said] = await Promise.all([c.get(`/api/search?q=${enc(a.words)}`), c.get(`/api/messages?search=${enc(a.words)}&limit=20`)]);
-      return listed([...r.channels.map((x) => ({ kind: "channel", ...x })), ...r.tasks.map((x) => ({ kind: "task", ...x })), ...r.documents.map((x) => ({ kind: "document", ...x })),
-        ...r.zones.map((x) => ({ kind: "zone", ...x })), ...r.people.map((x) => ({ kind: "identity", ...x })), ...said.items.map((x) => ({ kind: "message", ...x }))]);
+      if (a.channel && a.task) refuse("--channel or --task, not both");
+      const by = { from: a.from, in: a.channel ?? a.task ?? a.in, after: a.after, before: a.before, kind: a.kind, state: a.state };
+      if (!a.words && !Object.values(by).some(Boolean)) refuse("search needs the words, or one of --from, --in, --channel, --task, --after, --before, --kind and --state");
+      const r = await c.get(`/api/search${qs({ q: a.words, ...by, order: a.oldest && "oldest" })}`), revised = new Set(r.revisions.map((x) => x.document_id));
+      return listed([...r.messages.map((x) => ({ kind: "message", ...x })), ...r.directs.map((x) => ({ kind: "direct", ...x })), ...r.revisions.map((x) => ({ kind: "revision", ...x })),
+        ...r.documents.filter((x) => !revised.has(x.id)).map((x) => ({ kind: "document", ...x })), ...r.tasks.map((x) => ({ kind: "task", ...x })), ...r.issuances.map((x) => ({ kind: "issuance", ...x })),
+        ...r.tombstones.map((x) => ({ kind: "tombstone", ...x })), ...r.channels.map((x) => ({ kind: "channel", ...x })), ...r.zones.map((x) => ({ kind: "zone", ...x })), ...r.people.map((x) => ({ kind: "identity", ...x }))]);
     } },
   { noun: "guide", verb: null, flags: { as: { kind: "choice", of: ["skill", "agents"], about: "as a Claude Code skill (a SKILL.md), or as a section an AGENTS.md can include" } },
     about: "The instructions for a program using this command: what each noun means, what is refused and why, the mark, the cap, --json, the exit codes, and every command.",
@@ -153,9 +170,13 @@ export const COMMANDS = [
     } },
 
   // ── work ──
-  { noun: "task", verb: "list", flags: { in: IN, state: { kind: "choice", of: ["open", "closed"] }, zone: { kind: "zone" } },
+  { noun: "task", verb: "list", flags: { in: IN, state: { kind: "choice", of: ["open", "closed"] }, zone: { kind: "zone" }, before: { kind: "words", about: "with --state closed: the next page, from the more: of the one before" } },
     about: "A container's tasks: open ones first, soonest due, then the most important; done ones newest first, a page at a time.",
-    run: async (c, a) => listed(await c.get(`/api/containers/${a.in}/tasks${qs({ state: a.state, zone_id: a.zone })}`)) },
+    run: async (c, a) => {
+      if (a.before && a.state !== "closed") refuse("--before pages done tasks: with --state closed");
+      const l = await c.get(`/api/containers/${a.in}/tasks${qs({ state: a.state, zone_id: a.zone, before: a.before })}`);
+      return listed(l, a.state === "closed" && l.length >= 100 ? l.at(-1).done_key : null); // the server's page of done ones (DONE_PAGE)
+    } },
   { noun: "task", verb: "show", target: { name: "task", kind: "task" }, flags: {}, about: "One task in full: its state, details, due day, priority, zone, and every ask on it with what happened since.",
     run: (c, a) => c.get(`/api/tasks/${a.task}`) },
   { noun: "ask", verb: "list", flags: { "to-me": { kind: "bool", about: "only asks of you" }, "from-me": { kind: "bool", about: "only your own asks" }, state: { kind: "choice", of: ["open", "closed"], about: "open (the default) or done" } },
@@ -163,9 +184,9 @@ export const COMMANDS = [
     run: (c, a) => (a["to-me"] && a["from-me"] ? refuse("--to-me or --from-me, not both") : c.get(`/api/asks${qs({ to_me: a["to-me"], from_me: a["from-me"], state: a.state })}`).then((x) => listed(x))) },
   { noun: "direct", verb: "list", flags: {}, about: "Your Directs with something in them, newest first.",
     run: async (c) => listed((await c.get("/api/places")).filter((p) => p.kind === "direct").sort(newest)) },
-  { noun: "direct", verb: "messages", target: { name: "identity", kind: "identity" }, flags: { before: { kind: "message", about: "older than this message" }, limit: { kind: "int", about: "how many, up to 100 (50 if left out)" } },
+  { noun: "direct", verb: "messages", target: { name: "identity", kind: "identity" }, flags: { before: { kind: "message", about: "older than this message" }, limit: { kind: "int", about: "how many, up to 100 (50 if left out)" }, search: SEARCH },
     about: "A Direct's messages, newest last. Marks nothing read.",
-    run: (c, a) => c.get(`/api/messages${qs({ direct: a.identity, before: a.before, limit: a.limit })}`) },
+    run: (c, a) => c.get(`/api/messages${qs({ direct: a.identity, before: a.before, limit: a.limit, search: a.search })}`) },
   { noun: "issuance", verb: "list", flags: { "to-me": { kind: "bool", about: "only what was issued to you" }, "by-me": { kind: "bool", about: "only what you issued" }, in: { kind: "container" }, state: { kind: "choice", of: ["open", "acknowledged"] } },
     about: "What was issued to you or by you, newest first.",
     run: (c, a) => (a["to-me"] && a["by-me"] ? refuse("--to-me or --by-me, not both") : c.get(`/api/issuances${qs({ to_me: a["to-me"], by_me: a["by-me"], in: a.in, state: a.state })}`).then((x) => listed(x))) },
@@ -186,21 +207,22 @@ export const COMMANDS = [
 
   // ── places in a container ──
   { noun: "channel", verb: "list", flags: { in: IN, archived: { kind: "bool", about: "the archived ones instead" } }, about: "A container's channels that you read.",
-    run: async (c, a) => listed((await c.get(`/api/containers/${a.in}`)).channels.filter((ch) => ch.reads && !ch.archived_at === !a.archived)) },
+    run: async (c, a) => listed((await c.get(`/api/containers/${a.in}?documents=0`)).channels.filter((ch) => ch.reads && !ch.archived_at === !a.archived)) },
   { noun: "channel", verb: "show", target: { name: "channel", kind: "channel" }, flags: {}, about: "One channel: its brief, flag, readers if private, and tombstones.",
     run: (c, a) => c.get(`/api/channels/${a.channel}`) },
   { noun: "channel", verb: "messages", target: { name: "channel", kind: "channel" },
-    flags: { before: { kind: "message", about: "older than this message" }, after: { kind: "message", about: "newer than this message" }, limit: { kind: "int", about: "how many, up to 100 (50 if left out)" }, unread: { kind: "bool", about: "only what you have not read" } },
+    flags: { before: { kind: "message", about: "older than this message" }, after: { kind: "message", about: "newer than this message" }, limit: { kind: "int", about: "how many, up to 100 (50 if left out)" }, unread: { kind: "bool", about: "only what you have not read" }, search: SEARCH },
     about: "A channel's messages, newest last, with tombstones where messages were deleted. Marks nothing read.",
-    run: (c, a) => (a.before && a.after ? refuse("--before or --after, not both") : c.get(`/api/messages${qs({ channel: a.channel, before: a.before, after: a.after, limit: a.limit, unread: a.unread })}`)) },
+    run: (c, a) => (a.before && a.after ? refuse("--before or --after, not both") : c.get(`/api/messages${qs({ channel: a.channel, before: a.before, after: a.after, limit: a.limit, unread: a.unread, search: a.search })}`)) },
   { noun: "zone", verb: "list", flags: { in: { ...IN, kind: "project" } }, about: "A Project's zones.",
-    run: async (c, a) => listed((await c.get(`/api/containers/${a.in}`)).zones) },
+    run: async (c, a) => listed((await c.get(`/api/containers/${a.in}?documents=0`)).zones) },
   { noun: "document", verb: "list", flags: { in: IN, folder: { kind: "folder", about: "only what is in this folder" } }, about: "A container's documents, newest revision first.",
-    run: async (c, a) => listed((await c.get(`/api/containers/${a.in}`)).documents.filter((d) => !a.folder || d.folder_id === a.folder)) },
-  { noun: "document", verb: "show", target: { name: "document", kind: "document" }, flags: {}, about: "One document: its revisions, issuances and acknowledgements.",
-    run: (c, a) => c.get(`/api/documents/${a.document}`) },
+    run: async (c, a) => listed((await c.get(`/api/containers/${a.in}/documents`)).filter((d) => !a.folder || d.folder_id === a.folder)) },
+  { noun: "document", verb: "show", target: { name: "document", kind: "document" }, flags: { contents: { kind: "bool", about: "with what is inside its current revision" } },
+    about: "One document: its revisions, issuances and acknowledgements.",
+    run: (c, a) => c.get(`/api/documents/${a.document}${a.contents ? "?contents=1" : ""}`) },
   { noun: "folder", verb: "list", flags: { in: IN }, about: "A container's folders that you can see.",
-    run: async (c, a) => listed((await c.get(`/api/containers/${a.in}`)).folders) },
+    run: async (c, a) => listed((await c.get(`/api/containers/${a.in}?documents=0`)).folders) },
 
   // ── containers, people and Centric ──
   { noun: "project", verb: "list", flags: {}, about: "The Projects you belong to.", run: async (c) => listed((await c.get("/api/me")).containers.filter((x) => x.kind === "project")) },
@@ -210,9 +232,9 @@ export const COMMANDS = [
   { noun: "company", verb: "show", target: { name: "company", kind: "company" }, flags: {}, about: "One Company in full: its brief, people, channels and documents.",
     run: (c, a) => c.get(`/api/containers/${a.company}`) },
   { noun: "membership", verb: "list", flags: { in: IN }, about: "Who belongs to a container, with each one's designation.",
-    run: async (c, a) => listed((await c.get(`/api/containers/${a.in}`)).members.map((m) => ({ id: m.membership_id, ...m }))) },
+    run: async (c, a) => listed((await c.get(`/api/containers/${a.in}?documents=0`)).members.map((m) => ({ id: m.membership_id, ...m }))) },
   { noun: "admin", verb: "list", flags: { company: { kind: "company", need: true } }, about: "A Company's admins.",
-    run: async (c, a) => listed((await c.get(`/api/containers/${a.company}`)).members.filter((m) => m.is_admin).map((m) => ({ id: m.admin_id, identity_id: m.identity_id, display_name: m.display_name, designation: m.designation }))) },
+    run: async (c, a) => listed((await c.get(`/api/containers/${a.company}?documents=0`)).members.filter((m) => m.is_admin).map((m) => ({ id: m.admin_id, identity_id: m.identity_id, display_name: m.display_name, designation: m.designation }))) },
   { noun: "identity", verb: "show", target: { name: "identity", kind: "identity" }, flags: {}, about: "One person: their name, and the containers you both belong to with their designation in each.",
     run: (c, a) => c.get(`/api/identities/${a.identity}`) },
   { noun: "access-link", verb: "list", flags: { in: { ...IN, kind: "project" } }, about: "A Project's access links: who each is for, and whether it was used, withdrawn or ran out.",
@@ -248,7 +270,7 @@ export const COMMANDS = [
     { noun: "task", verb, target: { name: "task", kind: "task" }, flags: {}, about, run: (c, a) => c.post(`/api/tasks/${a.task}/${verb}`) })),
   { noun: "task", verb: "delete", target: { name: "task", kind: "task" }, flags: {}, about: "Deletes a task, leaving a tombstone: staff, or whoever made it.", run: (c, a) => c.del(`/api/tasks/${a.task}`) },
   { noun: "ask", verb: "make", flags: { task: { kind: "task", about: "the task to ask about" }, to: { kind: "identity", need: true }, channel: { kind: "channel", about: "for an ask with a task of its own: the channel the task is posted in" }, title: { kind: "words", about: "for an ask with a task of its own" }, due: { kind: "day" } },
-    about: "Asks someone to do a task; or, given --channel and --title instead of --task, makes the task too, posted in that channel, as the app does.",
+    about: "Asks someone to do a task; or, with --channel and --title instead of --task, makes it too, posted there, as the app does.",
     async run(c, a) {
       if (a.task ? a.title || a.channel || a.due : !(a.channel && a.title)) refuse("either --task, or --channel and --title for an ask with a task of its own");
       const task = a.task ?? (await c.post(`/api/containers/${(await c.get(`/api/channels/${a.channel}`)).container_id}/tasks`, { title: a.title, channel_id: a.channel, due_on: a.due })).id;
@@ -263,20 +285,23 @@ export const COMMANDS = [
     about: "Issues a document's revision to someone, who is then asked to acknowledge it.",
     async run(c, a) {
       const d = await c.get(`/api/documents/${a.document}`);
-      const r = a.revision ? d.revisions.find((x) => x.n === a.revision) ?? refuse(`there is no revision ${a.revision} of it`) : d.revisions.find((x) => x.id === d.document.current_revision_id);
+      const r = revisionOf(d, a.revision);
       return c.post("/api/issuances", { container_id: d.document.container_id, document_revision_id: r.id, issued_to: a.to });
     } },
   { noun: "message", verb: "issue", target: { name: "message", kind: "message" }, flags: { to: { kind: "identity", need: true } }, about: "Issues a channel message as an instruction to someone.",
     run: (c, a) => c.post("/api/issuances", { zulip_message_id: a.message, issued_to: a.to }) },
   { noun: "message", verb: "send", flags: { channel: { kind: "channel" }, task: { kind: "task", about: "a reply to the task's message, in its channel" }, text: { ...TEXT, need: false }, "reply-to": { kind: "message", about: "a message of the same place to answer" },
       mention: { kind: "identity", many: true, about: "someone who reads the channel" }, "mention-all": { kind: "bool", about: "everyone who reads the channel" }, path: { kind: "path", many: true, about: "a photo or file on this computer; each is kept as a document" } },
-    about: "Sends a message to a channel, or a reply to a task's message where it is talked about. A mention is only ever a flag: @Name in the text reaches nobody. Files sent with --path are kept as documents, the words the last one's caption.",
+    about: "Sends a message to a channel, or a reply to a task's message where it is talked about. @Name in the text reaches nobody: a mention is a flag. Files sent with --path are kept as documents, the words the last one's caption.",
     async run(c, a) {
       if (!a.channel === !a.task) refuse("say where: --channel or --task");
       if (!a.text && !a.path) refuse("say something: --text, or --path for a file");
       const uploads = a.path && (await Promise.all(a.path.map((p) => c.upload(p)))).map((u) => ({ path: u.path, name: u.name }));
       return c.post("/api/messages", { channel: a.channel, task: a.task, text: a.text, reply_to: a["reply-to"], mention: a.mention, mention_all: a["mention-all"], uploads });
     } },
+  { noun: "message", verb: "forward", target: { name: "message", kind: "message" }, flags: { channel: { kind: "channel" }, direct: { kind: "identity" }, "dry-run": { ...DRY, about: "who would newly read it" } },
+    about: "Sends a message on, marked with who wrote it and the day, never where; a file as itself.",
+    run: (c, a) => c.post(`/api/messages/${a.message}/forward`, { channel: a.channel, direct: a.direct, dry_run: a["dry-run"] }) },
   { noun: "message", verb: "edit", target: { name: "message", kind: "message" }, flags: { text: TEXT }, about: "Changes the words of a message you sent; Zulip keeps every earlier version.",
     run: (c, a) => c.patch(`/api/messages/${a.message}`, { text: a.text }) },
   { noun: "message", verb: "delete", target: { name: "message", kind: "message" }, flags: {}, about: "Deletes a channel message, leaving a tombstone where it stood: staff only.",
@@ -285,12 +310,28 @@ export const COMMANDS = [
     run: (c, a) => c.post(`/api/messages/${a.message}/reactions`, { emoji: a.emoji }) },
   { noun: "message", verb: "unreact", target: { name: "message", kind: "message" }, flags: { emoji: EMOJI }, about: "Takes your reaction back.",
     run: (c, a) => c.del(`/api/messages/${a.message}/reactions`, { emoji: a.emoji }) },
+  // A pinned message (CONTEXT.md Pinned message, #146): kept at the top of its conversation, for everyone in it. Given
+  // --conversation, the id is one of the assistant's answers there, as conversation show lists them.
+  ...["pin", "unpin"].map((verb) => ({ noun: "message", verb, target: { name: "message", kind: "message" }, flags: { conversation: { kind: "id", about: "an answer in this conversation of yours" } },
+    about: verb === "pin" ? "Pins a message for everyone in its conversation. In a Project, staff pin; 50 at most." : "Takes a message's pin off.",
+    run: (c, a) => c[verb === "pin" ? "post" : "del"]("/api/pins", a.conversation ? { conversation: a.conversation, turn: a.message } : { message: a.message }) })),
+  { noun: "pinned-message", verb: "list", flags: { channel: { kind: "channel" }, direct: { kind: "identity" }, conversation: { kind: "id" } },
+    about: "A channel's, Direct's or conversation's pinned messages, newest pinned first.",
+    run: async (c, a) => {
+      const where = ["channel", "direct", "conversation"].filter((k) => a[k]);
+      if (where.length !== 1) refuse("say where: --channel, --direct or --conversation");
+      return listed((await c.get(`/api/pins${qs({ [where[0]]: a[where[0]] })}`)).pins);
+    } },
   { noun: "direct", verb: "send", target: { name: "identity", kind: "identity" }, flags: { text: TEXT }, about: "Writes to someone in your Direct with them, or to yourself as me. It passes through and is kept nowhere.",
     run: (c, a) => c.post("/api/messages", { direct: a.identity, text: a.text }) },
   { noun: "channel", verb: "mark-read", target: { name: "channel", kind: "channel" }, flags: { through: { kind: "message", about: "up to and including this message" } }, about: "Read, on purpose: tells its senders their messages were read.",
     run: (c, a) => c.post("/api/messages/read", { channel: a.channel, through: a.through }) },
   { noun: "direct", verb: "mark-read", target: { name: "identity", kind: "identity" }, flags: {}, about: "Read, on purpose: the whole Direct.",
     run: (c, a) => c.post("/api/messages/read", { direct: a.identity }) },
+  // CONTEXT.md Opened: your own assistant reads it until you close it; the Direct tells them each time.
+  { noun: "direct", verb: "edit", target: { name: "identity", kind: "identity" }, flags: { assistant: { kind: "choice", of: ["open", "closed"], need: true } },
+    about: "Opens or closes your Direct with them to your own assistant; it tells them.",
+    run: (c, a) => c.post(`/api/directs/${a.identity}/assistant`, { open: a.assistant === "open" }) },
   { noun: "notification", verb: "mark-read", target: { name: "notification", kind: "key", many: true, optional: true }, flags: { all: { kind: "bool", about: "every one in the list now" } },
     about: "Marks notifications read, by their keys from notification list, or all of them.",
     run: (c, a) => (!a.notification === !a.all ? refuse("name the notifications by key, or say --all") : c.post("/api/me/notifications/read", a.all ? { all: true } : { keys: a.notification })) },
@@ -318,7 +359,7 @@ export const COMMANDS = [
     about: "Writes the exact bytes kept for a revision to this computer, after checking them against the hash Centric kept.",
     async run(c, a) {
       const d = await c.get(`/api/documents/${a.document}`);
-      const r = a.revision ? d.revisions.find((x) => x.n === a.revision) ?? refuse(`there is no revision ${a.revision} of it`) : d.revisions.find((x) => x.id === d.document.current_revision_id);
+      const r = revisionOf(d, a.revision);
       const bytes = await c.bytes(`/api/files?path=${enc(r.zulip_path)}`), sha256_hex = createHash("sha256").update(bytes).digest("hex");
       if (sha256_hex !== r.sha256_hex) throw new Broken(`what arrived does not match the hash kept for revision ${r.n}; nothing was written`);
       const path = a.out ?? (basename(decodeURIComponent(r.zulip_path.split("/").pop())).replace(/^\.+/, "") || "file");
@@ -337,11 +378,14 @@ export const COMMANDS = [
   { noun: "project", verb: "make", flags: { company: { kind: "company", need: true }, name: { kind: "words", need: true } }, about: "Makes a Project in a Company, with you in it: its admins only.",
     async run(c, a) { const co = (await c.get("/api/me")).containers.find((x) => x.id === a.company); return c.post("/api/containers", { company_id: co.company_id, name: a.name }); } },
   ...["project", "company"].flatMap((noun) => [
-    { noun, verb: "edit", target: { name: noun, kind: noun }, flags: { name: { kind: "words" }, brief: { kind: "text", none: true, about: "what the assistant should know first; none clears it" } },
-      about: `Renames a ${noun === "project" ? "Project" : "Company"}, or writes its brief: admins rename, staff write a Project's brief, admins a Company's.`,
+    { noun, verb: "edit", target: { name: noun, kind: noun }, flags: { name: { kind: "words" }, brief: { kind: "text", none: true, about: "what the assistant should know first; none clears it" },
+      ...(noun === "company" && { "documents-to-model": { kind: "choice", of: ["on", "off"], about: "off: none of its files go to a model" } }) },
+      about: noun === "project" ? "Renames a Project (its admins), or writes its brief (its staff)." : "Renames a Company, or writes its brief: its admins only.",
       async run(c, a) {
-        if (a.name === undefined && a.brief === undefined) refuse("say what changes: --name or --brief");
-        return { ...(a.name !== undefined && (await c.patch(`/api/containers/${a[noun]}`, { name: a.name }))), ...(a.brief !== undefined && (await c.patch(`/api/containers/${a[noun]}`, { brief: a.brief ?? "" }))) };
+        const to = a["documents-to-model"];
+        if (a.name === undefined && a.brief === undefined && to === undefined) refuse(`say what changes: --name or --brief${noun === "company" ? " or --documents-to-model" : ""}`);
+        const patch = (b) => c.patch(`/api/containers/${a[noun]}`, b);
+        return { ...(a.name !== undefined && (await patch({ name: a.name }))), ...(a.brief !== undefined && (await patch({ brief: a.brief ?? "" }))), ...(to !== undefined && (await patch({ files_never_sent: to === "off" }))) };
       } },
     { noun, verb: "record-pack", target: { name: noun, kind: noun }, flags: { out: { ...PAGE, need: true } }, about: "Writes the record pack: every document, issuance, task and deletion, with the chain that proves it unchanged.",
       run: (c, a) => page(c, `/api/containers/${a[noun]}/record-pack.html`, a.out) },
@@ -352,10 +396,10 @@ export const COMMANDS = [
     about: verb === "archive" ? "Takes a Project out of the lists, everything in it kept: admins only." : "Brings an archived Project back.",
     run: (c, a) => c.patch(`/api/containers/${a.project}`, { archived: verb === "archive" }) })),
   { noun: "project", verb: "report", target: { name: "project", kind: "project" }, flags: { day: { kind: "day", about: "as it stood at the end of that day; now if left out" }, out: PAGE },
-    about: "The Project's report: open tasks by age, response time, overdue by zone. Staff only.",
+    about: "The Project's Daily report: open tasks by age, response time, overdue by zone. Staff only.",
     run: (c, a) => (a.out ? page(c, `/api/containers/${a.project}/report.html${qs({ day: a.day })}`, a.out) : c.get(`/api/containers/${a.project}/report${qs({ day: a.day })}`)) },
   ...[["project", "containers"], ["company", "containers"], ["channel", "channels"]].flatMap(([noun, route]) => [
-    { noun, verb: "set-picture", target: { name: noun, kind: noun }, flags: { path: { ...PATH, about: "a square JPEG, PNG or WebP on this computer, 300 KB at most" } },
+    { noun, verb: "set-picture", target: { name: noun, kind: noun }, flags: { path: { ...PATH, about: "a square JPEG, PNG or WebP, 300 KB at most" } },
       about: `Sets the picture a ${noun} shows beside its name.`, run: (c, a) => c.put(`/api/${route}/${a[noun]}/picture`, { image: c.image(a.path) }) },
     { noun, verb: "remove-picture", target: { name: noun, kind: noun }, flags: {}, about: `Takes a ${noun}'s picture away.`, run: (c, a) => c.del(`/api/${route}/${a[noun]}/picture`) },
   ]),
@@ -395,10 +439,10 @@ export const COMMANDS = [
   { noun: "admin", verb: "appoint", flags: { company: { kind: "company", need: true }, identity: { kind: "identity", need: true } }, about: "Makes someone of the Company one of its admins.",
     run: (c, a) => c.post(`/api/containers/${a.company}/admins`, { identity_id: a.identity }) },
   { noun: "admin", verb: "remove", target: { name: "admin", kind: "admin" }, flags: {}, about: "Takes an admin's role away; the last admin cannot give it up.", run: (c, a) => c.del(`/api/admins/${a.admin}`) },
-  { noun: "identity", verb: "rotate-key", target: { name: "identity", kind: "identity" }, flags: { "dry-run": { ...DRY, about: "every firm they belong to, and every tool of theirs that would disconnect" } },
+  { noun: "identity", verb: "rotate-key", target: { name: "identity", kind: "identity" }, flags: { "dry-run": { ...DRY, about: "the firms they are in, and each tool of theirs that would disconnect" } },
     about: "Signs a person out everywhere: their phone signs in again, and every tool of theirs is disconnected.", run: (c, a) => c.post(`/api/identities/${a.identity}/rotate-key`, { dry_run: a["dry-run"] }) },
-  { noun: "identity", verb: "dormant", target: { name: "identity", kind: "identity" }, flags: { in: { kind: "container", about: "where to look for their name" }, "dry-run": { ...DRY, about: "every firm they belong to, and every tool of theirs that would disconnect" } },
-    about: "Puts a person to sleep, as after their number changed hands: every membership ends, and every tool of theirs is disconnected. Centric's Operators only, by the id a firm's admin gives them from identity show; an admin revokes the membership.", run: (c, a) => c.post(`/api/identities/${a.identity}/dormant`, { dry_run: a["dry-run"] }) },
+  { noun: "identity", verb: "dormant", target: { name: "identity", kind: "identity" }, flags: { in: { kind: "container", about: "where to look for their name" }, "dry-run": { ...DRY, about: "the firms they are in, and each tool of theirs that would disconnect" } },
+    about: "Puts a person to sleep, as after their number changed hands: every membership ends, and every tool of theirs is disconnected. Centric's Operators only, by an id from identity show.", run: (c, a) => c.post(`/api/identities/${a.identity}/dormant`, { dry_run: a["dry-run"] }) },
   { noun: "identity", verb: "reactivate", target: { name: "identity", kind: "identity" }, flags: {}, about: "Brings a person put to sleep back; an admin names them on containers again. Centric's Operators only.",
     run: (c, a) => c.post(`/api/identities/${a.identity}/reactivate`) },
   { noun: "access-link", verb: "make", flags: { in: { ...IN, kind: "project" }, phone: { kind: "phone", need: true }, designation: { kind: "words", need: true }, task: { kind: "task", about: "an ask's task, shown when the link opens" } },
@@ -427,17 +471,54 @@ export const COMMANDS = [
       if (a.assistant !== undefined || a.language !== undefined) await c.patch("/api/me/assistant", { on: a.assistant && a.assistant === "on", lang: a.language });
       return meShown(c);
     } },
-  { noun: "me", verb: "set-photo", flags: { path: { ...PATH, about: "a square JPEG, PNG or WebP on this computer, 300 KB at most" } }, about: "Sets the photo shown beside your name.",
+  { noun: "me", verb: "set-photo", flags: { path: { ...PATH, about: "a square JPEG, PNG or WebP, 300 KB at most" } }, about: "Sets the photo shown beside your name.",
     run: (c, a) => c.put("/api/me/photo", { image: c.image(a.path) }) },
   { noun: "me", verb: "remove-photo", flags: {}, about: "Takes your photo away; it is gone, kept nowhere.", run: (c) => c.del("/api/me/photo") },
-  { noun: "assistant", verb: "question", target: { name: "text", kind: "words" }, flags: { conversation: { kind: "id", about: "to go on from one" }, focus: { kind: "focus", about: "a Project, Company or channel for a new conversation to keep to" } },
+  { noun: "assistant", verb: "question", target: { name: "text", kind: "words" }, flags: { conversation: { kind: "id", about: "to go on from one" }, focus: { kind: "focus", about: "a Project, Company or channel for a new conversation to keep to" },
+      path: { kind: "path", about: "a file for it to read, kept with the conversation" } },
     about: "Asks Centric's assistant, which answers from what you can see. Only while your own switch is on; it counts against the day's share.",
-    run: (c, a) => c.post("/api/assist", { q: a.text, conversation: a.conversation, focus: a.focus }) },
-  { noun: "assistant", verb: "correct", target: { name: "text", kind: "words" }, flags: { direct: { kind: "identity", about: "the person a Direct it is for: always refused, as the app never corrects one (ADR 0006)" } },
+    async run(c, a) {
+      const up = a.path && (await c.upload(a.path)); // uploaded as the person, linked to no message: theirs alone
+      return c.post("/api/assist", { q: a.text, conversation: a.conversation, focus: a.focus, ...(up && { files: [{ path: up.path, name: up.name }] }) });
+    } },
+  { noun: "assistant", verb: "correct", target: { name: "text", kind: "words" }, flags: {},
     about: "The assistant puts a message's spelling, grammar and punctuation right; it is still yours to send.",
-    run: (c, a) => c.post("/api/assist/correct", { text: a.text, direct: a.direct }) },
+    run: (c, a) => c.post("/api/assist/correct", { text: a.text }) },
   { noun: "conversation", verb: "delete", target: { name: "conversation", kind: "id" }, flags: {}, about: "Deletes a conversation with the assistant outright; it leaves no tombstone.",
     run: (c, a) => c.del(`/api/assistant/conversations/${a.conversation}`) },
+  // A firm's own system its assistant reads from (CONTEXT.md Linked system): its admins link and remove one; its people list them.
+  { noun: "linked-system", verb: "list", flags: { company: { kind: "company", need: true } }, about: "The firm's systems its assistant reads from.",
+    run: async (c, a) => listed(await c.get(`/api/containers/${a.company}/linked-systems`)) },
+  { noun: "linked-system", verb: "add", flags: { company: { kind: "company", need: true }, name: { kind: "words", need: true, about: "short, as stores" },
+      url: { kind: "url", need: true, about: "its https MCP address" }, credential: { kind: "text", need: true, about: "or - for standard input" } },
+    about: "Links the firm's MCP server; its reading tools reach its assistant. Admins only.",
+    run: (c, a) => c.post(`/api/containers/${a.company}/linked-systems`, { name: a.name, url: a.url, credential: a.credential }) },
+  { noun: "linked-system", verb: "remove", target: { name: "linked-system", kind: "id" }, flags: {}, about: "Unlinks a firm's system.",
+    run: (c, a) => c.del(`/api/linked-systems/${a["linked-system"]}`) },
+  // What the assistant keeps about its person (CONTEXT.md Memory): written by the assistant when they tell it to keep
+  // something, or by them, keeping a line it offered after reading others' words; seen and deleted by them.
+  { noun: "memory", verb: "list", flags: {}, about: "What the assistant keeps about you, as you told it to.",
+    run: async (c) => listed(await c.get("/api/assistant/memories")) },
+  { noun: "memory", verb: "add", flags: { text: { kind: "text", need: true, about: "one line, 300 characters at most" } }, about: "Keeps a line for the assistant to read before each of your questions.",
+    run: (c, a) => c.post("/api/assistant/memories", { text: a.text }) },
+  { noun: "memory", verb: "delete", target: { name: "memory", kind: "id" }, flags: {}, about: "Stops the assistant keeping one line about you.",
+    run: (c, a) => c.del(`/api/assistant/memories/${a.memory}`) },
+  // A Report template (CONTEXT.md): yours, or a place's, written by its staff (a Company's by its admins). A report is
+  // written to one by asking the assistant for it.
+  ...(() => {
+    const SECTIONS = { kind: "text", about: "a line each: its heading, a colon, what goes in it" }, PERIOD = { kind: "choice", of: ["day", "week", "since-last"] }, T = { name: "report-template", kind: "id" };
+    const lines = (s) => String(s).split("\n").map((l) => l.trim()).filter(Boolean).map((l) => { const i = l.indexOf(":"); return i > 0 ? { heading: l.slice(0, i).trim(), what: l.slice(i + 1).trim() } : { heading: l, what: "" }; });
+    const body = (a) => ({ name: a.name, ...(a.sections !== undefined && { sections: lines(a.sections) }), ...(a.period && { period: a.period.replace("-", "_") }) });
+    return [
+      { noun: "report-template", verb: "list", flags: {}, about: "Report templates: yours and your places'.", run: async (c) => listed(await c.get("/api/report-templates")) },
+      { noun: "report-template", verb: "show", target: T, flags: {}, about: "One, with who wrote to it and when.", run: (c, a) => c.get(`/api/report-templates/${a["report-template"]}`) },
+      { noun: "report-template", verb: "make", flags: { name: { kind: "words" }, sections: SECTIONS, period: PERIOD, in: { kind: "container", about: "a place's; yours if left out" }, "from-report": { kind: "id", about: "an assistant report of yours" } },
+        about: "Makes one, or saves an assistant report as one.", run: (c, a) => c.post("/api/report-templates", { ...body(a), container_id: a.in, from_report: a["from-report"] }) },
+      { noun: "report-template", verb: "edit", target: T, flags: { name: { kind: "words" }, sections: SECTIONS, period: PERIOD }, about: "Changes its name, sections or period.",
+        run: (c, a) => c.patch(`/api/report-templates/${a["report-template"]}`, body(a)) },
+      { noun: "report-template", verb: "delete", target: T, flags: {}, about: "Deletes one; assistant reports written to it stay.", run: (c, a) => c.del(`/api/report-templates/${a["report-template"]}`) },
+    ];
+  })(),
 
   // ── connected tools ──
   { noun: "connected-tool", verb: "list", flags: {}, about: "The tools connected to you, with when each was last used.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "connection-centric",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "The centric command: what a person does in Connection-Centric, done as them from a terminal, a script, or a program such as Claude Code.",
   "type": "module",
   "bin": {