@bli-cockpit/cli 0.2.101 → 0.2.103

package/README.md

@@ -4,54 +4,18 @@ Cockpit watches how you and your AI agents work so Edward can coach from evidenc
 
 ## 90-second speedrun
 
-Run these three commands on the Mac or Windows PC that should be collected:
+Run this on the Mac or Windows PC that should be collected:
 
 ```bash
-$ npm install -g @bli-cockpit/cli@latest
-added <packages> in <seconds>s
+npm i -g @bli-cockpit/cli && cockpit doctor
 ```
 
-```bash
-$ cockpit do-everything
-Setting up Cockpit
-Dashboard: https://bli-cockpit-dashboard.vercel.app
-Ticket: none (general work)
-What's your @buildlaunchiterate.ca email? (press enter to skip): ian@buildlaunchiterate.ca
-Signing in as ian@buildlaunchiterate.ca.
-Code sent; valid 1h, resend in 60s by rerunning this command.
-Email code needed:
-  Check your latest Cockpit email for a 6- to 10-digit code.
-What you can do:
-  1) Paste the code here.
-  2) No code yet: wait for the resend window, then rerun this command.
-  3) Can't use email: rerun with --no-auth for manual approval.
-Code: 482913
-Signed in as ian@buildlaunchiterate.ca.
-2/5 Device paired.
-PASS: Cockpit is set up and collecting.
-You're live.
-Dashboard: https://bli-cockpit-dashboard.vercel.app/my-work
-Next: cockpit status
-```
-
-```bash
-$ cockpit status
-Cockpit status
-Installed: yes
-Signed in: yes
-Ticket: none (general work)
-Last collected: recently
-Uploads: ready
-Waiting to upload: 0
-Old sessions: done
-Stuck files: none
-```
-
-The OTP proves you own an approved BLI mailbox. The JWT is used once to register this device and is never saved; the durable local credential remains the existing Cockpit device token.
+Doctor installs, repairs, and verifies the machine. Follow any sign-in or trust
+prompt it prints. It finishes with proof of collection or the remaining action.
 
 ## Every command, what it does, and why it's called that
 
-On a blank Mac or Windows PC, `npm i -g @bli-cockpit/cli && cockpit do-everything` is enough to sign in, choose roots, and converge the machine. `onboard` remains the named setup subset, and the rest exist for recovery and maintenance.
+On a blank Mac or Windows PC, `npm i -g @bli-cockpit/cli && cockpit doctor` is enough to sign in, choose roots, and converge the machine. `onboard` remains the named setup subset, and the rest exist for recovery and maintenance.
 
 Cockpit works the same way on an Apple Silicon Mac and on a normal Windows
 PC. Every Codex and Claude session in a folder you have approved is collected,
@@ -64,8 +28,8 @@ normal user, on both macOS and Windows.
 
 | Command | What it does | Why it exists / why this name |
 |---|---|---|
-| `cockpit onboard` | The named setup subset: signs you in (email code), registers this machine, starts capture, uploads once, completes all-history Codex and Claude backfill for saved approved roots, installs the 15-min background sync, and only then prints proof you're live. | You are boarding the crew. `do-everything` calls this flow when setup is missing; rerunning it directly is safe. Partial or failed backfill blocks readiness with an exact retry reason. |
-| `cockpit do-everything` / `cockpit fix` / `cockpit doctor` | Converges a Mac or Windows PC from blank or already-onboarded state: latest CLI, signed-in device token, saved roots, autostart, historical backfill, raw-evidence GC, and fresh sync. Interactive first runs prompt for email OTP and collection roots; headless/`--json` runs explain and exit instead of blocking. `--dry-run` previews without writing. | Edward can post one line and every intern machine should end green. `fix` is the alias people guess; `doctor` is the alias the ops board, the setup receipt and the heartbeat all tell you to run, and it is the same command (it checks each row, then fixes it). |
+| `cockpit onboard` | The named setup subset: signs you in (email code), registers this machine, starts capture, uploads once, completes all-history Codex and Claude backfill for saved approved roots, installs the 15-min background sync, and only then prints proof you're live. | You are boarding the crew. `doctor` calls this flow when setup is missing; rerunning it directly is safe. Partial or failed backfill blocks readiness with an exact retry reason. |
+| `cockpit doctor` | Converges a Mac or Windows PC from blank or already-onboarded state: latest CLI, signed-in device token, saved roots, autostart, historical backfill, raw-evidence GC, and fresh sync. Interactive first runs prompt for email OTP and collection roots; headless/`--json` runs explain and exit instead of blocking. `--dry-run` previews without writing. | Edward can post one line and every intern machine should end green. It checks each row, repairs it, and verifies the result. |
 | `cockpit status` | Prints install / sign-in / capture / upload health in one screen. | The "is it working?" command. Run it whenever you're unsure. |
 | `cockpit backfill --all` | Uploads your HISTORICAL Codex + Claude sessions (from before Cockpit existed on this machine). Discovery defaults to depth 3 and 50 repos; raise `--max-depth` or `--max-repos` when the returned retry command says a cap was reached. | One-time catch-up so your past work counts too. "Backfill" = fill in the back-catalog. |
 | `cockpit sync` | Captures and uploads once, right now. This is what the background agent runs every 15 min — you almost never type it yourself. | Named for what it does: synchronize local session files up to the dashboard. |
@@ -105,7 +69,7 @@ cockpit onboard --no-auth
 - `--no-auth` forces the old manual approval queue.
 - `--repo` still works as a legacy alias for `--workspace`.
 
-`cockpit do-everything` is the normal fleet convergence command. On an interactive first run it uses the same email OTP login and root-picker flow as onboarding, then re-checks the machine. In headless, launchd, `--json`, or no-TTY runs it never prompts; missing auth or roots stay red with the repair text. `--dry-run` previews without writing auth or config.
+`cockpit doctor` is the normal fleet convergence command. On an interactive first run it uses the same email OTP login and root-picker flow as onboarding, then re-checks the machine. In headless, launchd, `--json`, or no-TTY runs it never prompts; missing auth or roots stay red with the repair text. `--dry-run` previews without writing auth or config.
 
 `cockpit update` installs the latest public CLI and reruns onboarding checks against saved roots. `cockpit upgrade` is the same command.
 

package/dist/commands/collection-roots.js

@@ -116,13 +116,13 @@ function collectionRootNotPersistedMessage(homeDir) {
         "Fix it by running ONE of these:",
         "",
         "  # Sync everything on this machine (what most people want on a work laptop)",
-        "  cockpit do-everything --allow-home-root",
+        "  cockpit doctor --allow-home-root",
         "",
         "  # Or sync one folder — replace the path with where your projects live",
-        `  cockpit do-everything --workspace ${path.join(home, "BLI")}`,
+        `  cockpit doctor --workspace ${path.join(home, "BLI")}`,
         "",
         "  # Or answer the folder question interactively",
-        "  cockpit do-everything",
+        "  cockpit doctor",
         "",
         "Then check it worked:",
         "  cockpit status",
@@ -139,10 +139,10 @@ function collectionRootMissingOnDiskMessage(saved, homeDir) {
         "Fix it by running ONE of these:",
         "",
         "  # Point Tower at where your projects actually live now",
-        `  cockpit do-everything --workspace ${path.join(home, "BLI")}`,
+        `  cockpit doctor --workspace ${path.join(home, "BLI")}`,
         "",
         "  # Or sync everything on this machine and stop worrying about the path",
-        "  cockpit do-everything --allow-home-root",
+        "  cockpit doctor --allow-home-root",
         "",
         "Not sure where your projects are? This lists the folders Tower can see:",
         "  cockpit status",

package/dist/commands/doctor-pipeline.js

@@ -14,7 +14,7 @@ import { runBackfillCommand } from "./backfill.js";
 import { diskRowMessage, mib, redeliveryLine } from "./doctor-disk-words.js";
 import { doctorRoots } from "./doctor-access.js";
 import { backfillCompletionStepState, backfillFixVerdict, jsonField, parseDoctorBackfillJson, parseDoctorSyncJson, syncBacklogDrainingVerdict, syncStandAsideVerdict, } from "./doctor-pipeline-verdicts.js";
-import { fail, needsFix, ok, skipped } from "./doctor-report.js";
+import { asRecord, fail, needsFix, ok, skipped } from "./doctor-report.js";
 /**
  * The `backfill-complete`, `gc-checked`, `disk-bounded`, and `sync-fresh`
  * check family: does the collection pipeline itself have everything it
@@ -47,33 +47,69 @@ export async function checkBackfillState(context) {
     return needsFix("backfill-complete", cursor.updated_at ? "partial" : "never_run", "the catch-up over your old sessions has not finished");
 }
 export async function fixBackfillState(context) {
-    return withDoctorLockWait(context, () => runBackfillRepair(context));
-}
-async function runBackfillRepair(context) {
-    const capture = capturedIo(context.io, !context.command.json);
-    const code = await runBackfillCommand({
-        homeDir: context.command.homeDir,
-        repoRoot: context.command.repoRoot,
-        all: true,
-        dryRun: false,
-        yes: true,
-        json: true,
-    }, capture.io);
-    const stdout = capture.stdout();
-    const output = `${stdout}\n${capture.stderr()}`;
-    if (code === 0) {
-        // Re-read the marker this run just wrote instead of hand-rolling a second
-        // message: `checkBackfillState`'s pure core already knows how to say
-        // "complete" vs "complete_with_oversized_skips" (BLI-2727), and this way
-        // the two can never say something different for the same marker.
-        const recheck = await checkBackfillState(context);
-        if (recheck.status === "ok")
-            return recheck;
-        return recheck;
+    const started = Date.now();
+    const deadline = started + (context.command.backfillBudgetSeconds ?? 900) * 1000;
+    let caughtUp = 0;
+    let remaining = null;
+    const unfinished = (code, reason) => ({
+        ...needsFix("backfill-complete", code, `caught up on ${caughtUp} old sessions this run, ${remaining ?? "unknown"} still to go; ${reason}; run \`cockpit doctor\` again to continue`),
+        nextAction: "cockpit doctor",
+    });
+    const progress = setInterval(() => {
+        const seconds = Math.floor((Date.now() - started) / 1000);
+        context.io.stderr.write(`backfill: ${caughtUp} caught up, ${remaining ?? "unknown"} to go, ${Math.floor(seconds / 60)}m${seconds % 60}s\n`);
+        console.error("[doctor] backfill-complete progress", JSON.stringify({ caught_up: caughtUp, remaining, elapsed_seconds: seconds }));
+    }, 30_000);
+    try {
+        while (Date.now() < deadline) {
+            // Every chunk reacquires the collector's locks. Bound lock waiting by
+            // the overall budget too; never abandon an in-flight cursor write.
+            const chunkContext = { ...context, command: { ...context.command,
+                    lockWaitSeconds: Math.min(context.command.lockWaitSeconds ?? 600, (deadline - Date.now()) / 1000),
+                } };
+            const row = await withDoctorLockWait(chunkContext, async () => {
+                if (Date.now() >= deadline)
+                    return unfinished("backfill_budget_timeout", "backfill time budget reached");
+                const capture = capturedIo(context.io, false);
+                const code = await runBackfillCommand({
+                    homeDir: context.command.homeDir, repoRoot: context.command.repoRoot,
+                    all: true, dryRun: false, yes: true, json: true,
+                }, capture.io);
+                const parsed = parseDoctorBackfillJson(capture.stdout());
+                const counts = asRecord(parsed?.counts);
+                const count = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : null;
+                caughtUp += count(counts?.["backfilled"]) ?? 0;
+                remaining = count(counts?.["remaining"]) ?? remaining;
+                if (code === 0 && parsed?.status === "complete") {
+                    // Reporting totals include permanent caps. Preserve their marker
+                    // note instead of retrying history the collector says is complete.
+                    const checked = await checkBackfillState(context);
+                    return ok("backfill-complete", checked.status === "ok" ? checked.code : "complete", `caught up on ${caughtUp} old sessions this run` + (checked.status === "ok" ? `; ${checked.message}` : ""));
+                }
+                const verdict = backfillFixVerdict(parsed, jsonField(capture.stderr(), "failure_reason"));
+                if (parsed?.status === "partial" &&
+                    (parsed.failure_reason === "deferred_budget_exhausted" || !parsed.failure_reason)) {
+                    return needsFix("backfill-complete", "backfill_chunk_pending", "more history remains");
+                }
+                return { ...verdict, message: typeof parsed?.failure_reason === "string" ? parsed.failure_reason : "backfill failed without a valid completion receipt" };
+            });
+            if (row.status === "ok") {
+                console.error("[doctor] backfill-complete finished", JSON.stringify({ caught_up: caughtUp, remaining, elapsed_seconds: Math.floor((Date.now() - started) / 1000) }));
+                return row;
+            }
+            if (row.code !== "backfill_chunk_pending") {
+                return unfinished(row.code === "lock_wait_timeout" && Date.now() >= deadline ? "backfill_budget_timeout" : row.code, row.message);
+            }
+        }
+        return unfinished("backfill_budget_timeout", "backfill time budget reached");
+    }
+    catch (error) {
+        console.error("[doctor] backfill-complete failed", JSON.stringify({ reason: "backfill_threw", error_name: error instanceof Error ? error.name : "unknown" }));
+        return unfinished("backfill_threw", "backfill failed");
+    }
+    finally {
+        clearInterval(progress);
     }
-    const verdict = backfillFixVerdict(parseDoctorBackfillJson(stdout), jsonField(output, "failure_reason"));
-    console.error("[cockpit-doctor] catch-up run did not finish", JSON.stringify({ reason: verdict.code, row_status: verdict.status, exit_code: code }));
-    return verdict;
 }
 export async function checkGcState(context) {
     if (context.io.env["COCKPIT_DISABLE_GC"] === "1") {

package/dist/commands/doctor-report.js

@@ -134,19 +134,19 @@ export function writeLine(stream, text) {
 }
 export function doctorNeedsPerson(rows, receipt) {
     const defaults = {
-        "cli-latest": "npm install -g @bli-cockpit/cli@latest",
-        "authed": "cockpit login",
+        "cli-latest": "npm i -g @bli-cockpit/cli && cockpit doctor",
+        "authed": "cockpit doctor",
         "roots-ok": "cockpit doctor",
         "single-install": "Run npm uninstall -g @bli-cockpit/cli with the Node installation that owns the extra CLI listed above.",
-        "autostart-alive": "cockpit autostart install",
-        "memory-registered": "cockpit memory install",
-        "agent-rules": "cockpit agent-rules install",
+        "autostart-alive": "cockpit doctor",
+        "memory-registered": "cockpit doctor",
+        "agent-rules": "cockpit doctor",
         "mcp-answers": "cockpit doctor",
-        "memory-daemon": "cockpit memory install",
-        "backfill-complete": "cockpit backfill --all --yes",
-        "sync-fresh": "cockpit sync --json",
+        "memory-daemon": "cockpit doctor",
+        "backfill-complete": "cockpit doctor",
+        "sync-fresh": "cockpit doctor",
         "gc-checked": "cockpit doctor",
-        "disk-bounded": "cockpit clean --all-committed",
+        "disk-bounded": "cockpit doctor",
     };
     const items = rows.filter((row) => row.status === "fail" || row.status === "needs_fix" || row.hardStop).map((row) => ({
         step: row.id, reason: row.code,

package/dist/commands/doctor-update.js

@@ -71,6 +71,8 @@ export function reexecDoctor(command, io) {
     const args = ["doctor"];
     if (command.homeDir)
         args.push("--home", command.homeDir);
+    if (command.backfillBudgetSeconds)
+        args.push("--backfill-budget", String(command.backfillBudgetSeconds));
     if (command.lockWaitSeconds)
         args.push("--lock-wait", String(command.lockWaitSeconds));
     if (command.allowHomeRoot)

package/dist/commands/heartbeat-token.js

@@ -25,7 +25,7 @@ export async function readHeartbeatSession(homeDir) {
         console.error("[heartbeat] no usable device session on this machine; the dashboard will show it as quiet", JSON.stringify({
             reason: "no_device_session",
             session_state: state,
-            next_action: "run `cockpit do-everything` to pair this machine again",
+            next_action: "run `cockpit doctor` to pair this machine again",
         }));
         return { usable: false };
     }

package/dist/commands/local-args-collector-setup.js

@@ -1,6 +1,6 @@
 /**
  * The six human "set my machine up" doors (`install`, `onboard`, `login`,
- * `pair`, `update`, `upgrade`), `do-everything`/`fix`, `logout`, and the
+ * `pair`, `update`, `upgrade`), `doctor`, `logout`, and the
  * maintainer's `release`. Split out of local-args-collector.ts (BLI-3636).
  *
  * `OnboardLikeOptions` — the flag set the setup doors share — lives here with
@@ -101,6 +101,7 @@ export function parseDoctorArgs(alias, args) {
             "--check",
             "--no-repair",
             "--lock-wait",
+            "--backfill-budget",
             "--json",
             "--allow-home-root",
             "--max-depth",
@@ -117,6 +118,7 @@ export function parseDoctorArgs(alias, args) {
         ],
         valueFlags: [
             "--lock-wait",
+            "--backfill-budget",
             "--home",
             "--repo",
             "--workspace",
@@ -140,6 +142,7 @@ export function parseDoctorArgs(alias, args) {
     return {
         kind: "doctor",
         checkOnly: values.booleans.has("--check") || values.booleans.has("--no-repair"),
+        backfillBudgetSeconds: optionalPositiveInteger(values.flags.get("--backfill-budget"), "--backfill-budget") ?? 900,
         lockWaitSeconds: optionalPositiveInteger(values.flags.get("--lock-wait"), "--lock-wait") ?? 600,
         alias,
         homeDir: optionalNonEmpty(values.flags.get("--home")),

package/dist/commands/local-args-collector-status.js

@@ -174,7 +174,7 @@ export function parseAgentRulesArgs(args) {
  *
  * **A bare `cockpit memory` prints the verb list; it no longer installs.**
  * BLI-3580 made `install` the default because the command is run unasked by
- * `do-everything` and by the sync tick — but those callers build
+ * `doctor` and by the sync tick, but those callers build
  * `{ kind: "memory", action: "install" }` in code (`doctor-registration.ts`,
  * `sync-followups-memory.ts`, `onboard-completion.ts`) and never pass through
  * this parser. The only caller the default ever served was a PERSON typing the

package/dist/commands/local-args-collector.js

@@ -1,7 +1,7 @@
 /**
  * One decision table per subcommand that acts on THIS MACHINE: the six setup
  * doors (`install`, `onboard`, `login`, `pair`, `update`, `upgrade`) plus
- * `do-everything`/`fix`, and then `logout`, `start`, `sync`, `analyze`,
+ * `doctor`, and then `logout`, `start`, `sync`, `analyze`,
  * `backfill`, `status`, `sessions`, `serve`, `autostart`, `agent-rules` and the
  * maintainer's `release`.
  *
@@ -12,7 +12,7 @@
  * same defaults, same refusal sentences):
  *
  *   local-args-collector-setup.ts   install, onboard, login, pair, update,
- *                                    upgrade, do-everything, fix, logout,
+ *                                    upgrade, doctor, logout,
  *                                    release  — getting a machine collecting
  *   local-args-collector-work.ts    start, sync, analyze, backfill — the
  *                                    ongoing collection work an already-set-up

package/dist/commands/local-discovery.js

@@ -98,7 +98,7 @@ function incompleteDiscoveryMessage(input) {
     const nextDepth = maxDepth + 3;
     const nextRepos = Math.max(maxRepos * 2, found + 50);
     const retry = [
-        "cockpit do-everything",
+        "cockpit doctor",
         ...roots.map((root) => `--workspace ${root}`),
         `--max-depth ${hitRepoCap ? maxDepth : nextDepth}`,
         `--max-repos ${nextRepos}`,

package/dist/commands/local-help-commands.js

@@ -71,37 +71,26 @@ export function localSubcommandHelp(command) {
         [
             "do-everything",
             [
-                "Usage: cockpit do-everything [--workspace <path>] [--check | --no-repair] [--lock-wait <seconds>] [--json]",
-                "",
-                "Diagnose, repair, and verify this machine. doctor, do-everything, and fix run the same job.",
-                "Repairs CLI, background sync, sign-in, roots, memory and hooks, agent rules, catch-up, uploads, and cleanup.",
-                "--check or --no-repair diagnoses without repairs. --dry-run previews repairs.",
-                "--lock-wait defaults to 600 seconds; progress prints every 30 seconds.",
-                "--json includes steps, repairs, and needs_person. Exit 0 means nothing needs you.",
-                "Maintainers: --update-tag next keeps self-update on the prerelease candidate.",
+                "Usage: cockpit do-everything [same flags as cockpit doctor]",
+                "Same command as `cockpit doctor`.",
             ],
         ],
         [
             "fix",
             [
-                "Usage: cockpit fix [--workspace <path>] [--check | --no-repair] [--lock-wait <seconds>] [--json]",
-                "",
-                "Diagnose, repair, and verify this machine. doctor, do-everything, and fix run the same job.",
-                "Repairs CLI, background sync, sign-in, roots, memory and hooks, agent rules, catch-up, uploads, and cleanup.",
-                "--check or --no-repair diagnoses without repairs. --dry-run previews repairs.",
-                "--lock-wait defaults to 600 seconds; progress prints every 30 seconds.",
-                "--json includes steps, repairs, and needs_person. Exit 0 means nothing needs you.",
-                "Maintainers: --update-tag next keeps self-update on the prerelease candidate.",
+                "Usage: cockpit fix [same flags as cockpit doctor]",
+                "Same command as `cockpit doctor`.",
             ],
         ],
         [
             "doctor",
             [
-                "Usage: cockpit doctor [--workspace <path>] [--check | --no-repair] [--lock-wait <seconds>] [--json]",
+                "Usage: cockpit doctor [--workspace <path>] [--check | --no-repair] [--lock-wait <seconds>] [--backfill-budget <seconds>] [--json]",
                 "",
-                "Diagnose, repair, and verify this machine. doctor, do-everything, and fix run the same job.",
+                "Diagnose, repair, and verify this machine.",
                 "Repairs CLI, background sync, sign-in, roots, memory and hooks, agent rules, catch-up, uploads, and cleanup.",
                 "--check or --no-repair diagnoses without repairs. --dry-run previews repairs.",
+                "--backfill-budget defaults to 900 seconds; catch-up repeats chunks until complete, with progress every 30 seconds.",
                 "--lock-wait defaults to 600 seconds; progress prints every 30 seconds.",
                 "--json includes steps, repairs, and needs_person. Exit 0 means nothing needs you.",
                 "Maintainers: --update-tag next keeps self-update on the prerelease candidate.",
@@ -598,7 +587,7 @@ export function localSubcommandHelp(command) {
                 "and for Codex (~/.codex/config.toml, ~/.codex/skills/bli-memory/).",
                 "Idempotent: it merges with what is already there, never duplicates its own",
                 "entries, and reads the stored config back before reporting success.",
-                "`do-everything` runs it, and the sync tick re-runs it at most once a day.",
+                "`cockpit doctor` runs it, and the sync tick re-runs it at most once a day.",
                 "See docs/runbooks/bli-memory-install.md.",
                 "log appends an opinion to ~/.codex/AGENT-EXPERIENCE.md and posts it to Tower.",
                 "Use --reason-stdin instead of a quoted reason; --json reports shipped status.",

package/dist/commands/local-help.js

@@ -55,6 +55,8 @@ export const rootCommandNames = new Set([
     "careers",
     "usage",
 ]);
+/** Public names omit compatibility spellings while the router keeps accepting them. */
+export const publicCommandNames = new Set([...rootCommandNames].filter((name) => name !== "do-everything" && name !== "fix"));
 export function localCommandHelp(command) {
     if (command)
         return localSubcommandHelp(command);
@@ -62,9 +64,7 @@ export function localCommandHelp(command) {
         "  cockpit onboard [--ticket <id>] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--branch <name>] [--no-auth] [--max-depth <n>] [--max-repos <n>] [--json]",
         "  cockpit update [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--no-auth] [--json]",
         "  cockpit upgrade [same flags as update]",
-        "  cockpit do-everything [--workspace <path>] [--dashboard-url <url>] [--update-tag <tag>] [--dry-run] [--json]",
-        "  cockpit fix [same flags as do-everything]",
-        "  cockpit doctor [--check | --no-repair] [--lock-wait <seconds>] [--json]",
+        "  cockpit doctor [--check | --no-repair] [--lock-wait <seconds>] [--backfill-budget <seconds>] [--json]",
         "  cockpit install [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--json]",
         "  cockpit login [--pair <code>] [--no-browser] [--legacy-pair] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",
         "  cockpit pair [--pair <code>] [--no-browser] [--legacy-pair] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",

package/dist/commands/memory-install.js

@@ -6,7 +6,7 @@
  * hosts talk to. Nothing about that reaches an intern's machine unless
  * something puts it there — the vendor plugin never had a fleet install path,
  * which is why every machine was configured by hand. This is that path, and it
- * does not ask: `do-everything` runs it, and the sync tick re-runs it at most
+ * does not ask: `doctor` runs it, and the sync tick re-runs it at most
  * once a day so a machine converges without anyone typing anything.
  *
  * What it writes, and where, is in the two halves:

package/dist/commands/onboard-report.js

@@ -137,11 +137,11 @@ export function nextStepForOnboardBlocker(blocker, options = {}) {
         case "ticket_binding":
             return "Run `cockpit start --ticket <id>` when actual ticket work begins, then run `cockpit sync`.";
         case "device_pairing":
-            return "Ask Edward to approve this machine in the dashboard under Ambient -> Collector approvals, then run `cockpit onboard` again.";
+            return "Ask Edward to approve this machine in the dashboard under Ambient -> Collector approvals, then run `cockpit doctor` again.";
         case "network_or_ingest":
-            return "Check dashboard URL/network, then run `cockpit sync --json` or rerun `cockpit onboard`.";
+            return "Check dashboard URL/network, then run `cockpit doctor`.";
         case "install":
-            return "Rerun `cockpit onboard` from the repo root; it will reinstall local config.";
+            return "Rerun `cockpit doctor` from the repo root; it will reinstall local config.";
         case "work_context":
             return "Run `cockpit start --ticket <id> --workspace \"$PWD\"`, then retry `cockpit sync`.";
         default:

package/dist/commands/public-root.js

@@ -7,7 +7,7 @@ export async function runCockpitCli(argv, io) {
   // commands/root.ts, so the routing has to be mirrored here or the fix
   // ships to nobody.
   if (!command) {
-    return runLocalCockpitCli(["do-everything"], io);
+    return runLocalCockpitCli(["doctor"], io);
   }
   if (command === "--help" || command === "-h") {
     writeLine(io?.stdout ?? process.stdout, cockpitHelp());
@@ -15,7 +15,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.101");
+    writeLine(io?.stdout ?? process.stdout, "0.2.103");
     return 0;
   }
 
@@ -31,7 +31,7 @@ export async function runCockpitCli(argv, io) {
 
 function cockpitHelp() {
   return [
-    "Just run `cockpit do-everything` — it takes this machine from nothing to collecting and asks you anything it needs.",
+    "Just run `cockpit doctor`, it takes this machine from nothing to collecting and asks you anything it needs.",
     "(Running plain `cockpit` does the same thing.)",
     "",
     "Everything below is for scripting and agents.",
@@ -39,11 +39,8 @@ function cockpitHelp() {
     "Usage:",
     localCommandHelp(),
     "",
-    "Install: `npm install -g @bli-cockpit/cli@latest`.",
-    "Fix everything: run `cockpit doctor`. `do-everything` and `fix` are exact aliases; --check diagnoses without repairs.",
-    "Update: run `cockpit update` to refresh the global CLI and rerun onboarding checks.",
-    "Intern path: run `cockpit onboard`; it confirms a `/BLI` collection root before syncing.",
-    "Headless/reused laptop path: `cockpit onboard --email <email> --workspace ~/BLI`.",
+    "Install: `npm i -g @bli-cockpit/cli && cockpit doctor`.",
+    "Repair and verify: run `cockpit doctor`; --check diagnoses without repairs.",
     "Already onboarded: run `cockpit doctor` from anywhere to repair and verify this machine.",
     "Agent setup: `cockpit doctor` installs and verifies AGENTS.md/CLAUDE.md rules.",
     "Dashboard URL is optional for normal production use; pass `--dashboard-url` only for staging/custom dashboards or forced re-pairing.",

package/dist/commands/sync-followups-autostart.js

@@ -65,7 +65,7 @@ function sayNoProcessRunner() {
     console.error("[autostart-self-heal] no process runner on this io; the repair could not be attempted", JSON.stringify({
         reason: "runner_unavailable",
         platform: process.platform,
-        next_action: "reinstall the CLI (npm i -g @bli-cockpit/cli) and run `cockpit autostart install`",
+        next_action: "reinstall the CLI (npm i -g @bli-cockpit/cli && cockpit doctor) and run `cockpit autostart install`",
     }));
 }
 /** The same fact as a receipt, so the fleet table can see it too. */

package/dist/commands/sync-followups-memory.js

@@ -1,7 +1,7 @@
 /**
  * Follow-up three: keep BLI Memory registered with both agent hosts (BLI-3580).
  *
- * Nobody is going to be asked to install a hook. `do-everything` registers it
+ * Nobody is going to be asked to install a hook. `doctor` registers it
  * on the way through, and this puts it back if a host config is edited,
  * replaced, or restored from a machine that never had it — at most once a day,
  * because the steady state is "already current" and re-proving that every

package/dist/commands/sync-followups-self-update.js

@@ -4,7 +4,7 @@ import { getCollectorRuntimePaths, LOCAL_COLLECTOR_VERSION, } from "../local-sta
 import { envWithNodeRuntimeOnPath, runScheduledSelfUpdate, } from "../scheduled-self-update.js";
 /**
  * BLI-2601: the fleet keeps itself current on npm `latest` without anyone
- * re-running `npm i -g @bli-cockpit/cli` by hand after day 0. This always
+ * re-running `npm i -g @bli-cockpit/cli && cockpit doctor` by hand after day 0. This always
  * runs AFTER `runSync` has already decided and reported collection's own
  * outcome above — a stuck or failing self-update can never block or delay
  * collection, and a collection failure never blocks the chance to

package/dist/commands/tower-mcp-install.js

@@ -3,7 +3,7 @@
  * `bli-memory` (BLI-3706, "Agent-friendly is the definition of done").
  *
  * Rides `cockpit memory install`/`cockpit memory status` rather than a new
- * verb: that command already runs unasked from `do-everything` and the daily
+ * verb: that command already runs unasked from `doctor` and the daily
  * sync tick (`memory-install.ts`'s own header), which is the ONLY way a
  * registration reaches every intern machine without anyone typing anything.
  * A second, un-invoked `mcp install` verb of its own would ship the feature

package/dist/crash-guard.js

@@ -1,7 +1,7 @@
 /**
  * A run that dies must not be able to say it worked (BLI-4110).
  *
- * On 2026-09-09 `cockpit do-everything` on the founder's Windows box reached
+ * On 2026-09-09 `cockpit doctor` on the founder's Windows box reached
  * "windows task repair converged", printed `Error: read ENOTCONN` from
  * `child_process.spawn`, and **exited 0**. That is the worse half of that
  * incident. A repair that fails loudly gets looked at; a repair that dies

package/dist/process-runner.js

@@ -56,7 +56,7 @@ export function createCapturedExecRunner(options = {}) {
  * the Windows Task Scheduler — and any other non-interactive host — the
  * parent's stdin is not a console: it can be a pipe nobody is writing to, or a
  * socket that was never connected, and reading it raises `read ENOTCONN` from
- * inside `child_process.spawn`. That is the error `cockpit do-everything`
+ * inside `child_process.spawn`. That is the error `cockpit doctor`
  * printed on the founder's box on 2026-09-09, from `reexecDoctor`, in a
  * non-interactive shell.
  *
@@ -66,7 +66,7 @@ export function createCapturedExecRunner(options = {}) {
  * this whole ticket is about.
  *
  * **stdin is inherited only when there is a console to read from.** A
- * re-execed `do-everything` under a scheduler has nothing to type at it; the
+ * re-execed `doctor` under a scheduler has nothing to type at it; the
  * handle was pure liability. `"ignore"` gives the child a real, closed stdin
  * rather than a broken one, so a child that does read it gets EOF instead of
  * an error.

package/dist/scheduled-self-update.js

@@ -26,7 +26,7 @@ export function envWithNodeRuntimeOnPath(env, nodeExecutable = process.execPath)
 /**
  * BLI-2601. Runs at most once per day from inside `cockpit sync`'s
  * post-collection tail, so the fleet converges on npm `latest` without
- * anyone re-running `npm i -g @bli-cockpit/cli` by hand after day 0.
+ * anyone re-running `npm i -g @bli-cockpit/cli && cockpit doctor` by hand after day 0.
  *
  * Deliberately does not re-exec: this process already has the OLD code
  * loaded in memory, so nothing in-process could prove a re-exec actually

package/dist/upload-envelope-build.js

@@ -46,7 +46,7 @@ async function readPairedCollector(paths) {
                 ...describeError(error),
             }));
         }
-        throw new LocalUploadBlockedError("not_installed", "Local collector config missing. Install/update the CLI, then run `cockpit do-everything` before `cockpit sync`.", "npm install -g @bli-cockpit/cli@latest && cockpit do-everything");
+        throw new LocalUploadBlockedError("not_installed", "Local collector config missing. Install/update the CLI, then run `cockpit doctor` before `cockpit sync`.", "npm i -g @bli-cockpit/cli && cockpit doctor");
     });
     const sessionFile = await readLocalCollectorSessionFile(paths).catch((error) => {
         // Same trap on the pairing half: `unpaired` sends the operator to

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/cli",
-  "version": "0.2.101",
+  "version": "0.2.103",
   "private": false,
   "type": "module",
   "bin": {
@@ -27,8 +27,8 @@
     "test": "node dist/cli.js --help && node ../../scripts/assert-public-cli-routing.mjs && node ../../scripts/assert-public-cli-verb-help.mjs && node ../../scripts/assert-public-cli-runtime-files.mjs && node ../../scripts/assert-public-cli-exit-contract.mjs && node ../../scripts/assert-public-cli-no-fleet-posts.mjs && node ../../scripts/assert-public-package-pack.mjs --workspace=@bli-cockpit/cli"
   },
   "dependencies": {
-    "@bli-cockpit/memory-mcp": "0.1.26",
-    "@bli-cockpit/mcp": "0.1.32",
+    "@bli-cockpit/memory-mcp": "0.1.27",
+    "@bli-cockpit/mcp": "0.1.33",
     "@bli-cockpit/telemetry-core": "0.1.43"
   }
 }