@bli-cockpit/cli 0.2.112 → 0.2.113

package/dist/commands/local-args-tower-admin.js

@@ -2,7 +2,8 @@
  * The commands that manage this machine's account or watch the pipeline
  * rather than carry on a conversation: `cockpit scout`, `cockpit ops`,
  * `cockpit slack`, `cockpit settings`, `cockpit team`, and `cockpit model`.
- * Split out of local-args-tower.ts (BLI-3636).
+ * Split out of local-args-tower.ts (BLI-3636); the `settings` sections moved
+ * once more, into `./local-args-tower-settings.js`, and are re-exported below.
  *
  * Every parser moved verbatim: same flags, same defaults, same refusal
  * sentences. The two constants this family publishes
@@ -11,6 +12,12 @@
  */
 import { optionalEmail, optionalNonEmpty, optionalPositiveInteger, optionalUrl, parseNamedArgs, } from "./local-arg-values.js";
 import { isTeamDeviceRevokeReasonLabel, TEAM_DEVICE_REVOKE_REASON_LABELS, } from "./team-device-reasons.js";
+/**
+ * `cockpit settings` has its own file: five sections, one set of rules each.
+ * It is re-exported here because this is the address every caller imports it
+ * from.
+ */
+export { parseSettingsArgs } from "./local-args-tower-settings.js";
 /** The shortest prefix `cockpit scout start` will resolve. Below this, ids collide. */
 export const SCOUT_MIN_PREFIX_LENGTH = 6;
 /**
@@ -220,156 +227,6 @@ export function parseSlackArgs(args) {
         ...base,
     };
 }
-const SETTINGS_SECTIONS = ["personal", "switches", "models", "env", "cli-floor"];
-/**
- * `cockpit settings [section] [verb] [args]` (BLI-3461).
- *
- * The flag set is the UNION across sections and the combinations are checked
- * afterwards, per section — the same shape `parseDoctorArgs` uses. A flag that
- * belongs to another section is refused by name rather than silently ignored,
- * because a dropped `--project` on an env write is a change a person believes
- * they made.
- */
-export function parseSettingsArgs(args) {
-    const values = parseNamedArgs(args, {
-        allowedFlags: [
-            "--home",
-            "--dashboard-url",
-            "--json",
-            "--chat-model",
-            "--brief-model",
-            "--chat",
-            "--memory",
-            "--project",
-            "--file",
-            "--id",
-            "--content-stdin",
-            "--yes",
-        ],
-        valueFlags: [
-            "--home",
-            "--dashboard-url",
-            "--chat-model",
-            "--brief-model",
-            "--chat",
-            "--memory",
-            "--project",
-            "--file",
-            "--id",
-        ],
-    });
-    const [rawSection, ...rest] = values.positionals;
-    const common = {
-        homeDir: optionalNonEmpty(values.flags.get("--home")),
-        dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")),
-        yes: values.booleans.has("--yes"),
-        json: values.booleans.has("--json"),
-    };
-    if (!rawSection) {
-        if (rest.length > 0)
-            throw new Error("settings does not accept that argument.");
-        return { kind: "settings", section: "overview", action: "show", ...common };
-    }
-    if (!SETTINGS_SECTIONS.includes(rawSection)) {
-        throw new Error(`settings section must be one of ${SETTINGS_SECTIONS.join(", ")} — or nothing, for all of them.`);
-    }
-    const section = rawSection;
-    if (section === "personal") {
-        if (rest.length > 0)
-            throw new Error("settings personal does not accept positional arguments.");
-        const chatModel = optionalNonEmpty(values.flags.get("--chat-model"));
-        const briefModel = optionalNonEmpty(values.flags.get("--brief-model"));
-        return {
-            kind: "settings",
-            section,
-            action: chatModel || briefModel ? "set" : "show",
-            chatModel,
-            briefModel,
-            ...common,
-        };
-    }
-    if (section === "switches") {
-        if (rest.length === 0) {
-            return { kind: "settings", section, action: "show", ...common };
-        }
-        if (rest[0] !== "set") {
-            throw new Error("settings switches takes no verb, or `set <key> <value>`.");
-        }
-        const [, key, value, ...extra] = rest;
-        if (!key || !value || extra.length > 0) {
-            throw new Error("settings switches set needs exactly a key and a value.");
-        }
-        return { kind: "settings", section, action: "set", switchKey: key, switchValue: value, ...common };
-    }
-    /**
-     * BLI-3557: `settings cli-floor` shows the fleet forced-update floor,
-     * `settings cli-floor <version>` raises it. There is no `set` verb because
-     * there is nothing else to do to a floor, and no flag for the version because
-     * a bare positional is how a release says it: `cockpit settings cli-floor
-     * 0.2.48`. The server refuses a LOWER version; the terminal does not
-     * second-guess that decision locally.
-     */
-    if (section === "cli-floor") {
-        if (rest.length === 0) {
-            return { kind: "settings", section, action: "show", ...common };
-        }
-        const [version, ...extra] = rest;
-        if (!version || extra.length > 0) {
-            throw new Error("settings cli-floor takes no argument, or one version: `cli-floor 0.2.48`.");
-        }
-        return { kind: "settings", section, action: "set", floorVersion: version, ...common };
-    }
-    if (section === "models") {
-        if (rest.length === 0) {
-            return { kind: "settings", section, action: "show", ...common };
-        }
-        if (rest[0] !== "set" || rest.length > 1) {
-            throw new Error("settings models takes no verb, or `set --chat <key>` / `set --memory <id>`.");
-        }
-        const orgChatModel = optionalNonEmpty(values.flags.get("--chat"));
-        const orgMemoryModel = optionalNonEmpty(values.flags.get("--memory"));
-        if (!orgChatModel && !orgMemoryModel) {
-            throw new Error("settings models set needs --chat <key>, --memory <id>, or both.");
-        }
-        return { kind: "settings", section, action: "set", orgChatModel, orgMemoryModel, ...common };
-    }
-    // env
-    const verb = rest[0] ?? "list";
-    if (rest.length > 1)
-        throw new Error("settings env takes one verb: list, set, or delete.");
-    if (verb === "list") {
-        return { kind: "settings", section, action: "list", ...common };
-    }
-    if (verb === "set") {
-        const envProject = optionalNonEmpty(values.flags.get("--project"));
-        const envFile = optionalNonEmpty(values.flags.get("--file"));
-        if (!envProject || !envFile) {
-            throw new Error("settings env set needs --project <project> and --file <file name>.");
-        }
-        if (!values.booleans.has("--content-stdin")) {
-            // Deliberate: there is no `--content <value>` flag and never will be. A
-            // secret on a command line lands in shell history and in every process
-            // listing on the machine.
-            throw new Error("settings env set reads the file contents from stdin: add --content-stdin and pipe the file in.");
-        }
-        return {
-            kind: "settings",
-            section,
-            action: "set",
-            envProject,
-            envFile,
-            contentStdin: true,
-            ...common,
-        };
-    }
-    if (verb === "delete") {
-        const envId = optionalNonEmpty(values.flags.get("--id"));
-        if (!envId)
-            throw new Error("settings env delete needs --id <uuid>.");
-        return { kind: "settings", section, action: "delete", envId, ...common };
-    }
-    throw new Error("settings env takes one verb: list, set, or delete.");
-}
 /**
  * `cockpit team [members|invite <email>|role <userId>|device list|device
  * revoke <id|name>]` (BLI-3461; `device` added BLI-3559).

package/dist/commands/local-args-tower-settings.js

@@ -0,0 +1,186 @@
+/**
+ * What a person may type at `cockpit settings` (BLI-3461), split out of
+ * local-args-tower-admin.ts by section so each section's rules fit on one
+ * screen. Every flag, default and refusal sentence moved verbatim;
+ * `parseSettingsArgs` is still exported from `./local-args-tower-admin.js`,
+ * the address it has always had.
+ *
+ * The flag set is the UNION across sections and the combinations are checked
+ * afterwards, per section — the same shape `parseDoctorArgs` uses. A flag that
+ * belongs to another section is refused by name rather than silently ignored,
+ * because a dropped `--project` on an env write is a change a person believes
+ * they made.
+ */
+import { optionalNonEmpty, optionalUrl, parseNamedArgs } from "./local-arg-values.js";
+const SETTINGS_SECTIONS = ["personal", "switches", "models", "env", "cli-floor"];
+/** `cockpit settings [section] [verb] [args]`: the section picker. */
+export function parseSettingsArgs(args) {
+    const values = parseNamedArgs(args, {
+        allowedFlags: [
+            "--home",
+            "--dashboard-url",
+            "--json",
+            "--chat-model",
+            "--brief-model",
+            "--chat",
+            "--memory",
+            "--project",
+            "--file",
+            "--id",
+            "--content-stdin",
+            "--yes",
+        ],
+        valueFlags: [
+            "--home",
+            "--dashboard-url",
+            "--chat-model",
+            "--brief-model",
+            "--chat",
+            "--memory",
+            "--project",
+            "--file",
+            "--id",
+        ],
+    });
+    const [rawSection, ...rest] = values.positionals;
+    const common = {
+        homeDir: optionalNonEmpty(values.flags.get("--home")),
+        dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")),
+        yes: values.booleans.has("--yes"),
+        json: values.booleans.has("--json"),
+    };
+    if (!rawSection) {
+        if (rest.length > 0)
+            throw new Error("settings does not accept that argument.");
+        return { kind: "settings", section: "overview", action: "show", ...common };
+    }
+    if (!SETTINGS_SECTIONS.includes(rawSection)) {
+        throw new Error(`settings section must be one of ${SETTINGS_SECTIONS.join(", ")} — or nothing, for all of them.`);
+    }
+    switch (rawSection) {
+        case "personal":
+            return parsePersonalSection(rest, values.flags, common);
+        case "switches":
+            return parseSwitchesSection(rest, common);
+        case "cli-floor":
+            return parseCliFloorSection(rest, common);
+        case "models":
+            return parseModelsSection(rest, values.flags, common);
+        case "env":
+            return parseEnvSection(rest, values.flags, values.booleans, common);
+    }
+}
+/** `settings personal [--chat-model <key>] [--brief-model <key>]`. */
+function parsePersonalSection(rest, flags, common) {
+    if (rest.length > 0)
+        throw new Error("settings personal does not accept positional arguments.");
+    const chatModel = optionalNonEmpty(flags.get("--chat-model"));
+    const briefModel = optionalNonEmpty(flags.get("--brief-model"));
+    return {
+        kind: "settings",
+        section: "personal",
+        action: chatModel || briefModel ? "set" : "show",
+        chatModel,
+        briefModel,
+        ...common,
+    };
+}
+/** `settings switches` or `settings switches set <key> <value>`. */
+function parseSwitchesSection(rest, common) {
+    if (rest.length === 0) {
+        return { kind: "settings", section: "switches", action: "show", ...common };
+    }
+    if (rest[0] !== "set") {
+        throw new Error("settings switches takes no verb, or `set <key> <value>`.");
+    }
+    const [, key, value, ...extra] = rest;
+    if (!key || !value || extra.length > 0) {
+        throw new Error("settings switches set needs exactly a key and a value.");
+    }
+    return {
+        kind: "settings",
+        section: "switches",
+        action: "set",
+        switchKey: key,
+        switchValue: value,
+        ...common,
+    };
+}
+/**
+ * BLI-3557: `settings cli-floor` shows the fleet forced-update floor,
+ * `settings cli-floor <version>` raises it. There is no `set` verb because
+ * there is nothing else to do to a floor, and no flag for the version because
+ * a bare positional is how a release says it: `cockpit settings cli-floor
+ * 0.2.48`. The server refuses a LOWER version; the terminal does not
+ * second-guess that decision locally.
+ */
+function parseCliFloorSection(rest, common) {
+    if (rest.length === 0) {
+        return { kind: "settings", section: "cli-floor", action: "show", ...common };
+    }
+    const [version, ...extra] = rest;
+    if (!version || extra.length > 0) {
+        throw new Error("settings cli-floor takes no argument, or one version: `cli-floor 0.2.48`.");
+    }
+    return { kind: "settings", section: "cli-floor", action: "set", floorVersion: version, ...common };
+}
+/** `settings models` or `settings models set --chat <key> / --memory <id>`. */
+function parseModelsSection(rest, flags, common) {
+    if (rest.length === 0) {
+        return { kind: "settings", section: "models", action: "show", ...common };
+    }
+    if (rest[0] !== "set" || rest.length > 1) {
+        throw new Error("settings models takes no verb, or `set --chat <key>` / `set --memory <id>`.");
+    }
+    const orgChatModel = optionalNonEmpty(flags.get("--chat"));
+    const orgMemoryModel = optionalNonEmpty(flags.get("--memory"));
+    if (!orgChatModel && !orgMemoryModel) {
+        throw new Error("settings models set needs --chat <key>, --memory <id>, or both.");
+    }
+    return {
+        kind: "settings",
+        section: "models",
+        action: "set",
+        orgChatModel,
+        orgMemoryModel,
+        ...common,
+    };
+}
+/** `settings env [list|set --project <p> --file <f> --content-stdin|delete --id <uuid>]`. */
+function parseEnvSection(rest, flags, booleans, common) {
+    const verb = rest[0] ?? "list";
+    if (rest.length > 1)
+        throw new Error("settings env takes one verb: list, set, or delete.");
+    if (verb === "list") {
+        return { kind: "settings", section: "env", action: "list", ...common };
+    }
+    if (verb === "set") {
+        const envProject = optionalNonEmpty(flags.get("--project"));
+        const envFile = optionalNonEmpty(flags.get("--file"));
+        if (!envProject || !envFile) {
+            throw new Error("settings env set needs --project <project> and --file <file name>.");
+        }
+        if (!booleans.has("--content-stdin")) {
+            // Deliberate: there is no `--content <value>` flag and never will be. A
+            // secret on a command line lands in shell history and in every process
+            // listing on the machine.
+            throw new Error("settings env set reads the file contents from stdin: add --content-stdin and pipe the file in.");
+        }
+        return {
+            kind: "settings",
+            section: "env",
+            action: "set",
+            envProject,
+            envFile,
+            contentStdin: true,
+            ...common,
+        };
+    }
+    if (verb === "delete") {
+        const envId = optionalNonEmpty(flags.get("--id"));
+        if (!envId)
+            throw new Error("settings env delete needs --id <uuid>.");
+        return { kind: "settings", section: "env", action: "delete", envId, ...common };
+    }
+    throw new Error("settings env takes one verb: list, set, or delete.");
+}

package/dist/commands/onboard-report-blockers.js

@@ -0,0 +1,58 @@
+import { writeLine } from "./cli-io.js";
+import { COLLECTION_ROOT_REQUIRED, missingCollectionRootMessage, } from "../onboarding-roots.js";
+export function writeOnboardAutostartBlocker(io, result) {
+    writeLine(io.stderr, "BLOCKED: initial collection succeeded, but recurring background collection is not running.");
+    if (result?.message)
+        writeLine(io.stderr, `Failure: ${result.message}`);
+    writeLine(io.stderr, "Next: run `cockpit autostart install`, then require `cockpit autostart status --json` to exit 0.");
+}
+/**
+ * The blocked-backfill result, identical in both onboarding arms. `extra`
+ * carries the arm-specific keys and is spread where those keys appeared before,
+ * so the `--json` key order is unchanged.
+ */
+export function writeOnboardBackfillBlockedResult(io, options) {
+    if (!options.json) {
+        writeOnboardBackfillBlocker(io, options.backfill);
+        return;
+    }
+    writeLine(io.stdout, JSON.stringify({
+        ...options.base,
+        ...options.extra,
+        backfill: onboardBackfillPayload(options.backfill),
+        blocker: "backfill_incomplete",
+        backfill_failure_reason: options.backfill.failureReason,
+        next_step: options.backfill.retryCommand,
+    }, null, 2));
+}
+function writeOnboardBackfillBlocker(io, outcome) {
+    writeLine(io.stderr, "BLOCKED: all-history Codex and Claude backfill is incomplete for the approved collection roots.");
+    writeLine(io.stderr, `Failure: ${outcome.failureReason ?? `backfill_${outcome.status}`}`);
+    writeLine(io.stderr, `Retry: ${outcome.retryCommand}`);
+}
+function onboardBackfillPayload(outcome) {
+    return (outcome.result ?? {
+        status: "blocked",
+        failure_reason: outcome.failureReason,
+        retry_command: outcome.retryCommand,
+    });
+}
+export function nextStepForOnboardBlocker(blocker, options = {}) {
+    switch (blocker) {
+        case COLLECTION_ROOT_REQUIRED:
+            return missingCollectionRootMessage(options);
+        case "ticket":
+        case "ticket_binding":
+            return "Run `cockpit start --ticket <id>` when actual ticket work begins, then run `cockpit sync`.";
+        case "device_pairing":
+            return "Ask Edward to approve this machine in the dashboard under Ambient -> Collector approvals, then run `cockpit doctor` again.";
+        case "network_or_ingest":
+            return "Check dashboard URL/network, then run `cockpit doctor`.";
+        case "install":
+            return "Rerun `cockpit doctor` from the repo root; it will reinstall local config.";
+        case "work_context":
+            return "Run `cockpit start --ticket <id> --workspace \"$PWD\"`, then retry `cockpit sync`.";
+        default:
+            return "Run `cockpit status --json` and report the blocker label plus last failure reason.";
+    }
+}

package/dist/commands/onboard-report.js

@@ -1,6 +1,7 @@
 import { writeLine } from "./cli-io.js";
 import { attributedSyncRunStatus, displayTicketId, rawEvidenceSyncLine, writeAgentSessionSummary, } from "./collection-report.js";
-import { COLLECTION_ROOT_REQUIRED, missingCollectionRootMessage, } from "../onboarding-roots.js";
+import { writeOnboardAutostartBlocker } from "./onboard-report-blockers.js";
+export { nextStepForOnboardBlocker, writeOnboardAutostartBlocker, writeOnboardBackfillBlockedResult, } from "./onboard-report-blockers.js";
 export function writeOnboardBanner(command, io) {
     writeLine(io.stdout, "Setting up Tower");
     writeLine(io.stdout, `Dashboard: ${command.dashboardUrl}`);
@@ -54,43 +55,6 @@ export function onboardAgentRulesInstallLine(result) {
             return "not installed.";
     }
 }
-export function writeOnboardAutostartBlocker(io, result) {
-    writeLine(io.stderr, "BLOCKED: initial collection succeeded, but recurring background collection is not running.");
-    if (result?.message)
-        writeLine(io.stderr, `Failure: ${result.message}`);
-    writeLine(io.stderr, "Next: run `cockpit autostart install`, then require `cockpit autostart status --json` to exit 0.");
-}
-/**
- * The blocked-backfill result, identical in both onboarding arms. `extra`
- * carries the arm-specific keys and is spread where those keys appeared before,
- * so the `--json` key order is unchanged.
- */
-export function writeOnboardBackfillBlockedResult(io, options) {
-    if (!options.json) {
-        writeOnboardBackfillBlocker(io, options.backfill);
-        return;
-    }
-    writeLine(io.stdout, JSON.stringify({
-        ...options.base,
-        ...options.extra,
-        backfill: onboardBackfillPayload(options.backfill),
-        blocker: "backfill_incomplete",
-        backfill_failure_reason: options.backfill.failureReason,
-        next_step: options.backfill.retryCommand,
-    }, null, 2));
-}
-function writeOnboardBackfillBlocker(io, outcome) {
-    writeLine(io.stderr, "BLOCKED: all-history Codex and Claude backfill is incomplete for the approved collection roots.");
-    writeLine(io.stderr, `Failure: ${outcome.failureReason ?? `backfill_${outcome.status}`}`);
-    writeLine(io.stderr, `Retry: ${outcome.retryCommand}`);
-}
-function onboardBackfillPayload(outcome) {
-    return (outcome.result ?? {
-        status: "blocked",
-        failure_reason: outcome.failureReason,
-        retry_command: outcome.retryCommand,
-    });
-}
 /**
  * Every onboard `--json` payload is `onboardResult` plus the roots this pass
  * resolved plus whatever extra keys that arm of onboarding adds. Assembling it
@@ -129,25 +93,6 @@ function onboardResult(resultStatus, command, install, pair, sync, status) {
         next_dashboard_path: `${command.dashboardUrl}/my-work`,
     };
 }
-export function nextStepForOnboardBlocker(blocker, options = {}) {
-    switch (blocker) {
-        case COLLECTION_ROOT_REQUIRED:
-            return missingCollectionRootMessage(options);
-        case "ticket":
-        case "ticket_binding":
-            return "Run `cockpit start --ticket <id>` when actual ticket work begins, then run `cockpit sync`.";
-        case "device_pairing":
-            return "Ask Edward to approve this machine in the dashboard under Ambient -> Collector approvals, then run `cockpit doctor` again.";
-        case "network_or_ingest":
-            return "Check dashboard URL/network, then run `cockpit doctor`.";
-        case "install":
-            return "Rerun `cockpit doctor` from the repo root; it will reinstall local config.";
-        case "work_context":
-            return "Run `cockpit start --ticket <id> --workspace \"$PWD\"`, then retry `cockpit sync`.";
-        default:
-            return "Run `cockpit status --json` and report the blocker label plus last failure reason.";
-    }
-}
 /** Step 3 of a single-repo onboard: the work context this machine just bound. */
 export function writeOnboardWorkContextStarted(io, context) {
     writeLine(io.stdout, "3/5 Work context active.");

package/dist/commands/ops-render-ladder.js

@@ -0,0 +1,25 @@
+/**
+ * The LADDER block: the queue every session joins at ingest, and what the
+ * Railway drainer has done with it. Failures are grouped by the reason the
+ * rung named itself with, because "12 failed" sends nobody anywhere.
+ */
+export function renderLadder(ladder, dim) {
+    const lines = ["", `LADDER  ${ladder.summary ?? "(no summary)"}`];
+    if (ladder.readError) {
+        lines.push(`  queue not read (${ladder.readError})`);
+        return lines;
+    }
+    const reasons = Object.entries(ladder.failed_by_reason ?? {}).sort((left, right) => right[1] - left[1]);
+    for (const [reason, count] of reasons.slice(0, 8)) {
+        lines.push(dim(`  ${String(count).padStart(5)}  ${reason}`));
+    }
+    if (reasons.length > 8)
+        lines.push(dim(`  ${reasons.length - 8} more reasons not shown`));
+    if ((ladder.stale_leases ?? 0) > 0) {
+        lines.push(dim(`  ${ladder.stale_leases} stale lease(s) waiting to be taken over`));
+    }
+    if (ladder.oldest_pending_session_id) {
+        lines.push(dim(`  oldest pending session ${ladder.oldest_pending_session_id}`));
+    }
+    return lines;
+}

package/dist/commands/ops-render.js

@@ -16,7 +16,12 @@ import { renderCoverageBuckets, } from "./ops-render-coverage.js";
 // BLI-3909: today's spend by model, its own renderer for the same reason the
 // coverage table has one — this file is at the repo's readability floor.
 import { renderSpend } from "./ops-render-spend.js";
+// BLI-4341: the ladder queue block, its own renderer for the same reason the
+// coverage table and the spend section have one: this file is at the repo's
+// readability floor.
+import { renderLadder } from "./ops-render-ladder.js";
 export { renderSpend } from "./ops-render-spend.js";
+export { renderLadder } from "./ops-render-ladder.js";
 export { renderMemoryHooks, renderMemoryUsage } from "./ops-render-memory.js";
 export { renderCoverageBuckets };
 /** The word a person reads. Short, fixed width, and never a bare colour. */
@@ -134,6 +139,8 @@ options = {}) {
     }
     if (payload.spend)
         lines.push(...renderSpend(payload.spend, dim));
+    if (payload.ladder)
+        lines.push(...renderLadder(payload.ladder, dim));
     const slack = payload.skips?.slack;
     const external = payload.skips?.external;
     if (slack || external) {

package/dist/commands/public-root.js

@@ -15,7 +15,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.112");
+    writeLine(io?.stdout ?? process.stdout, "0.2.113");
     return 0;
   }
 

package/dist/commands/settings-overview.js

@@ -0,0 +1,94 @@
+/**
+ * What bare `cockpit settings` shows: every section at once (BLI-3461).
+ *
+ * It lives beside `settings.ts` because it is the only caller that has to hold
+ * six independent reads in its head at the same time and decide, per section,
+ * between a body, "admin only" and a named failure. The per-section verbs next
+ * door each answer for exactly one route.
+ *
+ * "Admin only" is not an error here. A read that 403s is the system working,
+ * so a section this person cannot see renders as one line saying so.
+ */
+import { writeLine } from "./cli-io.js";
+import { renderCliFloor, renderEnvBlobs, renderModelRouting, renderPersonal, renderSwitches, renderTeamSummary, } from "./settings-render.js";
+import { asRecord, callTower, isForbidden, writeCommandFailure, } from "./tower-command.js";
+/**
+ * Everything at once, with the sections this person may not see named as such.
+ *
+ * The six reads go out together: they are independent, and a person waiting on
+ * six sequential round trips would reasonably conclude the command had hung.
+ */
+export async function showOverview(command, tower, io) {
+    const [personal, switches, models, env, team, cliFloor] = await Promise.all([
+        callTower(tower, { path: "/api/settings/personal", label: "settings personal" }),
+        callTower(tower, { path: "/api/settings/switches", label: "settings switches" }),
+        callTower(tower, { path: "/api/settings/model-routing", label: "settings models" }),
+        callTower(tower, { path: "/api/settings/env-blobs", label: "settings env" }),
+        callTower(tower, { path: "/api/team/members", label: "settings team" }),
+        // BLI-3557: the floor rides the overview because "which version is the
+        // fleet being pulled to?" is a question people ask about their own laptop,
+        // and it went unanswered for weeks precisely because nothing showed it.
+        callTower(tower, { path: "/api/settings/cli-floor", label: "settings cli-floor" }),
+    ]);
+    // The one read every signed-in person is entitled to. If THAT is refused,
+    // nothing else is going to work either, so say so once and stop.
+    if (!personal.ok && !isForbidden(personal)) {
+        return writeCommandFailure(io, command.json, personal);
+    }
+    if (command.json) {
+        writeLine(io.stdout, JSON.stringify({
+            ok: true,
+            personal: sectionPayload(personal),
+            switches: sectionPayload(switches),
+            models: sectionPayload(models),
+            env: sectionPayload(env),
+            team: sectionPayload(team),
+            cliFloor: sectionPayload(cliFloor),
+        }));
+        return 0;
+    }
+    writeLine(io.stdout, "TOWER SETTINGS");
+    writeSection(io, "PERSONAL", personal, (body) => renderPersonal(body));
+    writeSection(io, "TEAM", team, (body) => renderTeamSummary(body));
+    writeSection(io, "SWITCHES", switches, (body) => renderSwitches(body));
+    writeSection(io, "MODELS", models, (body) => renderModelRouting(body));
+    writeSection(io, "ENV FILES", env, (body) => renderEnvBlobs(body));
+    writeSection(io, "FLEET CLI FLOOR", cliFloor, (body) => renderCliFloor(body));
+    writeLine(io.stderr, `[settings cli] overview ${JSON.stringify({
+        personal: outcome(personal),
+        team: outcome(team),
+        switches: outcome(switches),
+        models: outcome(models),
+        env: outcome(env),
+        cli_floor: outcome(cliFloor),
+    })}`);
+    return 0;
+}
+/** One section's heading and body — or the one line that says it is not yours. */
+function writeSection(io, heading, result, render) {
+    writeLine(io.stdout, "");
+    writeLine(io.stdout, heading);
+    if (isForbidden(result)) {
+        writeLine(io.stdout, "  admin only");
+        return;
+    }
+    if (!result.ok) {
+        // Not "admin only" and not shown: a real failure, named where it happened.
+        writeLine(io.stdout, `  unavailable — ${result.detail}`);
+        return;
+    }
+    for (const line of render(asRecord(result.body)))
+        writeLine(io.stdout, line);
+}
+function sectionPayload(result) {
+    if (result.ok)
+        return result.body;
+    if (isForbidden(result))
+        return { visible: false, reason: "admin_only" };
+    return { visible: false, reason: result.reason, detail: result.detail };
+}
+function outcome(result) {
+    if (result.ok)
+        return "ok";
+    return isForbidden(result) ? "admin_only" : result.reason;
+}