@bli-cockpit/cli 0.2.131 → 0.2.132

package/dist/commands/local-args-tower-memory.js

@@ -1,6 +1,7 @@
 /**
- * `cockpit memory search|save|update|forget|profile` — the argument table
- * (BLI-4047; `profile` added by BLI-4533).
+ * `cockpit memory search|save|update|forget|profile|consolidation|requeue` —
+ * the argument table (BLI-4047; `profile` added by BLI-4533, `consolidation`
+ * by BLI-4534, `requeue` by BLI-4539).
  *
  * BLI Memory was the one Tower surface with no command-line door: the browser
  * had one, the `bli-memory` MCP server had one, and a person or a script at a
@@ -41,6 +42,7 @@ export const MEMORY_STORE_ACTIONS = new Set([
     // write a memory. It runs no pass and changes nothing — the pass is a
     // Railway cron; this is how a person or an agent asks what it did.
     "consolidation",
+    "requeue",
 ]);
 const ALLOWED_FLAGS = [
     "--home",
@@ -56,6 +58,11 @@ const ALLOWED_FLAGS = [
     "--file",
     "--content-stdin",
     "--reason",
+    "--since",
+    "--until",
+    "--source",
+    "--dry-run",
+    "--apply",
     "--json",
 ];
 const VALUE_FLAGS = [
@@ -69,6 +76,9 @@ const VALUE_FLAGS = [
     "--alias",
     "--file",
     "--reason",
+    "--since",
+    "--until",
+    "--source",
 ];
 export function parseMemoryStoreArgs(action, args) {
     const values = parseNamedArgs(args, { allowedFlags: ALLOWED_FLAGS, valueFlags: VALUE_FLAGS });
@@ -89,8 +99,16 @@ export function parseMemoryStoreArgs(action, args) {
     if (action !== "save" && (values.flags.has("--custom-id") || values.booleans.has("--extract"))) {
         throw new Error("--custom-id and --extract only apply to memory save.");
     }
-    if (action !== "forget" && (values.flags.has("--reason") || values.booleans.has("--content-stdin"))) {
-        throw new Error("--reason and --content-stdin only apply to memory forget.");
+    if (action !== "forget" && values.booleans.has("--content-stdin")) {
+        throw new Error("--content-stdin only applies to memory forget.");
+    }
+    if (action !== "forget" && action !== "requeue" && values.flags.has("--reason")) {
+        throw new Error("--reason only applies to memory forget and memory requeue.");
+    }
+    if (action !== "requeue"
+        && (values.flags.has("--since") || values.flags.has("--until") || values.flags.has("--source")
+            || values.booleans.has("--dry-run") || values.booleans.has("--apply"))) {
+        throw new Error("--since, --until, --source, --dry-run and --apply only apply to memory requeue.");
     }
     if (values.flags.has("--file") && action !== "save" && action !== "update") {
         throw new Error("--file only applies to memory save and memory update.");
@@ -106,6 +124,37 @@ export function parseMemoryStoreArgs(action, args) {
             .filter((tag) => tag.length > 0),
         json: values.booleans.has("--json"),
     };
+    if (action === "requeue") {
+        // A window is REQUIRED. There is no requeue-everything: applying re-runs
+        // one model call per receipt, so the ceiling on a wrong filter is a bill.
+        if (rest.length > 0) {
+            throw new Error("memory requeue takes no words; name the window with --since and --until.");
+        }
+        const since = readInstant(values.flags.get("--since"), "--since");
+        if (!since) {
+            throw new Error("memory requeue needs --since <iso>, e.g. `cockpit memory requeue --since 2026-09-21T04:10:00Z --dry-run`.");
+        }
+        const until = readInstant(values.flags.get("--until"), "--until");
+        if (until && until < since)
+            throw new Error("--until is before --since; nothing could match.");
+        const source = optionalNonEmpty(values.flags.get("--source"));
+        if (source && source !== "hook" && source !== "harvest") {
+            throw new Error("--source is hook or harvest — the two values a receipt can carry.");
+        }
+        if (values.booleans.has("--dry-run") && values.booleans.has("--apply")) {
+            throw new Error("--dry-run and --apply are opposites; name one.");
+        }
+        return {
+            ...command,
+            action,
+            since,
+            until,
+            ...(source ? { source: source } : {}),
+            // The safe question unless somebody typed otherwise.
+            dryRun: !values.booleans.has("--apply"),
+            reason: optionalNonEmpty(values.flags.get("--reason")),
+        };
+    }
     if (action === "profile") {
         // A pure read of ONE container's compiled page. No positional: there is
         // nothing to ask it, and a stray word would look like a query this verb
@@ -167,6 +216,16 @@ export function parseMemoryStoreArgs(action, args) {
         reason: optionalNonEmpty(values.flags.get("--reason")),
     };
 }
+/** An ISO instant, normalised, or a refusal naming the flag that was wrong. */
+function readInstant(value, flag) {
+    if (value === undefined)
+        return undefined;
+    const parsed = Date.parse(value);
+    if (!Number.isFinite(parsed)) {
+        throw new Error(`${flag} must be an ISO instant like 2026-09-21T04:10:00Z.`);
+    }
+    return new Date(parsed).toISOString();
+}
 /** 1..20, the same window the MCP tool and the door both accept. */
 function readLimit(value) {
     if (value === undefined)

package/dist/commands/local-command-shapes-memory.js

@@ -10,9 +10,9 @@
  *
  *   `memory`        install / status / help — acts on THIS MACHINE, writing an
  *                   MCP registration and three hooks into a home directory.
- *   `memory-store`  search / save / update / forget — acts on TOWER, over
- *                   `/api/memory/*`, the same doors the `bli-memory` MCP
- *                   server and the browser call.
+ *   `memory-store`  search / save / update / forget / profile / requeue —
+ *                   acts on TOWER, over `/api/memory/*`, the same doors the
+ *                   `bli-memory` MCP server and the browser call.
  *   `memory-log`    the agent-experience opinion, part local file part Tower.
  *
  * They are separate kinds rather than one widening `action` union because they

package/dist/commands/local-help-commands.js

@@ -580,7 +580,7 @@ export function localSubcommandHelp(command) {
         [
             "memory",
             [
-                "Usage: cockpit memory [search|save|update|forget|consolidation|install|status|log] [flags]",
+                "Usage: cockpit memory [search|save|update|forget|profile|consolidation|requeue|install|status|log] [flags]",
                 "",
                 "The STORE, over the same /api/memory/* doors the bli-memory MCP server calls:",
                 "  search \"<question>\" [--container <tag>] [--limit 1..20] [--no-recent]",
@@ -593,10 +593,16 @@ export function localSubcommandHelp(command) {
                 "  update <id> [--file <path>]   replacement text on stdin; the old row is kept as history.",
                 "  forget <id> [--reason <label>]",
                 "  forget --content-stdin --container <tag> [--reason <label>]   forget by exact text.",
+                "  profile [--container <tag>]   the compiled one-page briefing; a read, never a compile.",
                 "  consolidation [--container <tag>]   what the nightly tidy-up pass did.",
                 "      Clusters looked at, edits by verb, refusals by reason, model and cost.",
                 "      Read-only: the pass is a nightly cron, it never deletes a memory, and",
                 "      report mode changes nothing on the shelf at all.",
+                "  requeue --since <iso> [--until <iso>] [--source hook|harvest] [--reason <label>] [--apply]",
+                "      puts finished extractions back in the queue after the store refused their",
+                "      writes. Super admins only. A DRY RUN unless you pass --apply, because an",
+                "      apply re-runs one model call per receipt. Nothing is ever deleted: each",
+                "      row keeps its previous outcome under result.requeued_from.",
                 "Refusals keep the door's own label — needs_rls_client, unknown_memory,",
                 "already_superseded, no_match — and --json prints the door's answer unchanged.",
                 "",

package/dist/commands/memory-requeue.js

@@ -0,0 +1,107 @@
+/**
+ * `cockpit memory requeue` — put a window of extractions back (BLI-4539).
+ *
+ * The terminal twin of `POST /api/memory/requeue`, and the reason it exists at
+ * all: between 04:16Z and 11:36Z on 2026-09-21 every insert into the memory
+ * store that carried aliases was refused, 122 extraction receipts closed as if
+ * nothing were wrong, and putting them back took a one-off script somebody
+ * wrote by hand at a keyboard. The masked content sits on those rows for seven
+ * days; recovering it should be one command.
+ *
+ * Its own module rather than a sixth branch of `memory-store.ts`, because that
+ * file is already at the readability band and because this verb refuses
+ * different things from its five siblings: a window is required, the gate is
+ * super_admin, and the default is a DRY RUN.
+ *
+ * **A dry run is the default.** `--dry-run` is the safe question and an apply
+ * takes `--apply` explicitly. Applying re-runs one model call per receipt, so
+ * the shape of the mistake is somebody's bill, and a flag you have to type is
+ * the cheapest possible guard against it.
+ *
+ * **The door's own reason label reaches the terminal unchanged** —
+ * `since_required`, `window_inverted`, `source_unknown`, `reason_not_a_label`,
+ * `requeue_count_failed` — printed verbatim by `failAgentDoor`, never
+ * rephrased here.
+ */
+import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor, } from "./agent-door.js";
+import { writeLine } from "./cli-io.js";
+const TAG = "[memory requeue cli]";
+/** Long: the door walks up to twenty pages of receipts and writes each row on its own. */
+const REQUEUE_DEADLINE_MS = 300_000;
+export async function runMemoryRequeue(command, io) {
+    const door = await openAgentDoor("memory", command, io);
+    const answer = await askAgentDoor(door, {
+        path: "/api/memory/requeue",
+        method: "POST",
+        label: "memory requeue",
+        timeoutMs: REQUEUE_DEADLINE_MS,
+        body: {
+            since: command.since ?? "",
+            ...(command.until ? { until: command.until } : {}),
+            ...(command.reason ? { reason: command.reason } : {}),
+            ...(command.source ? { source: command.source } : {}),
+            dryRun: command.dryRun,
+        },
+    });
+    if (!answer.ok)
+        return failAgentDoor(door, TAG, answer.reason, answer.detail);
+    const body = answer.body;
+    // An HTTP 200 is not an answer. A dashboard that has not shipped this door
+    // yet renders its own 404 PAGE at 200 with an HTML body, and this verb
+    // printed `applied {matched: 0}` for it — a silent success over a route that
+    // does not exist, which is the exact shape of lie the whole ticket is about.
+    // Proven against production on 2026-09-21, before the door was deployed.
+    if (typeof body.matched !== "number") {
+        return failAgentDoor(door, TAG, "requeue_answer_unreadable", "Tower answered 200 with no requeue receipt in it. The usual cause is a dashboard that has not shipped POST /api/memory/requeue yet; nothing was requeued.");
+    }
+    // Counts and labels only: a receipt's content never enters a log line.
+    writeLine(door.io.stderr, `${TAG} ${body.dryRun ? "dry run" : "applied"} ${JSON.stringify({
+        since: command.since ?? "",
+        until: command.until ?? null,
+        source: command.source ?? null,
+        matched: body.matched ?? 0,
+        scanned: body.scanned ?? 0,
+        requeued: body.requeued ?? 0,
+        refused: body.refused ?? 0,
+        coverage: body.coverage ?? "unknown",
+    })}`);
+    if (door.json)
+        return emitAgentDoor(door, answer.body);
+    const matched = body.matched ?? 0;
+    if (matched === 0) {
+        // Silence is not an outage, and it is not a wrong filter either — say
+        // which one this is by naming the window that was asked about.
+        writeLine(door.io.stdout, `No finished extraction receipt is in that window (${command.since} → ${command.until ?? "now"}${command.source ? `, ${command.source} only` : ""}). Nothing to requeue; the receipts table answered.`);
+        return 0;
+    }
+    writeLine(door.io.stdout, body.dryRun
+        ? `${matched} receipt(s) would be requeued (${describeSplit(body.bySource)}).`
+        : `${body.requeued ?? 0} of ${matched} receipt(s) requeued (${describeSplit(body.bySource)}).`);
+    const reasons = describeSplit(body.byReason);
+    if (reasons)
+        writeLine(door.io.stdout, `  by reason: ${reasons}`);
+    if ((body.refused ?? 0) > 0) {
+        writeLine(door.io.stdout, `  ${body.refused} row(s) were refused — a drain claimed them between the read and the write, which is the conditional update doing its job.`);
+    }
+    if (body.coverage === "capped") {
+        writeLine(door.io.stdout, "  The page ceiling stopped this run before the window ended. Run it again for the rest; nothing is lost.");
+    }
+    if (body.dryRun) {
+        writeLine(door.io.stdout, "");
+        writeLine(door.io.stdout, "Nothing was written. Add --apply to do it for real.");
+    }
+    else {
+        writeLine(door.io.stdout, "");
+        writeLine(door.io.stdout, "They are queued again: the hourly sweep reruns the hook receipts and the harvest pass reserves the rest. The previous result is kept on each row under result.requeued_from.");
+    }
+    return 0;
+}
+/** `hook:104, harvest:18` — counts and labels, in the order the door sorted them. */
+function describeSplit(split) {
+    if (!split)
+        return "";
+    return Object.entries(split)
+        .sort((left, right) => right[1] - left[1] || (left[0] < right[0] ? -1 : 1))
+        .map(([label, count]) => `${label}:${count}`)
+        .join(", ");
+}

package/dist/commands/memory-store.js

@@ -1,6 +1,8 @@
 /**
- * `cockpit memory search|save|update|forget|profile` — BLI Memory at a terminal
- * (BLI-4047; `profile` added by BLI-4533).
+ * `cockpit memory search|save|update|forget|profile|consolidation|requeue` —
+ * BLI Memory at a terminal (BLI-4047; `profile` added by BLI-4533,
+ * `consolidation` by BLI-4534 and `requeue` by BLI-4539, the last two running
+ * in `memory-consolidation.ts` and `memory-requeue.ts` next door).
  *
  * Memory was the one Tower surface with no command-line door. The browser had
  * one, the `bli-memory` MCP server had four tools, and a person or a script
@@ -44,6 +46,7 @@ import { resolveContainerTag } from "@bli-cockpit/memory-mcp/dist/container-tag.
 import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor, } from "./agent-door.js";
 import { isInteractiveStdin, readPipedText, writeLine } from "./cli-io.js";
 import { runMemoryConsolidation } from "./memory-consolidation.js";
+import { runMemoryRequeue } from "./memory-requeue.js";
 import { readNoteFile } from "./notes-file.js";
 const TAG = "[memory cli]";
 const SEARCH_DEADLINE_MS = 60_000;
@@ -71,6 +74,10 @@ export async function runMemoryStore(command, io) {
             // different shape, and is the only memory verb that is about the JOB
             // rather than about a memory.
             return runMemoryConsolidation(command, door);
+        case "requeue":
+            // Its own module too: a window-shaped, super-admin, dry-run-by-default
+            // verb that refuses nothing the others refuse (BLI-4539).
+            return runMemoryRequeue(command, io);
     }
 }
 /**
@@ -138,7 +145,7 @@ export function runMemoryVerbList(io, json) {
             ok: true,
             noun: "memory",
             machine_verbs: ["install", "status"],
-            store_verbs: ["search", "save", "update", "forget", "profile", "consolidation"],
+            store_verbs: ["search", "save", "update", "forget", "profile", "consolidation", "requeue"],
             log_verbs: ["log"],
         }));
         return 0;
@@ -157,6 +164,9 @@ export function runMemoryVerbList(io, json) {
         "      the compiled one-page briefing every session opens with; a read, never a compile",
         "  cockpit memory consolidation [--container <tag>] [--json]",
         "      what the nightly tidy-up pass did: clusters, edits by verb, refusals, cost",
+        "  cockpit memory requeue --since <iso> [--until <iso>] [--source hook|harvest] [--reason <label>] [--apply] [--json]",
+        "      put a window of finished extractions back in the queue after the store refused",
+        "      their writes; super admins only, and a DRY RUN unless you pass --apply",
         "",
         "This machine:",
         "  cockpit memory install [--dry-run] [--json]   register the MCP server and the three hooks",

package/dist/commands/public-root.js

@@ -15,7 +15,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.131");
+    writeLine(io?.stdout ?? process.stdout, "0.2.132");
     return 0;
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/cli",
-  "version": "0.2.131",
+  "version": "0.2.132",
   "private": false,
   "type": "module",
   "bin": {
@@ -28,7 +28,7 @@
   },
   "dependencies": {
     "@bli-cockpit/memory-mcp": "0.1.35",
-    "@bli-cockpit/mcp": "0.1.57",
+    "@bli-cockpit/mcp": "0.1.58",
     "@bli-cockpit/telemetry-core": "0.1.48"
   }
 }