@bli-cockpit/cli 0.2.155 → 0.2.156

package/dist/adapters/local-sources.js

@@ -35,6 +35,7 @@ export async function runLocalSourceCollectors(options) {
             claudeAttributionScan: options.rawEvidenceClaudeAttributionScan,
             skipContentHashes: options.rawEvidenceSkipContentHashes,
             priorSnapshots: options.rawEvidencePriorSnapshots,
+            stubReoffers: options.rawEvidenceStubReoffers,
             byteBudget: options.rawEvidenceByteBudget,
             objectBudget: options.rawEvidenceObjectBudget,
             budget: options.rawEvidenceBudget,

package/dist/adapters/raw-evidence-collection-state.js

@@ -74,6 +74,7 @@ export async function openCollection(context, options, places) {
         caps: startingCaps({ byteBudget, objectBudget, budget: options.budget }),
         skipContentHashes: options.skipContentHashes ?? new Set(),
         priorSnapshots: options.priorSnapshots ?? new Map(),
+        stubReoffers: options.stubReoffers ?? new Map(),
         budget: options.budget ?? {
             remainingBytes: byteBudget,
             remainingObjects: objectBudget,

package/dist/adapters/raw-evidence-snapshot-supersede.js

@@ -20,6 +20,7 @@
  * says so: `snapshot_rewritten`, both sizes, and the byte range the first
  * difference falls in. Never content.
  */
+import { REDACTION_STUB_LABEL } from "@bli-cockpit/telemetry-core";
 import { firstDifferenceRange, isPrefixSuccessor, prefixCheckpoints, } from "@bli-cockpit/telemetry-core/snapshot-supersede";
 /**
  * The newest committed snapshot per source key, from the cursor's objects map,
@@ -79,4 +80,32 @@ export function supersedeClaimFor(options) {
         first_differing_offset_below: range.below,
     }));
     return null;
+}
+/**
+ * BLI-11102: the claim a re-offered transcript makes when the server named its
+ * stored copy a redaction-crash stub. Only a main transcript that redacted
+ * cleanly this time claims; one that stubbed again claims nothing and keeps
+ * the ordinary path. Logs the decision either way.
+ */
+export function stubReplacementClaim(options) {
+    if (!options.stubPointerId || (options.kind !== "codex_jsonl" && options.kind !== "claude_jsonl"))
+        return null;
+    if (options.completenessLabel === REDACTION_STUB_LABEL) {
+        console.error("[evidence-upload] stubbed session re-offered but it stubbed again; no claim", JSON.stringify({
+            reason: "stub_reoffer_still_stubbed",
+            kind: options.kind,
+            byte_size: options.byteSize,
+        }));
+        return null;
+    }
+    console.error("[evidence-upload] stubbed session re-offered; claiming to replace the stub", JSON.stringify({
+        reason: "stub_reoffered",
+        rule: "stub_replaced",
+        kind: options.kind,
+        byte_size: options.byteSize,
+        // The same bytes may already be durable (a later sync healed it without
+        // knowing about the stub); they are staged anyway so the claim has a carrier.
+        already_durable: options.alreadyDurable,
+    }));
+    return { pointer_id: options.stubPointerId, rule: "stub_replaced" };
 }

package/dist/adapters/raw-evidence-transcript-file.js

@@ -19,7 +19,7 @@ import { isSecretLikePath, sha256, shortHash, } from "./raw-evidence-keys.js";
 import { maskSecretsInTranscript, } from "./raw-evidence-sanitize.js";
 import { markBudgetCapApplied, markCapApplied, } from "./raw-evidence-completeness.js";
 import { evidenceEntry } from "./raw-evidence-manifest.js";
-import { describeSnapshot, supersedeClaimFor } from "./raw-evidence-snapshot-supersede.js";
+import { describeSnapshot, stubReplacementClaim, supersedeClaimFor, } from "./raw-evidence-snapshot-supersede.js";
 import { admitToBudget, stageEvidenceBytes, } from "./raw-evidence-collection-state.js";
 /**
  * Reads, secret-guards, content-addresses, budget-checks, and copies one
@@ -64,7 +64,16 @@ export async function collectOneEvidenceFile(collection, options) {
         secretLikeFileName: names.secretLikeFileName,
     });
     const contentHash = sha256(sanitized.bytes);
-    if (collection.skipContentHashes.has(contentHash)) {
+    // BLI-11102: a session the server named a redaction stub is re-offered even
+    // when these bytes are already durable, because the stub is not a delivery.
+    const stubClaim = stubReplacementClaim({
+        kind: options.kind,
+        stubPointerId: collection.stubReoffers.get(options.sessionId),
+        completenessLabel: sanitized.completenessLabel,
+        byteSize: sanitized.bytes.byteLength,
+        alreadyDurable: collection.skipContentHashes.has(contentHash),
+    });
+    if (collection.skipContentHashes.has(contentHash) && !stubClaim) {
         collection.reused.push({
             kind: options.kind,
             label: names.evidenceLabel,
@@ -83,6 +92,7 @@ export async function collectOneEvidenceFile(collection, options) {
         names,
         sanitized,
         contentHash,
+        stubClaim,
     });
     return true;
 }
@@ -139,7 +149,7 @@ async function stageOneTranscript(collection, file) {
         // BLI-11088: remember this snapshot's shape, and claim the last one when
         // these bytes rebuild it.
         snapshot: describeSnapshot(file.sanitized.bytes),
-        supersedes: supersedeClaimFor({
+        supersedes: file.stubClaim ?? supersedeClaimFor({
             bytes: file.sanitized.bytes,
             contentHash: file.contentHash,
             kind: file.kind,

package/dist/commands/backfill-checkpoint.js

@@ -21,6 +21,7 @@ import { indexDurableMainObjectKeys } from "./backfill-evidence-outcomes.js";
 export async function recordBackfillDurableSessionPointers(options) {
     const durableObjectBySession = indexDurableMainObjectKeys(options.syncResults);
     let recordedCount = 0;
+    let stubsReplaced = 0;
     for (const source of ["codex", "claude_code"]) {
         const filename = source === "claude_code" ? CLAUDE_CURSOR_FILENAME : undefined;
         const cursor = await readRawEvidenceCursor(options.paths, { filename });
@@ -31,8 +32,13 @@ export async function recordBackfillDurableSessionPointers(options) {
             const objectKey = durableObjectBySession.get(`${source}:${candidate.session_id}`);
             const prior = cursor.sessions[candidate.session_id];
             // No pointer, no prior entry, or already pointed: nothing this pass owes.
-            if (!objectKey || !prior || prior.uploaded_object_key)
+            // BLI-11102: a pointer the server named a redaction stub is not a
+            // delivery, so a real pointer replaces it and the mark clears.
+            const replacesStub = Boolean(prior?.stub_reoffer) && prior?.uploaded_object_key !== objectKey;
+            if (!objectKey || !prior || (prior.uploaded_object_key && !replacesStub))
                 continue;
+            if (replacesStub)
+                stubsReplaced += 1;
             cursor.sessions[candidate.session_id] = deliveredCursorEntry(prior, candidate, objectKey, options.now);
             changed = true;
             recordedCount += 1;
@@ -45,12 +51,12 @@ export async function recordBackfillDurableSessionPointers(options) {
         }
     }
     if (recordedCount > 0) {
-        console.error("[backfill] terminal session pointers recorded", JSON.stringify({ count: recordedCount }));
+        console.error("[backfill] terminal session pointers recorded", JSON.stringify({ count: recordedCount, stub_pointers_replaced: stubsReplaced }));
     }
 }
 /** The cursor entry for a session backfill has just delivered in full. */
 function deliveredCursorEntry(prior, candidate, objectKey, now) {
-    return {
+    const entry = {
         ...prior,
         file_hash_sha256: candidate.content_hash_sha256,
         file_mtime_ms: candidate.session_file_mtime_ms,
@@ -65,6 +71,9 @@ function deliveredCursorEntry(prior, candidate, objectKey, now) {
         uploaded_byte_size: candidate.byte_size,
         last_seen_at: now.toISOString(),
     };
+    // The mark says "this pointer is a stub"; the pointer written above is not.
+    delete entry.stub_reoffer;
+    return entry;
 }
 export function advanceBackfillCursorThroughResolvedPrefix(options) {
     if (!options.discoveryComplete)

package/dist/commands/backfill-report.js

@@ -7,6 +7,7 @@ import { advanceBackfillCursorThroughResolvedPrefix, recordBackfillDurableSessio
 import { blockingScanIssues, cappedSidecarCount } from "./backfill-issues.js";
 import { backfillResultBaseArgs, baseBackfillResult, emptyReport, } from "./backfill-result.js";
 import { buildBackfillSessionReport } from "./backfill-session-report.js";
+import { summarizeStubReoffer } from "./backfill-stub-reoffer.js";
 /**
  * REPORT: post the session report, record durable pointers, advance the
  * cursor through the resolved contiguous prefix, decide completion, write the
@@ -37,14 +38,17 @@ export async function reportBackfillOutcome(command, io, ctx, upload) {
     if (completion.status === "complete" && command.all) {
         await writeAllHistoryCompletionMarker(ctx);
     }
-    return assembleBackfillResult({
-        command,
-        ctx,
-        upload,
-        posted,
-        completion,
-        blockedAt,
-    });
+    return {
+        ...assembleBackfillResult({
+            command,
+            ctx,
+            upload,
+            posted,
+            completion,
+            blockedAt,
+        }),
+        stub_reoffer: summarizeStubReoffer(ctx.stubReoffer, upload.uploadable),
+    };
 }
 /**
  * Tells the server what this run observed about every session, uploaded or

package/dist/commands/backfill-scan.js

@@ -20,6 +20,7 @@ import { addReadOnlyGuardIssues, addRepoDiscoveryIssues, backfillScanIssues, cou
 import { labelOutsideRootCandidates, outsideRootsWorkspace, } from "./backfill-outside-roots.js";
 import { reasonCountsFor } from "./backfill-reasons.js";
 import { blockedBackfillResult } from "./backfill-result.js";
+import { emptyStubReofferPlan, loadStubReofferPlan, reopenStubbedSessions, } from "./backfill-stub-reoffer.js";
 import { resolveBackfillScope } from "./backfill-scope.js";
 /**
  * SCAN: is this machine paired, what roots/sources/window apply, and what did
@@ -47,6 +48,18 @@ export async function scanBackfillRun(command, io, now) {
     const scopedCursor = prepareBackfillCursorForScope(storedCursor, collectionRoots, sources);
     const cursor = scopedCursor.cursor;
     const pointerlessTerminalSessions = await loadPointerlessTerminalSessions(paths, sources);
+    // BLI-11102: a redaction-crash stub is not a delivery. The server names
+    // them; those sessions reopen exactly like pointer-less ones. A dry run
+    // keeps its one-request contract (the reachability probe) and does not ask.
+    const stubReoffer = command.dryRun
+        ? emptyStubReofferPlan("dry_run")
+        : await loadStubReofferPlan({
+            paths,
+            dashboardUrl: scope.dashboardUrl,
+            sources,
+            fetchImpl: io.fetch,
+        });
+    reopenStubbedSessions(pointerlessTerminalSessions, stubReoffer);
     const scan = await scanBackfillSessions({
         command,
         homeDir: command.homeDir ?? os.homedir(),
@@ -73,6 +86,7 @@ export async function scanBackfillRun(command, io, now) {
         cursor,
         scan,
         reasonCounts,
+        stubReoffer,
         oversizedCandidateKeys: oversizedBackfillCandidateKeys(scan.candidates),
         deterministicSkipCandidateKeys: deterministicSkipCandidateKeys(scan.candidates),
     };

package/dist/commands/backfill-stub-reoffer.js

@@ -0,0 +1,104 @@
+import { CLAUDE_CURSOR_FILENAME, readRawEvidenceCursor, writeRawEvidenceCursor, } from "../cursors/raw-evidence-cursor.js";
+import { fetchStubbedSessions, stubSessionKey } from "../evidence-stubs-client.js";
+import { describeError } from "../health-detail.js";
+import { readLocalCollectorSessionFile } from "../local-state.js";
+export function emptyStubReofferPlan(reason) {
+    return { status: "skipped", reason, sessions: new Map(), stub_count: 0, marked_local_sessions: 0 };
+}
+/** Ask the server which of this operator's pointers are stubs. Never throws; writes nothing. */
+export async function loadStubReofferPlan(options) {
+    const session = await readLocalCollectorSessionFile(options.paths).catch(() => null);
+    if (!session || session.session_state !== "valid" || typeof session.device_token !== "string" || !session.device_token) {
+        console.error("[backfill] redaction stubs not asked", JSON.stringify({ reason: "no_device_session" }));
+        return emptyStubReofferPlan("no_device_session");
+    }
+    const answer = await fetchStubbedSessions({
+        dashboardUrl: options.dashboardUrl,
+        deviceToken: session.device_token,
+        fetchImpl: options.fetchImpl,
+    });
+    const sessions = new Map([...answer.sessions].filter(([key]) => options.sources.some((source) => key.startsWith(`${source}:`))));
+    return {
+        status: answer.status,
+        reason: answer.reason,
+        sessions,
+        stub_count: answer.unique_stub_count,
+        marked_local_sessions: 0,
+    };
+}
+/**
+ * Mark every stubbed session this machine tracks as not delivered. The caller
+ * holds the collection lock: sync writes the same cursor files.
+ */
+export async function markStubReoffers(paths, plan, now) {
+    if (plan.sessions.size === 0)
+        return;
+    plan.marked_local_sessions = await markStubbedSessions(paths, plan.sessions, now);
+}
+/** Reopen stubbed sessions exactly like pointer-less ones: selected past the cursor, sorted first. */
+export function reopenStubbedSessions(reopen, plan) {
+    for (const key of plan.sessions.keys()) {
+        const at = key.indexOf(":");
+        const source = key.slice(0, at);
+        reopen[source]?.add(key.slice(at + 1));
+    }
+}
+/** Session id -> the stub pointer the new upload claims to replace (the server retires the rest). */
+export function stubClaimsForCandidates(candidates, plan) {
+    const claims = new Map();
+    for (const candidate of candidates) {
+        const pointer = plan.sessions.get(stubSessionKey(candidate.source, candidate.session_id))?.[0];
+        if (pointer)
+            claims.set(candidate.session_id, pointer);
+    }
+    return claims;
+}
+export function summarizeStubReoffer(plan, candidates) {
+    const reoffered = candidates.filter((candidate) => plan.sessions.has(stubSessionKey(candidate.source, candidate.session_id))).length;
+    const summary = {
+        status: plan.status,
+        reason: plan.reason,
+        stubs: plan.stub_count,
+        sessions: plan.sessions.size,
+        marked_local_sessions: plan.marked_local_sessions,
+        reoffered_sessions: reoffered,
+    };
+    if (plan.sessions.size > 0) {
+        console.error("[backfill] redaction-stubbed sessions re-offered", JSON.stringify({
+            ...summary,
+            reason: "stub_reoffered",
+            stub_door: `${summary.status}:${summary.reason}`,
+            // Stubbed on the server, but no file for it in this run's scan window.
+            not_found_locally: plan.sessions.size - reoffered,
+        }));
+    }
+    return summary;
+}
+async function markStubbedSessions(paths, sessions, now) {
+    let marked = 0;
+    for (const source of ["codex", "claude_code"]) {
+        const filename = source === "claude_code" ? CLAUDE_CURSOR_FILENAME : undefined;
+        try {
+            const cursor = await readRawEvidenceCursor(paths, { filename });
+            let changed = false;
+            for (const [key, pointerIds] of sessions) {
+                if (!key.startsWith(`${source}:`))
+                    continue;
+                const entry = cursor.sessions[key.slice(source.length + 1)];
+                if (!entry)
+                    continue;
+                entry.stub_reoffer = { reason: "stub_reoffered", stub_pointer_ids: pointerIds, marked_at: now.toISOString() };
+                changed = true;
+                marked += 1;
+            }
+            if (changed) {
+                await writeRawEvidenceCursor(paths, cursor, { filename, sessionsOnly: source === "claude_code" });
+            }
+        }
+        catch (error) {
+            // The mark is bookkeeping; the server's answer still drives this run.
+            console.error("[backfill] stub mark not written to the cursor", JSON.stringify({ reason: "stub_mark_write_failed", source, ...describeError(error) }));
+        }
+    }
+    return marked;
+}

package/dist/commands/backfill-upload.js

@@ -7,6 +7,7 @@ import { countSessionUploadFailures, deferredEvidenceCount, durableBackfillCandi
 import { blockingScanIssues } from "./backfill-issues.js";
 import { ensureOutsideRootsWorkspace, isOutsideRootsWorkspace, } from "./backfill-outside-roots.js";
 import { writeLine } from "./backfill-output.js";
+import { stubClaimsForCandidates } from "./backfill-stub-reoffer.js";
 const BACKFILL_MAX_CONSECUTIVE_FAILURES = 3;
 /**
  * UPLOAD: sync every uploadable candidate in fixed-size batches, heartbeating
@@ -101,6 +102,7 @@ async function uploadOneBackfillBatch(command, io, ctx, batch, rawEvidenceBudget
         codexAttribution: ctx.scan.codexAttribution,
         claudeAttribution: ctx.scan.claudeAttribution,
         rawEvidenceBudget,
+        stubClaims: stubClaimsForCandidates(batch.candidates, ctx.stubReoffer),
         fetchImpl: io.fetch,
     });
     const durableInBatch = durableBackfillCandidateKeys(batch, sync);
@@ -216,6 +218,8 @@ function backfillBatchSyncOptions(options) {
         })),
         claudeAttributionScan: options.claudeAttribution ?? undefined,
         rawEvidenceBudget: options.rawEvidenceBudget,
+        // BLI-11102: session id -> the redaction stub this upload replaces.
+        rawEvidenceStubReoffers: options.stubClaims,
         // `cockpit backfill` is only ever an operator asking — by hand, through
         // onboarding, through doctor, or by running the retry command Cockpit
         // printed. The delivery-backoff window is the scheduler's cadence, so it

package/dist/commands/backfill.js

@@ -25,6 +25,7 @@
  *   backfill-evidence-outcomes.ts  what one upload achieved per session
  *   backfill-session-report.ts     one attribution row per session seen
  *   backfill-checkpoint.ts         the durable cursor and pointer writes
+ *   backfill-stub-reoffer.ts       redaction-crash stubs: re-offered, not delivered
  *   backfill-result.ts             the `--json` payload
  *   backfill-output.ts             every line and prompt a person sees
  *
@@ -45,6 +46,7 @@ import { planBackfillRun } from "./backfill-plan.js";
 import { reportBackfillOutcome } from "./backfill-report.js";
 import { lockHeldResult } from "./backfill-result.js";
 import { scanBackfillRun } from "./backfill-scan.js";
+import { markStubReoffers } from "./backfill-stub-reoffer.js";
 import { uploadBackfillBatches } from "./backfill-upload.js";
 // The command's public surface. Callers (doctor, onboard, local, the CLI
 // router, the BLI-3272 regression test) import these from `./backfill.js`;
@@ -135,6 +137,9 @@ export async function runBackfill(command, io) {
         if (scanned.scopedCursor.reset) {
             await writeBackfillCursor(paths, scanned.cursor);
         }
+        // BLI-11102: mark server-named stubs as not delivered, under the lock
+        // because sync writes the same cursor files.
+        await markStubReoffers(paths, scanned.stubReoffer, now);
         const upload = await uploadBackfillBatches(command, io, lock, scanned);
         return await reportBackfillOutcome(command, io, scanned, upload);
     }

package/dist/commands/public-root.js

@@ -21,7 +21,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.155");
+    writeLine(io?.stdout ?? process.stdout, "0.2.156");
     return 0;
   }
 

package/dist/cursors/raw-evidence-cursor.js

@@ -195,8 +195,21 @@ function parseSessionEntry(value) {
         uploaded_at: optionalString(record["uploaded_at"]),
         uploaded_byte_size: optionalNumberOrNull(record["uploaded_byte_size"]),
         last_seen_at: lastSeenAt,
+        ...parseStubReoffer(record["stub_reoffer"]),
     };
 }
+function parseStubReoffer(value) {
+    if (!value || typeof value !== "object")
+        return {};
+    const record = value;
+    const markedAt = optionalString(record["marked_at"]);
+    const ids = Array.isArray(record["stub_pointer_ids"])
+        ? record["stub_pointer_ids"].filter((id) => typeof id === "string" && id.length > 0)
+        : [];
+    if (record["reason"] !== "stub_reoffered" || !markedAt || ids.length === 0)
+        return {};
+    return { stub_reoffer: { reason: "stub_reoffered", stub_pointer_ids: ids, marked_at: markedAt } };
+}
 function parseCheckpoints(value) {
     if (!value || typeof value !== "object")
         return null;

package/dist/evidence-stubs-client.js

@@ -0,0 +1,115 @@
+/**
+ * Asks `POST /api/ambient/evidence/stubs` which of this operator's stored
+ * transcripts are only the redaction-crash stub, and groups the answer by agent
+ * session (BLI-11102).
+ *
+ * A stub is a promise to come back, not a delivery: the local cursor recorded
+ * an upload, so nothing local would ever offer that session again. The server
+ * holds the label, so the server is asked. `cockpit backfill` re-offers every
+ * session this returns.
+ *
+ * Never throws. A door that cannot be asked (an older dashboard answers 404, a
+ * network error, a malformed page) returns `unavailable` with the reason, and
+ * the backfill runs exactly as it did before. That is also the release gate:
+ * the collector only ever sends a `stub_replaced` claim for a stub this door
+ * named, so it cannot send one to a server that does not know the rule.
+ *
+ * Bounded: pages of up to 500, at most `maxPages` of them, walked by the
+ * server's keyset cursor. The result says whether the list was exhausted,
+ * capped by `maxPages`, or cut short by a failed page after some landed.
+ */
+import { EVIDENCE_STUBS_MAX_PAGE, EVIDENCE_STUBS_SCHEMA_VERSION, EvidenceStubsResponseSchema, transcriptSessionFromObjectKey, } from "@bli-cockpit/telemetry-core";
+import { describeError } from "./health-detail.js";
+const STUBS_PAGE_TIMEOUT_MS = 15_000;
+export const STUBS_DEFAULT_MAX_PAGES = 20;
+export function stubSessionKey(source, sessionId) {
+    return `${source}:${sessionId}`;
+}
+export async function fetchStubbedSessions(options) {
+    const maxPages = options.maxPages ?? STUBS_DEFAULT_MAX_PAGES;
+    const sessions = new Map();
+    const seen = new Set();
+    let stubCount = 0;
+    let unkeyed = 0;
+    let pages = 0;
+    let after = null;
+    for (;;) {
+        if (pages >= maxPages) {
+            return finish("capped", "ok");
+        }
+        const page = await requestPage({ ...options, after });
+        if (!page.ok) {
+            return finish(pages === 0 ? "unavailable" : "failed_partial", page.reason);
+        }
+        pages += 1;
+        for (const stub of page.stubs) {
+            stubCount += 1;
+            if (seen.has(stub.ref_id))
+                continue;
+            seen.add(stub.ref_id);
+            const session = transcriptSessionFromObjectKey(stub.object_key);
+            if (!session) {
+                unkeyed += 1;
+                continue;
+            }
+            const key = stubSessionKey(session.source, session.session_id);
+            sessions.set(key, [...(sessions.get(key) ?? []), stub.raw_evidence_pointer_id]);
+        }
+        // Advance by what the server returned; a page that names no cursor is the last.
+        if (!page.nextAfter)
+            return finish("exhausted", "ok");
+        after = page.nextAfter;
+    }
+    function finish(status, reason) {
+        const result = {
+            status,
+            reason,
+            pages,
+            stub_count: stubCount,
+            unique_stub_count: seen.size,
+            unkeyed_stub_count: unkeyed,
+            sessions,
+        };
+        console.error("[collector stubs] redaction-crash stubs asked", JSON.stringify({
+            reason: status === "unavailable" ? `stub_door_unavailable:${reason}` : `stubs_${status}`,
+            pages,
+            stub_count: stubCount,
+            unique_stub_count: seen.size,
+            unkeyed_stub_count: unkeyed,
+            session_count: sessions.size,
+            ...(status === "failed_partial" ? { failure: reason } : {}),
+        }));
+        return result;
+    }
+}
+async function requestPage(options) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), STUBS_PAGE_TIMEOUT_MS);
+    try {
+        const response = await options.fetchImpl(`${options.dashboardUrl}/api/ambient/evidence/stubs`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${options.deviceToken}`,
+            },
+            body: JSON.stringify({
+                schema_version: EVIDENCE_STUBS_SCHEMA_VERSION,
+                after: options.after,
+                limit: EVIDENCE_STUBS_MAX_PAGE,
+            }),
+            signal: controller.signal,
+        });
+        if (!response.ok)
+            return { ok: false, reason: `http_${response.status}` };
+        const parsed = EvidenceStubsResponseSchema.safeParse(await response.json().catch(() => null));
+        if (!parsed.success)
+            return { ok: false, reason: "invalid_response" };
+        return { ok: true, stubs: parsed.data.stubs, nextAfter: parsed.data.next_after };
+    }
+    catch (error) {
+        return { ok: false, reason: describeError(error).error_name };
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}

package/dist/upload-envelope-build.js

@@ -125,6 +125,7 @@ export async function buildLocalAmbientEnvelope(options = {}) {
             operatorId: session.operator_id,
             workContextId: uploadContext.work_context_id,
         })),
+        rawEvidenceStubReoffers: options.rawEvidenceStubReoffers,
         rawEvidenceByteBudget: options.rawEvidenceByteBudget,
         rawEvidenceObjectBudget: options.rawEvidenceObjectBudget,
         rawEvidenceBudget: options.rawEvidenceBudget,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/cli",
-  "version": "0.2.155",
+  "version": "0.2.156",
   "private": false,
   "type": "module",
   "bin": {
@@ -27,8 +27,8 @@
     "test": "node dist/cli.js --help && node ../../scripts/assert-public-cli-routing.mjs && node ../../scripts/assert-public-cli-verb-help.mjs && node ../../scripts/assert-public-cli-surface-doors.mjs && node ../../scripts/assert-public-cli-runtime-files.mjs && node ../../scripts/assert-public-cli-exit-contract.mjs && node ../../scripts/assert-public-cli-no-fleet-posts.mjs && node ../../scripts/assert-public-cli-doctor-json.mjs && node ../../scripts/assert-public-package-pack.mjs --workspace=@bli-cockpit/cli"
   },
   "dependencies": {
-    "@bli-cockpit/memory-mcp": "0.1.41",
-    "@bli-cockpit/mcp": "0.1.75",
-    "@bli-cockpit/telemetry-core": "0.1.53"
+    "@bli-cockpit/memory-mcp": "0.1.42",
+    "@bli-cockpit/mcp": "0.1.76",
+    "@bli-cockpit/telemetry-core": "0.1.54"
   }
 }