@bli-cockpit/cli 0.2.159 → 0.2.161

package/dist/adapters/common.js

@@ -1,4 +1,4 @@
-import { SourceScanResultSchema, parseTicketIdFromText, } from "@bli-cockpit/telemetry-core";
+import { SourceScanResultSchema, parseTicketIdFromBranch, parseTicketIdFromText, } from "@bli-cockpit/telemetry-core";
 import { LOCAL_COLLECTOR_VERSION } from "../local-state.js";
 export function makeSourceAdapterIdentity(captureSource, adapterName) {
     return {
@@ -34,4 +34,4 @@ export function makeSourceScan(context, captureSource, adapterName, status, reas
         diagnostic_labels: [reasonLabel],
     });
 }
-export { parseTicketIdFromText };
+export { parseTicketIdFromBranch, parseTicketIdFromText };

package/dist/adapters/git-state.js

@@ -1,7 +1,7 @@
 import { SourceScanResultSchema, } from "@bli-cockpit/telemetry-core";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
-import { makeSourceAdapterIdentity, parseTicketIdFromText, } from "./common.js";
+import { makeSourceAdapterIdentity, parseTicketIdFromBranch, } from "./common.js";
 const execFileAsync = promisify(execFile);
 export async function collectGitState(context, runner = defaultGitCommandRunner()) {
     const startedAt = context.now.toISOString();
@@ -22,7 +22,7 @@ export async function collectGitState(context, runner = defaultGitCommandRunner(
                 ...fileStats.map((file) => file.path),
             ]),
         ].sort();
-        const ticketIdFromBranch = parseTicketIdFromText(branch);
+        const ticketIdFromBranch = parseTicketIdFromBranch(branch);
         const ticketBindingCandidates = ticketIdFromBranch
             ? [
                 {

package/dist/adapters/risk-flags.js

@@ -5,7 +5,7 @@ export function generateDumbRiskFlags(input) {
     const flags = [];
     const git = input.git ?? null;
     const changedLines = (git?.added_lines ?? 0) + (git?.deleted_lines ?? 0);
-    if (git && changedLines >= 800 && !input.hasPlanSignal) {
+    if (git && changedLines >= 800 && input.hasPlanSignal === false) {
         flags.push(makeRiskFlag(input, "no_plan_signal_before_large_edit", [
             "missing_plan_signal",
             "large_edit",
@@ -17,27 +17,13 @@ export function generateDumbRiskFlags(input) {
         git.deleted_lines >= 200) {
         flags.push(makeRiskFlag(input, "many_add_revert_loops", ["add_revert_loop"]));
     }
-    if (input.reviewFindingPriorities?.some((priority) => ["p1", "p2", "P1", "P2"].includes(priority))) {
-        flags.push(makeRiskFlag(input, "p1_or_p2_review_finding", [
-            input.reviewFindingPriorities.some((priority) => priority.toLowerCase() === "p1")
-                ? "p1_review_finding"
-                : "p2_review_finding",
-        ]));
-    }
-    if ((input.repeatedFailureCount ?? 0) >= 3) {
-        flags.push(makeRiskFlag(input, "repeated_same_failing_command", [
-            "same_failing_command",
-        ]));
-    }
-    if ((input.permissionDeniedCount ?? 0) >= 2) {
-        flags.push(makeRiskFlag(input, "permission_denied_spike", ["permission_denied"]));
-    }
-    if ((input.tokenCount ?? 0) >= 1_000_000 && !input.hasPullRequest) {
-        flags.push(makeRiskFlag(input, "high_token_or_time_burn_no_pr", [
-            "token_pressure",
-            "no_pr_after_work",
-        ]));
-    }
+    // BLI-12189: p1_or_p2_review_finding, repeated_same_failing_command,
+    // permission_denied_spike and high_token_or_time_burn_no_pr were removed.
+    // Their inputs (review priorities, failure and denial counts, token count,
+    // PR presence) were never passed by the one caller (local-sources.ts), so the
+    // flags could not fire. The risk_type values stay in the telemetry schema
+    // for a producer that really measures them; wire the input first, then add
+    // the branch back with a test that drives it from a real fixture.
     const branchTicket = git?.ticket_id_from_branch;
     if (branchTicket &&
         input.binding.selected_ticket_id &&
@@ -56,9 +42,7 @@ function makeRiskFlag(input, riskType, evidenceLabels) {
             .digest("hex")
             .slice(0, 16)}`,
         risk_type: riskType,
-        severity: riskType === "p1_or_p2_review_finding" || riskType === "branch_ticket_mismatch"
-            ? "high"
-            : "warning",
+        severity: riskType === "branch_ticket_mismatch" ? "high" : "warning",
         observed_at: input.context.now.toISOString(),
         evidence_labels: evidenceLabels,
         evidence_pointer_ids: [],

package/dist/commands/careers.js

@@ -52,6 +52,11 @@ async function planCareersRequest(command) {
         // The grader itself runs on Railway, because it needs a clone and yt-dlp.
         // This door re-queues the row; `--now` is passed through and the answer
         // names where the run actually happens rather than implying it ran here.
+        // BLI-12183: `{}` sends the second-chance email now; `--record-sent-at`
+        // records one sent outside Tower and sends nothing.
+        case 'followup': return { path: `${application}/followup`, method: 'POST', body: command.recordSentAt ? { record_sent_at: command.recordSentAt } : {} };
+        // BLI-12198: `--at` books or reschedules an interview Edward booked himself; `--clear` undoes it.
+        case 'interview': return { path: `${application}/interview`, method: 'POST', body: command.clear ? { clear: true } : { at: command.interviewAt } };
         case 'grade': return { path: `${application}/grade`, method: 'POST', body: { now: command.now === true } };
         case 'decide': return { path: `${application}/decide`, method: 'POST', body: { decision: command.decision } };
         // `resume` never arrives here: `runCareers` hands it to `careers-resume.ts`
@@ -101,8 +106,14 @@ function settingsBody(command) {
         body.booking_link = command.bookingLink;
     if (command.graderModel !== undefined)
         body.grader_model = command.graderModel;
+    if (command.followupEnabled !== undefined)
+        body.followup_enabled = command.followupEnabled;
+    if (command.followupAfterDays !== undefined)
+        body.followup_after_days = command.followupAfterDays;
+    if (command.takehomeWindowHours !== undefined)
+        body.takehome_window_hours = command.takehomeWindowHours;
     if (Object.keys(body).length === 0) {
-        throw new Error('careers settings set needs at least one of --enabled, --auto-invite-min-score, --attention-min-score, --account, --booking-link or --grader-model.');
+        throw new Error('careers settings set needs at least one of --enabled, --auto-invite-min-score, --attention-min-score, --account, --booking-link, --grader-model, --followup-enabled, --followup-after-days or --takehome-window-hours.');
     }
     return body;
 }

package/dist/commands/cli-io.js

@@ -1,3 +1,4 @@
+import { parseYesNo } from "../yes-no.js";
 import { createCapturedExecRunner, createInteractiveExecRunner, } from "../process-runner.js";
 export function writeLine(stream, text) {
     stream.write(`${text}\n`);
@@ -96,6 +97,10 @@ export async function readPipedText(stream, options) {
     }
     return stripLeadingBom(text);
 }
+// Lines that arrived in the same chunk as an earlier answer (a paste, type-ahead,
+// or a slow event loop that let the stream coalesce its buffer). Per stream, so
+// the next prompt reads them instead of waiting for input that already came.
+const queuedLines = new WeakMap();
 /**
  * Reads one line from stdin after writing a prompt. Shared by the onboard email
  * prompt and the autostart prompt; callers gate on `isInteractiveStdin` first so
@@ -103,21 +108,51 @@ export async function readPipedText(stream, options) {
  */
 export async function readLine(io, prompt) {
     io.stdout.write(prompt);
+    const queue = queuedLines.get(io.stdin) ?? [];
+    queuedLines.set(io.stdin, queue);
+    const queued = queue.shift();
+    if (queued !== undefined)
+        return queued;
     io.stdin.setEncoding("utf8");
     return new Promise((resolve) => {
         const onData = (chunk) => {
             io.stdin.removeListener("data", onData);
             io.stdin.pause();
-            resolve(chunk);
+            const lines = chunk.match(/[^\n]*\n|[^\n]+$/gu) ?? [chunk];
+            const [first = chunk, ...rest] = lines;
+            queue.push(...rest);
+            if (rest.length > 0) {
+                console.error(`[cli-io] stdin chunk held ${lines.length} lines {"queued_lines":${rest.length}}`);
+            }
+            resolve(first);
         };
         io.stdin.resume();
         io.stdin.on("data", onData);
     });
 }
-/** Enter means yes: only an explicit `n`/`no` declines. */
-export function yesByDefault(raw) {
-    const answer = raw.trim().split(/\s+/u)[0]?.toLowerCase() ?? "";
-    return answer !== "n" && answer !== "no";
+/**
+ * Settles a typed answer to a yes/no prompt (BLI-12189). `unclear` asks once
+ * more when `reask` is set, then declines; a destructive prompt passes
+ * `emptyIsYes: false` and no `reask`, so anything unclear is a No.
+ */
+export async function settleYesNo(io, firstAnswer, prompt, options) {
+    let answer = firstAnswer;
+    const attempts = options.reask ? 2 : 1;
+    for (let attempt = 1; attempt <= attempts; attempt += 1) {
+        const verdict = parseYesNo(answer, options);
+        if (verdict !== "unclear") {
+            console.error(`[cli-io] yes/no settled ${JSON.stringify({ verdict, attempt })}`);
+            return verdict === "yes";
+        }
+        console.error(`[cli-io] yes/no unclear ${JSON.stringify({ attempt, will_reask: attempt < attempts })}`);
+        if (attempt < attempts)
+            answer = await readLine(io, `Please answer y or n. ${prompt}`);
+    }
+    return false;
+}
+/** Reads one answer and settles it. Non-destructive: Enter is yes, unclear asks once more. */
+export async function askYesNo(io, prompt, options = { emptyIsYes: true, reask: true }) {
+    return settleYesNo(io, await readLine(io, prompt), prompt, options);
 }
 /** Collects what a nested command writes instead of letting it reach the user. */
 export function bufferedWritable(chunks) {

package/dist/commands/collection-roots.js

@@ -11,14 +11,14 @@ import os from "node:os";
 import { scanWorkDirectories } from "./local-discovery.js";
 import path from "node:path";
 import { stat } from "node:fs/promises";
-import { isInteractiveStdin, readLine, writeLine, yesByDefault } from "./cli-io.js";
+import { isInteractiveStdin, readLine, writeLine, askYesNo } from "./cli-io.js";
 import { CollectionRootRequiredError, resolveOnboardingRoots, } from "../onboarding-roots.js";
 import { getCollectorRuntimePaths, installLocalCollector, readLocalCollectorConfig, } from "../local-state.js";
 import { collectionRootPathAliases } from "../repo-identity.js";
 import { normalizeCollectionRoots } from "../root-normalization.js";
 export function onboardingRootPrompt(io) {
     return {
-        confirm: async (message) => yesByDefault(await readLine(io, message)),
+        confirm: async (message) => askYesNo(io, message),
         input: (message) => readLine(io, message),
         message: (message) => writeLine(io.stdout, message),
     };

package/dist/commands/install-update.js

@@ -14,7 +14,7 @@ import { defaultExec, defaultInteractiveExec, writeExecOutput, writeLine } from
 import { assertCollectionRootPersisted } from "./collection-roots.js";
 import { addInstallEvent, reportInstallEventsBestEffort } from "./install-receipts.js";
 import { installLocalCollector, LOCAL_COLLECTOR_VERSION, } from "../local-state.js";
-import { COLLECTION_ROOT_REQUIRED, CollectionRootRequiredError, missingCollectionRootMessage, normalizeRootsDetailed, rootRejectionExplanation, } from "../onboarding-roots.js";
+import { CollectionRootRequiredError, missingCollectionRootMessage, normalizeRootsDetailed, rootRejectionExplanation, } from "../onboarding-roots.js";
 export class SelfUpdateError extends Error {
     result;
     eacces;
@@ -192,16 +192,35 @@ function updateOnboardArgs(command) {
 function isNpmEaccesFailure(stderr) {
     return /EACCES|permission denied/i.test(stderr);
 }
-function updateOnboardFailureCode(result) {
-    const output = `${result.stdout}\n${result.stderr}`;
-    if (output.includes(COLLECTION_ROOT_REQUIRED))
-        return COLLECTION_ROOT_REQUIRED;
-    if (/pairing|approval|device_pairing/i.test(output))
-        return "pairing_timeout";
-    if (/sync_blocked|spooled|upload failed|network_or_ingest/i.test(output)) {
-        return "sync_blocked";
+/**
+ * The reason a failed onboard rerun carries (BLI-12189). Never scraped from
+ * prose: every rerun prints "pairing skipped", so matching words labelled any
+ * failed update `pairing_timeout`. A `--json` rerun hands back the typed
+ * `blocker` the onboard step itself computed; otherwise the exit code is the
+ * only honest fact, and it is the label.
+ */
+export function updateOnboardFailureCode(result) {
+    const blocker = typedOnboardBlocker(result.stdout);
+    const label = blocker ?? `onboard_exit_${result.code}`;
+    console.error(`[install-update] onboard rerun failed ${JSON.stringify({
+        exit_code: result.code,
+        reason: label,
+        source: blocker ? "typed_blocker" : "exit_code",
+    })}`);
+    return label;
+}
+function typedOnboardBlocker(stdout) {
+    const text = stdout.trim();
+    if (!text.startsWith("{"))
+        return null;
+    try {
+        const parsed = JSON.parse(text);
+        const blocker = parsed?.blocker;
+        return typeof blocker === "string" && blocker.length > 0 ? blocker : null;
+    }
+    catch {
+        return null;
     }
-    return "onboard_rerun_failed";
 }
 function updateCollectionRoots(command) {
     const roots = command.collectionRoots?.length

package/dist/commands/local-args-tower-careers.js

@@ -1,14 +1,14 @@
 import { optionalNonEmpty, optionalUrl, parseNamedArgs } from './local-arg-values.js';
-const ACTIONS = ['list', 'show', 'rescreen', 'invite', 'decide', 'grade', 'resume', 'takehome-show', 'takehome-set', 'settings-show', 'settings-set'];
+const ACTIONS = ['list', 'show', 'rescreen', 'invite', 'decide', 'followup', 'interview', 'grade', 'resume', 'takehome-show', 'takehome-set', 'settings-show', 'settings-set'];
 /** Typed word → the one action it means. The left side is what a person reads on the button. */
 const ALSO_SPELLED = { 'send-takehome': 'invite' };
 const DECISIONS = ['passed_on', 'archived', 'reopen'];
 /** Verbs that name an application id, a role slug, or nothing at all. */
-const NEEDS_ID = ['show', 'rescreen', 'invite', 'decide', 'grade', 'resume'];
+const NEEDS_ID = ['show', 'rescreen', 'invite', 'decide', 'followup', 'interview', 'grade', 'resume'];
 const NEEDS_ROLE = ['takehome-show', 'takehome-set'];
 export function parseCareersArgs(args) {
-    const valueFlags = ['--role', '--min-score', '--since', '--home', '--dashboard-url', '--decision', '--stage', '--subject', '--body-file', '--link', '--pass-score', '--account', '--auto-invite-min-score', '--attention-min-score', '--enabled', '--booking-link', '--grader-model', '--out'];
-    const values = parseNamedArgs(args, { allowedFlags: [...valueFlags, '--json', '--now', '--force'], valueFlags });
+    const valueFlags = ['--role', '--min-score', '--since', '--home', '--dashboard-url', '--decision', '--stage', '--subject', '--body-file', '--link', '--pass-score', '--account', '--auto-invite-min-score', '--attention-min-score', '--enabled', '--booking-link', '--grader-model', '--out', '--record-sent-at', '--at', '--followup-enabled', '--followup-after-days', '--takehome-window-hours'];
+    const values = parseNamedArgs(args, { allowedFlags: [...valueFlags, '--json', '--now', '--force', '--clear'], valueFlags });
     const positionals = [...values.positionals];
     // `takehome show` and `settings set` are two words a person types and one
     // action everything downstream reads.
@@ -48,6 +48,34 @@ export function parseCareersArgs(args) {
     const enabledRaw = optionalNonEmpty(values.flags.get('--enabled'));
     if (enabledRaw !== undefined && enabledRaw !== 'true' && enabledRaw !== 'false')
         throw new Error('--enabled must be true or false.');
+    // BLI-12183: the second-chance follow-up. `--record-sent-at` records one sent
+    // outside Tower and sends nothing; the three settings flags are whole numbers
+    // and a boolean, refused here as well as on the door.
+    const recordSentAt = optionalNonEmpty(values.flags.get('--record-sent-at'));
+    if (recordSentAt !== undefined && verb !== 'followup')
+        throw new Error('--record-sent-at belongs to `cockpit careers followup <id>`.');
+    if (recordSentAt !== undefined && !Number.isFinite(Date.parse(recordSentAt)))
+        throw new Error('--record-sent-at must be an ISO date-time, e.g. 2026-10-03T08:00:00Z.');
+    // BLI-12198: an interview Edward booked himself. Exactly one of `--at <iso>`
+    // (book or reschedule) or `--clear`, refused here as well as on the door.
+    const interviewAt = optionalNonEmpty(values.flags.get('--at'));
+    const clear = values.booleans.has('--clear');
+    if (interviewAt !== undefined && verb !== 'interview')
+        throw new Error('--at belongs to `cockpit careers interview <id>`.');
+    if (clear && verb !== 'interview')
+        throw new Error('--clear belongs to `cockpit careers interview <id>`.');
+    if (verb === 'interview') {
+        if ((interviewAt === undefined) === !clear)
+            throw new Error('careers interview needs exactly one of --at <iso with offset> or --clear.');
+        if (interviewAt !== undefined && (!/(Z|[+-]\d{2}:\d{2})$/i.test(interviewAt) || !Number.isFinite(Date.parse(interviewAt)))) {
+            throw new Error('--at must be an ISO date-time with an offset, e.g. 2026-10-05T10:00:00-07:00.');
+        }
+    }
+    const followupEnabledRaw = optionalNonEmpty(values.flags.get('--followup-enabled'));
+    if (followupEnabledRaw !== undefined && followupEnabledRaw !== 'true' && followupEnabledRaw !== 'false')
+        throw new Error('--followup-enabled must be true or false.');
+    const followupAfterDays = wholeFlag(values.flags.get('--followup-after-days'), '--followup-after-days', 1, 60);
+    const takehomeWindowHours = wholeFlag(values.flags.get('--takehome-window-hours'), '--takehome-window-hours', 1, 720);
     // The resume is the only thing this noun writes to disk, so both file flags
     // belong to it alone and say so rather than being accepted and ignored.
     const outPath = optionalNonEmpty(values.flags.get('--out'));
@@ -71,6 +99,10 @@ export function parseCareersArgs(args) {
         graderModel: optionalNonEmpty(values.flags.get('--grader-model')),
         now: values.booleans.has('--now'),
         outPath, force,
+        interviewAt: interviewAt ? new Date(interviewAt).toISOString() : undefined, clear: clear || undefined,
+        recordSentAt: recordSentAt ? new Date(recordSentAt).toISOString() : undefined,
+        followupEnabled: followupEnabledRaw === undefined ? undefined : followupEnabledRaw === 'true',
+        followupAfterDays, takehomeWindowHours,
         autoInviteMinScore, attentionMinScore,
         autoInviteEnabled: enabledRaw === undefined ? undefined : enabledRaw === 'true',
         homeDir: optionalNonEmpty(values.flags.get('--home')), dashboardUrl: optionalUrl(values.flags.get('--dashboard-url')), json: values.booleans.has('--json'),
@@ -96,6 +128,14 @@ function httpsFlag(raw) {
         throw new Error('--booking-link must be an https URL.');
     return value;
 }
+function wholeFlag(raw, flag, min, max) {
+    if (raw === undefined)
+        return undefined;
+    const value = Number(raw);
+    if (!Number.isInteger(value) || value < min || value > max)
+        throw new Error(`${flag} must be a whole number, ${min} to ${max}.`);
+    return value;
+}
 function numberFlag(raw, flag, min, max) {
     if (raw === undefined)
         return undefined;

package/dist/commands/local-auth.js

@@ -8,7 +8,7 @@
  * onboard. Split out of commands/local.ts (BLI-3104); moved verbatim.
  */
 import { execFile } from "node:child_process";
-import { errorMessage, isInteractiveStdin, readLine, writeLine, yesByDefault, } from "./cli-io.js";
+import { errorMessage, isInteractiveStdin, readLine, writeLine, settleYesNo, } from "./cli-io.js";
 import { normalizeUrl } from "./local-args.js";
 import { getCollectorRuntimePaths, pairLocalCollector, readLocalCollectorSessionFile, readLocalSessionReference, } from "../local-state.js";
 const OTP_CODE_PROMPT = [
@@ -63,7 +63,8 @@ export async function resolveOnboardEmail(command, roots, config, io) {
     const typedEmail = answer.split(/\s+/u).find((part) => part.includes("@"));
     if (typedEmail)
         return typedEmail;
-    if (yesByDefault(answer)) {
+    const pairPrompt = `Use ${inferred.email} for Tower pairing? [Y/n] `;
+    if (await settleYesNo(io, answer, pairPrompt, { emptyIsYes: true, reask: true })) {
         return inferred.email;
     }
     return promptOnboardEmail(io);

package/dist/commands/local-help-commands-tower.js

@@ -25,12 +25,15 @@ export const TOWER_COMMAND_HELP = [
     [
         "careers",
         [
-            "Usage: cockpit careers [list|show <id>|rescreen <id>|send-takehome <id>|decide <id> --decision <d>|grade <id>|resume <id>|takehome show <role>|takehome set <role>|settings show|settings set] [flags]",
+            "Usage: cockpit careers [list|show <id>|rescreen <id>|send-takehome <id>|decide <id> --decision <d>|followup <id>|interview <id>|grade <id>|resume <id>|takehome show <role>|takehome set <role>|settings show|settings set] [flags]",
             "",
             "Super-admin application review and pipeline. Lists at most 100 matches with total and has_more; use filters to narrow.",
-            "list [--role <slug>] [--min-score <n>] [--since <date>] [--stage <screened|invited|submitted|graded|booking_sent|passed_on|archived>] — the board, newest first, with the two thresholds in force.",
+            "list [--role <slug>] [--min-score <n>] [--since <date>] [--stage <screened|invited|submitted|graded|booking_sent|interview|passed_on|archived>] — the board, newest first, with the two thresholds in force.",
             "send-takehome <id> (also `invite <id>`): sends that role's take-home from the configured mailbox, whatever the screening scored. The same act as Tower's Send take-home button, and only a row still at `screened`.",
             "decide <id> --decision <passed_on|archived|reopen> — your own call on a row; `reopen` puts it back to `screened`.",
+            "followup <id> [--record-sent-at <iso>]: sends the one second-chance email now, in the take-home thread (the Send follow-up button), or with --record-sent-at records one you sent by hand and sends nothing (Already followed up). A second follow-up is refused. list and show carry each row's deadline label: overdue, second_chance, no_submission or incomplete.",
+            "interview <id> --at <iso with offset> [--clear]: records an interview you booked yourself (the Interview booked control). The row moves to the interview stage and its chip reads Interview plus the time; booking again reschedules; --clear (instead of --at) returns the row to where it stood. An archived row is refused. list --stage interview lists them.",
+            "settings set also takes --followup-enabled <true|false> (default false), --followup-after-days <1-60> (default 7) and --takehome-window-hours <1-720> (default 72).",
             "grade <id> [--now]: puts one submission back in the take-home grader's queue. The grader runs on Railway every 5 minutes; --now says so rather than pretending the run happened here.",
             "resume <id> [--out <path>] [--force]: the candidate's resume, the same file the drawer's Open resume button shows. Bare, it prints a signed link that dies in 60 seconds; --out downloads the file to that path and refuses to overwrite one already there unless you pass --force.",
             "takehome show <role> — the subject, body, link and the reviewer's rubric for that role.",

package/dist/commands/local-help.js

@@ -127,7 +127,7 @@ export function localCommandHelp(command) {
         "  cockpit project [list] [--archived] [--dashboard-url <url>] [--json]",
         `  cockpit search "<words>" [--kind ${SEARCH_KINDS.join(",")}] [--limit <n>] [--dashboard-url <url>] [--json]`,
         "  cockpit release [--dry-run] [--skip-checks] [--no-floor] [--tag <tag>] [--access <public|restricted>] [--otp <code>]",
-        "  cockpit careers [list|show <id>|rescreen <id>|send-takehome <id>|decide <id> --decision <passed_on|archived|reopen>|grade <id> [--now]|resume <id> [--out <path>]|takehome show <role>|takehome set <role> --body-file <path>|settings show|settings set --enabled <true|false>] [--role <slug>] [--min-score <n>] [--since <date>] [--stage <s>] [--force] [--json]",
+        "  cockpit careers [list|show <id>|rescreen <id>|send-takehome <id>|decide <id> --decision <passed_on|archived|reopen>|followup <id> [--record-sent-at <iso>]|interview <id> <--at <iso>|--clear>|grade <id> [--now]|resume <id> [--out <path>]|takehome show <role>|takehome set <role> --body-file <path>|settings show|settings set --enabled <true|false> --followup-enabled <true|false> --followup-after-days <n> --takehome-window-hours <n>] [--role <slug>] [--min-score <n>] [--since <date>] [--stage <s>] [--force] [--json]",
         "  cockpit usage sessions [--task <BLI-NNNN> | --subject <name>] [--repo <label>] [--since <window>] [--json]",
         "  cockpit usage sessions --session <id> [--from-window <n>] [--json]",
         "  --by-topic groups work types; --by-subject groups open subjects from session summaries.",

package/dist/commands/notes-writes.js

@@ -3,7 +3,7 @@
  * sharing it and taking it back, and moving it to another shelf. Sibling of
  * `notes.ts`, named in its header.
  */
-import { isInteractiveStdin, readLine, readPipedText, writeLine, yesByDefault } from "./cli-io.js";
+import { isInteractiveStdin, readPipedText, writeLine, askYesNo } from "./cli-io.js";
 import { NOTE_SLOW_UPLOAD_BYTES, noteAudioMime, decodeTextBytes, noteFileRefusalSentence, readNoteFile, } from "./notes-file.js";
 import { ask, emit, fail, sayUpload, errorText, TAG, READ_DEADLINE_MS } from "./notes-door.js";
 /**
@@ -165,8 +165,8 @@ export async function shareNote(command, door) {
         if (!isInteractiveStdin(door.io)) {
             return fail(door, "confirmation_required", "Sharing a note lets everyone signed in read it. Pass --yes to do it without being asked.");
         }
-        const answer = await readLine(door.io, "Share this note with everyone signed in? [Y/n] ");
-        if (!yesByDefault(answer)) {
+        const shareYes = await askYesNo(door.io, "Share this note with everyone signed in? [Y/n] ");
+        if (!shareYes) {
             writeLine(door.io.stderr, `${TAG} share declined ${JSON.stringify({ reason: "operator_said_no" })}`);
             writeLine(door.io.stdout, "Left alone. Nothing changed.");
             return 0;

package/dist/commands/public-root.js

@@ -21,7 +21,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.159");
+    writeLine(io?.stdout ?? process.stdout, "0.2.161");
     return 0;
   }
 

package/dist/commands/settings.js

@@ -19,7 +19,7 @@
  * that takes one. New content arrives on stdin and is forwarded without ever
  * being written to stdout, stderr, or an argument vector.
  */
-import { isInteractiveStdin, readLine, writeLine, yesByDefault } from "./cli-io.js";
+import { isInteractiveStdin, readLine, settleYesNo, writeLine } from "./cli-io.js";
 import { cacheAgeLabel, readThroughCache } from "./read-cache.js";
 import { asList, asRecord, callTower, isForbidden, openTower, parseModelKey, readAllStdin, writeCommandFailure, } from "./tower-command.js";
 import { showOverview } from "./settings-overview.js";
@@ -374,8 +374,9 @@ export async function confirmDestructive(command, io, prompt, label) {
         };
     }
     const answer = await readLine(io, prompt);
-    if (yesByDefault(answer))
+    if (await settleYesNo(io, answer, prompt, { emptyIsYes: false, reask: false })) {
         return { ok: true };
+    }
     return {
         ok: false,
         reason: "declined",

package/dist/onboarding-roots.js

@@ -1,4 +1,5 @@
 import fs from "node:fs/promises";
+import { parseYesNo } from "./yes-no.js";
 import { realpathSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
@@ -235,12 +236,11 @@ async function promptForHomeRootOptIn(options, rejections) {
 // Anything that isn't recognisably yes still routes to the decline prompt,
 // where a typed path is recoverable rather than lost.
 function isHomeRootYes(raw) {
-    const answer = raw.trim().split(/\s+/u)[0]?.toLowerCase() ?? "";
-    if (answer === "")
-        return true;
-    if (answer.startsWith("n"))
-        return false;
-    return answer.startsWith("y");
+    // BLI-12189: "you know what, no" used to pass on its leading "y". Unclear
+    // routes to the decline prompt, where a typed path is recoverable.
+    const verdict = parseYesNo(raw, { emptyIsYes: true });
+    console.error(`[onboarding-roots] home root consent ${JSON.stringify({ verdict })}`);
+    return verdict === "yes";
 }
 async function promptForDeclinedHomeRoot(options, homeDir) {
     const prompt = requirePrompt(options);

package/dist/yes-no.js

@@ -0,0 +1,28 @@
+/**
+ * The ONE reading of a typed yes/no answer (BLI-12189).
+ *
+ * The old `yesByDefault` returned true unless the first word was exactly
+ * `n`/`no`, so "nope", "nah", "cancel", "don't" and "No thanks" confirmed a
+ * device revoke. Now only a recognised yes confirms; a no word or a leading
+ * "n" declines; everything else is `unclear` and the caller decides (a
+ * destructive prompt declines, a harmless one asks once more).
+ *
+ * Pure: no I/O, no logging. Callers log the outcome label.
+ */
+const YES_WORDS = new Set(["y", "yes", "yeah", "yep", "sure", "ok", "okay"]);
+const NO_WORDS = new Set(["cancel", "stop", "don't", "dont", "never", "abort", "quit"]);
+/**
+ * `emptyIsYes`: bare Enter means yes where the prompt shows `[Y/n]`; on a
+ * `[y/N]` (destructive) prompt it means no.
+ */
+export function parseYesNo(raw, options) {
+    const first = raw.trim().split(/\s+/u)[0]?.toLowerCase() ?? "";
+    if (first === "")
+        return options.emptyIsYes ? "yes" : "no";
+    const word = first.replace(/[^\p{L}\p{N}']+$/gu, "");
+    if (YES_WORDS.has(word))
+        return "yes";
+    if (NO_WORDS.has(word) || word.startsWith("n"))
+        return "no";
+    return "unclear";
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/cli",
-  "version": "0.2.159",
+  "version": "0.2.161",
   "private": false,
   "type": "module",
   "bin": {
@@ -27,8 +27,13 @@
     "test": "node dist/cli.js --help && node ../../scripts/assert-public-cli-routing.mjs && node ../../scripts/assert-public-cli-verb-help.mjs && node ../../scripts/assert-public-cli-surface-doors.mjs && node ../../scripts/assert-public-cli-runtime-files.mjs && node ../../scripts/assert-public-cli-exit-contract.mjs && node ../../scripts/assert-public-cli-no-fleet-posts.mjs && node ../../scripts/assert-public-cli-doctor-json.mjs && node ../../scripts/assert-public-package-pack.mjs --workspace=@bli-cockpit/cli"
   },
   "dependencies": {
-    "@bli-cockpit/memory-mcp": "0.1.43",
-    "@bli-cockpit/mcp": "0.1.77",
-    "@bli-cockpit/telemetry-core": "0.1.55"
+    "@bli-cockpit/memory-mcp": "0.1.45",
+    "@bli-cockpit/mcp": "0.1.79",
+    "@bli-cockpit/telemetry-core": "0.1.57"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/BLI-INC/bli-cockpit.git",
+    "directory": "packages/cockpit-cli"
   }
 }