@bli-cockpit/cli 0.2.16 → 0.2.17

package/dist/commands/public-root.js

@@ -15,7 +15,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.16");
+    writeLine(io?.stdout ?? process.stdout, "0.2.17");
     return 0;
   }
 

package/dist/evidence-upload-client.js

@@ -140,6 +140,7 @@ export async function uploadRawEvidenceFilesChunked(options) {
                 continue;
             }
             const outcome = await uploadOneObject(options, entry, disposition, chunkSizeBytes);
+            await reportAbandonedUpload(options, disposition, outcome);
             outcomes.push(outcome);
             for (const duplicate of entry.duplicates) {
                 outcomes.push(duplicateOutcome(outcome, duplicate));
@@ -171,6 +172,72 @@ function duplicateOutcome(primary, duplicate) {
         uploaded_chunk_count: 0,
     };
 }
+/**
+ * Tell the server why we gave up on a row `begin` already opened (BLI-2539).
+ *
+ * `begin` opens a ledger row per object and the chunks then go one object at a
+ * time, so one object failing leaves its siblings untouched — the production
+ * shape is a lone failure among committed rows. This function is the only thing
+ * standing between that failure and a row that sits `pending` with a null
+ * reason until a drain relabels it `staging_incomplete` weeks later, which
+ * names the shape and not the cause. 275 rows reached that state by 2026-08-14.
+ *
+ * The server records the reason on the still-open row (for a reason classified
+ * permanent it fails the row closed), so reporting a give-up never costs the
+ * staged chunks the next sync resumes from.
+ *
+ * Deliberately best-effort: the upload has already failed and the caller's
+ * outcome is the answer that matters. Losing the abort as well leaves exactly
+ * the row we had before this existed, so a delivery failure must not throw —
+ * but it is named on stderr rather than swallowed, because a reason the server
+ * never received is invisible precisely where BLI-2539 needed it visible.
+ */
+async function reportAbandonedUpload(options, disposition, outcome) {
+    if (outcome.upload_state !== "upload_failed")
+        return;
+    if (!outcome.reason)
+        return;
+    // Only a row this call actually opened or resumed. `conflict` never allocated
+    // one for us, and `already_committed` names durable content an abort must not
+    // touch.
+    if (disposition.disposition !== "new" && disposition.disposition !== "resume") {
+        return;
+    }
+    if (!disposition.upload_id)
+        return;
+    const reason = conformReasonLabel(outcome.reason);
+    const response = await requestJson(options, "/api/ambient/evidence/upload/abort", {
+        schema_version: "ambient-raw-evidence-upload-abort.v1",
+        generated_at: options.generatedAt,
+        provenance: options.provenance,
+        upload_id: disposition.upload_id,
+        object_key: outcome.object_key,
+        reason,
+        uploaded_chunk_count: outcome.uploaded_chunk_count,
+    });
+    if (!response.ok) {
+        // status 404 is an old dashboard without the abort route; status 0 means
+        // the request itself never completed. Metadata only — ids, status, labels.
+        console.error("[evidence-abort] delivery failed; the server did not record the reason", JSON.stringify({
+            upload_id: disposition.upload_id,
+            reason,
+            http_status: response.status,
+        }));
+    }
+}
+/**
+ * Force a reason into the label shape the abort route accepts.
+ *
+ * Every reason this client composes already fits, and this exists so that stays
+ * true without anyone having to remember it. A label the server rejects comes
+ * back 400 and the reason is lost — which is the precise failure BLI-2539 is
+ * about, arriving through the code meant to fix it. A mangled label that lands
+ * beats a perfect one that does not.
+ */
+function conformReasonLabel(reason) {
+    const conformed = reason.replace(/[^a-z0-9_:.-]/gi, "_").slice(0, 120);
+    return conformed.length > 0 ? conformed : "upload_failed_unlabelled";
+}
 async function uploadOneObject(options, entry, disposition, chunkSizeBytes) {
     const objectKey = entry.file.pointer.object_key ?? "";
     if (disposition.disposition === "already_committed") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/cli",
-  "version": "0.2.16",
+  "version": "0.2.17",
   "private": false,
   "type": "module",
   "bin": {
@@ -26,6 +26,6 @@
     "test": "node dist/cli.js --help && node ../../scripts/assert-public-cli-routing.mjs && node ../../scripts/assert-public-package-pack.mjs --workspace=@bli-cockpit/cli"
   },
   "dependencies": {
-    "@bli-cockpit/telemetry-core": "0.1.18"
+    "@bli-cockpit/telemetry-core": "0.1.19"
   }
 }