@bli-cockpit/cli 0.2.197 → 0.2.199

package/dist/commands/brain.js

@@ -16,6 +16,18 @@ export async function runBrain(command, io) {
             writeLine(io.stderr, detail);
         return 1;
     }
+    if (command.action === "retry") {
+        const answer = await askAgentDoor(door, { path: "/api/brain/incidents/retry", method: "POST", label: "brain retry", timeoutMs: READ_DEADLINE_MS,
+            body: { ids: command.ids, all_needs_human: command.allNeedsHuman, project: command.project, reason: command.reason } });
+        if (!answer.ok)
+            return failAgentDoor(door, TAG, answer.reason, answer.detail);
+        const body = answer.body;
+        writeLine(io.stderr, `${TAG} retry answered ${JSON.stringify({ reason: body.reason, retried: body.retried.length, skipped: body.skipped.length, missing: body.missing.length, failures: body.failures.length })}`);
+        if (command.json)
+            return emitAgentDoor(door, body, body.ok ? 0 : 1);
+        writeLine(io.stdout, body.text);
+        return body.ok ? 0 : 1;
+    }
     const query = new URLSearchParams();
     if (command.project)
         query.set("project", command.project);

package/dist/commands/cal-delete.js

@@ -4,7 +4,7 @@ const TAG = "[cal cli]";
 const DELETE_DEADLINE_MS = 60_000;
 export async function runCalDelete(command, door) {
     const answer = await askAgentDoor(door, {
-        path: `/api/cal/events/${encodeURIComponent(command.subjectId ?? "")}`,
+        path: `/api/cal/events/${encodeURIComponent(command.subjectId ?? "")}${command.accountName ? `?account=${encodeURIComponent(command.accountName)}` : ""}`,
         method: "DELETE",
         label: "cal delete",
         timeoutMs: DELETE_DEADLINE_MS,
@@ -18,6 +18,8 @@ export async function runCalDelete(command, door) {
         writeLine(door.io.stdout, "Tower answered without a result. Nothing to report.");
         return 0;
     }
+    if (deleted.account_name)
+        writeLine(door.io.stdout, `Account: ${deleted.account_name}.`);
     const alreadyGone = deleted.google === "already_gone_at_google";
     const stored = deleted.local_store === "removed"
         ? "Tower's copy is removed."

package/dist/commands/cal.js

@@ -25,7 +25,7 @@ import { runCalAddIcal, runCalDetach, runCalShare, runCalSync } from "./cal-cale
 import { runCalDelete } from "./cal-delete.js";
 import { runCalSyncStatus } from "./cal-sync-status.js";
 import { writeLine } from "./cli-io.js";
-import { cacheAgeLabel, readThroughCache } from "./read-cache.js";
+import { cacheAgeLabel, cacheCoverage, readThroughCache } from "./read-cache.js";
 const TAG = "[cal cli]";
 const READ_DEADLINE_MS = 30_000;
 const WRITE_DEADLINE_MS = 60_000;
@@ -52,6 +52,9 @@ export async function runCal(command, io) {
             return runCalSync(command, door);
         case "sync-status":
             return runCalSyncStatus(command, door);
+        case "change":
+            return changeEvent(command, door);
+        case "cancel":
         case "delete":
             return runCalDelete(command, door);
     }
@@ -118,7 +121,7 @@ async function window(command, door) {
         return failAgentDoor(door, TAG, answer.reason, answer.detail);
     const body = answer.body;
     if (door.json)
-        return emitAgentDoor(door, { ok: true, ...body });
+        return emitAgentDoor(door, { ok: true, ...body, ...cacheCoverage(answer) });
     if (answer.fromCache) {
         writeLine(door.io.stderr, `(${cacheAgeLabel(answer.ageMs ?? 0)}, refreshing in the background)`);
     }
@@ -260,7 +263,7 @@ async function listCalendars(door) {
             ? (calendar.last_sync_at ? `synced ${calendar.last_sync_at.slice(0, 16).replace("T", " ")}` : "never synced")
             : `${calendar.status}: ${calendar.status_reason ?? "no reason recorded"}`;
         const flags = `${calendar.org_visible ? "shared" : "private"}${calendar.selected ? "" : ", hidden"}`;
-        writeLine(door.io.stdout, `${calendar.name.slice(0, 32).padEnd(32)}  ${calendar.provider.padEnd(12)}  ${flags.padEnd(16)}  ${health}`);
+        writeLine(door.io.stdout, `${calendar.account_label ?? calendar.provider}  ${calendar.name.slice(0, 32).padEnd(32)}  ${calendar.provider.padEnd(12)}  ${flags.padEnd(16)}  ${health}`);
     }
     writeLine(door.io.stdout, "");
     writeLine(door.io.stdout, `${calendars.length} calendar(s). ids: ${calendars.map((calendar) => calendar.id).join(", ")}`);
@@ -274,6 +277,7 @@ async function create(command, door) {
         timeoutMs: WRITE_DEADLINE_MS,
         body: {
             calendar_id: command.calendarId,
+            ...(command.accountName ? { account: command.accountName } : {}),
             title: command.title,
             starts_at: command.startsAt,
             ends_at: command.endsAt,
@@ -299,6 +303,8 @@ async function create(command, door) {
     }
     if (event?.html_link)
         writeLine(door.io.stdout, event.html_link);
+    if (event?.account_name)
+        writeLine(door.io.stdout, `Account: ${event.account_name}.`);
     if (command.meet) {
         writeLine(door.io.stdout, event?.meet_link
             ? `Google Meet: ${event.meet_link}`
@@ -314,4 +320,14 @@ function meetingLinkText(event) {
     const meeting = event.meeting_url ? `  ${label}: ${event.meeting_url}` : "";
     console.error("[cal render] meeting link", JSON.stringify({ reason: event.meeting_url ? "meeting_link_shown" : "no_meeting_link" }));
     return meeting;
+}
+async function changeEvent(command, door) {
+    const answer = await askAgentDoor(door, { path: `/api/cal/events/${encodeURIComponent(command.subjectId)}`, method: "PATCH", label: "cal change", timeoutMs: WRITE_DEADLINE_MS,
+        body: { ...(command.accountName ? { account: command.accountName } : {}), ...(command.title ? { title: command.title } : {}), ...(command.startsAt ? { starts_at: command.startsAt } : {}), ...(command.endsAt ? { ends_at: command.endsAt } : {}), ...(command.location ? { location: command.location } : {}) } });
+    if (!answer.ok)
+        return failAgentDoor(door, TAG, answer.reason, answer.detail);
+    if (door.json)
+        return emitAgentDoor(door, { ok: true, ...answer.body });
+    writeLine(door.io.stdout, `Changed event in ${answer.body.event?.account_name ?? "its account"}.`);
+    return 0;
 }

package/dist/commands/docs-notion.js

@@ -47,8 +47,8 @@ export async function syncStatusDocs(command, door) {
     const body = answer.body;
     if (door.json) {
         return emitAgentDoor(door, {
+            ...answer.body,
             ok: true,
-            counts: body.counts,
             documents: body.documents ?? [],
             last_run: body.last_run ?? { push: null, pull: null },
         });
@@ -57,6 +57,8 @@ export async function syncStatusDocs(command, door) {
     for (const doc of documents) {
         writeLine(door.io.stdout, `${doc.id}  ${doc.state.padEnd(13)}  ${(doc.notion_synced_at ?? "never").padEnd(25)}  ${doc.slug ?? "(no slug)"}  ${doc.title}`);
     }
+    if (body.coverage)
+        writeLine(door.io.stdout, body.coverage);
     const byState = body.counts?.by_state ?? {};
     writeLine(door.io.stdout, "");
     writeLine(door.io.stdout, `${body.counts?.linked ?? documents.length} linked: ${Object.entries(byState)

package/dist/commands/docs.js

@@ -32,7 +32,7 @@ import { isInteractiveStdin, readPipedText, writeLine } from "./cli-io.js";
 import { readDoc } from "./docs-read.js";
 import { linkDoc, syncStatusDocs } from "./docs-notion.js";
 import { readNoteFile } from "./notes-file.js";
-import { cacheAgeLabel, readThroughCache } from "./read-cache.js";
+import { cacheAgeLabel, cacheCoverage, readThroughCache } from "./read-cache.js";
 const TAG = "[docs cli]";
 const READ_DEADLINE_MS = 30_000;
 const WRITE_DEADLINE_MS = 60_000;
@@ -97,10 +97,13 @@ async function listDocs(command, door) {
         return failAgentDoor(door, TAG, answer.reason, answer.detail);
     const documents = (answer.body.documents ?? []);
     if (door.json)
-        return emitAgentDoor(door, { ok: true, documents });
+        return emitAgentDoor(door, { ok: true, ...answer.body, documents, ...cacheCoverage(answer) });
     if (answer.fromCache) {
         writeLine(door.io.stderr, `(${cacheAgeLabel(answer.ageMs ?? 0)}, refreshing in the background)`);
     }
+    const counts = answer.body.counts;
+    if (counts)
+        writeLine(door.io.stdout, `${counts.total} documents match in all. ${counts.coverage}`);
     if (documents.length === 0) {
         writeLine(door.io.stdout, command.query ? `No document matches "${command.query}".` : "No documents.");
         return 0;

package/dist/commands/doctor-report.js

@@ -53,6 +53,7 @@ setupReceipt, repairs = []) {
             repairs,
             needs_person: needsPerson,
             setup_receipt: setupReceipt?.receipt ?? null,
+            setup_receipt_coverage: setupReceipt ? setupReceiptBlock(setupReceipt).join("; ") : "no data yet: no cached receipt",
             memory_install: setupReceipt?.memory ?? null,
         }, null, 2));
         return;

package/dist/commands/heartbeat.js

@@ -270,7 +270,7 @@ export async function sendCollectorHeartbeatBestEffort(options) {
     const heartbeat = buildCollectorHeartbeat({
         roots: options.roots,
         facts: options.facts,
-        setupReceipt: { ...(setupReceipt ?? { schema_version: "setup-receipt.v1", checked_at: new Date().toISOString(), browser: { status: "unknown" }, device: { status: "unknown" }, collector: { autostart: { status: "unknown" } } }), agent_setup: await collectAgentSetup(options.homeDir ?? os.homedir()) },
+        setupReceipt: setupReceipt ? { ...setupReceipt, agent_setup: await collectAgentSetup(options.homeDir ?? os.homedir()) } : null,
         ...(options.now ? { now: options.now } : {}),
         memoryInstall: memory.receipt,
     });

package/dist/commands/issue.js

@@ -28,7 +28,7 @@
 import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor, } from "./agent-door.js";
 import { writeLine } from "./cli-io.js";
 import { assigneeLabel, beginAssigneeDirectoryFetch, finishAssigneeDirectory, withAssigneeIdentity } from "./issue-directory.js";
-import { cacheAgeLabel, readThroughCache } from "./read-cache.js";
+import { cacheAgeLabel, cacheCoverage, readThroughCache } from "./read-cache.js";
 import { showIssue } from "./issue-show.js";
 import { READ_DEADLINE_MS, TAG, resolveProjectId, sizeForEstimate, withSizeLabel, } from "./issue-contracts.js";
 import { commentIssue, createIssue, moveIssue, updateIssue } from "./issue-write.js";
@@ -154,11 +154,15 @@ async function listIssues(command, door) {
     if (door.json) {
         return emitAgentDoor(door, {
             ok: true,
+            ...(body.counts ? { counts: body.counts } : {}),
+            ...cacheCoverage(answer),
             issues: issues.map((issue) => withSizeLabel(withAssigneeIdentity(issue, directory))),
             ...(body.completeness ? { completeness: body.completeness } : {}),
             ...(body.outside_project ? { outside_project: body.outside_project } : {}),
         });
     }
+    if (body.counts)
+        writeLine(door.io.stdout, `${body.counts.total} match in all. ${body.counts.coverage}`);
     if (issues.length === 0) {
         writeLine(door.io.stdout, "No issues match that.");
         return 0;

package/dist/commands/local-args-tower-brain.js

@@ -13,12 +13,12 @@ import { optionalNonEmpty, optionalUrl, parseNamedArgs } from "./local-arg-value
 export const BRAIN_SHOW_STATUSES = ["open", "running", "needs_human", "fixed", "not_actionable", "cleared"];
 export function parseBrainArgs(args) {
     const values = parseNamedArgs(args, {
-        allowedFlags: ["--project", "--show", "--home", "--dashboard-url", "--json"],
-        valueFlags: ["--project", "--show", "--home", "--dashboard-url"],
+        allowedFlags: ["--project", "--show", "--home", "--dashboard-url", "--json", "--all-needs-human", "--reason"],
+        valueFlags: ["--project", "--show", "--home", "--dashboard-url", "--reason"],
     });
     const action = values.positionals[0];
-    if (action !== "status" || values.positionals.length > 1) {
-        throw new Error("brain takes one verb: `status`. Example: `cockpit brain status` or `cockpit brain status --project pearl-portal`.");
+    if ((action !== "status" && action !== "retry") || (action === "status" && values.positionals.length > 1)) {
+        throw new Error("brain takes one verb: `status` or `retry`. Example: `cockpit brain status` or `cockpit brain status --project pearl-portal`.");
     }
     const project = optionalNonEmpty(values.flags.get("--project"));
     if (project && !LOG_PROJECT_PATTERN.test(project))
@@ -26,9 +26,25 @@ export function parseBrainArgs(args) {
     const show = optionalNonEmpty(values.flags.get("--show"));
     if (show && !BRAIN_SHOW_STATUSES.includes(show))
         throw new Error(`--show wants one of ${BRAIN_SHOW_STATUSES.join(", ")}.`);
+    const ids = values.positionals.slice(1);
+    const reason = optionalNonEmpty(values.flags.get("--reason"))?.trim();
+    const allNeedsHuman = values.booleans.has("--all-needs-human");
+    if (action === "retry") {
+        if (!reason || reason.length > 4000)
+            throw new Error("--reason requires text (at most 4000 characters).");
+        if (!ids.length && !allNeedsHuman)
+            throw new Error("retry requires incident ids or --all-needs-human.");
+        if (ids.length > 100 || ids.some(id => !/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|BLI-[0-9]+)$/i.test(id)))
+            throw new Error("retry wants incident UUIDs or BLI issue identifiers (at most 100).");
+        if (show)
+            throw new Error("--show belongs to brain status.");
+    }
+    else if (reason || allNeedsHuman)
+        throw new Error("--reason and --all-needs-human belong to brain retry.");
     return {
         kind: "brain",
-        action: "status",
+        action,
+        ...(action === "retry" ? { ids, reason, allNeedsHuman } : {}),
         ...(project ? { project } : {}),
         ...(show ? { show } : {}),
         dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")),

package/dist/commands/local-args-tower-cal.js

@@ -26,6 +26,7 @@ const CAL_ACTIONS = new Set([
     "find",
     "calendars",
     "add-ical",
+    "change", "cancel",
     "create",
     "share",
     "detach",
@@ -34,7 +35,7 @@ const CAL_ACTIONS = new Set([
     "delete",
 ]);
 /** Every verb that names ONE thing first — a calendar id, or (delete) an event id. */
-const CAL_ACTIONS_NEEDING_A_SUBJECT = new Set(["sync", "detach", "share", "delete"]);
+const CAL_ACTIONS_NEEDING_A_SUBJECT = new Set(["sync", "detach", "share", "delete", "change", "cancel"]);
 /** `sync-status [<calendar id>]` — every calendar, or one's. Ticket 10730. */
 const CAL_ACTIONS_WITH_OPTIONAL_SUBJECT = new Set(["sync-status"]);
 export function parseCalArgs(args) {
@@ -43,6 +44,7 @@ export function parseCalArgs(args) {
             "--home",
             "--dashboard-url",
             "--calendar",
+            "--account",
             "--tz",
             "--offset",
             "--hours",
@@ -68,6 +70,7 @@ export function parseCalArgs(args) {
             "--home",
             "--dashboard-url",
             "--calendar",
+            "--account",
             "--tz",
             "--offset",
             "--hours",
@@ -134,9 +137,6 @@ function readCalCreateDetails(action, values) {
     const startsAt = optionalNonEmpty(values.flags.get("--at"));
     const endsAt = optionalNonEmpty(values.flags.get("--until"));
     if (action === "create") {
-        if (!optionalNonEmpty(values.flags.get("--calendar"))) {
-            throw new Error("cal create needs --calendar <id>: with several calendars attached, which one this goes on is yours to say. `cockpit cal calendars` lists them.");
-        }
         if (!title)
             throw new Error('cal create needs --title "<what it is>".');
         if (!startsAt)
@@ -155,7 +155,7 @@ function validateCalSharing(action, values) {
 }
 /** `delete` notifies attendees, exactly like `create`'s invitations — never without saying so first. */
 function validateCalDelete(action, values) {
-    if (action === "delete" && !values.booleans.has("--yes")) {
+    if ((action === "delete" || action === "cancel") && !values.booleans.has("--yes")) {
         throw new Error("cal delete needs --yes: it removes the event at Google and can email everybody on it. Add --yes once you mean it.");
     }
 }
@@ -175,6 +175,7 @@ function buildCalCommand(values, action, subject, query, title, startsAt, endsAt
         dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")),
         ...(subject ? { subjectId: subject } : {}),
         ...(query ? { query } : {}),
+        accountName: optionalNonEmpty(values.flags.get("--account")),
         calendarId: optionalNonEmpty(values.flags.get("--calendar")),
         // An absent `--tz` means "this machine's zone", resolved at run time in
         // `commands/cal.ts` rather than here, so the parser stays pure.

package/dist/commands/local-args-tower-mail.js

@@ -30,6 +30,7 @@
  */
 import { optionalNonEmpty, optionalPositiveInteger, optionalUrl, parseNamedArgs, } from "./local-arg-values.js";
 const MAIL_ACTIONS = new Set([
+    "rename", "enable", "disable", "default", "remove",
     "accounts",
     "add-imap",
     "detach",
@@ -54,6 +55,7 @@ export function parseMailArgs(args) {
             "--home",
             "--dashboard-url",
             "--account",
+            "--source",
             "--address",
             "--name",
             "--limit",
@@ -74,6 +76,7 @@ export function parseMailArgs(args) {
             "--home",
             "--dashboard-url",
             "--account",
+            "--source",
             "--address",
             "--name",
             "--limit",
@@ -90,6 +93,12 @@ export function parseMailArgs(args) {
     });
     const { action, rest } = readMailAction(values);
     const { subject, query } = readMailSubjectOrQuery(action, rest);
+    if (["rename", "enable", "disable", "default", "remove"].includes(action) && !values.flags.get("--account"))
+        throw new Error("Name the account with --account <name>.");
+    if (action === "rename" && !values.flags.get("--name"))
+        throw new Error("Rename needs --name <new name>.");
+    if (["enable", "disable"].includes(action) && !["mail", "calendar"].includes(values.flags.get("--source") ?? ""))
+        throw new Error("Name --source mail or --source calendar.");
     const address = readImapAddress(action, values);
     const { to, cc } = readMailRecipients(action, values);
     const outPath = readAttachmentPath(action, values);
@@ -146,11 +155,6 @@ function readMailRecipients(action, values) {
     if (MAIL_ACTIONS_COMPOSING.has(action) && to.length === 0) {
         throw new Error(`mail ${action} needs --to "someone@example.com" (comma-separated for several).`);
     }
-    if (MAIL_ACTIONS_COMPOSING.has(action) && !optionalNonEmpty(values.flags.get("--account"))) {
-        throw new Error(action === "draft"
-            ? "mail draft needs --account <id>: with several mailboxes attached, which one the draft is saved in is yours to say. `cockpit mail accounts` lists them."
-            : "mail send needs --account <id>: with several mailboxes attached, which address this goes out from is yours to say. `cockpit mail accounts` lists them.");
-    }
     return { to, cc };
 }
 function readAttachmentPath(action, values) {
@@ -194,6 +198,7 @@ function buildMailCommand(values, action, subject, query, address, to, cc, outPa
         ...(subject ? { subjectId: subject } : {}),
         ...(query ? { query } : {}),
         accountId: optionalNonEmpty(values.flags.get("--account")),
+        source: values.flags.get("--source"),
         address,
         displayName: optionalNonEmpty(values.flags.get("--name")),
         ...(limit === undefined ? {} : { limit }),

package/dist/commands/local-args-tower-pages.js

@@ -215,6 +215,7 @@ const NOTES_ACTIONS = new Set([
     "webhook",
     // Ticket 10718: the Granola cron's own last-several-runs health.
     "granola-status",
+    "bot-upcoming",
 ]);
 /** Actions whose first positional is the note it acts on. */
 const NOTES_ACTIONS_NEEDING_A_NOTE = new Set([

package/dist/commands/local-help-commands-tower-ops.js

@@ -49,6 +49,10 @@ export const TOWER_OPS_COMMAND_HELP = [
         [
             "Usage: cockpit brain status [--project <id>] [--show open|running|needs_human|fixed|not_actionable|cleared] [--dashboard-url <url>] [--json]",
             "",
+            "Retry: cockpit brain retry <id...> [--all-needs-human] [--project <p>] --reason <text> [--json]",
+            "Ids are incident UUIDs or BLI issue identifiers. Retry reopens needs_human or not_actionable rows, resets attempts and claims,",
+            "and records who, why and when. --all-needs-human selects only needs_human; --project narrows every selection. Other states are skipped.",
+            "Only members and super admins can retry. One comment is posted per incident issue. MCP twin: brain_retry.",
             "Tower's incident queue. Every 15 minutes the log-digest cron turns each recurring problem in a project's logs (classes",
             "our_bug, config_drift, capacity, unknown) into ONE incident with ONE Tower issue; a repeat adds to its count, never a twin.",
             "A template quiet for 24 hours is marked cleared. This prints, per project, how many incidents are open, being worked,",

package/dist/commands/local-help-commands-tower.js

@@ -115,7 +115,8 @@ export const TOWER_COMMAND_HELP = [
         [
             "Usage: cockpit mail [accounts|add-imap|inbox|read <thread>|search \"<words>\"|send|draft|attachment <id>|sync <account>|sync-status [<account>]|detach <account>] [flags]",
             "",
-            "Every mailbox you attached, in one place. One person, several addresses — nothing here has a \"current\" mailbox.",
+            "Every mailbox you attached, in one place. One person, several addresses. Writes use a named account or your default.",
+            "rename --account <name> --name <label>; enable|disable --account <name> --source mail|calendar; default|remove --account <name>. Switches keep stored data; remove disconnects and deletes Tower copies.",
             "accounts — every mailbox, its provider (gmail_oauth or imap), its health and when it last synced. The ids other verbs take are on the last line.",
             "add-imap --address <you@gmail.com> [--name \"<display name>\"] — attaches a personal Google account over IMAP + SMTP. The APP PASSWORD is read from stdin and there is no flag for it:",
             "      macOS:      printf \"%s\" \"abcd efgh ijkl mnop\" | cockpit mail add-imap --address you@gmail.com",
@@ -124,8 +125,8 @@ export const TOWER_COMMAND_HELP = [
             "inbox [--account <id>] [--unread] [--label <l>] [--limit <n>] [--before <iso>] — everything across every mailbox, newest first. * is unread, @ has an attachment. Every row (text or --json) carries the thread id — `[thread <id>]` in text — so `mail read <thread>` never costs a second --json call to learn it (BLI-10450).",
             "read <thread> — one conversation with its bodies. Thread ids come from `cockpit mail inbox` or `cockpit mail search`, in either --json or plain text.",
             "search \"<words>\" [--account <id>] [--limit <n>] — full text over subject and body. Quotes and OR work the way they do in a search box. Every row (text or --json) carries the thread id.",
-            "send --account <id> --to <a[,b]> [--cc <c>] --subject \"<s>\" [--reply-to <message id>] [--file <path>] [--attach <path>]... — the BODY comes from --file or stdin. --account is required: which address this goes out from is yours to say.",
-            "draft --account <id> --to <a[,b]> [--cc <c>] --subject \"<s>\" [--reply-to <message id>] [--file <path>] [--attach <path>]... — saves the message as a DRAFT in that mailbox for a person to read, edit and send themselves. NOTHING IS SENT and nobody is notified, so there is no confirmation step. Same flags and same body rule as send (--file or stdin). Only the mailbox's owner can draft into it. --reply-to threads the draft into that conversation the way send does; Gmail files it there only when the subject matches the original's, and the answer says whether it did. Gmail mailboxes only: an IMAP mailbox is refused as imap_drafts_unsupported. --json answers { ok, draft: { account_id, address, provider_draft_id, provider_thread_id, threaded } } (BLI-12530).",
+            "send [--account <name|id>] --to <a[,b]> [--cc <c>] --subject \"<s>\" [--reply-to <message id>] [--file <path>] [--attach <path>]... — the BODY comes from --file or stdin. Name --account to override your default; with several accounts and no default, Tower asks which one.",
+            "draft [--account <name|id>] --to <a[,b]> [--cc <c>] --subject \"<s>\" [--reply-to <message id>] [--file <path>] [--attach <path>]... — saves the message as a DRAFT in that mailbox for a person to read, edit and send themselves. NOTHING IS SENT and nobody is notified, so there is no confirmation step. Same flags and same body rule as send (--file or stdin). Only the mailbox's owner can draft into it. --reply-to threads the draft into that conversation the way send does; Gmail files it there only when the subject matches the original's, and the answer says whether it did. Gmail mailboxes only: an IMAP mailbox is refused as imap_drafts_unsupported. --json answers { ok, draft: { account_id, address, provider_draft_id, provider_thread_id, threaded } } (BLI-12530).",
             "--attach <path> (send and draft; repeat it for each file) — a file that rides along with the message: up to 10, and 3,000,000 bytes together (about 3 MB: a request to Tower is capped at 4.5 MB and a file travels as base64, a third bigger than itself). The type comes from the extension (.docx .pdf .png .jpg .jpeg .txt .csv .md .zip and more; anything else goes as application/octet-stream), the name is the file's own. --file is still the BODY and only the body. Refused BEFORE anything is sent, by name and with the numbers: too_many_attachments, attachment_unreadable (a path that is missing, a folder or empty), attachment_too_large. A reply (--reply-to) keeps its thread with files in it. Works on Gmail mailboxes and on IMAP mailboxes for send; a draft is Gmail only. --json adds { attachments: { count, bytes, content_types } } to the answer. The terminal reports from Tower's own answer, not from what it posted: if Tower does not confirm the files (an older Tower), it exits 1 with attachments_not_confirmed and says whether the message went. Names, paths and contents are never logged; a refusal says \"Attachment 2\", not which file (BLI-12661).",
             "attachment <id> --out <path> — downloads one attachment to a file. Attachments are pointers until you ask; nothing is stored in Tower.",
             "sync <account> — reads that mailbox now instead of waiting for the cron. Prints what landed, or the reason it did not.",
@@ -152,12 +153,14 @@ export const TOWER_COMMAND_HELP = [
             '      PowerShell: "https://calendar.google.com/calendar/ical/…/basic.ics" | cockpit cal add-ical --name "Personal"',
             "      Find it at calendar.google.com -> the calendar's Settings -> \"Secret address in iCal format\". Anybody who has that link can read the calendar, which is why it never goes on a command line.",
             "      A work @buildlaunchiterate.ca calendar does not need this: connect Google in the browser and `cockpit cal calendars` will list them.",
-            'create --calendar <id> --title "<what>" --at <iso> --until <iso> [--location "<where>"] [--attendee a@x,b@y] [--all-day] [--meet] — creates the event AT GOOGLE, then here. Attendees are invited by Google; --meet asks for a Google Meet room and prints its address (or says meet_not_available and keeps the event).',
+            'create [--account <name>|--calendar <id>] --title "<what>" --at <iso> --until <iso> [--location "<where>"] [--attendee a@x,b@y] [--all-day] [--meet] — creates the event AT GOOGLE, then here. Attendees are invited by Google; --meet asks for a Google Meet room and prints its address (or says meet_not_available and keeps the event).',
             "      Only a Google calendar can be written to: an iCal secret address is a read address, and `write_not_supported_for_provider` says so by name.",
             "share <id> --org-visible|--private — makes one of YOUR calendars readable by everyone at BLI, or private again. Sharing never lets anybody else change it.",
             "sync <id> [--full] — reads that calendar now instead of waiting for the cron. --full ignores the sync token / ETag and re-reads everything.",
             "sync-status [<id>] — every calendar's health, or one's: last successful sync, the last pass's own reason, how many events it carried, failures in the last 24h, and the lag between an event's own provider clock and when Tower stored it (ticket 10730).",
             "detach <id> — removes the calendar and its stored events from Tower. The calendar itself is untouched at Google.",
+            "change <event id> [--account <name>] [--title <title>] [--at <iso> --until <iso>] [--location <place>] — changes an event on its own account.",
+            "cancel <event id> --yes [--account <name>] — same door as delete; a named account must own the event.",
             "delete <event id> --yes — removes ONE event, AT GOOGLE first, then here. Refuses without --yes: a delete can email everybody on it, exactly like create's invitations do. Google already having it gone (404/410) is answered as success, not a refusal.",
             "--json writes one machine-readable object to stdout; every reason and receipt line stays on stderr.",
             "A refusal keeps Tower's own reason label — needs_rls_client, calendar_not_found_or_unreadable, calendar_not_yours, event_not_found_or_unreadable, ical_url_invalid, google_oauth_not_configured, write_not_supported_for_provider, and so on.",
@@ -392,6 +395,7 @@ export const TOWER_COMMAND_HELP = [
             "detach <account-id> — take it off. The stored key goes with it; the meetings it already filed stay.",
             "sync <account-id> — read that notetaker now. Prints the run's own counts and reason label, and exits 1 when the pass failed.",
             "sync-status [<account-id>] — every notetaker's health, or one's: last successful sync, the last pass's own reason, how many meetings it carried, failures in the last 24h, and the lag between the newest meeting it has read and when it last ran (ticket 10730).",
+            "bot-upcoming [--json] — your own Google Meet meetings today that the bot will join, with claim state. Decline or mark private to opt out.",
             "granola-status [--limit <n>] [--json] — the Granola cron's own last several runs (ticket 10718): reason, counts, model, spend and which lookback it used. Granola runs on a shared server-side key, not a connected account, so this is its own read rather than `accounts`.",
             "A large note is read by a model on the server and can take a couple of minutes; the terminal says so before it waits.",
             "--json writes one machine-readable object to stdout; every reason, receipt and progress line stays on stderr.",

package/dist/commands/mail-account-preferences.js

@@ -0,0 +1,16 @@
+import { askAgentDoor, emitAgentDoor, failAgentDoor } from "./agent-door.js";
+import { writeLine } from "./cli-io.js";
+export async function runMailAccountPreference(command, door) {
+    const removing = command.action === "remove";
+    const answer = await askAgentDoor(door, {
+        path: removing ? `/api/mail/accounts?account=${encodeURIComponent(command.accountId)}` : "/api/mail/accounts",
+        method: removing ? "DELETE" : "PATCH", label: `mail ${command.action}`, timeoutMs: 30_000,
+        ...(!removing ? { body: { account: command.accountId, ...(command.action === "rename" ? { account_label: command.displayName } : command.action === "default" ? { is_default: true } : { [`${command.source}_enabled`]: command.action === "enable" }) } } : {}),
+    });
+    if (!answer.ok)
+        return failAgentDoor(door, "[accounts cli]", answer.reason, answer.detail);
+    if (door.json)
+        return emitAgentDoor(door, { ok: true, ...answer.body });
+    writeLine(door.io.stdout, `Account ${command.accountId}: ${command.action} completed.`);
+    return 0;
+}

package/dist/commands/mail-compose.js

@@ -63,7 +63,7 @@ export async function readMailBody(command, door) {
  */
 export function composedMessageBody(command, text, attachments = []) {
     return {
-        account_id: command.accountId,
+        ...(command.accountId ? /^[0-9a-f-]{36}$/i.test(command.accountId) ? { account_id: command.accountId } : { account: command.accountId } : {}),
         to: command.to.map((address) => ({ address })),
         ...(command.cc.length > 0 ? { cc: command.cc.map((address) => ({ address })) } : {}),
         subject: command.subjectLine ?? "",
@@ -164,7 +164,7 @@ export async function runMailDraft(command, door) {
         return failAttachmentsUnconfirmed(door, "draft", unconfirmed, draft);
     if (door.json)
         return emitAgentDoor(door, { ok: true, draft, ...message.receipt.json });
-    writeLine(door.io.stdout, `Saved a draft in ${draft?.address ?? "that mailbox"} for ${command.to.join(", ")}. `
+    writeLine(door.io.stdout, `Saved a draft in ${draft?.account_name ?? draft?.address ?? "that mailbox"} for ${command.to.join(", ")}. `
         + "Nothing was sent: it is in Drafts for a person to read, edit and send.");
     if (message.receipt.sentence)
         writeLine(door.io.stdout, message.receipt.sentence);

package/dist/commands/mail.js

@@ -26,7 +26,8 @@ import { writeFile } from "node:fs/promises";
 import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor, } from "./agent-door.js";
 import { isInteractiveStdin, readPipedText, writeLine } from "./cli-io.js";
 import { composeMessage, failAttachmentsUnconfirmed, readMailBody, runMailDraft, unconfirmedAttachments, } from "./mail-compose.js";
-import { cacheAgeLabel, readThroughCache } from "./read-cache.js";
+import { cacheAgeLabel, cacheCoverage, readThroughCache } from "./read-cache.js";
+import { runMailAccountPreference } from "./mail-account-preferences.js";
 import { towerRequest } from "../tower-client.js";
 const TAG = "[mail cli]";
 const READ_DEADLINE_MS = 30_000;
@@ -37,6 +38,12 @@ const PASSWORD_MAX_CHARS = 200;
 export async function runMail(command, io) {
     const door = await openAgentDoor("mail", command, io);
     switch (command.action) {
+        case "rename":
+        case "enable":
+        case "disable":
+        case "default":
+        case "remove":
+            return runMailAccountPreference(command, door);
         case "accounts":
             return listAccounts(door);
         case "add-imap":
@@ -82,7 +89,7 @@ async function listAccounts(door) {
     }
     for (const account of accounts) {
         const health = account.status === "active" ? account.backfill_state : `${account.status}: ${account.status_reason ?? "no reason recorded"}`;
-        writeLine(door.io.stdout, `${account.address.padEnd(34)}  ${account.provider.padEnd(12)}  ${health.padEnd(18)}  ${account.last_sync_at ?? "never synced"}`);
+        writeLine(door.io.stdout, `${(account.account_label ?? account.address).padEnd(20)} ${account.is_default ? "default" : ""} mail=${account.mail_enabled !== false} calendar=${account.calendar_enabled !== false} ${account.address.padEnd(34)}  ${account.provider.padEnd(12)}  ${health.padEnd(18)}  ${account.last_sync_at ?? "never synced"}`);
     }
     writeLine(door.io.stdout, "");
     writeLine(door.io.stdout, `${accounts.length} mailbox(es). ids: ${accounts.map((account) => account.id).join(", ")}`);
@@ -177,7 +184,7 @@ async function inbox(command, door) {
         return failAgentDoor(door, TAG, answer.reason, answer.detail);
     const body = answer.body;
     if (door.json)
-        return emitAgentDoor(door, { ok: true, ...body });
+        return emitAgentDoor(door, { ok: true, ...body, ...cacheCoverage(answer) });
     if (answer.fromCache) {
         writeLine(door.io.stderr, `(${cacheAgeLabel(answer.ageMs ?? 0)}, refreshing in the background)`);
     }
@@ -279,7 +286,7 @@ async function send(command, door) {
         return failAttachmentsUnconfirmed(door, "send", unconfirmed, sent);
     if (door.json)
         return emitAgentDoor(door, { ok: true, sent, ...message.receipt.json });
-    writeLine(door.io.stdout, `Sent from ${sent?.address ?? "that mailbox"} to ${command.to.join(", ")}${sent?.threaded ? " (as a reply)" : ""}.`);
+    writeLine(door.io.stdout, `Sent from ${sent?.account_name ?? sent?.address ?? "that mailbox"} to ${command.to.join(", ")}${sent?.threaded ? " (as a reply)" : ""}.`);
     if (message.receipt.sentence)
         writeLine(door.io.stdout, message.receipt.sentence);
     return 0;

package/dist/commands/memory-install-receipt.js

@@ -208,11 +208,9 @@ export async function readMemoryReceiptFile(options) {
     if (!receipt)
         return { receipt: null, reason: "receipt_unparseable" };
     const age = (options.now ?? new Date()).getTime() - Date.parse(receipt.checked_at);
-    // A reading a week old is not a reading. Better to send nothing and let the
-    // board say "not reported" than to publish a claim about a machine that has
-    // not been looked at since.
+    // Keep last-known host facts, with the original checked_at and reason.
     if (Number.isFinite(age) && age > MEMORY_RECEIPT_MAX_AGE_MS) {
-        return { receipt: null, reason: "receipt_expired" };
+        return { receipt, reason: "receipt_expired" };
     }
     return { receipt, reason: "receipt_read" };
 }

package/dist/commands/memory-store.js

@@ -49,7 +49,7 @@ import { resolveContainerTag } from "@bli-cockpit/memory-mcp/dist/container-tag.
 import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor, } from "./agent-door.js";
 import { isInteractiveStdin, readPipedText, writeLine } from "./cli-io.js";
 import { runMemoryConsolidation } from "./memory-consolidation.js";
-import { cacheAgeLabel, readThroughCache } from "./read-cache.js";
+import { cacheAgeLabel, cacheCoverage, readThroughCache } from "./read-cache.js";
 import { runMemoryRequeue } from "./memory-requeue.js";
 import { runMemoryVisibility } from "./memory-visibility.js";
 import { readNoteFile } from "./notes-file.js";
@@ -194,7 +194,7 @@ async function searchMemory(command, door) {
         degraded: body.degraded ?? null,
     })}`);
     if (door.json)
-        return emitAgentDoor(door, answer.body);
+        return emitAgentDoor(door, { ...answer.body, ...cacheCoverage(answer) });
     if (answer.fromCache) {
         writeLine(door.io.stderr, `(${cacheAgeLabel(answer.ageMs ?? 0)}, refreshing in the background)`);
     }

package/dist/commands/msg.js

@@ -17,7 +17,7 @@
  */
 import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor, } from "./agent-door.js";
 import { isInteractiveStdin, readPipedText, writeLine } from "./cli-io.js";
-import { cacheAgeLabel, readThroughCache } from "./read-cache.js";
+import { cacheAgeLabel, cacheCoverage, readThroughCache } from "./read-cache.js";
 const TAG = "[msg cli]";
 const READ_DEADLINE_MS = 30_000;
 const WRITE_DEADLINE_MS = 30_000;
@@ -64,6 +64,7 @@ async function fetchChannels(door) {
         channels: answer.body.channels ?? [],
         fromCache: answer.fromCache,
         ageMs: answer.ageMs,
+        coverage: answer.coverage,
     };
 }
 async function listChannels(door) {
@@ -71,7 +72,7 @@ async function listChannels(door) {
     if (!fetched.ok)
         return failAgentDoor(door, TAG, fetched.reason, fetched.detail);
     if (door.json)
-        return emitAgentDoor(door, { ok: true, channels: fetched.channels });
+        return emitAgentDoor(door, { ok: true, channels: fetched.channels, ...cacheCoverage(fetched) });
     if (fetched.fromCache) {
         writeLine(door.io.stderr, `(${cacheAgeLabel(fetched.ageMs ?? 0)}, refreshing in the background)`);
     }

package/dist/commands/notes-bot-upcoming.js

@@ -0,0 +1,16 @@
+import { ask, emit, fail, READ_DEADLINE_MS } from "./notes-door.js";
+import { writeLine } from "./cli-io.js";
+export async function showBotUpcoming(_command, door) {
+    const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    const answer = await ask(door, { path: `/api/notetaker/upcoming?tz=${encodeURIComponent(tz)}`, method: "GET", label: "bot upcoming", timeoutMs: READ_DEADLINE_MS });
+    if (!answer.ok)
+        return fail(door, answer.reason, answer.detail);
+    if (door.json)
+        return emit(door, answer.body);
+    const body = answer.body;
+    if (!body.meetings.length)
+        writeLine(door.io.stdout, "No meetings for the bot today.");
+    for (const meeting of body.meetings)
+        writeLine(door.io.stdout, `${meeting.startsAt} ${meeting.claim.status} ${meeting.meetUrl}`);
+    return 0;
+}

package/dist/commands/notes-folders.js

@@ -31,5 +31,7 @@ export async function runFolderCommand(command, door) {
             const label = command.tree ? `${"  ".repeat(folder.path.split("/").length - 1)}${folder.name}` : folder.path;
             writeLine(door.io.stdout, `${label} (${folder.note_count})`);
         }
+    if (body.coverage)
+        writeLine(door.io.stdout, body.coverage);
     return 0;
 }

package/dist/commands/notes.js

@@ -44,6 +44,7 @@ import { listNotes, listShelves, showNote, showShelf } from "./notes-reads.js";
 import { uploadNotes, pasteNote, shareNote, moveNote, placeNote } from "./notes-writes.js";
 import { runFolderCommand } from "./notes-folders.js";
 import { armNotesWebhook, connectNotetaker, detachNotetaker, listNotesAccounts, showNotesWebhook, syncNotetaker, syncStatusNotetakers, } from "./notes-accounts.js";
+import { showBotUpcoming } from "./notes-bot-upcoming.js";
 import { showGranolaStatus } from "./notes-granola-status.js";
 import { listRecordings, showRecording } from "./notes-recordings.js";
 export { listNotes, listShelves, showNote, showShelf } from "./notes-reads.js";
@@ -106,6 +107,8 @@ export async function runNotes(command, io) {
             return showRecording(command, door);
         case "webhook":
             return armNotesWebhook(command, door);
+        case "bot-upcoming":
+            return showBotUpcoming(command, door);
         case "granola-status":
             return showGranolaStatus(command, door);
     }

package/dist/commands/public-root.js

@@ -21,7 +21,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.197");
+    writeLine(io?.stdout ?? process.stdout, "0.2.199");
     return 0;
   }
 

package/dist/commands/read-cache.js

@@ -6,7 +6,7 @@
  * Text mode: a cache hit prints INSTANTLY (its age travels with it), then a
  * background refresh is spawned so the next call is live — never blocking
  * this process on a network round trip it already has a recent answer for.
- * `--json` (an agent, not a person) trusts cache only under
+ * `--json` attempts live first when the cache is older than
  * `JSON_FRESH_BOUND_MS`, unless `--allow-stale` says otherwise; older than
  * that runs the live request inline, same as a miss. `--fresh` skips the
  * read entirely — both flags are process-wide (BLI-10450's `--quiet`
@@ -73,7 +73,7 @@ export async function readThroughCache(options) {
                 else {
                     log(`[read-cache] refresh skipped ${JSON.stringify({ reason: "too_recent", age_ms: ageMs })}`);
                 }
-                return { ok: true, httpStatus: cached.status, body: cached.body, fromCache: true, ageMs };
+                return { ok: true, httpStatus: cached.status, body: cached.body, fromCache: true, ageMs, coverage: cacheAgeLabel(ageMs) };
             }
             log(`[read-cache] too stale for --json ${JSON.stringify({ surface: options.surface, label: options.label, age_ms: ageMs })}`);
         }
@@ -86,6 +86,18 @@ export async function readThroughCache(options) {
         writeReadCacheEntryAtomic(entryPath, { status: live.httpStatus, body: live.body });
         log(`[read-cache] refreshed ${JSON.stringify({ surface: options.surface, label: options.label })}`);
     }
+    else if (!fresh && live.httpStatus !== 401 && live.httpStatus !== 403) {
+        const cached = readReadCacheEntry(entryPath);
+        if (cached) {
+            const ageMs = Date.now() - cached.storedAt;
+            const coverage = `served stale: ${cacheAgeLabel(ageMs)}, live failed: ${live.reason}`;
+            log(`[read-cache] ${coverage} ${JSON.stringify({ reason: live.reason, age_ms: ageMs })}`);
+            const body = cached.body && typeof cached.body === "object" && !Array.isArray(cached.body)
+                ? { ...cached.body, cache_coverage: coverage, cache_age_ms: ageMs, live_failure_reason: live.reason }
+                : cached.body;
+            return { ok: true, httpStatus: cached.status, body, fromCache: true, ageMs, coverage };
+        }
+    }
     return { ...live, fromCache: false, ageMs: null };
 }
 /**
@@ -112,4 +124,8 @@ export function spawnBackgroundRefresh(io, log, spawnImpl = spawn) {
     catch (error) {
         log(`[read-cache] background refresh failed to spawn ${JSON.stringify({ reason: error instanceof Error ? error.name : "unknown" })}`);
     }
+}
+/** JSON readers carry the same age sentence as the terminal. */
+export function cacheCoverage(answer) {
+    return answer.fromCache ? { fromCache: true, ageMs: answer.ageMs, cache_coverage: answer.coverage ?? cacheAgeLabel(answer.ageMs ?? 0) } : {};
 }

package/dist/commands/settings.js

@@ -20,7 +20,7 @@
  * being written to stdout, stderr, or an argument vector.
  */
 import { isInteractiveStdin, readLine, settleYesNo, writeLine } from "./cli-io.js";
-import { cacheAgeLabel, readThroughCache } from "./read-cache.js";
+import { cacheAgeLabel, cacheCoverage, readThroughCache } from "./read-cache.js";
 import { asList, asRecord, callTower, isForbidden, openTower, parseModelKey, readAllStdin, writeCommandFailure, } from "./tower-command.js";
 import { showOverview } from "./settings-overview.js";
 import { renderCliFloor, renderEnvBlobs, renderModelRouting, renderPersonal, renderSwitches, } from "./settings-render.js";
@@ -75,7 +75,7 @@ async function showPersonal(command, tower, io) {
     if (result.fromCache && !command.json) {
         writeLine(io.stderr, `(${cacheAgeLabel(result.ageMs ?? 0)}, refreshing in the background)`);
     }
-    return writeBody(io, command.json, result.body, () => renderPersonal(asRecord(result.body)));
+    return writeBody(io, command.json, { ...asRecord(result.body), ...cacheCoverage(result) }, () => renderPersonal(asRecord(result.body)));
 }
 async function setPersonal(command, tower, io) {
     const result = await callTower(tower, {

package/dist/commands/setup-receipt-lines.js

@@ -10,6 +10,8 @@
  * gets ONE command or ONE click, never a paragraph and never "see the docs".
  */
 import { setupPieceMark, setupReceiptLine, setupReceiptPieces, } from "@bli-cockpit/telemetry-core";
+/** Cached host facts are old after the same seven-day window as their readers. */
+const OLD_READING_MS = 7 * 24 * 60 * 60 * 1000;
 /** The one fix for each piece, by key. Present for every key the block prints. */
 const FIXES = {
     browser: "Run `cockpit login` and open the link it prints.",
@@ -57,8 +59,18 @@ export function setupReceiptBlock(reading, options = {}) {
             continue;
         lines.push(`${indent}  ${label} ${setupPieceMark(piece.status)}${reasonSuffix(piece)} — ${fixFor(key, piece)}`);
     }
-    if (options.showCheckedAt) {
-        lines.push(`${indent}Last read: ${receipt.checked_at}`);
+    const now = reading.readAt ? Date.parse(reading.readAt) : Date.now();
+    const ageMs = now - Date.parse(receipt.checked_at);
+    if (options.showCheckedAt || reading.refreshFailure || !Number.isFinite(ageMs) || ageMs > OLD_READING_MS) {
+        const age = Number.isFinite(ageMs) ? `${Math.max(0, Math.floor(ageMs / 3_600_000))}h ago` : "age unavailable";
+        lines.push(`${indent}As of ${receipt.checked_at} (${age})${reading.refreshFailure ? `; this run could not re-read the machine: ${reading.refreshFailure}` : ""}`);
+    }
+    if (memory) {
+        const memoryAgeMs = now - Date.parse(memory.checked_at);
+        if (!Number.isFinite(memoryAgeMs) || memoryAgeMs > OLD_READING_MS) {
+            const age = Number.isFinite(memoryAgeMs) ? `${Math.max(0, Math.floor(memoryAgeMs / 3_600_000))}h ago` : "age unavailable";
+            lines.push(`${indent}Agent hosts as of ${memory.checked_at} (${age})`);
+        }
     }
     return lines;
 }

package/dist/commands/setup-receipt.js

@@ -39,7 +39,7 @@
  * owns the target vocabulary this translates from.
  */
 import os from "node:os";
-import { SETUP_RECEIPT_SCHEMA_VERSION, setupReceiptGaps, setupReceiptLine, } from "@bli-cockpit/telemetry-core";
+import { SETUP_RECEIPT_SCHEMA_VERSION, SetupReceiptSchema, setupReceiptGaps, setupReceiptLine, } from "@bli-cockpit/telemetry-core";
 import { readHeartbeatMemoryReceipt } from "./heartbeat.js";
 import { autostartSetupPiece, readAutostartRegistration, } from "./autostart-reading.js";
 import { readLocalSessionReference } from "../local-state.js";
@@ -89,7 +89,7 @@ export async function buildSetupReceipt(io, options = {}) {
         gaps,
         memory_receipt: memory ? "read" : "absent",
     }));
-    return { receipt, memory };
+    return { receipt, memory, readAt: checkedAt };
 }
 function withDefaultProbes(io, homeDir, options) {
     return {
@@ -167,8 +167,8 @@ export async function cacheSetupReceipt(receipt, homeDir) {
 }
 /**
  * The cached receipt, or null with a named reason. A receipt older than
- * `SETUP_RECEIPT_MAX_AGE_MS` is refused rather than sent: a stale word is
- * worse than an absent one, because absence asks and staleness answers.
+ * `SETUP_RECEIPT_MAX_AGE_MS` is logged as stale and sent with its original
+ * checked_at; readers show its age rather than discarding the last reading.
  */
 export async function readCachedSetupReceipt(homeDir, now = new Date()) {
     let raw;
@@ -187,8 +187,7 @@ export async function readCachedSetupReceipt(homeDir, now = new Date()) {
     }
     const age = now.getTime() - Date.parse(parsed.checked_at);
     if (!Number.isFinite(age) || age > SETUP_RECEIPT_MAX_AGE_MS) {
-        console.error(`${TAG} cache too old to send`, JSON.stringify({ reason: "cache_stale", age_days: Math.round(age / 86_400_000) }));
-        return null;
+        console.error(`${TAG} serving old cache`, JSON.stringify({ reason: "cache_stale", age_days: Math.round(age / 86_400_000) }));
     }
     return parsed;
 }
@@ -196,7 +195,8 @@ function safeParseReceipt(raw) {
     const record = raw;
     if (!record || record.schema_version !== SETUP_RECEIPT_SCHEMA_VERSION)
         return null;
-    return raw;
+    const parsed = SetupReceiptSchema.safeParse(raw);
+    return parsed.success ? parsed.data : null;
 }
 /** The one line, plus the one fix per gap. Rendering lives in `setup-receipt-lines.ts`. */
 export { setupReceiptLine };
@@ -212,11 +212,23 @@ export { setupReceiptLine };
 export async function refreshSetupReceipt(io, options = {}) {
     try {
         const reading = await buildSetupReceipt(io, options);
+        const probeFailed = [reading.receipt.browser, reading.receipt.device, reading.receipt.collector.autostart].some(piece => piece.reason?.endsWith("probe_failed"));
+        if (probeFailed) {
+            const cached = await readCachedSetupReceipt(options.homeDir, options.now);
+            if (cached) {
+                console.error(`${TAG} could not be computed`, JSON.stringify({ reason: "receipt_build_failed" }));
+                return { receipt: cached, memory: reading.memory, readAt: reading.readAt, refreshFailure: "receipt_build_failed" };
+            }
+        }
         await cacheSetupReceipt(reading.receipt, options.homeDir);
         return reading;
     }
     catch (error) {
         console.error(`${TAG} could not be computed`, JSON.stringify({ reason: "receipt_build_failed", error_name: errorName(error) }));
-        return null;
+        const receipt = await readCachedSetupReceipt(options.homeDir, options.now);
+        if (!receipt)
+            return null;
+        const memory = await readHeartbeatMemoryReceipt({ homeDir: options.homeDir, now: options.now });
+        return { receipt, memory: memory.receipt, readAt: (options.now ?? new Date()).toISOString(), refreshFailure: "receipt_build_failed" };
     }
 }

package/dist/commands/setup.js

@@ -48,6 +48,8 @@ export async function runSetup(command, io) {
             if (pair.use?.[side])
                 writeLine(io.stdout, `  ${side === "first" ? pair.first : pair.second}: tokens by model: ${pair.use[side].models ?? "not available right now."} Skills used: ${pair.use[side].skills ?? "not available right now."}`);
     }
+    for (const line of body.read_coverage ?? [])
+        writeLine(io.stdout, line);
     if (body.note)
         writeLine(io.stdout, body.note);
     return 0;

package/dist/commands/status.js

@@ -1,11 +1,5 @@
 /**
- * `cockpit status` — what this machine believes about itself: install, pairing,
- * active work, upload state, retry backlog, and how far historical backfill
- * has got.
  *
- * Read-only. Split out of commands/local.ts (BLI-3104). BLI-3194 rewrote the
- * human block into plain English, because these lines are what an intern
- * pastes into Slack when something looks wrong. The `--json` payload is the
  * machine contract and is byte-for-byte unchanged — `status-json-shape.test.ts`
  * holds it to that.
  *
@@ -131,7 +125,7 @@ function writeSingleRepoLines(io, status, backfillCursor, setupReceipt, disk) {
     if (status.linear_ticket_id)
         writeLine(io.stdout, `Linear: ${status.linear_ticket_id}`);
     writeLine(io.stdout, `Work: ${displayWorkLabel(status)}`);
-    writeLine(io.stdout, `Last collected: ${lastCollectedLine(status.collector_freshness)}`);
+    writeLine(io.stdout, `Last collected: ${lastCollectedLine(status.collector_freshness, status.last_collected_at)}`);
     writeLine(io.stdout, `Version: ${status.collector_version}`);
     writeLine(io.stdout, `Uploads: ${uploadsLine(status.upload_state)}`);
     writeLine(io.stdout, `Last upload tried: ${status.last_upload_attempt_at ?? "never"}`);
@@ -239,7 +233,14 @@ function signedInLine(sessionState) {
             return "cannot tell";
     }
 }
-function lastCollectedLine(freshness) {
+export function lastCollectedLine(freshness, timestamp) {
+    if (timestamp) {
+        const ageMs = Date.now() - Date.parse(timestamp);
+        const minutes = Math.max(0, Math.floor(ageMs / 60_000));
+        const age = minutes < 60 ? `${minutes}m` : minutes < 1440 ? `${Math.floor(minutes / 60)}h` : `${Math.floor(minutes / 1440)}d`;
+        const label = lastCollectedLine(freshness);
+        return `${label} (${timestamp}; ${age} ago)`;
+    }
     switch (freshness) {
         case "fresh":
             return "recently";

package/dist/commands/usage-format.js

@@ -41,6 +41,7 @@ export function githubWords(github, people) {
         `GitHub: ${noun(sum("pull_requests_opened"), "pull request")} opened, ${sum("pull_requests_merged")} merged, ${noun(sum("commits"), "commit")}, ` +
             `from ${noun((github.repositories ?? []).length, "mirrored repository", "mirrored repositories")}${range}.`,
     ];
+    lines.push(...(github.read_coverage ?? []));
     const unmatched = github.unattributed;
     if (unmatched && unmatched.pull_requests_opened + unmatched.pull_requests_merged + unmatched.commits > 0) {
         lines.push(`Not matched to a person: ${noun(unmatched.pull_requests_opened, "pull request")} opened, ${unmatched.pull_requests_merged} merged, ${noun(unmatched.commits, "commit")}.`);

package/dist/commands/usage.js

@@ -116,6 +116,8 @@ export async function runUsage(command, io) {
     // date it cannot know.
     writeLine(io.stdout, "");
     writeLine(io.stdout, body.api_list_price_equivalent_label ?? "API list-price equivalent, not actual spend (this dashboard sent no price-sheet version)");
+    for (const line of body.read_coverage ?? [])
+        writeLine(io.stdout, line);
     writeLine(io.stdout, `${body.coverage?.sessions_extracted ?? 0} of ${body.coverage?.sessions_observed ?? 0} sessions extracted`);
     // BLI-4356: the gap says why. A session observed with no tokens is either
     // waiting on a count that has not run yet, or an automated one this view

package/dist/local-state-status.js

@@ -43,6 +43,10 @@ export async function inspectLocalCollectorStatus(options = {}) {
         worktree_fingerprint: context?.worktree_fingerprint ?? identity.worktree_fingerprint,
         worktree_is_primary: context?.worktree_is_primary ?? identity.worktree_is_primary,
         collector_freshness: freshness,
+        last_collected_at: (() => {
+            const timestamp = context ? latestTimestamp([context.updated_at ?? context.started_at, uploadSpool.last_upload_success_at]) : null;
+            return timestamp === null ? null : new Date(timestamp).toISOString();
+        })(),
         upload_state: uploadState,
         last_upload_attempt_at: uploadSpool.last_upload_attempt_at,
         last_upload_success_at: uploadSpool.last_upload_success_at,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/cli",
-  "version": "0.2.197",
+  "version": "0.2.199",
   "private": false,
   "type": "module",
   "bin": {
@@ -28,7 +28,7 @@
   },
   "dependencies": {
     "@bli-cockpit/memory-mcp": "0.1.60",
-    "@bli-cockpit/mcp": "0.1.109",
+    "@bli-cockpit/mcp": "0.1.111",
     "@bli-cockpit/telemetry-core": "0.1.69"
   },
   "repository": {