@bli-cockpit/cli 0.2.198 → 0.2.200

package/dist/commands/cal-delete.js

@@ -4,7 +4,7 @@ const TAG = "[cal cli]";
 const DELETE_DEADLINE_MS = 60_000;
 export async function runCalDelete(command, door) {
     const answer = await askAgentDoor(door, {
-        path: `/api/cal/events/${encodeURIComponent(command.subjectId ?? "")}`,
+        path: `/api/cal/events/${encodeURIComponent(command.subjectId ?? "")}${command.accountName ? `?account=${encodeURIComponent(command.accountName)}` : ""}`,
         method: "DELETE",
         label: "cal delete",
         timeoutMs: DELETE_DEADLINE_MS,
@@ -18,6 +18,8 @@ export async function runCalDelete(command, door) {
         writeLine(door.io.stdout, "Tower answered without a result. Nothing to report.");
         return 0;
     }
+    if (deleted.account_name)
+        writeLine(door.io.stdout, `Account: ${deleted.account_name}.`);
     const alreadyGone = deleted.google === "already_gone_at_google";
     const stored = deleted.local_store === "removed"
         ? "Tower's copy is removed."

package/dist/commands/cal.js

@@ -52,6 +52,9 @@ export async function runCal(command, io) {
             return runCalSync(command, door);
         case "sync-status":
             return runCalSyncStatus(command, door);
+        case "change":
+            return changeEvent(command, door);
+        case "cancel":
         case "delete":
             return runCalDelete(command, door);
     }
@@ -260,7 +263,7 @@ async function listCalendars(door) {
             ? (calendar.last_sync_at ? `synced ${calendar.last_sync_at.slice(0, 16).replace("T", " ")}` : "never synced")
             : `${calendar.status}: ${calendar.status_reason ?? "no reason recorded"}`;
         const flags = `${calendar.org_visible ? "shared" : "private"}${calendar.selected ? "" : ", hidden"}`;
-        writeLine(door.io.stdout, `${calendar.name.slice(0, 32).padEnd(32)}  ${calendar.provider.padEnd(12)}  ${flags.padEnd(16)}  ${health}`);
+        writeLine(door.io.stdout, `${calendar.account_label ?? calendar.provider}  ${calendar.name.slice(0, 32).padEnd(32)}  ${calendar.provider.padEnd(12)}  ${flags.padEnd(16)}  ${health}`);
     }
     writeLine(door.io.stdout, "");
     writeLine(door.io.stdout, `${calendars.length} calendar(s). ids: ${calendars.map((calendar) => calendar.id).join(", ")}`);
@@ -274,6 +277,7 @@ async function create(command, door) {
         timeoutMs: WRITE_DEADLINE_MS,
         body: {
             calendar_id: command.calendarId,
+            ...(command.accountName ? { account: command.accountName } : {}),
             title: command.title,
             starts_at: command.startsAt,
             ends_at: command.endsAt,
@@ -299,6 +303,8 @@ async function create(command, door) {
     }
     if (event?.html_link)
         writeLine(door.io.stdout, event.html_link);
+    if (event?.account_name)
+        writeLine(door.io.stdout, `Account: ${event.account_name}.`);
     if (command.meet) {
         writeLine(door.io.stdout, event?.meet_link
             ? `Google Meet: ${event.meet_link}`
@@ -314,4 +320,14 @@ function meetingLinkText(event) {
     const meeting = event.meeting_url ? `  ${label}: ${event.meeting_url}` : "";
     console.error("[cal render] meeting link", JSON.stringify({ reason: event.meeting_url ? "meeting_link_shown" : "no_meeting_link" }));
     return meeting;
+}
+async function changeEvent(command, door) {
+    const answer = await askAgentDoor(door, { path: `/api/cal/events/${encodeURIComponent(command.subjectId)}`, method: "PATCH", label: "cal change", timeoutMs: WRITE_DEADLINE_MS,
+        body: { ...(command.accountName ? { account: command.accountName } : {}), ...(command.title ? { title: command.title } : {}), ...(command.startsAt ? { starts_at: command.startsAt } : {}), ...(command.endsAt ? { ends_at: command.endsAt } : {}), ...(command.location ? { location: command.location } : {}) } });
+    if (!answer.ok)
+        return failAgentDoor(door, TAG, answer.reason, answer.detail);
+    if (door.json)
+        return emitAgentDoor(door, { ok: true, ...answer.body });
+    writeLine(door.io.stdout, `Changed event in ${answer.body.event?.account_name ?? "its account"}.`);
+    return 0;
 }

package/dist/commands/doctor-report.js

@@ -164,6 +164,7 @@ export function repairReceiptLines(repairs) {
 }
 export function doctorNeedsPerson(rows, receipt) {
     const defaults = {
+        "slack-connected": "cockpit slack connect",
         "cli-latest": "npm i -g @bli-cockpit/cli && cockpit doctor",
         "authed": "cockpit doctor",
         "roots-ok": "cockpit doctor",

package/dist/commands/doctor-slack.js

@@ -0,0 +1,25 @@
+import { DEFAULT_DASHBOARD_URL } from "../local-state.js";
+import { asRecord, callTower, openTower } from "./tower-command.js";
+export async function checkSlackConnected(context) {
+    const message = "Slack connected for private-channel coverage";
+    try {
+        const tower = await openTower("doctor", context.command, context.io);
+        const response = await callTower(tower, { path: "/api/slack/connections", label: "doctor-slack", timeoutMs: 5_000 });
+        if (!response.ok)
+            return { id: "slack-connected", status: "needs_fix", code: response.reason, message: `${message}: could not read connection state.`, nextAction: `${tower.dashboardUrl}/settings/personal` };
+        const connections = asRecord(response.body)["connections"];
+        if (!connections || connections.length !== 2)
+            throw new Error("connection_state_incomplete");
+        const missing = connections.filter(row => !row["connected"]);
+        const links = missing.map(row => new URL(String(row["connectPath"]), tower.dashboardUrl).toString());
+        console.error("[doctor slack] checked", JSON.stringify({ missing: missing.length, reason: missing.length ? "slack_connect_required" : "ok" }));
+        return { id: "slack-connected", status: missing.length ? "needs_fix" : "ok", code: missing.length ? "slack_connect_required" : "slack_connected",
+            message: missing.length ? `${message}: connect ${missing.map(row => row["workspace"]).join(", ")} at ${links.join(" or ")}` : message,
+            ...(missing.length ? { nextAction: links.join(" ") } : {}),
+        };
+    }
+    catch {
+        console.error("[doctor slack] refused", JSON.stringify({ reason: "connection_read_failed" }));
+        return { id: "slack-connected", status: "skipped", code: "connection_read_failed", message: `${message}: unavailable until this machine is signed in.`, nextAction: `${context.command.dashboardUrl ?? DEFAULT_DASHBOARD_URL}/settings/personal` };
+    }
+}

package/dist/commands/doctor.js

@@ -1,3 +1,4 @@
+import { checkSlackConnected } from "./doctor-slack.js";
 import { checkUsageTelemetry, fixUsageTelemetry } from "./doctor-usage-telemetry.js";
 import { LOCAL_COLLECTOR_VERSION } from "../local-state.js";
 import { isSemverBelow } from "../scheduled-self-update.js";
@@ -153,6 +154,7 @@ export function doctorInvariantTable() {
 function doctorInvariants() {
     return [
         { id: "cli-latest", check: checkCliLatest, fix: fixCliLatest },
+        { id: "slack-connected", check: context => context.deps.checkSlackConnected ? context.deps.checkSlackConnected(context) : Promise.resolve({ id: "slack-connected", status: "skipped", code: "not_probed", message: "Slack connection check not provided." }) },
         {
             id: "authed",
             check: (context) => context.deps.readAuth(context),
@@ -248,6 +250,7 @@ function defaultDoctorDeps(hooks) {
         readRootsCoverWork,
         resolveAndSaveRoots: (context) => hooks.resolveAndSaveRoots(context.command, context.io),
         checkSingleInstall: checkSingleInstallState,
+        checkSlackConnected,
         checkAutostart: checkAutostartState,
         fixAutostart: fixAutostartState,
         checkUsageTelemetry,

package/dist/commands/local-args-tower-admin.js

@@ -193,11 +193,11 @@ export function parseSlackArgs(args) {
         ],
     });
     if (values.positionals.length > 1) {
-        throw new Error("slack accepts one action: coverage or read.");
+        throw new Error("slack accepts one action: coverage, read, connect or disconnect.");
     }
     const rawAction = values.positionals[0] ?? "coverage";
-    if (rawAction !== "coverage" && rawAction !== "read") {
-        throw new Error("slack action must be coverage or read.");
+    if (!["coverage", "read", "connect", "disconnect"].includes(rawAction)) {
+        throw new Error("slack action must be coverage, read, connect or disconnect.");
     }
     const base = {
         homeDir: optionalNonEmpty(values.flags.get("--home")),
@@ -210,6 +210,14 @@ export function parseSlackArgs(args) {
     if (values.booleans.has("--list") && rawAction !== "coverage") {
         throw new Error("--list belongs to `cockpit slack coverage`.");
     }
+    if (rawAction === "connect" || rawAction === "disconnect") {
+        const workspace = optionalNonEmpty(values.flags.get("--workspace"));
+        if (workspace && !SLACK_WORKSPACE_KEYS.includes(workspace))
+            throw new Error("Unknown Slack workspace.");
+        if (rawAction === "disconnect" && !workspace)
+            throw new Error("slack disconnect needs --workspace bli|blue_pearl.");
+        return { kind: "slack", action: rawAction, workspace, ...base };
+    }
     if (rawAction === "coverage") {
         // `--workspace` here is a Slack workspace key, NOT the collection-root
         // `--workspace <path>` every setup command takes. Named at the point of use

package/dist/commands/local-args-tower-cal.js

@@ -26,6 +26,7 @@ const CAL_ACTIONS = new Set([
     "find",
     "calendars",
     "add-ical",
+    "change", "cancel",
     "create",
     "share",
     "detach",
@@ -34,7 +35,7 @@ const CAL_ACTIONS = new Set([
     "delete",
 ]);
 /** Every verb that names ONE thing first — a calendar id, or (delete) an event id. */
-const CAL_ACTIONS_NEEDING_A_SUBJECT = new Set(["sync", "detach", "share", "delete"]);
+const CAL_ACTIONS_NEEDING_A_SUBJECT = new Set(["sync", "detach", "share", "delete", "change", "cancel"]);
 /** `sync-status [<calendar id>]` — every calendar, or one's. Ticket 10730. */
 const CAL_ACTIONS_WITH_OPTIONAL_SUBJECT = new Set(["sync-status"]);
 export function parseCalArgs(args) {
@@ -43,6 +44,7 @@ export function parseCalArgs(args) {
             "--home",
             "--dashboard-url",
             "--calendar",
+            "--account",
             "--tz",
             "--offset",
             "--hours",
@@ -68,6 +70,7 @@ export function parseCalArgs(args) {
             "--home",
             "--dashboard-url",
             "--calendar",
+            "--account",
             "--tz",
             "--offset",
             "--hours",
@@ -134,9 +137,6 @@ function readCalCreateDetails(action, values) {
     const startsAt = optionalNonEmpty(values.flags.get("--at"));
     const endsAt = optionalNonEmpty(values.flags.get("--until"));
     if (action === "create") {
-        if (!optionalNonEmpty(values.flags.get("--calendar"))) {
-            throw new Error("cal create needs --calendar <id>: with several calendars attached, which one this goes on is yours to say. `cockpit cal calendars` lists them.");
-        }
         if (!title)
             throw new Error('cal create needs --title "<what it is>".');
         if (!startsAt)
@@ -155,7 +155,7 @@ function validateCalSharing(action, values) {
 }
 /** `delete` notifies attendees, exactly like `create`'s invitations — never without saying so first. */
 function validateCalDelete(action, values) {
-    if (action === "delete" && !values.booleans.has("--yes")) {
+    if ((action === "delete" || action === "cancel") && !values.booleans.has("--yes")) {
         throw new Error("cal delete needs --yes: it removes the event at Google and can email everybody on it. Add --yes once you mean it.");
     }
 }
@@ -175,6 +175,7 @@ function buildCalCommand(values, action, subject, query, title, startsAt, endsAt
         dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")),
         ...(subject ? { subjectId: subject } : {}),
         ...(query ? { query } : {}),
+        accountName: optionalNonEmpty(values.flags.get("--account")),
         calendarId: optionalNonEmpty(values.flags.get("--calendar")),
         // An absent `--tz` means "this machine's zone", resolved at run time in
         // `commands/cal.ts` rather than here, so the parser stays pure.

package/dist/commands/local-args-tower-mail.js

@@ -30,6 +30,7 @@
  */
 import { optionalNonEmpty, optionalPositiveInteger, optionalUrl, parseNamedArgs, } from "./local-arg-values.js";
 const MAIL_ACTIONS = new Set([
+    "rename", "enable", "disable", "default", "remove",
     "accounts",
     "add-imap",
     "detach",
@@ -54,6 +55,7 @@ export function parseMailArgs(args) {
             "--home",
             "--dashboard-url",
             "--account",
+            "--source",
             "--address",
             "--name",
             "--limit",
@@ -74,6 +76,7 @@ export function parseMailArgs(args) {
             "--home",
             "--dashboard-url",
             "--account",
+            "--source",
             "--address",
             "--name",
             "--limit",
@@ -90,6 +93,12 @@ export function parseMailArgs(args) {
     });
     const { action, rest } = readMailAction(values);
     const { subject, query } = readMailSubjectOrQuery(action, rest);
+    if (["rename", "enable", "disable", "default", "remove"].includes(action) && !values.flags.get("--account"))
+        throw new Error("Name the account with --account <name>.");
+    if (action === "rename" && !values.flags.get("--name"))
+        throw new Error("Rename needs --name <new name>.");
+    if (["enable", "disable"].includes(action) && !["mail", "calendar"].includes(values.flags.get("--source") ?? ""))
+        throw new Error("Name --source mail or --source calendar.");
     const address = readImapAddress(action, values);
     const { to, cc } = readMailRecipients(action, values);
     const outPath = readAttachmentPath(action, values);
@@ -146,11 +155,6 @@ function readMailRecipients(action, values) {
     if (MAIL_ACTIONS_COMPOSING.has(action) && to.length === 0) {
         throw new Error(`mail ${action} needs --to "someone@example.com" (comma-separated for several).`);
     }
-    if (MAIL_ACTIONS_COMPOSING.has(action) && !optionalNonEmpty(values.flags.get("--account"))) {
-        throw new Error(action === "draft"
-            ? "mail draft needs --account <id>: with several mailboxes attached, which one the draft is saved in is yours to say. `cockpit mail accounts` lists them."
-            : "mail send needs --account <id>: with several mailboxes attached, which address this goes out from is yours to say. `cockpit mail accounts` lists them.");
-    }
     return { to, cc };
 }
 function readAttachmentPath(action, values) {
@@ -194,6 +198,7 @@ function buildMailCommand(values, action, subject, query, address, to, cc, outPa
         ...(subject ? { subjectId: subject } : {}),
         ...(query ? { query } : {}),
         accountId: optionalNonEmpty(values.flags.get("--account")),
+        source: values.flags.get("--source"),
         address,
         displayName: optionalNonEmpty(values.flags.get("--name")),
         ...(limit === undefined ? {} : { limit }),

package/dist/commands/local-args-tower-pages.js

@@ -215,6 +215,7 @@ const NOTES_ACTIONS = new Set([
     "webhook",
     // Ticket 10718: the Granola cron's own last-several-runs health.
     "granola-status",
+    "bot-upcoming",
 ]);
 /** Actions whose first positional is the note it acts on. */
 const NOTES_ACTIONS_NEEDING_A_NOTE = new Set([

package/dist/commands/local-help-commands-tower.js

@@ -115,7 +115,8 @@ export const TOWER_COMMAND_HELP = [
         [
             "Usage: cockpit mail [accounts|add-imap|inbox|read <thread>|search \"<words>\"|send|draft|attachment <id>|sync <account>|sync-status [<account>]|detach <account>] [flags]",
             "",
-            "Every mailbox you attached, in one place. One person, several addresses — nothing here has a \"current\" mailbox.",
+            "Every mailbox you attached, in one place. One person, several addresses. Writes use a named account or your default.",
+            "rename --account <name> --name <label>; enable|disable --account <name> --source mail|calendar; default|remove --account <name>. Switches keep stored data; remove disconnects and deletes Tower copies.",
             "accounts — every mailbox, its provider (gmail_oauth or imap), its health and when it last synced. The ids other verbs take are on the last line.",
             "add-imap --address <you@gmail.com> [--name \"<display name>\"] — attaches a personal Google account over IMAP + SMTP. The APP PASSWORD is read from stdin and there is no flag for it:",
             "      macOS:      printf \"%s\" \"abcd efgh ijkl mnop\" | cockpit mail add-imap --address you@gmail.com",
@@ -124,8 +125,8 @@ export const TOWER_COMMAND_HELP = [
             "inbox [--account <id>] [--unread] [--label <l>] [--limit <n>] [--before <iso>] — everything across every mailbox, newest first. * is unread, @ has an attachment. Every row (text or --json) carries the thread id — `[thread <id>]` in text — so `mail read <thread>` never costs a second --json call to learn it (BLI-10450).",
             "read <thread> — one conversation with its bodies. Thread ids come from `cockpit mail inbox` or `cockpit mail search`, in either --json or plain text.",
             "search \"<words>\" [--account <id>] [--limit <n>] — full text over subject and body. Quotes and OR work the way they do in a search box. Every row (text or --json) carries the thread id.",
-            "send --account <id> --to <a[,b]> [--cc <c>] --subject \"<s>\" [--reply-to <message id>] [--file <path>] [--attach <path>]... — the BODY comes from --file or stdin. --account is required: which address this goes out from is yours to say.",
-            "draft --account <id> --to <a[,b]> [--cc <c>] --subject \"<s>\" [--reply-to <message id>] [--file <path>] [--attach <path>]... — saves the message as a DRAFT in that mailbox for a person to read, edit and send themselves. NOTHING IS SENT and nobody is notified, so there is no confirmation step. Same flags and same body rule as send (--file or stdin). Only the mailbox's owner can draft into it. --reply-to threads the draft into that conversation the way send does; Gmail files it there only when the subject matches the original's, and the answer says whether it did. Gmail mailboxes only: an IMAP mailbox is refused as imap_drafts_unsupported. --json answers { ok, draft: { account_id, address, provider_draft_id, provider_thread_id, threaded } } (BLI-12530).",
+            "send [--account <name|id>] --to <a[,b]> [--cc <c>] --subject \"<s>\" [--reply-to <message id>] [--file <path>] [--attach <path>]... — the BODY comes from --file or stdin. Name --account to override your default; with several accounts and no default, Tower asks which one.",
+            "draft [--account <name|id>] --to <a[,b]> [--cc <c>] --subject \"<s>\" [--reply-to <message id>] [--file <path>] [--attach <path>]... — saves the message as a DRAFT in that mailbox for a person to read, edit and send themselves. NOTHING IS SENT and nobody is notified, so there is no confirmation step. Same flags and same body rule as send (--file or stdin). Only the mailbox's owner can draft into it. --reply-to threads the draft into that conversation the way send does; Gmail files it there only when the subject matches the original's, and the answer says whether it did. Gmail mailboxes only: an IMAP mailbox is refused as imap_drafts_unsupported. --json answers { ok, draft: { account_id, address, provider_draft_id, provider_thread_id, threaded } } (BLI-12530).",
             "--attach <path> (send and draft; repeat it for each file) — a file that rides along with the message: up to 10, and 3,000,000 bytes together (about 3 MB: a request to Tower is capped at 4.5 MB and a file travels as base64, a third bigger than itself). The type comes from the extension (.docx .pdf .png .jpg .jpeg .txt .csv .md .zip and more; anything else goes as application/octet-stream), the name is the file's own. --file is still the BODY and only the body. Refused BEFORE anything is sent, by name and with the numbers: too_many_attachments, attachment_unreadable (a path that is missing, a folder or empty), attachment_too_large. A reply (--reply-to) keeps its thread with files in it. Works on Gmail mailboxes and on IMAP mailboxes for send; a draft is Gmail only. --json adds { attachments: { count, bytes, content_types } } to the answer. The terminal reports from Tower's own answer, not from what it posted: if Tower does not confirm the files (an older Tower), it exits 1 with attachments_not_confirmed and says whether the message went. Names, paths and contents are never logged; a refusal says \"Attachment 2\", not which file (BLI-12661).",
             "attachment <id> --out <path> — downloads one attachment to a file. Attachments are pointers until you ask; nothing is stored in Tower.",
             "sync <account> — reads that mailbox now instead of waiting for the cron. Prints what landed, or the reason it did not.",
@@ -152,12 +153,14 @@ export const TOWER_COMMAND_HELP = [
             '      PowerShell: "https://calendar.google.com/calendar/ical/…/basic.ics" | cockpit cal add-ical --name "Personal"',
             "      Find it at calendar.google.com -> the calendar's Settings -> \"Secret address in iCal format\". Anybody who has that link can read the calendar, which is why it never goes on a command line.",
             "      A work @buildlaunchiterate.ca calendar does not need this: connect Google in the browser and `cockpit cal calendars` will list them.",
-            'create --calendar <id> --title "<what>" --at <iso> --until <iso> [--location "<where>"] [--attendee a@x,b@y] [--all-day] [--meet] — creates the event AT GOOGLE, then here. Attendees are invited by Google; --meet asks for a Google Meet room and prints its address (or says meet_not_available and keeps the event).',
+            'create [--account <name>|--calendar <id>] --title "<what>" --at <iso> --until <iso> [--location "<where>"] [--attendee a@x,b@y] [--all-day] [--meet] — creates the event AT GOOGLE, then here. Attendees are invited by Google; --meet asks for a Google Meet room and prints its address (or says meet_not_available and keeps the event).',
             "      Only a Google calendar can be written to: an iCal secret address is a read address, and `write_not_supported_for_provider` says so by name.",
             "share <id> --org-visible|--private — makes one of YOUR calendars readable by everyone at BLI, or private again. Sharing never lets anybody else change it.",
             "sync <id> [--full] — reads that calendar now instead of waiting for the cron. --full ignores the sync token / ETag and re-reads everything.",
             "sync-status [<id>] — every calendar's health, or one's: last successful sync, the last pass's own reason, how many events it carried, failures in the last 24h, and the lag between an event's own provider clock and when Tower stored it (ticket 10730).",
             "detach <id> — removes the calendar and its stored events from Tower. The calendar itself is untouched at Google.",
+            "change <event id> [--account <name>] [--title <title>] [--at <iso> --until <iso>] [--location <place>] — changes an event on its own account.",
+            "cancel <event id> --yes [--account <name>] — same door as delete; a named account must own the event.",
             "delete <event id> --yes — removes ONE event, AT GOOGLE first, then here. Refuses without --yes: a delete can email everybody on it, exactly like create's invitations do. Google already having it gone (404/410) is answered as success, not a refusal.",
             "--json writes one machine-readable object to stdout; every reason and receipt line stays on stderr.",
             "A refusal keeps Tower's own reason label — needs_rls_client, calendar_not_found_or_unreadable, calendar_not_yours, event_not_found_or_unreadable, ical_url_invalid, google_oauth_not_configured, write_not_supported_for_provider, and so on.",
@@ -259,7 +262,7 @@ export const TOWER_COMMAND_HELP = [
     [
         "slack",
         [
-            "Usage: cockpit slack [coverage [--workspace bli|blue_pearl] [--stale-only] [--list] | read [filters] [--format compact|full]] [--json]",
+            "Usage: cockpit slack [connect [--workspace bli|blue_pearl] | disconnect --workspace bli|blue_pearl | coverage [--workspace bli|blue_pearl] [--stale-only] [--list] | read [filters] [--format compact|full]] [--json]",
             "",
             "  cockpit slack coverage",
             "      What Cockpit's Slack bot can see: how many channels it is in, what each",
@@ -392,6 +395,7 @@ export const TOWER_COMMAND_HELP = [
             "detach <account-id> — take it off. The stored key goes with it; the meetings it already filed stay.",
             "sync <account-id> — read that notetaker now. Prints the run's own counts and reason label, and exits 1 when the pass failed.",
             "sync-status [<account-id>] — every notetaker's health, or one's: last successful sync, the last pass's own reason, how many meetings it carried, failures in the last 24h, and the lag between the newest meeting it has read and when it last ran (ticket 10730).",
+            "bot-upcoming [--json] — your own Google Meet meetings today that the bot will join, with claim state. Decline or mark private to opt out.",
             "granola-status [--limit <n>] [--json] — the Granola cron's own last several runs (ticket 10718): reason, counts, model, spend and which lookback it used. Granola runs on a shared server-side key, not a connected account, so this is its own read rather than `accounts`.",
             "A large note is read by a model on the server and can take a couple of minutes; the terminal says so before it waits.",
             "--json writes one machine-readable object to stdout; every reason, receipt and progress line stays on stderr.",

package/dist/commands/local-help.js

@@ -111,7 +111,7 @@ export function localCommandHelp(command) {
         "  cockpit models [list|show <provider:model>|compare <provider:model> <provider:model> [...]] [--highlight] [--dashboard-url <url>] [--json]",
         "  cockpit scout [board|start|dismiss|undo <experiment-id>] [--days <n>] [--dashboard-url <url>] [--json]",
         "  cockpit ops [status [--job <id>] [--skips] [--memory] [--models] | recompile --person <email|name|id> [--dry-run]] [--dashboard-url <url>] [--json]",
-        "  cockpit slack [coverage [--workspace bli|blue_pearl] [--stale-only] [--list] | read [--person <p>] [--channel <c>] [--query <text> [--word]] [--since <YYYY-MM-DD>] [--until <YYYY-MM-DD>] [--limit <n>] [--format compact|full]] [--json]",
+        "  cockpit slack [connect [--workspace bli|blue_pearl] | disconnect --workspace bli|blue_pearl | coverage [--workspace bli|blue_pearl] [--stale-only] [--list] | read [--person <p>] [--channel <c>] [--query <text> [--word]] [--since <YYYY-MM-DD>] [--until <YYYY-MM-DD>] [--limit <n>] [--format compact|full]] [--json]",
         "  cockpit settings [personal [--chat-model <key>] [--brief-model <key>] | switches [set <key> <value>] | models [set --chat <key>] [--memory <id>] | cli-floor [<version>] | env list|set --project <p> --file <f> --content-stdin|delete --id <uuid> [--yes]] [--json]",
         "  cockpit team [members | invite <email> --role <role> [--team-id <uuid>] | role <userId> --role <role> [--yes] | device [list] | device revoke <id|name> --reason <label> [--note \"<text>\"] [--yes]] [--json]",
         "  cockpit workbook [<project> [<doc>]] [--section <id>] [--markdown] [--width <n>] [--dashboard-url <url>] [--json]",

package/dist/commands/mail-account-preferences.js

@@ -0,0 +1,16 @@
+import { askAgentDoor, emitAgentDoor, failAgentDoor } from "./agent-door.js";
+import { writeLine } from "./cli-io.js";
+export async function runMailAccountPreference(command, door) {
+    const removing = command.action === "remove";
+    const answer = await askAgentDoor(door, {
+        path: removing ? `/api/mail/accounts?account=${encodeURIComponent(command.accountId)}` : "/api/mail/accounts",
+        method: removing ? "DELETE" : "PATCH", label: `mail ${command.action}`, timeoutMs: 30_000,
+        ...(!removing ? { body: { account: command.accountId, ...(command.action === "rename" ? { account_label: command.displayName } : command.action === "default" ? { is_default: true } : { [`${command.source}_enabled`]: command.action === "enable" }) } } : {}),
+    });
+    if (!answer.ok)
+        return failAgentDoor(door, "[accounts cli]", answer.reason, answer.detail);
+    if (door.json)
+        return emitAgentDoor(door, { ok: true, ...answer.body });
+    writeLine(door.io.stdout, `Account ${command.accountId}: ${command.action} completed.`);
+    return 0;
+}

package/dist/commands/mail-compose.js

@@ -63,7 +63,7 @@ export async function readMailBody(command, door) {
  */
 export function composedMessageBody(command, text, attachments = []) {
     return {
-        account_id: command.accountId,
+        ...(command.accountId ? /^[0-9a-f-]{36}$/i.test(command.accountId) ? { account_id: command.accountId } : { account: command.accountId } : {}),
         to: command.to.map((address) => ({ address })),
         ...(command.cc.length > 0 ? { cc: command.cc.map((address) => ({ address })) } : {}),
         subject: command.subjectLine ?? "",
@@ -164,7 +164,7 @@ export async function runMailDraft(command, door) {
         return failAttachmentsUnconfirmed(door, "draft", unconfirmed, draft);
     if (door.json)
         return emitAgentDoor(door, { ok: true, draft, ...message.receipt.json });
-    writeLine(door.io.stdout, `Saved a draft in ${draft?.address ?? "that mailbox"} for ${command.to.join(", ")}. `
+    writeLine(door.io.stdout, `Saved a draft in ${draft?.account_name ?? draft?.address ?? "that mailbox"} for ${command.to.join(", ")}. `
         + "Nothing was sent: it is in Drafts for a person to read, edit and send.");
     if (message.receipt.sentence)
         writeLine(door.io.stdout, message.receipt.sentence);

package/dist/commands/mail.js

@@ -27,6 +27,7 @@ import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor, } from "./ag
 import { isInteractiveStdin, readPipedText, writeLine } from "./cli-io.js";
 import { composeMessage, failAttachmentsUnconfirmed, readMailBody, runMailDraft, unconfirmedAttachments, } from "./mail-compose.js";
 import { cacheAgeLabel, cacheCoverage, readThroughCache } from "./read-cache.js";
+import { runMailAccountPreference } from "./mail-account-preferences.js";
 import { towerRequest } from "../tower-client.js";
 const TAG = "[mail cli]";
 const READ_DEADLINE_MS = 30_000;
@@ -37,6 +38,12 @@ const PASSWORD_MAX_CHARS = 200;
 export async function runMail(command, io) {
     const door = await openAgentDoor("mail", command, io);
     switch (command.action) {
+        case "rename":
+        case "enable":
+        case "disable":
+        case "default":
+        case "remove":
+            return runMailAccountPreference(command, door);
         case "accounts":
             return listAccounts(door);
         case "add-imap":
@@ -82,7 +89,7 @@ async function listAccounts(door) {
     }
     for (const account of accounts) {
         const health = account.status === "active" ? account.backfill_state : `${account.status}: ${account.status_reason ?? "no reason recorded"}`;
-        writeLine(door.io.stdout, `${account.address.padEnd(34)}  ${account.provider.padEnd(12)}  ${health.padEnd(18)}  ${account.last_sync_at ?? "never synced"}`);
+        writeLine(door.io.stdout, `${(account.account_label ?? account.address).padEnd(20)} ${account.is_default ? "default" : ""} mail=${account.mail_enabled !== false} calendar=${account.calendar_enabled !== false} ${account.address.padEnd(34)}  ${account.provider.padEnd(12)}  ${health.padEnd(18)}  ${account.last_sync_at ?? "never synced"}`);
     }
     writeLine(door.io.stdout, "");
     writeLine(door.io.stdout, `${accounts.length} mailbox(es). ids: ${accounts.map((account) => account.id).join(", ")}`);
@@ -279,7 +286,7 @@ async function send(command, door) {
         return failAttachmentsUnconfirmed(door, "send", unconfirmed, sent);
     if (door.json)
         return emitAgentDoor(door, { ok: true, sent, ...message.receipt.json });
-    writeLine(door.io.stdout, `Sent from ${sent?.address ?? "that mailbox"} to ${command.to.join(", ")}${sent?.threaded ? " (as a reply)" : ""}.`);
+    writeLine(door.io.stdout, `Sent from ${sent?.account_name ?? sent?.address ?? "that mailbox"} to ${command.to.join(", ")}${sent?.threaded ? " (as a reply)" : ""}.`);
     if (message.receipt.sentence)
         writeLine(door.io.stdout, message.receipt.sentence);
     return 0;

package/dist/commands/notes-bot-upcoming.js

@@ -0,0 +1,16 @@
+import { ask, emit, fail, READ_DEADLINE_MS } from "./notes-door.js";
+import { writeLine } from "./cli-io.js";
+export async function showBotUpcoming(_command, door) {
+    const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    const answer = await ask(door, { path: `/api/notetaker/upcoming?tz=${encodeURIComponent(tz)}`, method: "GET", label: "bot upcoming", timeoutMs: READ_DEADLINE_MS });
+    if (!answer.ok)
+        return fail(door, answer.reason, answer.detail);
+    if (door.json)
+        return emit(door, answer.body);
+    const body = answer.body;
+    if (!body.meetings.length)
+        writeLine(door.io.stdout, "No meetings for the bot today.");
+    for (const meeting of body.meetings)
+        writeLine(door.io.stdout, `${meeting.startsAt} ${meeting.claim.status} ${meeting.meetUrl}`);
+    return 0;
+}

package/dist/commands/notes.js

@@ -44,6 +44,7 @@ import { listNotes, listShelves, showNote, showShelf } from "./notes-reads.js";
 import { uploadNotes, pasteNote, shareNote, moveNote, placeNote } from "./notes-writes.js";
 import { runFolderCommand } from "./notes-folders.js";
 import { armNotesWebhook, connectNotetaker, detachNotetaker, listNotesAccounts, showNotesWebhook, syncNotetaker, syncStatusNotetakers, } from "./notes-accounts.js";
+import { showBotUpcoming } from "./notes-bot-upcoming.js";
 import { showGranolaStatus } from "./notes-granola-status.js";
 import { listRecordings, showRecording } from "./notes-recordings.js";
 export { listNotes, listShelves, showNote, showShelf } from "./notes-reads.js";
@@ -106,6 +107,8 @@ export async function runNotes(command, io) {
             return showRecording(command, door);
         case "webhook":
             return armNotesWebhook(command, door);
+        case "bot-upcoming":
+            return showBotUpcoming(command, door);
         case "granola-status":
             return showGranolaStatus(command, door);
     }

package/dist/commands/public-root.js

@@ -21,7 +21,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.198");
+    writeLine(io?.stdout ?? process.stdout, "0.2.200");
     return 0;
   }
 

package/dist/commands/slack.js

@@ -24,6 +24,24 @@ import { colorEnabled, dim, writeLine } from "./cli-io.js";
 import { asRecord, callTower, openTower, writeCommandFailure } from "./tower-command.js";
 export async function runSlack(command, io) {
     const tower = await openTower("slack", command, io);
+    if (command.action === "connect" || command.action === "disconnect") {
+        const result = await callTower(tower, { path: `/api/slack/connections${command.action === "disconnect" ? `?workspace=${command.workspace}` : ""}`,
+            method: command.action === "disconnect" ? "DELETE" : "GET", label: "slack-connection" });
+        if (!result.ok)
+            return writeCommandFailure(io, command.json, result);
+        writeLine(io.stderr, `[slack cli] connection answered ${JSON.stringify({ action: command.action, workspace: command.workspace ?? "all", reason: "ok" })}`);
+        const body = asRecord(result.body);
+        if (command.json)
+            writeLine(io.stdout, JSON.stringify(body));
+        else if (command.action === "disconnect")
+            writeLine(io.stdout, `Disconnected Slack for ${command.workspace}.`);
+        else
+            for (const connection of (body["connections"] ?? [])) {
+                if (!command.workspace || command.workspace === connection["workspace"])
+                    writeLine(io.stdout, `${connection["workspace"]}: ${connection["connected"] ? "connected" : "Connect Slack"} ${new URL(String(connection["connectPath"]), tower.dashboardUrl).toString()}`);
+            }
+        return 0;
+    }
     return command.action === "coverage"
         ? runCoverageAction(command, io, tower)
         : runReadAction(command, io, tower);
@@ -86,6 +104,12 @@ function coverageLines(coverage, workspaces, staleOnly, list, paint) {
     for (const workspace of workspaces) {
         writeWorkspaceCoverageLines(lines, workspace, staleAfter, staleOnly, list, paint);
     }
+    for (const entry of (coverage["privateCoverage"] ?? [])) {
+        lines.push(`${entry["workspace"]}: ${entry["botMemberCount"]}/${entry["privateChannelsKnown"]} known private channels have the bot; ${entry["peopleConnected"]} people connected; as of ${entry["asOf"] ?? "no scan yet"}`);
+        lines.push(`  Not connected: ${(entry["peopleNotConnected"] ?? []).join(", ") || "none"}`);
+    }
+    if (coverage["privateCoverageError"])
+        lines.push(`Private coverage unavailable: ${coverage["privateCoverageError"]}`);
     writeCoverageFooter(lines, coverage, paint);
     return lines;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/cli",
-  "version": "0.2.198",
+  "version": "0.2.200",
   "private": false,
   "type": "module",
   "bin": {
@@ -28,7 +28,7 @@
   },
   "dependencies": {
     "@bli-cockpit/memory-mcp": "0.1.60",
-    "@bli-cockpit/mcp": "0.1.110",
+    "@bli-cockpit/mcp": "0.1.112",
     "@bli-cockpit/telemetry-core": "0.1.69"
   },
   "repository": {