@bli-cockpit/cli 0.2.206 → 0.2.207

package/dist/commands/public-root.js

@@ -21,7 +21,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.206");
+    writeLine(io?.stdout ?? process.stdout, "0.2.207");
     return 0;
   }
 

package/dist/commands/sources-check.js

@@ -1,4 +1,5 @@
 import { writeLine } from "./cli-io.js";
+import { readDescribedImageKeys } from "../image-description-state.js";
 import { CLAUDE_CURSOR_FILENAME, readRawEvidenceCursor, } from "../cursors/raw-evidence-cursor.js";
 import { fetchTranscriptObjects } from "../evidence-transcripts-client.js";
 import { DEFAULT_DASHBOARD_URL, getCollectorRuntimePaths, readLocalCollectorConfig, readLocalCollectorSessionFile, } from "../local-state.js";
@@ -28,13 +29,14 @@ export async function runSourcesCheck(command, io, now = new Date()) {
         codex: await readRawEvidenceCursor(paths),
         claude_code: await readRawEvidenceCursor(paths, { filename: CLAUDE_CURSOR_FILENAME, sessionsOnly: true }),
     };
+    const describedKeys = new Set(await readDescribedImageKeys(paths.state_dir));
     const report = emptyReport(command, remote, local.newer_count, local.file_read_failed + local.directory_read_failed);
     for (const file of local.files) {
         const judged = await judgeSource({
             file,
             remotes: remote.files.get(file.key) ?? [],
             cursorEntry: file.kind === "claude_subagent" ? null : (cursors[file.source].sessions[file.session_id] ?? null),
-            facts: fileFacts(file),
+            facts: fileFacts(file, undefined, { describedKeys }),
         }).catch((error) => {
             report.local.unreadable += 1;
             console.error("[collector sources] a transcript could not be judged; left out of the answer", JSON.stringify({ reason: "file_unreadable", kind: file.kind, byte_size: file.byte_size, error_name: error?.name ?? "Error" }));

package/dist/commands/sources-verdict.js

@@ -30,6 +30,8 @@ import path from "node:path";
 import { RAW_EVIDENCE_UPLOAD_MAX_FILE_BYTES, REDACTION_STUB_SHA256, } from "@bli-cockpit/telemetry-core";
 import { sanitizeTextEvidenceForUpload } from "../adapters/raw-evidence-sanitize.js";
 import { isSecretLikePath } from "../adapters/raw-evidence-keys.js";
+import { IMAGE_HANDLING_MODE } from "@bli-cockpit/telemetry-core";
+import { uploadFormOfTranscript } from "../image-description-session.js";
 export async function judgeSource(input) {
     const { file, remotes, cursorEntry } = input;
     if (remotes.length === 0)
@@ -79,7 +81,11 @@ export async function judgeSource(input) {
  * upload does (`raw-evidence-transcript-file.ts`): same sanitizer, same
  * secret-like-name rule, same byte cap.
  */
-export function fileFacts(file, maxBytes = RAW_EVIDENCE_UPLOAD_MAX_FILE_BYTES) {
+export function fileFacts(file, maxBytes = RAW_EVIDENCE_UPLOAD_MAX_FILE_BYTES, 
+/** Tests only set `mode`. Production reads the one switch. `describedKeys` is the collector's described-image state. */
+upload = {}) {
+    const mode = upload.mode ?? IMAGE_HANDLING_MODE;
+    const describedKeys = upload.describedKeys ?? new Set();
     let bytes = null;
     const read = () => {
         bytes ??= file.byte_size > maxBytes ? Promise.resolve(null) : fs.readFile(file.file_path);
@@ -96,9 +102,11 @@ export function fileFacts(file, maxBytes = RAW_EVIDENCE_UPLOAD_MAX_FILE_BYTES) {
             sanitized ??= read().then((buffer) => {
                 if (!buffer)
                     return null;
+                // Compare against what the uploader sends: in drop mode that is the slim form, not the disk bytes.
+                const uploadText = uploadFormOfTranscript(buffer.toString("utf8"), file.source === "codex" ? "codex" : "claude_code", mode, describedKeys);
                 const result = sanitizeTextEvidenceForUpload({
-                    text: buffer.toString("utf8"),
-                    originalBytes: buffer,
+                    text: uploadText,
+                    originalBytes: uploadText === buffer.toString("utf8") ? buffer : Buffer.from(uploadText, "utf8"),
                     redactedFields: [`${file.kind === "codex_rollout" ? "codex_jsonl" : file.kind === "claude_main" ? "claude_jsonl" : "claude_jsonl_sidecar"}.body`],
                     secretLikeFileName: isSecretLikePath(path.basename(file.file_path)),
                 });

package/dist/image-description-session.js

@@ -22,7 +22,7 @@
  */
 import { IMAGE_DESCRIBE_MAX_BYTES, IMAGE_HANDLING_MODE, base64Of, findEmbeddedImages, replaceImagesWithMarkers, } from "@bli-cockpit/telemetry-core";
 import { postImageToDescribeDoor } from "./image-describe-client.js";
-import { slimOrKeep } from "./slim/slim-transcript.js";
+import { slimOrKeep, slimTranscript } from "./slim/slim-transcript.js";
 import { imageStateKey, readDescribedImageKeys, writeDescribedImageKeys, } from "./image-description-state.js";
 /** New images sent to the door in one sync (all worktrees together). */
 export const IMAGE_DESCRIBE_MAX_PER_RUN = 100;
@@ -151,6 +151,19 @@ export async function openImageDescriptions(options) {
         },
     };
 }
+/**
+ * What the uploader sends for this transcript text, worked out offline (BLI-17013). Keep mode: the
+ * text as it is. Drop mode: every image whose key is in `describedKeys` becomes its marker, then
+ * the slim rules run, the same two steps as `prepareTranscript` above, with no describe-door call.
+ * `cockpit sources check` uses it so a complete upload is judged against the bytes actually uploaded.
+ */
+export function uploadFormOfTranscript(text, source, mode, describedKeys) {
+    if (mode !== "describe_and_drop")
+        return text;
+    const images = findEmbeddedImages(text);
+    const replaced = replaceImagesWithMarkers(text, images, (image) => describedKeys.has(imageStateKey(image.sha256)));
+    return slimTranscript(replaced.text, source).text;
+}
 /**
  * The image step for one build of an envelope. When a sync-wide budget is shared across worktrees
  * the session lives on it (one count budget and one state file for the whole sync); otherwise this

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/cli",
-  "version": "0.2.206",
+  "version": "0.2.207",
   "private": false,
   "type": "module",
   "bin": {