@bli-cockpit/cli 0.2.212 → 0.2.217

package/dist/commands/agent-door.js

@@ -52,6 +52,7 @@ export async function askAgentDoor(door, options) {
             httpStatus: status,
             reason: doorReason(body) ?? `http_${status}`,
             detail: doorMessage(body) ?? `Tower answered ${status} and said nothing about why.`,
+            body,
         };
     }
     return { ok: true, httpStatus: result.response.status, body };
@@ -76,10 +77,11 @@ export function emitAgentDoor(door, body, exitCode = 0) {
     writeLine(door.io.stdout, JSON.stringify(body));
     return exitCode;
 }
-export function failAgentDoor(door, tag, reason, detail) {
-    writeLine(door.io.stderr, `${tag} refused ${JSON.stringify({ reason })}`);
+/** `extra` is for a command that has more to say than the reason (`refusal`); a caller that passes none prints exactly what it always did. */
+export function failAgentDoor(door, tag, reason, detail, extra = {}) {
+    writeLine(door.io.stderr, `${tag} refused ${JSON.stringify({ reason, ...extra })}`);
     if (door.json) {
-        writeLine(door.io.stdout, JSON.stringify({ ok: false, error: reason, detail }));
+        writeLine(door.io.stdout, JSON.stringify({ ok: false, error: reason, detail, ...extra }));
     }
     else {
         writeLine(door.io.stderr, detail);

package/dist/commands/local-args-tower-admin.js

@@ -347,6 +347,13 @@ export function parseTeamArgs(args) {
  */
 function parseTeamDeviceArgs(rest, flags, common) {
     const [deviceVerb, deviceRef, ...extra] = rest;
+    if (deviceVerb === "scope") {
+        const [deviceScope, ...surplus] = extra;
+        if (!deviceRef || (deviceScope !== "notetaker_bot" && deviceScope !== "none") || surplus.length > 0) {
+            throw new Error("team device scope takes <id|name> notetaker_bot|none.");
+        }
+        return { kind: "team", action: "device-scope", deviceRef, deviceScope, ...common };
+    }
     if (extra.length > 0)
         throw new Error("team device does not accept that many arguments.");
     if (!deviceVerb || deviceVerb === "list") {
@@ -378,7 +385,7 @@ function parseTeamDeviceArgs(rest, flags, common) {
             ...common,
         };
     }
-    throw new Error("team device takes one verb: list, doctor <id|name>, or revoke <id|name>.");
+    throw new Error("team device takes one verb: list, doctor <id|name>, scope <id|name> notetaker_bot|none, or revoke <id|name>.");
 }
 /** `cockpit model [show|set <key>]` — the alias surface for the personal chat model. */
 export function parseModelArgs(args) {

package/dist/commands/local-args-tower-manager.js

@@ -0,0 +1,371 @@
+/**
+ * `cockpit manager` argument parsing (BLI-5006): client actions and timeline items from the terminal.
+ *
+ *   cockpit manager clients
+ *   cockpit manager client <client>
+ *   cockpit manager run <run-id>
+ *   cockpit manager list <client> [--timeline] [--needs-review] [--status open|done|dropped|closed|all] [--owner <name> | --no-owner] [--overdue] [--kind <kind>] [--search <text>] [--archived] [--review dismissed|all]
+ *   cockpit manager queue <client>
+ *   cockpit manager show <id> [--timeline]
+ *   cockpit manager add <client> --title <t> [--owners "A, B"] [--due YYYY-MM-DD] [--meeting <timeline-id>] [--detail <text>] [--source-url <url>] [--source-note <text>] [--request-id <uuid>]
+ *   cockpit manager add <client> --timeline --kind <kind> --title <t> [--date YYYY-MM-DD] [--owner <one name>] [--detail <text>] [--source-url <url>] [--source-note <text>] [--request-id <uuid>]
+ *   cockpit manager edit <id> --version <v> [--timeline] [--title] [--detail] [--due <date>|none] [--owners "A, B"|none]
+ *                            (timeline: --kind, --date <date>|none, --owner <one name>|none)
+ *   cockpit manager done|reopen <action> --version <v>
+ *   cockpit manager link <action> --version <v> --meeting <timeline-id> | --none
+ *   cockpit manager approve <id> --version <v> [--timeline] [--restore]   (--restore brings a dismissed item back)
+ *   cockpit manager dismiss|archive|unarchive <id> --version <v> [--timeline]
+ *   cockpit manager proposal <id> <proposal-id> accept|dismiss|add-new --version <v> [--timeline]
+ *
+ * Every verb is one `/api/manager` door on this machine's device token. A bare `cockpit manager`,
+ * `help` and `--help` are the help, never a list and never another command.
+ */
+import { optionalNonEmpty, optionalUrl, parseNamedArgs } from "./local-arg-values.js";
+export const MANAGER_VERBS = [
+    "clients", "client", "run", "list", "queue", "show", "add", "edit", "done", "reopen", "link",
+    "approve", "dismiss", "proposal", "archive", "unarchive",
+];
+export const MANAGER_ACTION_STATUSES = ["open", "done", "dropped", "closed", "all"];
+export const MANAGER_TIMELINE_KINDS = ["meeting", "document", "milestone", "internal"];
+const ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const VERSION = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}/;
+const ONE_VERB = `manager takes one verb: ${MANAGER_VERBS.join(", ")}. Example: \`cockpit manager clients\` or \`cockpit manager list <client>\`.`;
+const OWN_FLAGS = [
+    "--timeline", "--needs-review", "--status", "--owner", "--owners", "--no-owner", "--kind", "--search", "--archived", "--review",
+    "--title", "--detail", "--due", "--date", "--meeting", "--none", "--version", "--request-id", "--restore", "--overdue", "--source-url", "--source-note",
+];
+const COMMON_FLAGS = ["--home", "--dashboard-url", "--json", "--help"];
+const VALUE_FLAGS = [
+    "--status", "--owner", "--owners", "--kind", "--search", "--review", "--title", "--detail", "--due", "--date", "--meeting",
+    "--version", "--request-id", "--source-url", "--source-note", "--home", "--dashboard-url",
+];
+/** Which flags each verb owns, so a flag on the wrong verb is refused by name rather than ignored. */
+export const FLAGS_BY_VERB = {
+    clients: [],
+    client: [],
+    run: [],
+    list: ["--timeline", "--needs-review", "--status", "--owner", "--no-owner", "--overdue", "--kind", "--search", "--archived", "--review"],
+    queue: [],
+    show: ["--timeline"],
+    add: ["--timeline", "--title", "--detail", "--owners", "--owner", "--due", "--meeting", "--kind", "--date", "--source-url", "--source-note", "--request-id"],
+    edit: ["--timeline", "--version", "--title", "--detail", "--owners", "--owner", "--due", "--kind", "--date"],
+    done: ["--version"],
+    reopen: ["--version"],
+    link: ["--version", "--meeting", "--none"],
+    approve: ["--timeline", "--version", "--restore"],
+    dismiss: ["--timeline", "--version"],
+    proposal: ["--timeline", "--version"],
+    archive: ["--timeline", "--version"],
+    unarchive: ["--timeline", "--version"],
+};
+/** Positional words each verb takes, named for the refusal. */
+const POSITIONALS = {
+    clients: [],
+    client: ["client"],
+    run: ["run id"],
+    list: ["client"],
+    queue: ["client"],
+    show: ["id"],
+    add: ["client"],
+    edit: ["id"],
+    done: ["action id"],
+    reopen: ["action id"],
+    link: ["action id"],
+    approve: ["id"],
+    dismiss: ["id"],
+    proposal: ["id", "proposal id", "accept, dismiss or add-new"],
+    archive: ["id"],
+    unarchive: ["id"],
+};
+/** A value flag given twice would silently keep only the last; say so instead. */
+function refuseRepeatedFlags(args) {
+    for (const flag of VALUE_FLAGS) {
+        const times = args.filter((arg) => arg === flag || arg.startsWith(`${flag}=`)).length;
+        if (times > 1) {
+            throw new Error(flag === "--owners"
+                ? '--owners was given more than once. Put everyone in one list: --owners "Pip Moss, Rowan Ash".'
+                : `${flag} was given more than once. Give it once.`);
+        }
+    }
+}
+export function parseManagerArgs(args) {
+    refuseRepeatedFlags(args);
+    const values = parseNamedArgs(args, { allowedFlags: [...OWN_FLAGS, ...COMMON_FLAGS], valueFlags: VALUE_FLAGS });
+    const base = {
+        kind: "manager",
+        dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")),
+        homeDir: optionalNonEmpty(values.flags.get("--home")),
+        json: values.booleans.has("--json"),
+    };
+    const first = values.positionals[0];
+    if (values.booleans.has("--help") || first === undefined || first === "help" || first === "-h") {
+        return { ...base, action: "clients", help: true, timeline: false };
+    }
+    if (!MANAGER_VERBS.includes(first))
+        throw new Error(ONE_VERB);
+    const verb = first;
+    const owned = FLAGS_BY_VERB[verb];
+    const stray = [...values.flags.keys(), ...values.booleans].find((flag) => OWN_FLAGS.includes(flag) && !owned.includes(flag));
+    if (stray)
+        throw new Error(`${stray} does not belong to \`cockpit manager ${verb}\`.`);
+    const rest = values.positionals.slice(1);
+    const wanted = POSITIONALS[verb];
+    if (rest.length !== wanted.length) {
+        throw new Error(wanted.length === 0
+            ? `\`cockpit manager ${verb}\` takes no positional arguments.`
+            : `\`cockpit manager ${verb}\` takes exactly: ${wanted.map((word) => `<${word}>`).join(" ")}${verb === "list" || verb === "queue" || verb === "add" || verb === "client" ? " (quote a client's name that has spaces)" : ""}.`);
+    }
+    const timeline = values.booleans.has("--timeline");
+    const shape = { ...base, action: verb, timeline };
+    const flag = (name) => values.flags.get(name);
+    if (verb === "list" || verb === "queue" || verb === "add" || verb === "client")
+        shape.client = rest[0];
+    else if (verb === "run")
+        shape.runId = readId(rest[0], "A run");
+    else if (verb !== "clients")
+        shape.id = readId(rest[0], verb === "done" || verb === "reopen" || verb === "link" ? "An action" : "An item");
+    if (verb === "proposal") {
+        shape.proposalId = rest[1];
+        shape.decision = readDecision(rest[2]);
+    }
+    const needsVersion = !["clients", "client", "run", "list", "queue", "show", "add"].includes(verb);
+    if (needsVersion)
+        shape.version = readVersion(flag("--version"), verb);
+    if (verb === "list")
+        readListFilters(values, shape);
+    if (verb === "add")
+        readAddFields(values, shape);
+    if (verb === "edit")
+        readEditFields(values, shape);
+    if (verb === "link")
+        readLink(values, shape);
+    if (verb === "approve" && values.booleans.has("--restore"))
+        shape.restore = true;
+    return shape;
+}
+function readId(value, what) {
+    if (!ID.test(value))
+        throw new Error(`${what} id looks like 8f14e45f-ceea-467a-9575-1d3a4e7b2c10 (\`cockpit manager list <client>\` prints them).`);
+    return value;
+}
+function readVersion(raw, verb) {
+    if (raw === undefined) {
+        throw new Error(`\`cockpit manager ${verb}\` needs --version <version>: the item's version exactly as \`cockpit manager show <id>\` prints it. It keeps you from writing over a change someone else made.`);
+    }
+    if (!VERSION.test(raw))
+        throw new Error("--version is the item's version exactly as `cockpit manager show <id>` prints it, like 2026-10-09T17:03:11.123456+00:00.");
+    return raw;
+}
+function readDecision(word) {
+    if (word === "accept" || word === "dismiss")
+        return word;
+    if (word === "add-new" || word === "add_as_new")
+        return "add_as_new";
+    throw new Error("The last word of `cockpit manager proposal` is accept, dismiss or add-new.");
+}
+/** One calendar date, `YYYY-MM-DD`, that exists (`2026-02-30` does not). */
+export function isCalendarDate(value) {
+    const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(value);
+    if (!match)
+        return false;
+    const [year, month, day] = [Number(match[1]), Number(match[2]), Number(match[3])];
+    const date = new Date(Date.UTC(2000, 0, 1));
+    date.setUTCFullYear(year, month - 1, day);
+    return date.getUTCFullYear() === year && date.getUTCMonth() === month - 1 && date.getUTCDate() === day;
+}
+function readDate(raw, flag) {
+    if (!isCalendarDate(raw))
+        throw new Error(`${flag} wants a real date written YYYY-MM-DD, like 2026-10-31.`);
+    return raw;
+}
+/** "A, B" is two people: split on commas, trim, drop blanks. */
+export function splitOwners(raw) {
+    return raw.split(",").map((name) => name.trim()).filter((name) => name !== "");
+}
+function readKind(raw, flag) {
+    if (!MANAGER_TIMELINE_KINDS.includes(raw))
+        throw new Error(`${flag} wants one of ${MANAGER_TIMELINE_KINDS.join(", ")}.`);
+    return raw;
+}
+function readListFilters(values, shape) {
+    const status = values.flags.get("--status");
+    const owner = values.flags.get("--owner");
+    const noOwner = values.booleans.has("--no-owner");
+    const kind = values.flags.get("--kind");
+    const review = values.flags.get("--review");
+    const overdue = values.booleans.has("--overdue");
+    if (shape.timeline && (status || owner || noOwner || overdue))
+        throw new Error(`${status ? "--status" : owner ? "--owner" : noOwner ? "--no-owner" : "--overdue"} filters actions, and a timeline list does not take it. Drop --timeline, or filter the timeline with --kind.`);
+    if (!shape.timeline && kind)
+        throw new Error("--kind filters the timeline. Add --timeline.");
+    if (owner && noOwner)
+        throw new Error("--owner and --no-owner say opposite things. Give one.");
+    if (status && !MANAGER_ACTION_STATUSES.includes(status))
+        throw new Error(`--status wants one of ${MANAGER_ACTION_STATUSES.join(", ")}.`);
+    if (review !== undefined && review !== "dismissed" && review !== "all")
+        throw new Error("--review wants dismissed or all (dismissed items are hidden unless you ask).");
+    if (kind)
+        shape.kindFilter = readKind(kind, "--kind");
+    if (status)
+        shape.status = status;
+    if (owner)
+        shape.ownerFilter = owner.trim();
+    if (noOwner)
+        shape.noOwner = true;
+    if (overdue)
+        shape.overdue = true;
+    if (review)
+        shape.review = review === "dismissed" ? "rejected" : "all";
+    if (values.booleans.has("--archived"))
+        shape.archived = true;
+    const search = optionalNonEmpty(values.flags.get("--search"));
+    if (search)
+        shape.search = search;
+    if (values.booleans.has("--needs-review"))
+        shape.needsReview = true;
+}
+/** The flags only an action has, and the flags only a timeline item has, refused on the wrong one in plain words. */
+function refuseWrongItemFlags(values, shape) {
+    const given = (name) => values.flags.has(name) || values.booleans.has(name);
+    if (shape.timeline) {
+        if (given("--owners"))
+            throw new Error("A timeline item has one owner: use --owner <name> (or --owner none). --owners is for an action.");
+        const action = ["--due", "--meeting"].find(given);
+        if (action)
+            throw new Error(`${action} belongs to an action; a timeline item has a --date. Drop --timeline for an action.`);
+    }
+    else {
+        if (given("--owner"))
+            throw new Error("An action has several owners: use --owners \"A, B\" (or --owners none). --owner is for a timeline item.");
+        const item = ["--kind", "--date"].find(given);
+        if (item)
+            throw new Error(`${item} belongs to a timeline item. Add --timeline, or use --due for an action's date.`);
+    }
+}
+const isNone = (value) => value.trim().toLowerCase() === "none";
+/** `--owners "A, B"` replaces the whole list; `none` is the only way to clear it; a list of blanks is neither. */
+function readOwnersList(raw) {
+    if (isNone(raw))
+        return [];
+    // Commas separate people (the web form's rule), so a name can hold neither a comma nor the quotes around one.
+    if (raw.includes('"'))
+        throw new Error('--owners splits people on commas, so a name cannot hold a comma or a double quote. Write the names without them: --owners "Pip Moss, Rowan Ash".');
+    const owners = splitOwners(raw);
+    if (owners.length === 0)
+        throw new Error("--owners names nobody. Give one or more people separated by commas, or none to clear them.");
+    return owners;
+}
+function readOneOwner(raw) {
+    if (isNone(raw))
+        return null;
+    const name = raw.trim();
+    if (name === "")
+        throw new Error("--owner needs a name, or none to clear it.");
+    return name;
+}
+function readAddFields(values, shape) {
+    refuseWrongItemFlags(values, shape);
+    const title = optionalNonEmpty(values.flags.get("--title"));
+    if (!title)
+        throw new Error("`cockpit manager add` needs --title <text>.");
+    shape.title = title;
+    const detail = values.flags.get("--detail");
+    if (detail !== undefined)
+        shape.detail = detail;
+    const requestId = values.flags.get("--request-id");
+    if (requestId !== undefined)
+        shape.requestId = readId(requestId, "A request");
+    readSource(values, shape);
+    if (shape.timeline) {
+        const kind = values.flags.get("--kind");
+        if (!kind)
+            throw new Error(`\`cockpit manager add --timeline\` needs --kind ${MANAGER_TIMELINE_KINDS.join("|")}.`);
+        shape.itemKind = readKind(kind, "--kind");
+        const date = values.flags.get("--date");
+        if (date && !isNone(date))
+            shape.occurredAt = readDate(date, "--date");
+        const owner = values.flags.get("--owner");
+        const name = owner === undefined ? null : readOneOwner(owner);
+        if (name)
+            shape.ownerName = name;
+        return;
+    }
+    const due = values.flags.get("--due");
+    if (due && !isNone(due))
+        shape.dueAt = readDate(due, "--due");
+    const meeting = values.flags.get("--meeting");
+    if (meeting)
+        shape.timelineItemId = readId(meeting, "A timeline item");
+    const owners = values.flags.get("--owners");
+    const list = owners === undefined ? [] : readOwnersList(owners);
+    if (list.length > 0)
+        shape.owners = list;
+}
+/** Where an item a person adds came from (the web form's Source field): a link, a note, or both. The server checks them again. */
+function readSource(values, shape) {
+    const url = optionalNonEmpty(values.flags.get("--source-url"));
+    if (url !== undefined) {
+        if (!/^https?:\/\/\S+$/i.test(url.trim()))
+            throw new Error("--source-url wants a link starting with http:// or https://. Put anything else in --source-note.");
+        shape.sourceUrl = url.trim();
+    }
+    const note = optionalNonEmpty(values.flags.get("--source-note"));
+    if (note !== undefined) {
+        if (note.trim().length > 1000)
+            throw new Error("--source-note is at most 1,000 characters. A link can be longer: use --source-url.");
+        shape.sourceNote = note.trim();
+    }
+}
+function readEditFields(values, shape) {
+    refuseWrongItemFlags(values, shape);
+    let changes = 0;
+    const title = values.flags.get("--title");
+    if (title !== undefined) {
+        if (title.trim() === "")
+            throw new Error("--title cannot be blank.");
+        shape.title = title.trim();
+        changes += 1;
+    }
+    const detail = values.flags.get("--detail");
+    if (detail !== undefined) {
+        shape.detail = detail;
+        changes += 1;
+    }
+    const owners = values.flags.get("--owners");
+    if (owners !== undefined) {
+        shape.owners = readOwnersList(owners);
+        changes += 1;
+    }
+    const owner = values.flags.get("--owner");
+    if (owner !== undefined) {
+        shape.ownerName = readOneOwner(owner);
+        changes += 1;
+    }
+    const due = values.flags.get("--due");
+    if (due !== undefined) {
+        shape.dueAt = isNone(due) ? null : readDate(due, "--due");
+        changes += 1;
+    }
+    const date = values.flags.get("--date");
+    if (date !== undefined) {
+        shape.occurredAt = isNone(date) ? null : readDate(date, "--date");
+        changes += 1;
+    }
+    const kind = values.flags.get("--kind");
+    if (kind !== undefined) {
+        shape.itemKind = readKind(kind, "--kind");
+        changes += 1;
+    }
+    if (changes === 0) {
+        throw new Error("`cockpit manager edit` has nothing to change. Give at least one of --title, --detail, --owners, --due (--kind, --date, --owner on a timeline item). A flag you leave out keeps its value; `none` clears owners, a due date or a date.");
+    }
+}
+function readLink(values, shape) {
+    const meeting = values.flags.get("--meeting");
+    const none = values.booleans.has("--none");
+    if (meeting && none)
+        throw new Error("--meeting and --none say opposite things. Give one.");
+    if (!meeting && !none)
+        throw new Error("`cockpit manager link` needs --meeting <timeline-id> to link, or --none to unlink.");
+    shape.timelineItemId = meeting ? readId(meeting, "A timeline item") : null;
+}

package/dist/commands/local-args-tower.js

@@ -43,6 +43,7 @@ export { parseUsageArgs } from "./local-args-tower-usage.js";
 export { parseLogsArgs } from "./local-args-tower-logs.js";
 export { parseBrainArgs } from "./local-args-tower-brain.js";
 export { parseApprovalsArgs } from "./local-args-tower-approvals.js";
+export { parseManagerArgs } from "./local-args-tower-manager.js";
 export { parseImageArgs } from "./local-args-tower-image.js";
 export { parseCareersArgs } from './local-args-tower-careers.js';
 export { parseRenameArgs } from './local-args-tower-rename.js';

package/dist/commands/local-args.js

@@ -19,7 +19,7 @@ import { parseGlossaryArgs } from "./glossary.js";
 import { parseRootsArgs } from "./roots.js";
 import { SURFACE_ALIASES } from "./local-help.js";
 import { parseAgentRulesArgs, parseAnalyzeArgs, parseAutostartArgs, parseBackfillArgs, parseCleanArgs, parseDoctorArgs, parseInstallArgs, parseLoginArgs, parseMemoryArgs, parseLogoutArgs, parseOnboardArgs, parseReleaseArgs, parseServeArgs, parseSessionsArgs, parseSourcesArgs, parseStartArgs, parseStatusArgs, parseSyncArgs, parseUpdateArgs, } from "./local-args-collector.js";
-import { parseBriefArgs, parseCorrectArgs, parseDocsArgs, parseIssueArgs, parseJarvisArgs, parseMailArgs, parseCalArgs, parseModelArgs, parseMsgArgs, parseNotesArgs, parseOpsArgs, parseProjectArgs, parseModelsArgs, parseScoutArgs, parseGithubArgs, parseSearchArgs, parseSettingsArgs, parseSlackArgs, parseTeamArgs, parseWorkbookArgs, parseUsageArgs, parseSetupArgs, parseSpeedArgs, parseLogsArgs, parseBrainArgs, parseApprovalsArgs, parseImageArgs, parseCareersArgs, parseRenameArgs, } from "./local-args-tower.js";
+import { parseBriefArgs, parseCorrectArgs, parseDocsArgs, parseIssueArgs, parseJarvisArgs, parseMailArgs, parseCalArgs, parseModelArgs, parseMsgArgs, parseNotesArgs, parseOpsArgs, parseProjectArgs, parseModelsArgs, parseScoutArgs, parseGithubArgs, parseSearchArgs, parseSettingsArgs, parseSlackArgs, parseTeamArgs, parseWorkbookArgs, parseUsageArgs, parseSetupArgs, parseSpeedArgs, parseLogsArgs, parseBrainArgs, parseApprovalsArgs, parseManagerArgs, parseImageArgs, parseCareersArgs, parseRenameArgs, } from "./local-args-tower.js";
 // `normalizeUrl` has always been part of this module's surface — `local.ts` and
 // `local-auth.ts` import it from here — so it stays exported from this address
 // even though it now lives next door. The same goes for the four names the
@@ -146,6 +146,8 @@ export function parseLocalArgs(argv) {
             return parseBrainArgs(argv.slice(1));
         case "approvals":
             return parseApprovalsArgs(argv.slice(1));
+        case "manager":
+            return parseManagerArgs(argv.slice(1));
         case "image":
             return parseImageArgs(argv.slice(1));
         default:

package/dist/commands/local-command-shapes-manager.js

@@ -0,0 +1,9 @@
+/**
+ * `cockpit manager` command shape (BLI-5006), beside `local-command-shapes-approvals.ts` for the
+ * same reason: `local-command-shapes.ts` sits at the readability ceiling.
+ *
+ * The parser (`local-args-tower-manager.ts`) turns the typed words into the fields a request
+ * carries, so `manager.ts` only builds paths and bodies. A field that is ABSENT is "leave it
+ * alone"; an explicit clear is `owners: []`, `ownerName: null`, `dueAt: null`, `occurredAt: null`.
+ */
+export {};

package/dist/commands/local-help-commands-tower-ops.js

@@ -89,6 +89,47 @@ export const TOWER_OPS_COMMAND_HELP = [
             "approvals_edit, approvals_reject, approvals_rules, approvals_rules_create, approvals_rules_revoke.",
         ],
     ],
+    [
+        "manager",
+        [
+            "Usage: cockpit manager <clients|client|run|list|queue|show|add|edit|done|reopen|link|approve|dismiss|proposal|archive|unarchive> ... [--dashboard-url <url>] [--json]",
+            "",
+            "Tower Manager's client actions and timeline items, from the terminal: the same things the manager page does.",
+            "  cockpit manager clients                      every client, with its id",
+            "  cockpit manager client <client>              one client: state, last read, pages waiting;  run <run-id>  one run's receipt",
+            "  cockpit manager list <client> [--timeline] [--needs-review] [--status open|done|dropped|closed|all] [--owner <name>|--no-owner] [--overdue] [--kind <kind>] [--search <text>] [--archived] [--review dismissed|all]",
+            "                                               actions (default), or with --timeline the timeline; --status, --owner, --no-owner and --overdue (open actions due before today) are for actions, --kind for the timeline.",
+            "                                               Dismissed and archived items are hidden: --review dismissed (or all) and --archived find them. A list holds at most 500 rows and says when it is cut.",
+            "  cockpit manager queue <client>               changes from syncs after onboarding that nobody has looked at yet (the onboarding's own items are not in it)",
+            "                                               an empty queue does not mean everything is reviewed: list <client> --needs-review --status all, and list <client> --timeline --needs-review",
+            "  cockpit manager show <id> [--timeline]       one item in full: detail, sources, suggested changes with their ids, what a sync changed",
+            "  cockpit manager add <client> --title <text> [--owners \"A, B\"] [--due YYYY-MM-DD] [--meeting <timeline-id>] [--detail <text>] [--source-url <url>] [--source-note <text>] [--request-id <uuid>]",
+            "  cockpit manager add <client> --timeline --kind meeting|document|milestone|internal --title <text> [--date YYYY-MM-DD] [--owner <one name>] [--detail <text>] [--source-url <url>] [--source-note <text>] [--request-id <uuid>]",
+            "                                               no --date makes an undated timeline item, which lands in \"Needs a date\"",
+            "                                               --source-url (an http(s) link) and --source-note say where it came from, as the web form's Source does; show prints them",
+            "  cockpit manager edit <id> --version <v> [--timeline] [--title <text>] [--detail <text>] [--due <date>|none] [--owners \"A, B\"|none]",
+            "                                               on a timeline item: [--kind <kind>] [--date <date>|none] [--owner <one name>|none]",
+            "  cockpit manager done <action> --version <v>      tick an action off (an AI action you tick off counts as reviewed by you, and suggested changes it makes moot close);  reopen <action> --version <v>  open it again",
+            "  cockpit manager link <action> --version <v> --meeting <timeline-id>   link an action to the meeting it came from;  --none  unlinks it",
+            "  cockpit manager approve <id> --version <v> [--timeline] [--restore]    the AI's item is right: mark it reviewed;  --restore  brings a DISMISSED item back into the lists, marked reviewed by you (without it, a dismissed item is refused)",
+            "  cockpit manager dismiss <id> --version <v> [--timeline]    the AI's item is wrong: dismiss it (kept, hidden from the lists)",
+            "  cockpit manager proposal <id> <proposal-id> accept|dismiss|add-new --version <v> [--timeline]   decide one suggested change; add-new makes it an item of its own",
+            "  cockpit manager archive <id> --version <v> [--timeline]    delete an item: it moves to the Deleted list (list --archived), kept;  unarchive <id> --version <v>  brings it back",
+            "approve, dismiss and proposal decide the AI's suggestion as YOU: your name is recorded as the reviewer, and the item leaves the review queue unless a suggested change still waits on it.",
+            "<client> is the client's id, or its exact name (any case; `clients` lists them); a name that matches no client, or several, is refused with the names. Ids and versions are printed by list, queue and show. Items you add are reviewed already.",
+            "--version is the item's version exactly as list or show prints it, copied as it is. Every change to an existing item names it: if someone or a sync changed the item",
+            "since, the write is refused with a sentence saying so and nothing is written; run show again for the new version and retry.",
+            "--owners on an action takes, as the web form says, \"One or more people, separated by commas\" (\"Rowan Ash, Juniper Twig\"), and it REPLACES the whole list. Leave it out and the owners stay;",
+            "--owners none clears them. A timeline item has ONE owner: --owner <name> or --owner none. The same pattern clears a date: --due none, --date none.",
+            "Owner names are kept as written, not matched to accounts: use the spelling `list` shows, so one person stays one name. A flag you leave out is never sent, and a flag given twice is refused. A date is YYYY-MM-DD. `cockpit manager`, `manager help` and `manager --help` print this and change nothing.",
+            "add always sends a request id (--request-id <uuid>, else a fresh one) and prints it. If Tower does not answer, nothing was confirmed: rerun the same command with",
+            "--request-id <id> and it retries without making a duplicate.",
+            "--json writes the door's body to stdout, verbatim, and nothing else (an add's body also carries requestId); a refusal is { ok: false, error, detail, refusal? } and exits 1.",
+            "Progress lines on stderr start with [tag]; stdout is the answer (2>/dev/null hides them). Creating a client, syncing, Rebuild brief and merging owners are on the manager page only. Teaching: docs/architecture/tower-manager.md.",
+            "The bli-tower MCP server has the twins: manager_clients, manager_client, manager_run, manager_list, manager_queue, manager_show, manager_add, manager_edit,",
+            "manager_done, manager_reopen, manager_link, manager_approve, manager_dismiss, manager_proposal, manager_archive, manager_unarchive.",
+        ],
+    ],
     [
         "image",
         [

package/dist/commands/local-help-commands-tower.js

@@ -391,7 +391,7 @@ export const TOWER_COMMAND_HELP = [
             "recording <recording-id> [--json] — one recording, text and all, shown or alternate.",
             "accounts --show-webhook <account-id> — that account's webhook URL, where to paste it at the vendor, and whether a signing secret is stored (BLI-4394). Until one is, every request to that URL is refused, which is the right way to be off.",
             "webhook <account-id> --secret-stdin — store the VENDOR's webhook signing secret. THE SECRET IS READ FROM STDIN, never a flag: printf \"%s\" \"<signing secret>\" | cockpit notes webhook <account-id> --secret-stdin",
-            "connect --provider wisprflow [--name <n>] — Wispr Flow has no API key: this prints an address and a code, you approve in your browser (Google, Apple, Microsoft or company single sign-on), and Tower reads your Notetaker meetings from then on. Needs Notetaker and MCP access on your Wispr account (BLI-12926).",
+            "connect --provider wisprflow — Wispr Flow has no API key: this asks Tower to start the sign-in (the same door the Settings button, the MCP tool notes_connect_wisprflow and JARVIS use), prints and opens Wispr's approval page (Google, Apple, Microsoft or company single sign-on), and waits up to 10 minutes for Tower to report it connected, then Tower reads your Notetaker meetings from then on. Needs Notetaker and MCP access on your Wispr account. Exits 1 with a reason if nothing connects (BLI-12926, BLI-17973).",
             "connect --provider fellow|circleback [--workspace <subdomain>] --key-stdin [--name <n>] — connect one. Fellow needs --workspace, its API is per workspace. THE API KEY IS READ FROM STDIN, never a flag: printf \"%s\" \"<key>\" | cockpit notes connect --provider fellow --workspace <subdomain> --key-stdin",
             "detach <account-id> — take it off. The stored key goes with it; the meetings it already filed stay.",
             "sync <account-id> — read that notetaker now. Prints the run's own counts and reason label, and exits 1 when the pass failed.",

package/dist/commands/local-help-commands.js

@@ -204,6 +204,9 @@ export function localSubcommandHelp(command) {
                 "      Every paired collector device: name, id, trust state, owner, and why",
                 "      (revoked reason, or when it was approved, or that it's still waiting).",
                 "      Admin only.",
+                "  cockpit team device scope <id|name> notetaker_bot|none [--json]",
+                "      Super admin only. Gives the meeting bot's device the scope Tower's claim door requires,",
+                "      or takes it away. Without it the bot is refused every meeting (bot_scope_required).",
                 "  cockpit team device revoke <id|name> --reason <label> [--note \"<text>\"] [--yes]",
                 "      Admin only. Names the device, asks first unless --yes, then revokes it —",
                 "      this cannot be undone. --reason must be one of: stale_test_pairing,",

package/dist/commands/local-help.js

@@ -87,6 +87,7 @@ export const rootCommandNames = new Set([
     "logs",
     "brain",
     "approvals",
+    "manager",
     "image",
     ...SURFACE_ALIASES.keys(),
 ]);
@@ -148,6 +149,7 @@ export function localCommandHelp(command) {
         "  cockpit logs <collector|dashboard|railway|railway:<service>|-> [--since 15m|1h|2d|<iso>] [--raw <template-id> [--limit <n>]] [--all-levels] [--table <file>] [--json]",
         "  cockpit brain status [--project <id>] [--show open|running|needs_human|fixed|not_actionable|cleared] [--dashboard-url <url>] [--json]",
         "  cockpit approvals [list|show <id>|create|approve <id> [--edit]|edit <id> [--approve]|reject <id>|rules [--active true|false]|rules create <card-id> [--any-audience] [--label <text>]|rules revoke <rule-id> [--reason <text>]] [--status <s>] [--limit <n>] [--before <cursor>] [--dashboard-url <url>] [--json]",
+        "  cockpit manager <clients|client <client>|run <run-id>|list <client>|queue <client>|show <id>|add <client> --title <t>|edit <id> --version <v>|done|reopen|link|approve|dismiss|proposal|archive|unarchive> [--timeline] [--dashboard-url <url>] [--json]",
         "  cockpit image <describe <file> [--session <id>]|show <sha256-or-prefix>> [--dashboard-url <url>] [--json]",
         "  cockpit setup [--since <7d|30d|date>] [--details] [--person <name|email>] [--compare <name,name>] [--json]",
         "  cockpit usage sessions [--person <exact-name>] [--task <BLI-NNNN> | --subject <name>] [--repo <label>] [--tool claude|codex] [--since <window>] [--until <iso>] [--cursor <cursor>] [--limit <n>] [--json]",

package/dist/commands/local.js

@@ -55,6 +55,7 @@ import { runUsage } from "./usage.js";
 import { runSpeed } from "./speed.js";
 import { runLogs } from "./logs.js";
 import { runApprovals } from "./approvals.js";
+import { runManager } from "./manager.js";
 import { runImage } from "./image.js";
 import { runBrain } from "./brain.js";
 import { parseLocalArgs } from "./local-args.js";
@@ -228,21 +229,15 @@ export async function runLocalCockpitCli(argv, io = { ...defaultIo(), runDoctorA
                 return await runSourcesCheck(command, io);
             case "glossary":
                 return await runGlossary(command, io);
-            case "docs":
-                return await runDocs(command, io);
-            case "msg":
-                return await runMsg(command, io);
-            case "issue":
-                return await runIssue(command, io);
+            case "docs": return await runDocs(command, io);
+            case "msg": return await runMsg(command, io);
+            case "issue": return await runIssue(command, io);
             case "cal": return runCal(command, io);
-            case "mail":
-                return await runMail(command, io);
+            case "mail": return await runMail(command, io);
             case "project": return await runProject(command, io);
             case "search": return await runSearch(command, io);
-            case "github":
-                return await runGithub(command, io);
-            case "release":
-                return await runRelease(command, io);
+            case "github": return await runGithub(command, io);
+            case "release": return await runRelease(command, io);
             case "careers": return await runCareers(command, io);
             case "rename": return await runRename(command, io);
             case "setup": return await runSetup(command, io);
@@ -251,6 +246,7 @@ export async function runLocalCockpitCli(argv, io = { ...defaultIo(), runDoctorA
             case "logs": return await runLogs(command, io);
             case "brain": return await runBrain(command, io);
             case "approvals": return await runApprovals(command, io);
+            case "manager": return await runManager(command, io);
             case "image": return await runImage(command, io);
         }
     }