@bli-cockpit/cli 0.2.224 → 0.2.237

package/dist/commands/people.js

@@ -0,0 +1,29 @@
+import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor } from "./agent-door.js";
+import { writeLine } from "./cli-io.js";
+const TAG = "[people cli]";
+const READ_DEADLINE_MS = 30_000;
+export async function runPeople(command, io) {
+    let door;
+    try {
+        door = await openAgentDoor("people", command, io);
+    }
+    catch (error) {
+        const detail = error instanceof Error ? error.message : "this machine is not paired with Tower";
+        writeLine(io.stderr, `${TAG} refused ${JSON.stringify({ reason: "not_paired" })}`);
+        if (command.json)
+            writeLine(io.stdout, JSON.stringify({ ok: false, error: "not_paired", detail }));
+        else
+            writeLine(io.stderr, detail);
+        return 1;
+    }
+    const path = command.person ? `/api/people?${new URLSearchParams({ person: command.person }).toString()}` : "/api/people";
+    const answer = await askAgentDoor(door, { path, method: "GET", label: "people show", timeoutMs: READ_DEADLINE_MS });
+    if (!answer.ok)
+        return failAgentDoor(door, TAG, answer.reason, answer.detail);
+    const body = answer.body;
+    writeLine(io.stderr, `${TAG} answered ${JSON.stringify({ view: command.person ? "person" : "list", people: body.people?.length ?? 1 })}`);
+    if (command.json)
+        return emitAgentDoor(door, body);
+    writeLine(io.stdout, body.text);
+    return 0;
+}

package/dist/commands/public-root.js

@@ -21,7 +21,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.224");
+    writeLine(io?.stdout ?? process.stdout, "0.2.237");
     return 0;
   }
 

package/dist/commands/spend.js

@@ -0,0 +1,79 @@
+/**
+ * `cockpit spend memory [--days 1|7|30] [--json]`: what each memory operation cost, held against the real OpenAI
+ * bill (BLI-19254).
+ *
+ * One read of `GET /api/ops/memory-spend`, the same door the `spend_memory` MCP tool and JARVIS call. The
+ * terminal prints the operations ranked by list dollars, top first, with real dollars, share of the ledger, the
+ * trend against the previous window, and then how much of OpenAI's own bill the ledger explains and what it does
+ * not (`untagged`, never hidden). `--json` prints the door's body untouched.
+ *
+ * A super_admin reads it; anyone else gets the door's own refusal reason, printed verbatim by `failAgentDoor`.
+ */
+import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor } from "./agent-door.js";
+import { writeLine } from "./cli-io.js";
+import { optionalNonEmpty, optionalUrl, parseNamedArgs } from "./local-arg-values.js";
+const USAGE = "Usage: cockpit spend memory [--days 1|7|30] [--dashboard-url <url>] [--json]";
+export function parseSpendArgs(args) {
+    const values = parseNamedArgs(args, { allowedFlags: ["--days", "--json", "--home", "--dashboard-url"], valueFlags: ["--days", "--home", "--dashboard-url"] });
+    const [action, ...rest] = values.positionals;
+    if (action !== "memory" || rest.length > 0)
+        throw new Error(USAGE);
+    const raw = values.flags.get("--days");
+    const days = raw === undefined ? 7 : Number(raw);
+    if (days !== 1 && days !== 7 && days !== 30)
+        throw new Error(`--days must be 1, 7 or 30. ${USAGE}`);
+    return { kind: "spend", action: "memory", days, json: values.booleans.has("--json"), homeDir: optionalNonEmpty(values.flags.get("--home")), dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")) };
+}
+const usd = (value) => (value === null || value === undefined ? "n/a" : value.toFixed(value >= 100 ? 0 : 2));
+const money = (value) => (value === null || value === undefined ? "n/a" : `$${usd(value)}`);
+const trend = (value) => (value === null ? "new" : `${value >= 0 ? "+" : ""}${value}%`);
+const millions = (tokens) => `${(tokens / 1e6).toFixed(1)}M`;
+export function renderMemorySpend(body) {
+    const lines = [];
+    const { window } = body;
+    lines.push(`Tower memory spend, last ${window.days} day${window.days === 1 ? "" : "s"} (${window.from} to ${window.to} UTC), as of ${body.asOf.slice(11, 16)}Z. Today is partial; trend is against the ${window.days} day${window.days === 1 ? "" : "s"} before (${window.previousFrom} to ${window.previousTo}).`);
+    if (body.operations.length === 0) {
+        lines.push("The ledger has no spend in this window yet. Live tallying starts at deploy; `backfill` rebuilds history from the older receipt tables.");
+    }
+    else {
+        const header = ["operation", "list $", "real $", "share", "vs prev", "calls", "biggest callers"];
+        const rows = body.operations.map((op) => [
+            op.operation, usd(op.listUsd), usd(op.realUsd), `${Math.round(op.share * 100)}%`, trend(op.trendPct), String(op.calls),
+            op.topCallers.map((caller) => `${caller.caller} $${usd(caller.listUsd)}`).join(", "),
+        ]);
+        rows.push(["total", usd(body.totals.listUsd), usd(body.totals.realUsd), "", trend(body.totals.trendPct), String(body.totals.calls), ""]);
+        const widths = header.map((cell, column) => Math.max(cell.length, ...rows.map((row) => row[column].length)));
+        const render = (cells) => cells.map((cell, column) => (column === 0 || column === 6 ? cell.padEnd(widths[column]) : cell.padStart(widths[column]))).join("  ").trimEnd();
+        lines.push("", render(header), ...rows.map(render));
+    }
+    const bill = body.reconcile;
+    lines.push("");
+    if (!bill.hasBill) {
+        lines.push(`OpenAI bill: not reconciled. ${bill.reason ?? "no reason recorded"}.`);
+    }
+    else {
+        lines.push(`OpenAI bill for Tower's keys over ${bill.billDays} complete day${bill.billDays === 1 ? "" : "s"} (read ${bill.billAsOf?.slice(0, 16).replace("T", " ") ?? "?"}Z): list ${money(bill.towerBillListUsd)}, real ${money(bill.towerBillRealUsd)}.`);
+        lines.push(`The ledger explains ${bill.coveragePct === null ? "n/a" : `${bill.coveragePct}%`} of it (list ${money(bill.ledgerOpenAiListUsd)}). Untagged: list ${money(bill.untaggedListUsd)}, real ${money(bill.untaggedRealUsd)}, which no tagged call accounts for.`);
+        if (bill.tokenGaps.length > 0) {
+            lines.push("Untagged input tokens by model and tier (bill minus ledger): " + bill.tokenGaps.slice(0, 5).map((gap) => `${gap.model} ${gap.tier} ${millions(gap.untaggedInputTokens)}`).join("; ") + ".");
+        }
+        if ((bill.otherAppsBillListUsd ?? 0) > 0)
+            lines.push(`Other apps on the same OpenAI org (not Tower's, not counted above): list ${money(bill.otherAppsBillListUsd)}.`);
+    }
+    if (body.reads.failures.length > 0)
+        lines.push("", `Could not read: ${body.reads.failures.join(", ")}. The rest is shown as read.`);
+    for (const note of body.notes)
+        lines.push(note);
+    return lines;
+}
+export async function runSpend(command, io) {
+    const door = await openAgentDoor("spend", command, io);
+    const answer = await askAgentDoor(door, { path: `/api/ops/memory-spend?days=${command.days}`, method: "GET", label: "spend memory", timeoutMs: 60_000 });
+    if (!answer.ok)
+        return failAgentDoor(door, "[spend cli]", answer.reason, answer.detail);
+    if (door.json)
+        return emitAgentDoor(door, answer.body);
+    for (const line of renderMemorySpend(answer.body))
+        writeLine(door.io.stdout, line);
+    return 0;
+}

package/dist/commands/team.js

@@ -25,6 +25,8 @@ export async function runTeam(command, io) {
     const tower = await openTower("team", command, io);
     if (command.action.startsWith("github-login-"))
         return githubLogin(command, tower, io);
+    if (command.action.startsWith("timezone-"))
+        return timezone(command, tower, io);
     if (command.action === "members")
         return showMembers(command, tower, io);
     if (command.action === "invite")
@@ -272,6 +274,39 @@ async function githubLogin(command, tower, io) {
         `GitHub logins: ${[body.primary_login, ...(Array.isArray(body.extra_logins) ? body.extra_logins : [])].filter(Boolean).join(", ") || "none"}. History is preserved.`);
     return 0;
 }
+/**
+ * `cockpit team timezone list|set` (BLI-19277). The server owns every rule: who
+ * may ask (super admin), how a person is found (the one identity resolver, exact
+ * after case folding) and what counts as an IANA zone. This only relays and words
+ * the answer, so a stale CLI can be wrong about wording and never about a zone.
+ */
+async function timezone(command, tower, io) {
+    const setting = command.action === "timezone-set";
+    const result = await callTower(tower, { path: "/api/team/timezones", method: setting ? "PUT" : "GET", label: "team timezone",
+        ...(setting ? { body: { person: command.personRef, timezone: command.zone } } : {}) });
+    writeLine(io.stderr, `[team cli] timezone ${JSON.stringify({ action: setting ? "set" : "list", reason: result.ok ? "answered" : result.reason })}`);
+    if (!result.ok)
+        return writeCommandFailure(io, command.json, result);
+    const body = asRecord(result.body);
+    if (command.json) {
+        writeLine(io.stdout, JSON.stringify(body));
+        return 0;
+    }
+    if (setting) {
+        const name = String(body.display_name ?? command.personRef);
+        const before = String(body.before ?? "unknown");
+        const after = String(body.after ?? "unknown");
+        writeLine(io.stdout, body.changed === false ? `${name} already has ${after}. Nothing changed.` : `${name}: ${before} -> ${after}.`);
+        return 0;
+    }
+    const people = (Array.isArray(body.people) ? body.people : []).map(asRecord);
+    const width = Math.max(6, ...people.map(person => String(person.display_name ?? "").length));
+    for (const person of people) {
+        writeLine(io.stdout, `${String(person.display_name ?? "").padEnd(width)}  ${String(person.timezone_label ?? "unknown").padEnd(24)}${person.active === false ? " (inactive)" : ""}`);
+    }
+    writeLine(io.stdout, `${people.length} people, ${String(body.unknown_count ?? 0)} with an unknown timezone.`);
+    return 0;
+}
 async function changeGrant(command, tower, io) {
     const result = await callTower(tower, { path: "/api/team/grants", method: "POST", label: "team section grant",
         body: { person_id: command.targetUserId, section: command.section, level: command.level ?? "see", action: command.action } });

package/dist/commands/usage.js

@@ -15,6 +15,8 @@ export async function runUsage(command, io) {
         query.set("groupBy", "task_type");
     if (command.byRepo)
         query.set("groupBy", "repo");
+    if (command.byClient)
+        query.set("groupBy", "client");
     if (command.until)
         query.set("until", command.until);
     if (command.includeAutomated)
@@ -43,6 +45,13 @@ export async function runUsage(command, io) {
     if (!answer.ok)
         return failAgentDoor(door, "[usage]", answer.reason, answer.detail);
     const body = answer.body;
+    // Ticket 19258: the client app split reads everyone and prints the door's own words (medians always with their N).
+    if (command.byClient) {
+        if (door.json)
+            return emitAgentDoor(door, answer.body);
+        writeLine(io.stdout, String(answer.body.text ?? ""));
+        return 0;
+    }
     if (command.person) {
         const email = command.person === "me" ? (await loadPairedSession("usage", command.homeDir)).email : command.person;
         if (!email)

package/dist/commands/who.js

@@ -0,0 +1,36 @@
+import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor } from "./agent-door.js";
+import { writeLine } from "./cli-io.js";
+const TAG = "[who cli]";
+const READ_DEADLINE_MS = 30_000;
+export async function runWho(command, io) {
+    let door;
+    try {
+        door = await openAgentDoor("who", command, io);
+    }
+    catch (error) {
+        const detail = error instanceof Error ? error.message : "this machine is not paired with Tower";
+        writeLine(io.stderr, `${TAG} refused ${JSON.stringify({ reason: "not_paired" })}`);
+        if (command.json)
+            writeLine(io.stdout, JSON.stringify({ ok: false, error: "not_paired", detail }));
+        else
+            writeLine(io.stderr, detail);
+        return 1;
+    }
+    const query = new URLSearchParams();
+    if (command.topic)
+        query.set("topic", command.topic);
+    if (command.layer)
+        query.set("layer", command.layer);
+    if (command.limit)
+        query.set("limit", String(command.limit));
+    const asked = query.toString();
+    const answer = await askAgentDoor(door, { path: asked ? `/api/who?${asked}` : "/api/who", method: "GET", label: "who", timeoutMs: READ_DEADLINE_MS });
+    if (!answer.ok)
+        return failAgentDoor(door, TAG, answer.reason, answer.detail);
+    const body = answer.body;
+    writeLine(io.stderr, `${TAG} answered ${JSON.stringify({ resolved_as: body.resolved_as, areas: body.areas.length, as_of: body.as_of })}`);
+    if (command.json)
+        return emitAgentDoor(door, body);
+    writeLine(io.stdout, body.text);
+    return 0;
+}

package/dist/evidence-upload-direct.js

@@ -0,0 +1,44 @@
+import { encodeEvidenceBytes } from "@bli-cockpit/telemetry-core/evidence-storage-encoding";
+import { noteSyncProgress } from "./sync-lock.js";
+/** The signed capability is the only credential sent to Storage. Never log it,
+ * its query string, provider bodies, or thrown errors that might contain it. */
+export async function putSignedChunk(options, signedUrl, bytes, uploadId, index) {
+    // Identical manifest + gzip framing to the server chunk route staging write.
+    const encoded = encodeEvidenceBytes(bytes);
+    console.error("[evidence-upload] chunk encoded for storage", JSON.stringify({
+        upload_id: uploadId, chunk_index: index, chunk_encoding: "gzip",
+        bytes_before: bytes.length, bytes_after: encoded.length,
+    }));
+    const attempts = options.maxAttemptsPerRequest ?? 3;
+    for (let attempt = 1; attempt <= attempts; attempt++) {
+        let status = 0;
+        try {
+            const response = await options.fetchImpl(signedUrl, {
+                method: "PUT", headers: { "Content-Type": "application/octet-stream", "x-upsert": "false" },
+                body: new Uint8Array(encoded), signal: AbortSignal.timeout(60_000), redirect: "error",
+            });
+            status = response.status;
+            await response.body?.cancel();
+            if (response.ok) {
+                noteSyncProgress();
+                log("signed_chunk_uploaded", uploadId, index, attempt, status);
+                return true;
+            }
+            log("signed_upload_refused", uploadId, index, attempt, status);
+            if (status < 500 && status !== 429)
+                return false;
+        }
+        catch {
+            log("signed_upload_network_failure", uploadId, index, attempt, status);
+        }
+        if (attempt < attempts)
+            await (options.sleep ?? sleep)(250 * attempt);
+    }
+    return false;
+}
+function log(reason, uploadId, index, attempt, status) {
+    console.error("[evidence-upload] direct chunk", JSON.stringify({
+        reason, upload_id: uploadId, chunk_index: index, attempt, http_status: status,
+    }));
+}
+function sleep(ms) { return new Promise(resolve => setTimeout(resolve, ms)); }

package/dist/evidence-upload-object.js

@@ -1,3 +1,4 @@
+import { putSignedChunk } from "./evidence-upload-direct.js";
 import { gzipSync } from "node:zlib";
 import { COMMIT_CRASHED_PLATFORM, RawEvidenceUploadCommitResponseSchema, isPermanentUploadFailure, } from "@bli-cockpit/telemetry-core";
 import { beginOneObject } from "./evidence-upload-terminal.js";
@@ -17,10 +18,11 @@ export async function uploadOneObject(options, entry, disposition, chunkSizeByte
     if (disposition.disposition === "conflict" || !disposition.upload_id) {
         return failedOutcome(entry.file, disposition.reason ?? "upload_conflict");
     }
-    const chunked = await uploadObjectChunks(options, entry, disposition, chunkSizeBytes, objectKey);
+    const directChunks = [];
+    const chunked = await uploadObjectChunks(options, entry, disposition, chunkSizeBytes, objectKey, directChunks);
     if (!chunked.ok)
         return chunked.outcome;
-    const committed = await commitUploadedObject(options, entry, disposition, objectKey, chunked.uploadedChunks);
+    const committed = await commitUploadedObject(options, entry, disposition, objectKey, chunked.uploadedChunks, directChunks);
     if (committed.reason !== "commit_failed_http_409_staging_missing_between_passes")
         return committed;
     if (restageAttempted)
@@ -37,7 +39,7 @@ export async function uploadOneObject(options, entry, disposition, chunkSizeByte
     }
     return retried;
 }
-async function uploadObjectChunks(options, entry, disposition, chunkSizeBytes, objectKey) {
+async function uploadObjectChunks(options, entry, disposition, chunkSizeBytes, objectKey, directChunks) {
     const received = new Set(disposition.received_chunk_indexes);
     let uploadedChunks = 0;
     if (disposition.disposition === "already_committed" || disposition.commit_ready) {
@@ -47,6 +49,17 @@ async function uploadObjectChunks(options, entry, disposition, chunkSizeBytes, o
         if (received.has(index))
             continue;
         const chunk = entry.bytes.subarray(index * chunkSizeBytes, Math.min((index + 1) * chunkSizeBytes, entry.bytes.byteLength));
+        const offer = disposition.signed_uploads?.find(upload => upload.chunk_index === index);
+        if (offer && await putSignedChunk(options, offer.signed_url, chunk, disposition.upload_id, index)) {
+            directChunks.push({ chunk_index: index, byte_size: chunk.length,
+                chunk_hash_sha256: sha256(chunk) });
+            uploadedChunks += 1;
+            continue;
+        }
+        console.error("[evidence-upload] using chunk route", JSON.stringify({
+            reason: offer ? "signed_upload_refused_fallback" : "signed_upload_not_offered",
+            upload_id: disposition.upload_id, chunk_index: index,
+        }));
         const encodedChunk = gzipSync(chunk);
         console.error("[evidence-upload] chunk encoded", JSON.stringify({
             upload_id: disposition.upload_id, chunk_index: index, chunk_encoding: "gzip",
@@ -97,13 +110,14 @@ async function uploadObjectChunks(options, entry, disposition, chunkSizeBytes, o
     }
     return { ok: true, uploadedChunks };
 }
-async function commitUploadedObject(options, entry, disposition, objectKey, uploadedChunks) {
+async function commitUploadedObject(options, entry, disposition, objectKey, uploadedChunks, directChunks) {
     const commit = await requestJson(options, "/api/ambient/evidence/upload/commit", {
         schema_version: "ambient-raw-evidence-upload-commit.v1",
         generated_at: options.generatedAt,
         provenance: options.provenance,
         upload_id: disposition.upload_id,
         object_key: objectKey,
+        ...(disposition.signed_uploads ? { direct_chunks: directChunks } : {}),
     });
     if (!commit.ok) {
         // The server can tell us this object will be refused again. Take its reason

package/dist/evidence-upload-plan.js

@@ -225,6 +225,7 @@ export function readBeginDispositions(body) {
             upload_id: entry.upload_id ?? null,
             received_chunk_indexes: entry.received_chunk_indexes,
             commit_ready: entry.commit_ready === true,
+            signed_uploads: entry.signed_uploads,
             reason: entry.reason ?? null,
             raw_evidence_pointer_id: entry.raw_evidence_pointer_id,
         });

package/dist/evidence-upload-transport.js

@@ -22,6 +22,8 @@ export async function requestJson(options, routePath, body) {
                 headers: {
                     "Authorization": `Bearer ${options.deviceToken}`,
                     "Content-Type": "application/json",
+                    ...(routePath.endsWith("/evidence/upload/begin")
+                        ? { "x-tower-evidence-direct": "staged-gzip-v1" } : {}),
                 },
                 body: JSON.stringify(body),
             });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/cli",
-  "version": "0.2.224",
+  "version": "0.2.237",
   "private": false,
   "type": "module",
   "bin": {
@@ -27,9 +27,9 @@
     "test": "node dist/cli.js --help && node ../../scripts/assert-public-cli-routing.mjs && node ../../scripts/assert-public-cli-verb-help.mjs && node ../../scripts/assert-public-cli-surface-doors.mjs && node ../../scripts/assert-public-cli-runtime-files.mjs && node ../../scripts/assert-public-cli-exit-contract.mjs && node ../../scripts/assert-public-cli-no-fleet-posts.mjs && node ../../scripts/assert-public-cli-doctor-json.mjs && node ../../scripts/assert-public-package-pack.mjs --workspace=@bli-cockpit/cli"
   },
   "dependencies": {
-    "@bli-cockpit/memory-mcp": "0.1.67",
-    "@bli-cockpit/mcp": "0.1.130",
-    "@bli-cockpit/telemetry-core": "0.1.75"
+    "@bli-cockpit/memory-mcp": "0.1.69",
+    "@bli-cockpit/mcp": "0.1.142",
+    "@bli-cockpit/telemetry-core": "0.1.76"
   },
   "repository": {
     "type": "git",