@bli-cockpit/cli 0.2.47 → 0.2.49

package/dist/commands/cli-io.js

@@ -10,6 +10,19 @@ export function writeRaw(stream, text) {
     if (!text.endsWith("\n"))
         stream.write("\n");
 }
+/**
+ * Part of a line, and nothing else (BLI-3517).
+ *
+ * `writeRaw` finishes the line for you, which is right for a whole block of
+ * captured output and wrong for a sentence still being written: a streamed
+ * answer arrives as a dozen fragments and each one would land on its own row.
+ * This adds nothing at all; the caller ends the line when the thought ends.
+ */
+export function writeFragment(stream, text) {
+    if (!text)
+        return;
+    stream.write(text);
+}
 export function errorMessage(error) {
     return error instanceof Error ? error.message : String(error);
 }

package/dist/commands/heartbeat.js

@@ -25,6 +25,7 @@ import os from "node:os";
 import path from "node:path";
 import { COLLECTOR_HEARTBEAT_SCHEMA_VERSION, } from "@bli-cockpit/telemetry-core";
 import { describeError } from "../health-detail.js";
+import { shouldSuppressFleetReceipts, } from "../dev-build.js";
 import { getCollectorRuntimePaths, readLocalCollectorSessionFile, LOCAL_COLLECTOR_VERSION, } from "../local-state.js";
 const HEARTBEAT_TIMEOUT_MS = 5_000;
 /**
@@ -112,6 +113,23 @@ export function buildCollectorHeartbeat(options) {
  * `sync.err.log` alone when the dashboard says a device is quiet.
  */
 export async function sendCollectorHeartbeatBestEffort(options) {
+    // BLI-3554. A checkout's heartbeat would move `last_seen_at` on a real fleet
+    // device row, so an agent's worktree could keep a genuinely dead machine
+    // looking alive to the BLI-3550 reader.
+    const suppression = shouldSuppressFleetReceipts({
+        dashboardUrl: options.dashboardUrl,
+        ...(options.devBuildProbe ? { probe: options.devBuildProbe } : {}),
+    });
+    if (suppression.suppressed) {
+        console.error("[heartbeat] dev build; this tick is not checking in with the fleet", JSON.stringify({
+            reason: "receipt_suppressed:dev_build",
+            detected_by: suppression.reason,
+            root_count: options.roots.length,
+            sync_status: options.facts.status,
+            fix: "set COCKPIT_DEV=0 to heartbeat from a checkout deliberately",
+        }));
+        return false;
+    }
     const paths = getCollectorRuntimePaths(options.homeDir);
     const session = await readLocalCollectorSessionFile(paths).catch(() => null);
     if (!session ||

package/dist/commands/install-receipts.js

@@ -14,6 +14,7 @@ import { errorMessage, writeLine } from "./cli-io.js";
 import { describeError, maskLocalIdentifiers, redactedHealthDetail, } from "../health-detail.js";
 import { getCollectorRuntimePaths, readLocalCollectorSessionFile, LOCAL_COLLECTOR_VERSION, } from "../local-state.js";
 import { redactSecretLikeContent } from "@bli-cockpit/telemetry-core";
+import { shouldSuppressFleetReceipts, } from "../dev-build.js";
 import { enqueueInstallEventEntry, readPendingInstallEventEntries, recordInstallEventAttemptFailure, removeInstallEventEntry, } from "../spool/install-event-outbox.js";
 export function addInstallEvent(events, step, status, errorCode, 
 // BLI-2542: the bucket alone cannot be acted on. Callers that hold the reason
@@ -47,6 +48,25 @@ export function sanitizeInstallErrorCode(value) {
 export async function reportInstallEventsBestEffort(options) {
     if (options.events.length === 0)
         return null;
+    // BLI-3554. Withheld BEFORE the outbox, not before the POST: an entry queued
+    // by a checkout survives in `~/.cockpit` and the next real scheduled tick
+    // would deliver it under the workspace version, which is exactly how 47
+    // sandbox receipts reached the production fleet table.
+    const suppression = shouldSuppressFleetReceipts({
+        dashboardUrl: options.dashboardUrl,
+        ...(options.devBuildProbe ? { probe: options.devBuildProbe } : {}),
+    });
+    if (suppression.suppressed) {
+        console.error("[install-receipts] dev build; install receipts withheld from the fleet", JSON.stringify({
+            reason: "receipt_suppressed:dev_build",
+            detected_by: suppression.reason,
+            command: options.command,
+            event_count: options.events.length,
+            cli_version: LOCAL_COLLECTOR_VERSION,
+            fix: "set COCKPIT_DEV=0 to post receipts from a checkout deliberately",
+        }));
+        return null;
+    }
     const paths = getCollectorRuntimePaths(options.homeDir);
     try {
         await enqueueInstallEventEntry(paths, {
@@ -98,6 +118,7 @@ export async function reportInstallEventsBestEffort(options) {
     }
     const pending = (await readPendingInstallEventEntries(paths)).slice(0, 20);
     const failures = [];
+    let delivered = 0;
     let observedMinCliVersion = null;
     for (let offset = 0; offset < pending.length; offset += 5) {
         await Promise.all(pending.slice(offset, offset + 5).map(async (entry) => {
@@ -138,6 +159,7 @@ export async function reportInstallEventsBestEffort(options) {
                     observedMinCliVersion = receipt.min_cli_version.trim();
                 }
                 await removeInstallEventEntry(paths, entry.outbox_id);
+                delivered += 1;
             }
             catch (error) {
                 const failureReason = classifyInstallTelemetryError(error);
@@ -170,6 +192,18 @@ export async function reportInstallEventsBestEffort(options) {
             }
         }));
     }
+    if (delivered > 0) {
+        // The success branch says so too (BLI-3554 / the logging contract): a log
+        // that only fires on failure cannot answer "did any receipt land at all
+        // today?", which is the question a suppressed dev build now provokes.
+        console.error("[install-receipts] install events delivered", JSON.stringify({
+            reason: "install_events_delivered",
+            command: options.command,
+            delivered_entries: delivered,
+            kept_for_retry: pending.length - delivered,
+            cli_version: LOCAL_COLLECTOR_VERSION,
+        }));
+    }
     if (options.json && failures.length > 0) {
         writeLine(options.io.stderr, `Install event telemetry queued for retry: ${[...new Set(failures)].join(",")}`);
     }

package/dist/commands/jarvis.js

@@ -5,10 +5,67 @@
  * existing paired device session, and every turn is executed by the dashboard
  * through the same JARVIS runtime used by web chat and Slack.
  */
-import { colorEnabled, dim, isInteractiveStdin, readLine, readPipedText, writeLine, } from "./cli-io.js";
+import { colorEnabled, dim, isInteractiveStdin, readLine, readPipedText, writeFragment, writeLine, } from "./cli-io.js";
 import { attachedFileRefusalSentence, readAttachedImage, } from "./jarvis-attachment.js";
 import { loadPairedSession, towerFailureDetail, towerJsonRequest, towerRequest, } from "../tower-client.js";
 import { readTowerTurn, streamFailureDetail, } from "../tower-stream.js";
+/**
+ * A citation line's link, as the dashboard mints it (BLI-3570):
+ * `Source: BLI-1234 — Judge outage <https://linear.app/…>`. The words are the
+ * receipt; the link is not part of the sentence, so the terminal prints it
+ * underneath, dim, rather than dragging a 118-character URL through the answer.
+ */
+const CITATION_LINK = /^(\s*(?:Source|Receipt)s?:.*?)\s*<(https?:\/\/[^>\s]+)>\s*$/i;
+/**
+ * The answer, one line at a time, so a receipt's link gets its own dim line.
+ * Every other line is printed exactly as it arrived — this never rewrites the
+ * words, only where the link sits.
+ */
+function writeReply(io, prefix, reply) {
+    const styled = colorEnabled(io);
+    const lines = reply.split("\n");
+    lines.forEach((line, index) => {
+        const head = index === 0 ? prefix : "";
+        const citation = line.match(CITATION_LINK);
+        if (!citation) {
+            writeLine(io.stdout, `${head}${line}`);
+            return;
+        }
+        writeLine(io.stdout, `${head}${citation[1]}`);
+        writeLine(io.stdout, dim(`  ${citation[2]}`, styled));
+    });
+}
+/**
+ * The same link rule, applied to text that CONTINUES a line already on screen
+ * (BLI-3517 + BLI-3570).
+ *
+ * When the answer streamed, the citation block arrives after the last token,
+ * so `settle` has a tail to print rather than a whole reply. The first fragment
+ * is deliberately never tested against `CITATION_LINK`: it is the rest of a
+ * sentence the person is already reading, not a line of its own, and a regex
+ * anchored at `^` would be matching against a boundary that is not there.
+ * Every COMPLETE line after it gets the dim link treatment as usual.
+ *
+ * A citation that was already streamed inline cannot be split — a terminal
+ * cannot unprint — and that is the honest limit of this, not a bug to chase.
+ */
+function writeReplyContinuation(io, tail) {
+    const styled = colorEnabled(io);
+    const [first = "", ...rest] = tail.split("\n");
+    writeFragment(io.stdout, first);
+    for (const line of rest) {
+        writeLine(io.stdout, "");
+        const citation = line.match(CITATION_LINK);
+        if (!citation) {
+            writeFragment(io.stdout, line);
+            continue;
+        }
+        writeFragment(io.stdout, citation[1]);
+        writeLine(io.stdout, "");
+        writeFragment(io.stdout, dim(`  ${citation[2]}`, styled));
+    }
+    writeLine(io.stdout, "");
+}
 /**
  * The dashboard route caps a turn at 120s (`maxDuration = 120`). The client
  * waits slightly longer so the server's own named failure wins the race
@@ -186,17 +243,22 @@ async function sendOneTurn(context, prompt, io) {
     }
     // Live trace lines go to a person as they land, never to a `--json`
     // consumer: that contract is exactly one object on stdout, so the events are
-    // buffered and folded into the final payload instead.
+    // buffered and folded into the final payload instead. The same rule governs
+    // the answer's own words (BLI-3517): `--json` stays exactly one object.
     let liveTraceLines = 0;
+    const live = createLiveAnswer(context.command, io);
     const turn = await readTowerTurn(requested.response, {
         startedAt,
         log,
         onActivity: (event) => {
             if (context.command.json)
                 return;
+            // A trace row must never land in the middle of a half-written sentence.
+            live.interrupt();
             if (writeActivityLine(io, event))
                 liveTraceLines += 1;
         },
+        onToken: (event) => live.token(event),
         onNote: (reason, detail) => {
             log(`[jarvis cli] stream note ${JSON.stringify({
                 reason,
@@ -205,12 +267,14 @@ async function sendOneTurn(context, prompt, io) {
         },
     });
     if (!turn.ok) {
+        live.abandon();
         writeFailure(context.command, io, turn.reason, streamFailureDetail(turn.reason, turn.detail));
         return 1;
     }
     const body = turn.final;
     const httpStatus = typeof turn.final.httpStatus === "number" ? turn.final.httpStatus : requested.response.status;
     if (httpStatus >= 400 || !body.ok || !body.reply) {
+        live.abandon();
         const reason = body.error ?? body.reply ?? `http_${httpStatus}`;
         writeFailure(context.command, io, "turn_failed", reason);
         return 1;
@@ -231,7 +295,12 @@ async function sendOneTurn(context, prompt, io) {
     }
     else {
         const subject = body.subject?.displayName ? ` (${body.subject.displayName})` : "";
-        writeLine(io.stdout, `jarvis${subject}> ${body.reply}`);
+        // BLI-3517: when the answer streamed, `settle` prints only what the live
+        // words did not already say — and says so out loud when the grounding gate
+        // took some of them back. When nothing streamed it prints the whole reply
+        // through `writeReply`, which is byte-for-byte what this command printed
+        // before, BLI-3570's dim link line included.
+        live.settle(body.reply, subject, body.revised === true);
         // Only when nothing was drawn live — otherwise every tool would print twice.
         if (liveTraceLines === 0)
             writeTraceBlock(io, trace);
@@ -250,9 +319,116 @@ async function sendOneTurn(context, prompt, io) {
         image_byte_size: attachment?.bytes.byteLength ?? null,
         streamed: turn.streamed,
         live_trace_lines: liveTraceLines,
+        // BLI-3517: whether the words arrived live, and whether the settled
+        // answer superseded them. `streamed_chars: 0` against a streaming
+        // dashboard means the answer landed all at once.
+        streamed_chars: turn.draft.length,
+        revised: body.revised === true,
     })}`);
     return 0;
 }
+/**
+ * The answer as it is written, in a terminal (BLI-3517).
+ *
+ * A terminal cannot unprint. That single fact decides everything here:
+ *
+ * - The words stream out under the usual `jarvis> ` prefix, printed the moment
+ *   they arrive rather than after the whole turn (a measured 4-16 s of nothing
+ *   before this ticket).
+ * - A `reset` — the server taking back a draft the model wrote before deciding
+ *   to call a tool — cannot erase what is on screen, so it SAYS so on its own
+ *   line and the replacement follows. Never a retracted sentence left standing
+ *   with nothing marking it.
+ * - The settled reply is the authority. The grounding gate runs on the whole
+ *   text once the stream ends, so the answer can grow (citations, a fallback
+ *   notice) or change. A pure continuation is printed as the remainder; a
+ *   genuine change is reprinted whole under a line saying it was revised.
+ * - `--json` never streams a fragment: that contract is exactly one object on
+ *   stdout, and every method here is a no-op for it.
+ */
+function createLiveAnswer(command, io) {
+    const styled = colorEnabled(io);
+    const quiet = command.json === true;
+    let printed = "";
+    let opened = false;
+    const open = (subject) => {
+        if (opened)
+            return;
+        opened = true;
+        writeFragment(io.stdout, `jarvis${subject}> `);
+    };
+    return {
+        token(event) {
+            if (quiet)
+                return;
+            const text = event.text ?? "";
+            if (event.reset) {
+                if (printed) {
+                    writeLine(io.stdout, "");
+                    writeLine(io.stdout, dim("  — that draft was replaced —", styled));
+                    opened = false;
+                }
+                printed = "";
+            }
+            if (!text)
+                return;
+            open("");
+            printed += text;
+            writeFragment(io.stdout, text);
+        },
+        interrupt() {
+            if (quiet || !opened)
+                return;
+            writeLine(io.stdout, "");
+            opened = false;
+        },
+        settle(reply, subject, revised) {
+            if (quiet)
+                return;
+            if (!printed) {
+                // Nothing streamed: a non-streaming dashboard, `--no-stream`, or a
+                // turn whose words never arrived. Exactly the pre-ticket line, dim
+                // citation link and all (BLI-3570).
+                writeReply(io, `jarvis${subject}> `, reply);
+                return;
+            }
+            if (reply === printed) {
+                if (opened)
+                    writeLine(io.stdout, "");
+                return;
+            }
+            if (reply.startsWith(printed)) {
+                // The gate only ADDED — citations going back under the answer, a
+                // fallback notice. Print the tail and leave the words alone; the
+                // citation block is exactly the thing BLI-3570 puts its link under, and
+                // it is arriving here rather than in the stream.
+                if (!opened)
+                    writeFragment(io.stdout, `jarvis${subject}> `);
+                writeReplyContinuation(io, reply.slice(printed.length));
+                return;
+            }
+            if (opened)
+                writeLine(io.stdout, "");
+            writeLine(io.stdout, dim(revised ? `  — ${ANSWER_REVISED_LINE} —` : "  — corrected —", styled));
+            writeReply(io, `jarvis${subject}> `, reply);
+        },
+        abandon() {
+            // The turn died with words already on screen. End the line so the
+            // failure sentence does not run on from a half-written answer.
+            if (!quiet && opened)
+                writeLine(io.stdout, "");
+        },
+    };
+}
+/**
+ * What the terminal says when the grounding gate changed an answer it had
+ * already printed. The browser's own mark says the same thing in one word
+ * (`ANSWER_REVISED_NOTE`, `apps/dashboard/src/lib/webchat/tool-trace.ts`);
+ * this package cannot import from the dashboard, so the sentence is written
+ * here in the same register rather than shared through a dependency that does
+ * not exist.
+ */
+const ANSWER_REVISED_LINE = "revised: I checked that against its sources and changed what they did not back up";
 /**
  * The multipart body `/api/jarvis/cli` reads when a file is attached
  * (BLI-3414) — same field names the request handler parses, mirroring the

package/dist/commands/local-arg-values.js

@@ -0,0 +1,169 @@
+/**
+ * The value readers every subcommand's decision table is written in terms of:
+ * one pass over `argv` into named flags and positionals, then one small
+ * question per value — is it non-empty, is it a URL, is it an email, is it a
+ * positive integer, is it a value this schema accepts.
+ *
+ * Split out of commands/local-args.ts (BLI-3578) so each parser reads as its
+ * own decision table rather than as parsing mixed with coercion. Moved
+ * verbatim: no logic changed, and `normalizeUrl` is still re-exported from
+ * `./local-args.js` for the callers that had it there.
+ *
+ * `rejectServiceRoleLikeArgument` runs on every token, flag or positional, and
+ * is why a service-role credential cannot enter a collector command from the
+ * command line at all.
+ */
+const WORK_ROOT_FLAGS = ["--repo", "--workspace"];
+export function parseNamedArgs(args, options) {
+    const allowed = new Set(options.allowedFlags);
+    const valueFlags = new Set(options.valueFlags);
+    const flags = new Map();
+    const flagValues = new Map();
+    const booleans = new Set();
+    const positionals = [];
+    for (let index = 0; index < args.length; index += 1) {
+        const arg = args[index] ?? "";
+        rejectServiceRoleLikeArgument(arg);
+        if (!arg.startsWith("--")) {
+            positionals.push(arg);
+            continue;
+        }
+        const [flag, inlineValue] = arg.split("=", 2);
+        if (!allowed.has(flag))
+            throw new Error(`Unknown flag: ${flag}`);
+        if (valueFlags.has(flag)) {
+            const value = inlineValue ?? args[index + 1];
+            if (!value || value.startsWith("--")) {
+                throw new Error(`${flag} requires a value.`);
+            }
+            rejectServiceRoleLikeArgument(value);
+            flags.set(flag, value);
+            const existing = flagValues.get(flag) ?? [];
+            existing.push(value);
+            flagValues.set(flag, existing);
+            if (inlineValue === undefined)
+                index += 1;
+        }
+        else {
+            if (inlineValue !== undefined)
+                throw new Error(`${flag} does not accept a value.`);
+            booleans.add(flag);
+        }
+    }
+    return { flags, flagValues, booleans, positionals };
+}
+export function workRootFlagValue(values) {
+    const provided = WORK_ROOT_FLAGS.filter((flag) => values.flags.has(flag));
+    if (provided.length === 0)
+        return undefined;
+    const uniqueValues = new Set(provided.map((flag) => values.flags.get(flag)).filter(Boolean));
+    if (uniqueValues.size > 1) {
+        throw new Error("--repo and --workspace must point to the same path.");
+    }
+    return values.flags.get("--workspace") ?? values.flags.get("--repo");
+}
+export function workRootFlagValues(values) {
+    const roots = [];
+    for (const flag of WORK_ROOT_FLAGS) {
+        roots.push(...(values.flagValues.get(flag) ?? []));
+    }
+    return roots;
+}
+export function optionalNonEmptyList(values) {
+    const filtered = values
+        .map((value) => optionalNonEmpty(value))
+        .filter((value) => Boolean(value));
+    return filtered.length > 0 ? filtered : undefined;
+}
+export function assertNoPositionals(positionals, command) {
+    if (positionals.length > 0) {
+        throw new Error(`${command} does not accept positional arguments.`);
+    }
+}
+export function optionalNonEmpty(value) {
+    const trimmed = value?.trim();
+    return trimmed ? trimmed : undefined;
+}
+export function optionalUrl(value) {
+    return value === undefined ? undefined : normalizeUrl(value);
+}
+export function optionalEmail(value) {
+    const trimmed = value?.trim().toLowerCase();
+    if (!trimmed)
+        return undefined;
+    if (!trimmed.includes("@")) {
+        throw new Error("--email must be a valid email address.");
+    }
+    return trimmed;
+}
+export function optionalPositiveInteger(value, flag) {
+    if (value === undefined)
+        return undefined;
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed < 1) {
+        throw new Error(`${flag} must be a positive integer.`);
+    }
+    return parsed;
+}
+export function optionalConfidence(value, flag) {
+    if (value === undefined)
+        return undefined;
+    const parsed = Number(value);
+    if (!Number.isFinite(parsed) || parsed < 0 || parsed > 1) {
+        throw new Error(`${flag} must be a number between 0 and 1.`);
+    }
+    return parsed;
+}
+export function optionalSchemaValue(schema, value, flag) {
+    const trimmed = optionalNonEmpty(value);
+    if (!trimmed)
+        return undefined;
+    const parsed = schema.safeParse(trimmed);
+    if (!parsed.success || parsed.data === undefined) {
+        throw new Error(`${flag} has an unsupported value.`);
+    }
+    return parsed.data;
+}
+export function normalizeUrl(value) {
+    const trimmed = value.trim().replace(/\/+$/, "");
+    if (!trimmed)
+        throw new Error("URL value cannot be empty.");
+    return trimmed;
+}
+function rejectServiceRoleLikeArgument(value) {
+    if (!looksLikeServiceRoleSecret(value))
+        return;
+    throw new Error("Service-role credentials are not accepted by local collector commands.");
+}
+function looksLikeServiceRoleSecret(value) {
+    if (serviceCredentialNamePattern().test(value))
+        return true;
+    const parts = value.split(".");
+    if (parts.length !== 3)
+        return false;
+    try {
+        const payload = Buffer.from(base64UrlToBase64(parts[1] ?? ""), "base64").toString("utf8");
+        return serviceCredentialPayloadPattern().test(payload);
+    }
+    catch {
+        // Deliberately silent (BLI-3238), and it must stay silent: this is the
+        // "is this argument a service-role JWT?" test, so a value that will not
+        // decode is simply not one. Anything logged here would be a fragment of a
+        // credential.
+        return false;
+    }
+}
+function serviceCredentialNamePattern() {
+    return new RegExp([
+        ["SUPABASE", "SERVICE", "ROLE", "KEY"].join("[_-]?"),
+        ["service", "role"].join("[_-]?"),
+    ].join("|"), "i");
+}
+function serviceCredentialPayloadPattern() {
+    const privilegedRole = ["service", "role"].join("_");
+    return new RegExp(`"role"\\s*:\\s*"${privilegedRole}"`);
+}
+function base64UrlToBase64(value) {
+    const normalized = value.replace(/-/g, "+").replace(/_/g, "/");
+    return `${normalized}${"=".repeat((4 - (normalized.length % 4)) % 4)}`;
+}