@bli-cockpit/cli 0.2.99 → 0.2.100

package/dist/commands/doctor-pipeline.js

@@ -1,9 +1,8 @@
 import fs from "node:fs/promises";
 import path from "node:path";
 import { inspectBackfillLock } from "../backfill-lock.js";
-import { backfillCompletionCovers, readBackfillCompletionMarker, readBackfillCursor, } from "../cursors/backfill-cursor.js";
+import { readBackfillCompletionMarker, readBackfillCursor, } from "../cursors/backfill-cursor.js";
 import { savedDiscoveryLimitArgs } from "../discovery-limits.js";
-import { describeError } from "../health-detail.js";
 import { runStagingPrune } from "../disk-prune.js";
 import { retentionOptionsFromEnv } from "../disk-retention.js";
 import { readDiskFootprint } from "../disk-usage.js";
@@ -13,7 +12,8 @@ import { runRawEvidenceLocalGc, rawEvidenceGcSummary } from "../raw-evidence-gc.
 import { runBackfillCommand } from "./backfill.js";
 import { diskRowMessage, mib, redeliveryLine } from "./doctor-disk-words.js";
 import { doctorRoots } from "./doctor-access.js";
-import { asRecord, fail, needsFix, ok, skipped } from "./doctor-report.js";
+import { backfillCompletionStepState, backfillFixVerdict, jsonField, parseDoctorBackfillJson, parseDoctorSyncJson, syncBacklogDrainingVerdict, syncStandAsideVerdict, } from "./doctor-pipeline-verdicts.js";
+import { fail, needsFix, ok, skipped } from "./doctor-report.js";
 /**
  * The `backfill-complete`, `gc-checked`, `disk-bounded`, and `sync-fresh`
  * check family: does the collection pipeline itself have everything it
@@ -22,31 +22,15 @@ import { asRecord, fail, needsFix, ok, skipped } from "./doctor-report.js";
  * is committed, disk-bounded reads per-file against the upload ledger
  * (BLI-3619), and sync-fresh is the one check whose "fix" is a live proof
  * (`cockpit sync`) rather than a local computation.
- */
-const GC_MIN_INTERVAL_MS = 24 * 60 * 60 * 1000;
-/**
- * Pure so it can be unit-tested without touching the real machine's home
- * directory (`getCollectorRuntimePaths()` defaults to `os.homedir()` and
- * doctor never threads `--home` through the backfill steps). Returns `null`
- * when the marker does not cover the roots/sources — the caller falls
- * through to the lock/never-run diagnosis in that case.
  *
- * BLI-2727: a marker whose only outstanding entries are deterministic
- * oversized-file skips is still a completed backfill — it reads green with a
- * named note, never a red `needs_fix`/`fail`, so an unliftable file cap never
- * reads as "backfill never completed" on repeat doctor runs.
+ * This module is the half that TOUCHES the machine: it runs the catch-up,
+ * prunes the disk, execs a sync. The verdicts those steps reach — what a
+ * completion marker proves, what a stand-aside receipt means, when an
+ * unfinished backfill is busy rather than broken — are pure functions in
+ * `doctor-pipeline-verdicts.ts`, and every one of them is re-exported from
+ * here so callers keep one address.
  */
-export function backfillCompletionStepState(marker, roots) {
-    if (!backfillCompletionCovers(marker, roots, ["codex", "claude_code"])) {
-        return null;
-    }
-    const oversized = marker?.oversized_skips;
-    if (oversized && oversized.count > 0) {
-        return ok("backfill-complete", "complete_with_oversized_skips", `caught up on old Codex and Claude sessions in every saved folder ` +
-            `(complete_with_oversized_skips · ${oversized.count} file${oversized.count === 1 ? "" : "s"} too big to upload)`);
-    }
-    return ok("backfill-complete", "complete", "caught up on old Codex and Claude sessions in every saved folder");
-}
+const GC_MIN_INTERVAL_MS = 24 * 60 * 60 * 1000;
 export async function checkBackfillState(context) {
     const paths = getCollectorRuntimePaths();
     const roots = await doctorRoots(context);
@@ -70,7 +54,8 @@ export async function fixBackfillState(context) {
         yes: true,
         json: true,
     }, capture.io);
-    const output = capture.stdout() + "\n" + capture.stderr();
+    const stdout = capture.stdout();
+    const output = `${stdout}\n${capture.stderr()}`;
     if (code === 0) {
         // Re-read the marker this run just wrote instead of hand-rolling a second
         // message: `checkBackfillState`'s pure core already knows how to say
@@ -81,11 +66,9 @@ export async function fixBackfillState(context) {
             return recheck;
         return ok("backfill-complete", "completed", "ran `cockpit backfill --all --yes`");
     }
-    const reason = jsonField(output, "failure_reason");
-    if (reason === "backfill_already_running") {
-        return fail("backfill-complete", "backfill_already_running", "backfill lock is still held and no scope-valid completion marker exists");
-    }
-    return fail("backfill-complete", reason ?? "backfill_failed", "backfill did not complete");
+    const verdict = backfillFixVerdict(parseDoctorBackfillJson(stdout), jsonField(output, "failure_reason"));
+    console.error("[cockpit-doctor] catch-up run did not finish", JSON.stringify({ reason: verdict.code, row_status: verdict.status, exit_code: code }));
+    return verdict;
 }
 export async function checkGcState(context) {
     if (context.io.env["COCKPIT_DISABLE_GC"] === "1") {
@@ -196,11 +179,6 @@ function captureStream(target, chunks, forward) {
         },
     };
 }
-function jsonField(output, field) {
-    const escaped = field.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
-    const match = output.match(new RegExp(`"${escaped}"\\s*:\\s*"([^"]+)"`, "u"));
-    return match?.[1] ?? null;
-}
 export async function checkSyncState(context) {
     const roots = await doctorRoots(context);
     if (roots.length === 0) {
@@ -211,75 +189,6 @@ export async function checkSyncState(context) {
     // and only turns green from those command receipts.
     return needsFix("sync-fresh", "per_root_verification_required", `fresh upload proof is required for ${roots.length} saved root${roots.length === 1 ? "" : "s"}`);
 }
-/**
- * `cockpit sync --json` prints exactly one JSON document to stdout (stderr is
- * for human text; see AGENTS.md logging conventions), so this is a real parse
- * rather than the doctor module's usual regex field-scrape — which cannot
- * disambiguate same-named fields nested under `codex_sessions.codex` vs
- * `codex_sessions.claude` (BLI-2728).
- */
-function parseDoctorSyncJson(stdout) {
-    try {
-        const parsed = JSON.parse(stdout.trim());
-        return parsed && typeof parsed === "object" ? parsed : null;
-    }
-    catch (error) {
-        // `null` sends doctor back to its regex field-scrape, quietly losing the
-        // BLI-2728 disambiguation. Something wrote to stdout that was not the one
-        // JSON document the contract promises — a stray console.log in the
-        // collector would do exactly this and look like nothing at all.
-        console.error("[cockpit-doctor] sync --json stdout was not one JSON document", JSON.stringify({
-            reason: "sync_json_unparseable",
-            byte_size: stdout.length,
-            ...describeError(error),
-        }));
-        return null;
-    }
-}
-/**
- * BLI-2728: a tick that only deferred objects past the per-tick raw-evidence
- * object budget (`RAW_EVIDENCE_DEFAULT_OBJECT_BUDGET`, adapters/raw-evidence.ts)
- * is a backlog that is draining, not a failure — `attributedSyncRunStatus`
- * marks the run not-fully-`ok` (so `cockpit sync` exits non-zero and doctor's
- * exec sees `code !== 0`) purely because objects remain queued, with the
- * per-repo upload itself still having succeeded. A genuine failure (auth,
- * server rejection, network, a real upload_failed outcome, an unposted
- * session report) must still read red — this only fires when NOTHING else in
- * the tick's own summary looks wrong. Pure so it is unit-testable without a
- * live exec/fs harness; the remaining-object count is read straight from the
- * tick's own summary, never recomputed.
- */
-export function syncBacklogDrainingVerdict(parsed) {
-    if (!parsed)
-        return null;
-    const deferredObjects = positiveNumberOrZero(parsed.raw_evidence_deferred_object_budget);
-    if (deferredObjects <= 0)
-        return null;
-    const deferredBytes = positiveNumberOrZero(parsed.raw_evidence_deferred_byte_budget);
-    const failedCount = positiveNumberOrZero(parsed.raw_evidence_failed_count);
-    const retryReasons = Array.isArray(parsed.raw_evidence_retry_reasons)
-        ? parsed.raw_evidence_retry_reasons.length
-        : 0;
-    const sessions = asRecord(parsed.codex_sessions);
-    const reportPosted = sessions?.["report_posted"];
-    const codexReadFailures = positiveNumberOrZero(asRecord(sessions?.["codex"])?.["read_failures"]);
-    const claudeSessions = asRecord(sessions?.["claude"]);
-    const claudeReadFailures = positiveNumberOrZero(claudeSessions?.["read_failures"]);
-    const claudeSidecarsFailed = positiveNumberOrZero(claudeSessions?.["sidecars_failed"]);
-    const onlyDeferredObjectBudget = deferredBytes === 0 &&
-        failedCount === 0 &&
-        retryReasons === 0 &&
-        reportPosted === true &&
-        codexReadFailures === 0 &&
-        claudeReadFailures === 0 &&
-        claudeSidecarsFailed === 0;
-    return onlyDeferredObjectBudget ? { remainingObjects: deferredObjects } : null;
-}
-function positiveNumberOrZero(value) {
-    return typeof value === "number" && Number.isFinite(value) && value > 0
-        ? value
-        : 0;
-}
 export async function fixSyncState(context) {
     const exec = context.io.exec;
     if (!exec)
@@ -301,6 +210,23 @@ export async function fixSyncState(context) {
         const parsed = parseDoctorSyncJson(result.stdout);
         const output = `${result.stdout}\n${result.stderr}`;
         const status = jsonField(output, "status");
+        // BLI-4303, before any verdict: a sync that stood aside for the collection
+        // lock never ran, so neither its exit code nor its missing `uploaded`
+        // receipt says anything about this machine's health.
+        const standAside = syncStandAsideVerdict(parsed, status);
+        if (standAside) {
+            console.error("[cockpit-doctor] sync stood aside for a running collection run", JSON.stringify({
+                reason: standAside.code,
+                owner_alive: standAside.ownerAlive,
+                held_since: standAside.heldSince,
+            }));
+            return standAside.ownerAlive
+                ? ok("sync-fresh", standAside.code, "a background sync is running right now and owns the collection lock " +
+                    `(last heartbeat ${standAside.heldSince}); this machine is collecting`)
+                : needsFix("sync-fresh", standAside.code, "sync stood aside for a collection lock whose owner has stopped " +
+                    `reporting (last heartbeat ${standAside.heldSince ?? "unknown"}); ` +
+                    "rerun `cockpit doctor` — the next sync takes the lock over");
+        }
         if (result.code !== 0) {
             const draining = syncBacklogDrainingVerdict(parsed);
             if (draining) {
@@ -317,4 +243,8 @@ export async function fixSyncState(context) {
     return ok("sync-fresh", "synced", roots.length === 1
         ? "ran `cockpit sync` and received an uploaded receipt"
         : `received uploaded receipts for ${roots.length} saved roots`);
-}
+}
+// Re-exported so `doctor.ts`, the doctor tests and every other caller keep
+// importing these from `./doctor-pipeline.js` regardless of which sibling
+// computes them.
+export { backfillCompletionStepState, backfillFixVerdict, isCollectionBusyReason, syncBacklogDrainingVerdict, syncStandAsideVerdict, } from "./doctor-pipeline-verdicts.js";

package/dist/commands/doctor.js

@@ -1,6 +1,6 @@
 import { withStage } from "../crash-guard.js";
 import { checkSingleInstallState, fixAuthState, fixRootState, readAuthState, readRootState, } from "./doctor-access.js";
-import { backfillCompletionStepState, checkBackfillState, checkDiskState, checkGcState, checkSyncState, fixBackfillState, fixDiskState, fixGcState, fixSyncState, syncBacklogDrainingVerdict, } from "./doctor-pipeline.js";
+import { backfillCompletionStepState, backfillFixVerdict, checkBackfillState, checkDiskState, checkGcState, checkSyncState, fixBackfillState, fixDiskState, fixGcState, fixSyncState, syncBacklogDrainingVerdict, syncStandAsideVerdict, } from "./doctor-pipeline.js";
 import { checkMcpAnswersState } from "./doctor-mcp.js";
 import { checkMemoryDaemonState } from "./doctor-memory-daemon.js";
 import { checkAutostartState, checkMemoryState, fixAutostartState, fixMemoryState, } from "./doctor-registration.js";
@@ -178,4 +178,4 @@ function defaultDoctorDeps(hooks) {
 }
 // Re-exported so every consumer keeps importing from `./doctor.js` regardless
 // of which sibling a symbol now lives in.
-export { backfillCompletionStepState, syncBacklogDrainingVerdict };
+export { backfillCompletionStepState, backfillFixVerdict, syncBacklogDrainingVerdict, syncStandAsideVerdict, };

package/dist/commands/local-args-tower-careers.js

@@ -0,0 +1,20 @@
+import { optionalNonEmpty, optionalUrl, parseNamedArgs } from './local-arg-values.js';
+export function parseCareersArgs(args) {
+    const values = parseNamedArgs(args, { allowedFlags: ['--role', '--min-score', '--since', '--home', '--dashboard-url', '--json'], valueFlags: ['--role', '--min-score', '--since', '--home', '--dashboard-url'] });
+    const action = values.positionals[0] ?? 'list';
+    if (action !== 'list' && action !== 'show' && action !== 'rescreen')
+        throw new Error('careers takes list, show, or rescreen.');
+    const id = values.positionals[1];
+    if (action !== 'list' && !id)
+        throw new Error(`careers ${action} needs an application id.`);
+    if (values.positionals.length > (action === 'list' ? 1 : 2))
+        throw new Error('Unexpected careers argument.');
+    const rawScore = values.flags.get('--min-score');
+    const minScore = rawScore === undefined ? undefined : Number(rawScore);
+    if (minScore !== undefined && (!Number.isFinite(minScore) || minScore < 0 || minScore > 100))
+        throw new Error('--min-score must be 0 to 100.');
+    const since = optionalNonEmpty(values.flags.get('--since'));
+    if (since && !Number.isFinite(Date.parse(since)))
+        throw new Error('--since must be a date.');
+    return { kind: 'careers', action, id, role: optionalNonEmpty(values.flags.get('--role')), minScore, since: since ? new Date(since).toISOString() : undefined, homeDir: optionalNonEmpty(values.flags.get('--home')), dashboardUrl: optionalUrl(values.flags.get('--dashboard-url')), json: values.booleans.has('--json') };
+}

package/dist/commands/local-args-tower-pages.js

@@ -153,6 +153,7 @@ export function parseBriefArgs(args) {
     };
 }
 const NOTES_ACTIONS = new Set([
+    "folders", "mkdir", "rmdir", "rename",
     "list",
     "show",
     "shelf",
@@ -175,12 +176,14 @@ const NOTES_ACTIONS_NEEDING_A_NOTE = new Set([
 export function parseNotesArgs(args) {
     const values = parseNamedArgs(args, {
         allowedFlags: [
+            "--wait",
             "--home",
             "--dashboard-url",
             "--file",
             "--name",
             "--exclude",
             "--to",
+            "--folder",
             "--clear-shelf",
             "--apply",
             "--series",
@@ -190,6 +193,7 @@ export function parseNotesArgs(args) {
             "--limit",
             "--yes",
             "--json",
+            "--tree",
         ],
         valueFlags: [
             "--home",
@@ -198,6 +202,7 @@ export function parseNotesArgs(args) {
             "--name",
             "--exclude",
             "--to",
+            "--folder",
             "--series",
             "--kind",
             "--since",
@@ -236,23 +241,33 @@ export function parseNotesArgs(args) {
         if (paths.length === 0)
             throw new Error("notes upload needs at least one file path.");
     }
+    else if (action === "mkdir" || action === "rmdir" || action === "rename") {
+        if (rest.length !== 1 || !rest[0]?.trim())
+            throw new Error(`notes ${action} needs one folder path.`);
+    }
     else if (action !== "paste" && !NOTES_ACTIONS_NEEDING_A_NOTE.has(action) && rest.length > 0) {
         throw new Error(`notes ${action} does not take "${rest[0]}".`);
     }
+    if (action === "rename" && !optionalNonEmpty(values.flags.get("--name")))
+        throw new Error("notes rename needs --name <name>.");
     const to = optionalNonEmpty(values.flags.get("--to"));
     const clearShelf = values.booleans.has("--clear-shelf");
     if (action === "move") {
         if (to && clearShelf) {
             throw new Error("notes move accepts either --to or --clear-shelf, not both.");
         }
-        if (!to && !clearShelf) {
-            throw new Error('notes move needs --to "<shelf>" or --clear-shelf.');
+        if (!to && !clearShelf && !values.flags.get("--folder")) {
+            throw new Error('notes move needs --to "<shelf>", --clear-shelf, or --folder "<path>".');
         }
     }
     const limit = optionalPositiveInteger(values.flags.get("--limit"), "--limit");
     return {
         kind: "notes",
+        ...(values.booleans.has("--wait") ? { wait: true } : {}),
         action,
+        ...(values.flags.has("--folder") ? { folder: values.flags.get("--folder") } : {}),
+        ...(action === "mkdir" || action === "rmdir" || action === "rename" ? { folder: rest[0] } : {}),
+        ...(values.booleans.has("--tree") ? { tree: true } : {}),
         homeDir: optionalNonEmpty(values.flags.get("--home")),
         dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")),
         ...(noteId ? { noteId } : {}),

package/dist/commands/local-args-tower.js

@@ -36,4 +36,5 @@ export { SEARCH_KINDS, parseSearchArgs } from "./local-args-tower-search.js";
 export { parseModelsArgs } from "./local-args-tower-models.js";
 export { parseMailArgs } from "./local-args-tower-mail.js";
 export { parseCalArgs } from "./local-args-tower-cal.js";
-export { parseUsageArgs } from "./local-args-tower-usage.js";
+export { parseUsageArgs } from "./local-args-tower-usage.js";
+export { parseCareersArgs } from './local-args-tower-careers.js';

package/dist/commands/local-args.js

@@ -16,7 +16,7 @@
  * verbatim, no logic change.
  */
 import { parseAgentRulesArgs, parseAnalyzeArgs, parseAutostartArgs, parseBackfillArgs, parseCleanArgs, parseDoctorArgs, parseInstallArgs, parseLoginArgs, parseMemoryArgs, parseLogoutArgs, parseOnboardArgs, parseReleaseArgs, parseServeArgs, parseSessionsArgs, parseStartArgs, parseStatusArgs, parseSyncArgs, parseUpdateArgs, } from "./local-args-collector.js";
-import { parseBriefArgs, parseCorrectArgs, parseDocsArgs, parseIssueArgs, parseJarvisArgs, parseMailArgs, parseCalArgs, parseModelArgs, parseMsgArgs, parseNotesArgs, parseOpsArgs, parseProjectArgs, parseModelsArgs, parseScoutArgs, parseSearchArgs, parseSettingsArgs, parseSlackArgs, parseTeamArgs, parseWorkbookArgs, parseUsageArgs, } from "./local-args-tower.js";
+import { parseBriefArgs, parseCorrectArgs, parseDocsArgs, parseIssueArgs, parseJarvisArgs, parseMailArgs, parseCalArgs, parseModelArgs, parseMsgArgs, parseNotesArgs, parseOpsArgs, parseProjectArgs, parseModelsArgs, parseScoutArgs, parseSearchArgs, parseSettingsArgs, parseSlackArgs, parseTeamArgs, parseWorkbookArgs, parseUsageArgs, parseCareersArgs, } from "./local-args-tower.js";
 // `normalizeUrl` has always been part of this module's surface — `local.ts` and
 // `local-auth.ts` import it from here — so it stays exported from this address
 // even though it now lives next door. The same goes for the four names the
@@ -115,6 +115,8 @@ export function parseLocalArgs(argv) {
             return parseSearchArgs(argv.slice(1));
         case "release":
             return parseReleaseArgs(argv.slice(1));
+        case "careers":
+            return parseCareersArgs(argv.slice(1));
         case "usage":
             return parseUsageArgs(argv.slice(1));
         default:

package/dist/commands/local-help-commands-tower.js

@@ -22,6 +22,7 @@ const SEARCH_KIND_LIST = SEARCH_KINDS.join(",");
 const SEARCH_CORPORA_COUNT = SEARCH_KINDS.length;
 /** One entry per Tower noun, in the order `cockpit --help` lists them. */
 export const TOWER_COMMAND_HELP = [
+    ["careers", ["Usage: cockpit careers [list|show <id>|rescreen <id>] [--role <slug>] [--min-score <n>] [--since <date>] [--json]", "Super-admin application review. Lists at most 100 matches with total and has_more; use filters to narrow."]],
     [
         "docs",
         [

package/dist/commands/local-help-commands.js

@@ -450,8 +450,14 @@ export function localSubcommandHelp(command) {
         [
             "notes",
             [
-                "Usage: cockpit notes [list|show <id>|shelf|shelves|upload <paths...>|paste|share <id>|unshare <id>|move <id>] [flags]",
-                "",
+                "Usage: cockpit notes [list|show <id>|shelf|shelves|folders|mkdir <path>|rmdir <path>|rename <path>|upload <paths...> [--wait]|paste|share <id>|unshare <id>|move <id>] [flags]",
+                "Audio uploads: MP3, M4A, WAV, WebM and OGG, up to 4 MB. --wait polls transcription for at most 330 seconds.",
+                "",
+                "folders [--tree] [--json]: list folders and visible note counts.",
+                "mkdir <path> [--json]: create a folder and any missing ancestors.",
+                "rename <path> --name <name> [--json]: rename a folder and its descendant paths.",
+                "rmdir <path> [--json]: delete an empty folder; refuses notes or subfolders.",
+                "upload, paste and move accept --folder <path>; use / for Root. Shelf placement stays independent.",
                 "The /meeting-notes surface, typed. Bare `cockpit notes` lists the library.",
                 "list [--series <shelf>] [--kind <kind>] [--since <YYYY-MM-DD>] [--until <YYYY-MM-DD>] [--limit <n>] — every note you may open, grouped by shelf, newest meeting first. Never a word of a note.",
                 "show <id> — one note with its text, its shelf, and why you are allowed to see it.",

package/dist/commands/local-help.js

@@ -52,6 +52,7 @@ export const rootCommandNames = new Set([
     "project",
     "search",
     "release",
+    "careers",
     "usage",
 ]);
 export function localCommandHelp(command) {
@@ -83,7 +84,7 @@ export function localCommandHelp(command) {
         "  cockpit brief [edit|rewrite|history] [--for <person>] [--date <YYYY-MM-DD>] [--delta [--against <YYYY-MM-DD>]] [--version <pageId>] [--tldr|--full] [--versions] [--claims] [--days <n>] [--reason \"<why>\"] [--wait|--no-wait] [--dashboard-url <url>] [--json]",
         "  cockpit brief status [--who <person>] [--render] [--dashboard-url <url>] [--json]",
         "  cockpit correct --claim <claimId> --text \"<what is wrong>\" [--for <person>] [--version <pageId>] [--supersedes <id>] [--dashboard-url <url>] [--json]",
-        "  cockpit notes [list|show <id>|shelf|shelves|upload <paths...>|paste|share <id>|unshare <id>|move <id>|place <id>] [--series <shelf>] [--kind <kind>] [--since <YYYY-MM-DD>] [--until <YYYY-MM-DD>] [--limit <n>] [--file <path>] [--name <n>] [--exclude \"<sentence>\"] [--to \"<shelf>\"|--clear-shelf] [--apply] [--yes] [--dashboard-url <url>] [--json]",
+        "  cockpit notes [list|show <id>|shelf|shelves|folders|mkdir <path>|rmdir <path>|rename <path>|upload <paths...> [--wait]|paste|share <id>|unshare <id>|move <id>|place <id>] [--folder <path>] [--series <shelf>] [--kind <kind>] [--since <YYYY-MM-DD>] [--until <YYYY-MM-DD>] [--limit <n>] [--file <path>] [--name <n>] [--exclude \"<sentence>\"] [--to \"<shelf>\"|--clear-shelf] [--apply] [--yes] [--dashboard-url <url>] [--json]",
         "  cockpit backfill (--since-days <n>|--all) [--source codex|claude] [--dry-run] [--max-files <n>] [--max-depth <n>] [--max-repos <n>] [--yes] [--workspace <path>] [--json]",
         "  cockpit status [--workspace <path>] [--max-depth <n>] [--max-repos <n>] [--json]",
         "  cockpit sessions [--source codex|claude] [--since-days <n>|--all] [--workspace <path>] [--max-depth <n>] [--max-repos <n>] [--json]",
@@ -100,6 +101,7 @@ export function localCommandHelp(command) {
         "  cockpit project [list] [--archived] [--dashboard-url <url>] [--json]",
         `  cockpit search "<words>" [--kind ${SEARCH_KINDS.join(",")}] [--limit <n>] [--dashboard-url <url>] [--json]`,
         "  cockpit release [--dry-run] [--skip-checks] [--no-floor] [--tag <tag>] [--access <public|restricted>] [--otp <code>]",
+        "  cockpit careers [list|show <id>|rescreen <id>] [--role <slug>] [--min-score <n>] [--since <date>] [--json]",
         "  cockpit usage people [--since 30d|<iso>] [--until <iso>] [--include-automated] [--dashboard-url <url>] [--json]",
         "",
         `Default dashboard: ${DEFAULT_DASHBOARD_URL}. Omit --dashboard-url for normal production use; pass it only for staging/custom dashboards or to force a different pairing.`,

package/dist/commands/local.js

@@ -43,6 +43,7 @@ import { runCal } from "./cal.js";
 import { runMail } from "./mail.js";
 import { runProject } from "./project.js";
 import { runSearch } from "./search.js";
+import { runCareers } from "./careers.js";
 import { runUsage } from "./usage.js";
 import { parseLocalArgs } from "./local-args.js";
 // `./local.js` is the published entry point for this command surface: the
@@ -180,6 +181,8 @@ export async function runLocalCockpitCli(argv, io = defaultIo()) {
                 return await runSearch(command, io);
             case "release":
                 return await runRelease(command, io);
+            case "careers":
+                return await runCareers(command, io);
             case "usage":
                 return await runUsage(command, io);
         }

package/dist/commands/notes-file.js

@@ -34,6 +34,10 @@ import { errorMessage } from "./cli-io.js";
  * courtesy check to avoid uploading something the server is certain to refuse,
  * not a second source of truth.
  */
+export function noteAudioMime(name) {
+    const mime = { mp3: "audio/mpeg", m4a: "audio/mp4", wav: "audio/wav", webm: "audio/webm", ogg: "audio/ogg" };
+    return mime[name.split(".").at(-1)?.toLowerCase() ?? ""];
+}
 export const NOTE_FILE_MAX_BYTES = 20 * 1024 * 1024;
 /**
  * Above this, the terminal says it is working before it starts. The route's own
@@ -52,7 +56,7 @@ export function noteFileRefusalSentence(refusal, filePath) {
         case "file_empty":
             return `There is nothing in that file: ${filePath}`;
         case "file_too_big":
-            return "That file is too big to put in as a note — keep it under 20 MB.";
+            return "That file is too big. Audio is limited to 4 MB; other notes to 20 MB.";
         case "looks_like_a_key_file":
             // The same rule the server's gate applies, said the same way: the name is
             // all it takes to decide, and looking inside to be sure would already be
@@ -88,6 +92,9 @@ export async function readNoteFile(filePath) {
     }
     if (size === 0)
         return { ok: false, refusal: "file_empty", detail: "byte_size_0" };
+    if (noteAudioMime(fileName) && size > 4_000_000) {
+        return { ok: false, refusal: "file_too_big", detail: "file_too_large: audio limit is 4 MB (4,000,000 bytes)" };
+    }
     if (size > NOTE_FILE_MAX_BYTES) {
         return { ok: false, refusal: "file_too_big", detail: `byte_size_${size}` };
     }

package/dist/commands/notes-folders.js

@@ -0,0 +1,35 @@
+import { writeLine } from "./cli-io.js";
+import { ask, emit, fail, READ_DEADLINE_MS } from "./notes-door.js";
+export async function runFolderCommand(command, door) {
+    const path = command.folder?.split("/").map(part => part.trim()).join("/");
+    const answer = await ask(door, {
+        path: "/api/notes/folders", method: command.action === "mkdir" ? "POST" : "GET",
+        label: `notes ${command.action}`, timeoutMs: READ_DEADLINE_MS,
+        ...(command.action === "mkdir" ? { body: { path } } : {}),
+    });
+    if (!answer.ok)
+        return fail(door, answer.reason, answer.detail);
+    const body = answer.body;
+    if (command.action === "rmdir" || command.action === "rename") {
+        const folder = body.folders?.find(folder => folder.path === path);
+        if (!folder)
+            return fail(door, "folder_not_found", "That folder could not be found.");
+        const removed = await ask(door, { path: `/api/notes/folders/${encodeURIComponent(folder.id)}`, method: command.action === "rename" ? "PATCH" : "DELETE", label: `notes ${command.action}`, timeoutMs: READ_DEADLINE_MS, ...(command.action === "rename" ? { body: { name: command.name } } : {}) });
+        if (!removed.ok)
+            return fail(door, removed.reason, removed.detail);
+        if (door.json)
+            return emit(door, removed.body);
+        writeLine(door.io.stdout, removed.body.headline);
+        return 0;
+    }
+    if (door.json)
+        return emit(door, body);
+    if (command.action === "mkdir")
+        writeLine(door.io.stdout, body.headline ?? "Folder ready.");
+    else
+        for (const folder of body.folders ?? []) {
+            const label = command.tree ? `${"  ".repeat(folder.path.split("/").length - 1)}${folder.name}` : folder.path;
+            writeLine(door.io.stdout, `${label} (${folder.note_count})`);
+        }
+    return 0;
+}

package/dist/commands/notes-writes.js

@@ -4,7 +4,7 @@
  * `notes.ts`, named in its header.
  */
 import { isInteractiveStdin, readLine, readPipedText, writeLine, yesByDefault } from "./cli-io.js";
-import { NOTE_SLOW_UPLOAD_BYTES, decodeTextBytes, noteFileRefusalSentence, readNoteFile, } from "./notes-file.js";
+import { NOTE_SLOW_UPLOAD_BYTES, noteAudioMime, decodeTextBytes, noteFileRefusalSentence, readNoteFile, } from "./notes-file.js";
 import { ask, emit, fail, sayUpload, errorText, TAG, READ_DEADLINE_MS } from "./notes-door.js";
 /**
  * The upload route's own ceiling is `maxDuration = 300` — reading a note is one
@@ -36,9 +36,11 @@ export async function uploadNotes(command, door) {
             writeLine(door.io.stderr, `Reading ${read.fileName} (${Math.round(read.bytes.byteLength / 1024)} KB). This can take a couple of minutes.`);
         }
         const form = new FormData();
-        form.set("file", new File([new Uint8Array(read.bytes)], read.fileName));
+        form.set("file", new File([new Uint8Array(read.bytes)], read.fileName, { type: noteAudioMime(read.fileName) ?? "" }));
         if (command.exclude)
             form.set("exclusions", command.exclude);
+        if (command.folder)
+            form.set("folder_path", command.folder);
         const answer = await ask(door, {
             path: "/api/notes/upload",
             method: "POST",
@@ -55,7 +57,14 @@ export async function uploadNotes(command, door) {
             continue;
         }
         const body = answer.body;
-        results.push({ path: filePath, ok: body.stored === true, body });
+        if (command.wait && body.noteId && body.transcription?.status === "pending") {
+            body.transcription = await waitForTranscription(door, body.noteId);
+        }
+        if (body.transcription?.status === "failed")
+            worstExit = 1;
+        if (!door.json && body.transcription)
+            writeLine(door.io.stdout, `${body.noteId}: transcription ${body.transcription.status}${body.transcription.reason ? ": " + body.transcription.reason : ""}`);
+        results.push({ path: filePath, ok: body.stored === true && body.transcription?.status !== "failed", body });
         if (body.stored !== true)
             worstExit = 1;
         if (!door.json)
@@ -114,6 +123,8 @@ export async function pasteNote(command, door) {
         form.set("name", command.name);
     if (command.exclude)
         form.set("exclusions", command.exclude);
+    if (command.folder)
+        form.set("folder_path", command.folder);
     // Bytes, not `.length` (BLI-3482). `NOTE_SLOW_UPLOAD_BYTES` is a BYTE
     // threshold, and the file path above already compares `bytes.byteLength`
     // against it; `text.length` counts UTF-16 units, so a note in any non-Latin
@@ -225,7 +236,10 @@ export async function moveNote(command, door) {
         timeoutMs: READ_DEADLINE_MS,
         // `--clear-shelf` sends the empty string, which is what the browser's own
         // move box sends when a person empties it.
-        body: { note_id: command.noteId, category: command.clearShelf ? "" : command.to },
+        body: { note_id: command.noteId,
+            ...(command.folder ? { folder_path: command.folder } : {}),
+            ...(command.to || command.clearShelf ? { category: command.clearShelf ? "" : command.to } : {}),
+        },
     });
     if (!answer.ok)
         return fail(door, answer.reason, answer.detail);
@@ -242,4 +256,23 @@ export async function moveNote(command, door) {
     for (const line of body.lines ?? [])
         writeLine(door.io.stdout, line);
     return body.ok === true ? 0 : 1;
+}
+/** Bounded polling of the same note read used by the browser and MCP. */
+async function waitForTranscription(door, noteId) {
+    const deadline = Date.now() + 330_000;
+    for (let attempt = 0; attempt < 110 && Date.now() < deadline; attempt++) {
+        const answer = await ask(door, { path: `/api/notes/library/${encodeURIComponent(noteId)}`,
+            method: "GET", label: "notes transcription", timeoutMs: Math.min(10_000, deadline - Date.now()) });
+        if (!answer.ok)
+            return { status: "failed", reason: answer.reason };
+        const status = answer.body.audio?.transcription_status;
+        if (status === "done")
+            return { status: "done" };
+        if (status?.startsWith("failed:"))
+            return { status: "failed", reason: status.slice(7) };
+        if (status !== "pending")
+            return { status: "failed", reason: "transcription_status_unavailable" };
+        await new Promise((resolve) => setTimeout(resolve, Math.min(3000, Math.max(0, deadline - Date.now()))));
+    }
+    return { status: "failed", reason: "transcription_wait_timeout" };
 }

package/dist/commands/notes.js

@@ -36,6 +36,7 @@
 import { loadPairedSession } from "../tower-client.js";
 import { listNotes, listShelves, showNote, showShelf } from "./notes-reads.js";
 import { uploadNotes, pasteNote, shareNote, moveNote, placeNote } from "./notes-writes.js";
+import { runFolderCommand } from "./notes-folders.js";
 export { listNotes, listShelves, showNote, showShelf } from "./notes-reads.js";
 export { uploadNotes, pasteNote, shareNote, moveNote, placeNote } from "./notes-writes.js";
 export { ask, emit, fail, sayUpload, sayScope, errorText, TAG, } from "./notes-door.js";
@@ -48,6 +49,11 @@ export async function runNotes(command, io) {
         json: command.json,
     };
     switch (command.action) {
+        case "folders":
+        case "mkdir":
+        case "rmdir":
+        case "rename":
+            return runFolderCommand(command, door);
         case "list":
             return listNotes(command, door);
         case "shelves":

package/dist/commands/public-root.js

@@ -15,7 +15,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.99");
+    writeLine(io?.stdout ?? process.stdout, "0.2.100");
     return 0;
   }