@bli-cockpit/cli 0.2.237 → 0.2.239

package/dist/commands/local-help-commands.js

@@ -20,397 +20,398 @@ import { DEFAULT_DASHBOARD_URL } from "../local-state.js";
 import { localCommandHelp, SURFACE_ALIASES } from "./local-help.js";
 import { TOWER_COMMAND_HELP } from "./local-help-commands-tower.js";
 import { TOWER_OPS_COMMAND_HELP } from "./local-help-commands-tower-ops.js";
-export function localSubcommandHelp(command) {
-    const helpByCommand = new Map([
-        ["glossary", ["Usage: cockpit glossary list|add <wrong> --to <name>|remove <wrong> [--json]", "Quote phrases. Removing a form prevents future corrections of it."]],
-        ["spend", ["Usage: cockpit spend memory [--days 1|7|30] [--dashboard-url <url>] [--json]", "Spend by memory operation (write, recall, dream, update_forget, backfill, label, exam, predictor, people, who, intentions, salience, chat, other), ranked top first with list and real dollars, share, trend against the previous window, and how much of the real OpenAI bill the ledger explains. What it does not explain is shown as untagged. A super_admin reads it."]],
-        ["roots", ["Usage: cockpit roots add <dir> [--allow-home-root] [--json]", "Approves a work directory, saves an approval receipt, and adds it to collection. Run cockpit doctor afterward."]],
-        // BLI-3709: the Tower nouns live next door, split along the same seam the
-        // argument parsers already use — see `local-help-commands-tower.ts`.
-        ...TOWER_COMMAND_HELP,
-        ["setup", ["Usage: cockpit setup [--since <7d|30d|date>] [--details] [--person <name|email>] [--compare <name,name>] [--json]", "Read agent setups beside windowed outcomes (default 30 days), or compare two people by first name or email."]],
+/** One manual per collector command; the Tower nouns are spread in from their own file. */
+const COMMAND_HELP = new Map([
+    ["glossary", ["Usage: cockpit glossary list|add <wrong> --to <name>|remove <wrong> [--json]", "Quote phrases. Removing a form prevents future corrections of it."]],
+    ["spend", ["Usage: cockpit spend memory [--days 1|7|30] [--dashboard-url <url>] [--json]", "Spend by memory operation (write, recall, dream, update_forget, backfill, label, exam, predictor, people, who, intentions, salience, chat, other), ranked top first with list and real dollars, share, trend against the previous window, and how much of the real OpenAI bill the ledger explains. What it does not explain is shown as untagged. A super_admin reads it."]],
+    ["roots", ["Usage: cockpit roots add <dir> [--allow-home-root] [--json]", "Approves a work directory, saves an approval receipt, and adds it to collection. Run cockpit doctor afterward."]],
+    // BLI-3709: the Tower nouns live next door, split along the same seam the
+    // argument parsers already use — see `local-help-commands-tower.ts`.
+    ...TOWER_COMMAND_HELP,
+    ["setup", ["Usage: cockpit setup [--since <duration|date>] [--until <date>] [--machines] [--details] [--person <name|email>] [--compare <name,name>] [--json]", "Read agent setups beside windowed outcomes (default 30 days), or compare two people by first name or email."]],
+    [
+        "onboard",
         [
-            "onboard",
-            [
-                "Usage: cockpit onboard [--ticket <id>] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--branch <name>] [--no-auth] [--max-depth <n>] [--max-repos <n>] [--json]",
-                "",
-                "Installs, pairs, starts work context(s), syncs once, completes all-history",
-                "Codex and Claude backfill for the saved roots, and then tells you it is working.",
-                "If --workspace is a parent folder, scans child git repos/worktrees and rolls them up by repo.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-                `Omit --dashboard-url for normal production setup (${DEFAULT_DASHBOARD_URL}).`,
-                "Pass --dashboard-url only for staging/custom dashboards or to force a different pairing.",
-                "Run with no flags in a terminal and it prompts for the dashboard email and OTP code; pass --email to skip the email prompt. Use --no-auth to force the manual approval fallback.",
-                "Interactive runs also offer to add Tower ticket-binding rules to AGENTS.md and CLAUDE.md after readiness proof.",
-            ],
+            "Usage: cockpit onboard [--ticket <id>] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--branch <name>] [--no-auth] [--max-depth <n>] [--max-repos <n>] [--json]",
+            "",
+            "Installs, pairs, starts work context(s), syncs once, completes all-history",
+            "Codex and Claude backfill for the saved roots, and then tells you it is working.",
+            "If --workspace is a parent folder, scans child git repos/worktrees and rolls them up by repo.",
+            "`--repo <path>` remains supported as a backward-compatible alias.",
+            `Omit --dashboard-url for normal production setup (${DEFAULT_DASHBOARD_URL}).`,
+            "Pass --dashboard-url only for staging/custom dashboards or to force a different pairing.",
+            "Run with no flags in a terminal and it prompts for the dashboard email and OTP code; pass --email to skip the email prompt. Use --no-auth to force the manual approval fallback.",
+            "Interactive runs also offer to add Tower ticket-binding rules to AGENTS.md and CLAUDE.md after readiness proof.",
         ],
+    ],
+    [
+        "install",
         [
-            "install",
-            [
-                "Usage: cockpit install [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--json]",
-                "",
-                "Writes local collector config. Pair with `cockpit login`, then run `cockpit start` when work begins.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-                "Omit --dashboard-url for the production dashboard; pass it only for staging/custom dashboards.",
-            ],
+            "Usage: cockpit install [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--json]",
+            "",
+            "Writes local collector config. Pair with `cockpit login`, then run `cockpit start` when work begins.",
+            "`--repo <path>` remains supported as a backward-compatible alias.",
+            "Omit --dashboard-url for the production dashboard; pass it only for staging/custom dashboards.",
         ],
+    ],
+    [
+        "update",
         [
-            "update",
-            [
-                "Usage: cockpit update [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--no-auth] [--json]",
-                "",
-                "Updates the global public CLI from npm, then reruns `cockpit onboard`",
-                "with the same setup flags so pairing, saved roots, all-history backfill,",
-                "agent rules, autostart, and the initial sync are refreshed in one command.",
-                "`cockpit upgrade` is an alias.",
-            ],
+            "Usage: cockpit update [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--no-auth] [--json]",
+            "",
+            "Updates the global public CLI from npm, then reruns `cockpit onboard`",
+            "with the same setup flags so pairing, saved roots, all-history backfill,",
+            "agent rules, autostart, and the initial sync are refreshed in one command.",
+            "`cockpit upgrade` is an alias.",
         ],
+    ],
+    [
+        "upgrade",
         [
-            "upgrade",
-            [
-                "Usage: cockpit upgrade [same flags as cockpit update]",
-                "",
-                "Alias for `cockpit update`.",
-            ],
+            "Usage: cockpit upgrade [same flags as cockpit update]",
+            "",
+            "Alias for `cockpit update`.",
         ],
+    ],
+    [
+        "do-everything",
         [
-            "do-everything",
-            [
-                "Usage: cockpit do-everything [same flags as cockpit doctor]",
-                "Same command as `cockpit doctor`.",
-            ],
+            "Usage: cockpit do-everything [same flags as cockpit doctor]",
+            "Same command as `cockpit doctor`.",
         ],
+    ],
+    [
+        "fix",
         [
-            "fix",
-            [
-                "Usage: cockpit fix [same flags as cockpit doctor]",
-                "Same command as `cockpit doctor`.",
-            ],
+            "Usage: cockpit fix [same flags as cockpit doctor]",
+            "Same command as `cockpit doctor`.",
         ],
+    ],
+    [
+        "doctor",
         [
-            "doctor",
-            [
-                "Usage: cockpit doctor [--workspace <path>] [--check | --no-repair] [--no-usage-telemetry] [--lock-wait <seconds>] [--backfill-budget <seconds>] [--json]",
-                "",
-                "Diagnose, repair, and verify this machine.",
-                "Repairs CLI, background sync, sign-in, roots, memory and hooks, agent rules, catch-up, uploads, and cleanup.",
-                "roots-cover-work is informational: it names how many sessions are inside vs. outside saved roots (all already uploaded, outside ones labelled) and gives cockpit roots add commands for attributing a folder's sessions to a repo (outside-root transcripts upload either way). It never needs a fix.",
-                "--no-usage-telemetry switches off Claude Code and Codex usage export, including later doctor runs.",
-                "--check or --no-repair diagnoses without repairs. --dry-run previews repairs.",
-                "--backfill-budget defaults to 900 seconds; catch-up repeats chunks until complete, with progress every 30 seconds.",
-                "Doctor never waits for the background sync: a running sync is reported as running (with how long ago it started) and doctor finishes; a sync that stopped responding or made no progress for 15 minutes is ended and doctor carries on. --lock-wait is accepted and changes nothing. Progress prints at most every 30 seconds and says what changed.",
-                "--json without either flag answers within 45 seconds; a repair that does not fit reads doctor_budget_spent.",
-                "--json includes steps, repairs, and needs_person. Exit 0 means nothing needs you.",
-                "Maintainers: --update-tag next keeps self-update on the prerelease candidate.",
-            ],
+            "Usage: cockpit doctor [--workspace <path>] [--check | --no-repair] [--no-usage-telemetry] [--lock-wait <seconds>] [--backfill-budget <seconds>] [--json]",
+            "",
+            "Diagnose, repair, and verify this machine.",
+            "Repairs CLI, background sync, sign-in, roots, memory and hooks, agent rules, catch-up, uploads, and cleanup.",
+            "roots-cover-work is informational: it names how many sessions are inside vs. outside saved roots (all already uploaded, outside ones labelled) and gives cockpit roots add commands for attributing a folder's sessions to a repo (outside-root transcripts upload either way). It never needs a fix.",
+            "--no-usage-telemetry switches off Claude Code and Codex usage export, including later doctor runs.",
+            "--check or --no-repair diagnoses without repairs. --dry-run previews repairs.",
+            "--backfill-budget defaults to 900 seconds; catch-up repeats chunks until complete, with progress every 30 seconds.",
+            "Doctor never waits for the background sync: a running sync is reported as running (with how long ago it started) and doctor finishes; a sync that stopped responding or made no progress for 15 minutes is ended and doctor carries on. --lock-wait is accepted and changes nothing. Progress prints at most every 30 seconds and says what changed.",
+            "--json without either flag answers within 45 seconds; a repair that does not fit reads doctor_budget_spent.",
+            "--json includes steps, repairs, and needs_person. Exit 0 means nothing needs you.",
+            "Maintainers: --update-tag next keeps self-update on the prerelease candidate.",
         ],
+    ],
+    [
+        "login",
         [
-            "login",
-            [
-                "Usage: cockpit login [--pair <code>] [--no-browser] [--legacy-pair] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",
-                "",
-                "One sign-in. Prints and opens a Tower link; signing in there once both signs the browser in",
-                "and connects this machine. Then stores the approved local session.",
-                "",
-                "--pair <code>   Redeem a code from Tower Settings -> Devices. No email at all.",
-                "--no-browser    Print the link, do not open a window (SSH, locked-down hosts).",
-                "--legacy-pair   Use the older two-sign-in flow: email code here, then approve in the browser.",
-                "                It also runs automatically if the link flow cannot finish.",
-                "Omit --dashboard-url for the production dashboard; pass it only for staging/custom dashboards.",
-            ],
+            "Usage: cockpit login [--pair <code>] [--no-browser] [--legacy-pair] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",
+            "",
+            "One sign-in. Prints and opens a Tower link; signing in there once both signs the browser in",
+            "and connects this machine. Then stores the approved local session.",
+            "",
+            "--pair <code>   Redeem a code from Tower Settings -> Devices. No email at all.",
+            "--no-browser    Print the link, do not open a window (SSH, locked-down hosts).",
+            "--legacy-pair   Use the older two-sign-in flow: email code here, then approve in the browser.",
+            "                It also runs automatically if the link flow cannot finish.",
+            "Omit --dashboard-url for the production dashboard; pass it only for staging/custom dashboards.",
         ],
+    ],
+    [
+        "pair",
         [
-            "pair",
-            [
-                "Usage: cockpit pair [--pair <code>] [--no-browser] [--legacy-pair] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",
-                "",
-                "Alias for `cockpit login`.",
-            ],
+            "Usage: cockpit pair [--pair <code>] [--no-browser] [--legacy-pair] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",
+            "",
+            "Alias for `cockpit login`.",
         ],
+    ],
+    [
+        "logout",
         [
-            "logout",
-            [
-                "Usage: cockpit logout [--revoke] [--yes] [--dashboard-url <url>] [--json]",
-                "",
-                "Removes the local device session.",
-                "--revoke also asks Tower to end this device's token, which is what you want",
-                "when the machine is being handed back: without it this laptop stops collecting",
-                "but the token it held is still one the server would honour.",
-                "A device can only revoke ITSELF; revoking someone else's machine stays in the browser.",
-                "The local session is removed either way, and the two outcomes are reported separately.",
-            ],
+            "Usage: cockpit logout [--revoke] [--yes] [--dashboard-url <url>] [--json]",
+            "",
+            "Removes the local device session.",
+            "--revoke also asks Tower to end this device's token, which is what you want",
+            "when the machine is being handed back: without it this laptop stops collecting",
+            "but the token it held is still one the server would honour.",
+            "A device can only revoke ITSELF; revoking someone else's machine stays in the browser.",
+            "The local session is removed either way, and the two outcomes are reported separately.",
         ],
+    ],
+    [
+        "model",
         [
-            "model",
-            [
-                "Usage: cockpit model [show|set <provider:model>] [--json]",
-                "",
-                "Shows or changes YOUR chat model — the short way to say",
-                "`cockpit settings personal --chat-model`. Affects your account, not the org.",
-                "An unrecognised key is refused by the dashboard, not by this command.",
-            ],
+            "Usage: cockpit model [show|set <provider:model>] [--json]",
+            "",
+            "Shows or changes YOUR chat model — the short way to say",
+            "`cockpit settings personal --chat-model`. Affects your account, not the org.",
+            "An unrecognised key is refused by the dashboard, not by this command.",
         ],
+    ],
+    [
+        "settings",
         [
-            "settings",
-            [
-                "Usage: cockpit settings [section] [verb] [flags] [--json]",
-                "",
-                "With no section it shows everything you can see; a section you cannot see reads",
-                "`admin only` rather than failing, because that is the system working.",
-                "",
-                "  cockpit settings personal [--chat-model <key>] [--brief-model <key>]",
-                "      Your teams and your two model choices. No flags = show.",
-                "  cockpit settings switches [set <key> <value>]",
-                "      Access and feature switches. Everyone may look; only an admin may set.",
-                "  cockpit settings models [set --chat <key>] [--memory <id>] [--note-reader <id>]",
-                "      The ORG-WIDE model map. Admin only, in both directions.",
-                "  cockpit settings cli-floor [<version>]",
-                "      The fleet forced-update floor: every collector below it updates on its",
-                "      next sync tick. Everyone may look; only an admin may raise it, and it",
-                "      only ever goes UP — lowering it is a rollback a human makes deliberately.",
-                "      A `--tag latest` publish raises it for you (scripts/publish-public-packages.mjs).",
-                "  cockpit settings env list",
-                "      Stored env files: project, name, when, id. Never a value — the server",
-                "      cannot return one and this command has no flag that prints one.",
-                "  cockpit settings env set --project <project> --file <name> --content-stdin",
-                "      Pipe the file in; there is no --content flag, because a secret on a",
-                "      command line lands in shell history and in every process listing.",
-                "      macOS:      cat <path> | cockpit settings env set --project <project> --file <name> --content-stdin",
-                "      PowerShell: Get-Content <path> -Raw | cockpit settings env set --project <project> --file <name> --content-stdin",
-                "      Run `cockpit settings env list` to see which file names this project accepts.",
-                "  cockpit settings env delete --id <uuid> [--yes]",
-                "      Asks first unless --yes; a headless run without --yes is refused, not assumed.",
-            ],
+            "Usage: cockpit settings [section] [verb] [flags] [--json]",
+            "",
+            "With no section it shows everything you can see; a section you cannot see reads",
+            "`admin only` rather than failing, because that is the system working.",
+            "",
+            "  cockpit settings personal [--chat-model <key>] [--brief-model <key>]",
+            "      Your teams and your two model choices. No flags = show.",
+            "  cockpit settings switches [set <key> <value>]",
+            "      Access and feature switches. Everyone may look; only an admin may set.",
+            "  cockpit settings models [set --chat <key>] [--memory <id>] [--note-reader <id>]",
+            "      The ORG-WIDE model map. Admin only, in both directions.",
+            "  cockpit settings cli-floor [<version>]",
+            "      The fleet forced-update floor: every collector below it updates on its",
+            "      next sync tick. Everyone may look; only an admin may raise it, and it",
+            "      only ever goes UP — lowering it is a rollback a human makes deliberately.",
+            "      A `--tag latest` publish raises it for you (scripts/publish-public-packages.mjs).",
+            "  cockpit settings env list",
+            "      Stored env files: project, name, when, id. Never a value — the server",
+            "      cannot return one and this command has no flag that prints one.",
+            "  cockpit settings env set --project <project> --file <name> --content-stdin",
+            "      Pipe the file in; there is no --content flag, because a secret on a",
+            "      command line lands in shell history and in every process listing.",
+            "      macOS:      cat <path> | cockpit settings env set --project <project> --file <name> --content-stdin",
+            "      PowerShell: Get-Content <path> -Raw | cockpit settings env set --project <project> --file <name> --content-stdin",
+            "      Run `cockpit settings env list` to see which file names this project accepts.",
+            "  cockpit settings env delete --id <uuid> [--yes]",
+            "      Asks first unless --yes; a headless run without --yes is refused, not assumed.",
         ],
+    ],
+    [
+        "team",
         [
-            "team",
-            [
-                "Usage: cockpit team [members | invite <email> --role <role> | role <userId> --role <role> | grant|revoke <person> careers [see|act] | device [list] | device revoke <id|name> --reason <label>] [--json]",
-                "",
-                "  cockpit team [members]",
-                "      Everyone on your team — roster and accounts together, with each person's id.",
-                "      Open to every role; it says so when the view is read-only for you.",
-                "  cockpit team github-login add|remove <person> <login> [--json] — exact roster UUID, name or email; super admin or a member managing their own extra logins. History stays.",
-                "  cockpit team github-login list <person> [--json] — primary and extra GitHub logins.",
-                "  cockpit team timezone set <person> <iana-zone> [--json] — super admin only. Sets the zone a person lives their day in, e.g. Asia/Ho_Chi_Minh or America/Vancouver; the person is an exact roster name, email or roster UUID. The word `unknown` clears it. EST, +07:00 and other non-IANA names are refused.",
-                "  cockpit team timezone list [--json] — super admin only. Everyone on the roster with their zone; `unknown` means nobody set one (readers then use UTC and say so).",
-                "  cockpit team invite <email> --role <role> [--team-id <uuid>]",
-                "      Admin only. Defaults to your own team; Tower emails them a sign-in link.",
-                "  cockpit team role <userId> --role <role> [--yes]",
-                "      Admin only. Asks first unless --yes. You cannot change your own role.",
-                "  cockpit team grant <person-uuid> careers [see|act] [--json]",
-                "  cockpit team revoke <person-uuid> careers [see|act] [--json]",
-                "      Super admins manage separate See and Act grants. Default level: see.",
-                "      Find the account uuid with cockpit team members --json. Revocation retains history.",
-                "  cockpit team device [list] [--json]",
-                "  cockpit team device doctor <id|name> [--json]",
-                "      Every paired collector device: name, id, trust state, owner, and why",
-                "      (revoked reason, or when it was approved, or that it's still waiting).",
-                "      Admin only.",
-                "  cockpit team device scope <id|name> notetaker_bot|none [--json]",
-                "      Super admin only. Gives the meeting bot's device the scope Tower's claim door requires,",
-                "      or takes it away. Without it the bot is refused every meeting (bot_scope_required).",
-                "  cockpit team device revoke <id|name> --reason <label> [--note \"<text>\"] [--yes]",
-                "      Admin only. Names the device, asks first unless --yes, then revokes it —",
-                "      this cannot be undone. --reason must be one of: stale_test_pairing,",
-                "      machine_retired, person_left, re_pairing, other.",
-            ],
+            "Usage: cockpit team [members | invite <email> --role <role> | role <userId> --role <role> | grant|revoke <person> careers [see|act] | device [list] | device revoke <id|name> --reason <label>] [--json]",
+            "",
+            "  cockpit team [members]",
+            "      Everyone on your team — roster and accounts together, with each person's id.",
+            "      Open to every role; it says so when the view is read-only for you.",
+            "  cockpit team github-login add|remove <person> <login> [--json] — exact roster UUID, name or email; super admin or a member managing their own extra logins. History stays.",
+            "  cockpit team github-login list <person> [--json] — primary and extra GitHub logins.",
+            "  cockpit team timezone set <person> <iana-zone> [--json] — super admin only. Sets the zone a person lives their day in, e.g. Asia/Ho_Chi_Minh or America/Vancouver; the person is an exact roster name, email or roster UUID. The word `unknown` clears it. EST, +07:00 and other non-IANA names are refused.",
+            "  cockpit team timezone list [--json] — super admin only. Everyone on the roster with their zone; `unknown` means nobody set one (readers then use UTC and say so).",
+            "  cockpit team invite <email> --role <role> [--team-id <uuid>]",
+            "      Admin only. Defaults to your own team; Tower emails them a sign-in link.",
+            "  cockpit team role <userId> --role <role> [--yes]",
+            "      Admin only. Asks first unless --yes. You cannot change your own role.",
+            "  cockpit team grant <person-uuid> careers [see|act] [--json]",
+            "  cockpit team revoke <person-uuid> careers [see|act] [--json]",
+            "      Super admins manage separate See and Act grants. Default level: see.",
+            "      Find the account uuid with cockpit team members --json. Revocation retains history.",
+            "  cockpit team device [list] [--json]",
+            "  cockpit team device doctor <id|name> [--json]",
+            "      Every paired collector device: name, id, trust state, owner, and why",
+            "      (revoked reason, or when it was approved, or that it's still waiting).",
+            "      Admin only.",
+            "  cockpit team device scope <id|name> notetaker_bot|none [--json]",
+            "      Super admin only. Gives the meeting bot's device the scope Tower's claim door requires,",
+            "      or takes it away. Without it the bot is refused every meeting (bot_scope_required).",
+            "  cockpit team device revoke <id|name> --reason <label> [--note \"<text>\"] [--yes]",
+            "      Admin only. Names the device, asks first unless --yes, then revokes it —",
+            "      this cannot be undone. --reason must be one of: stale_test_pairing,",
+            "      machine_retired, person_left, re_pairing, other.",
         ],
+    ],
+    [
+        "start",
         [
-            "start",
-            [
-                "Usage: cockpit start [--ticket <id>|--clear-ticket] [--topic <label>] [--topic-summary <summary>] [--intent <intent>] [--phase <phase>] [--intent-confidence <0..1>] [--workspace <path>] [--branch <name>] [--json]",
-                "",
-                "Starts collecting your work in the background. If you point it at a parent folder it covers every repo inside.",
-                "Add --ticket only when the work already has a visible ticket; omit it to preserve an existing binding.",
-                "--ticket takes EITHER tracker's id while both are running: a Tower issue (BLI-10000 and up, `cockpit issue list`)",
-                "or a Linear ticket. Tower is asked which row the id names, and the context records both ids when a row proves the pair —",
-                "a Tower-native issue whose title ends in `[BLI-3779]` mirrors that Linear ticket. An id Tower cannot place still binds:",
-                "the reason is printed, and the session is never held up by a tracker lookup.",
-                "Use --clear-ticket to go back to collecting general work with no ticket attached.",
-                "Use --topic/--intent/--phase for planning, discovery, and learning work that has no ticket yet.",
-                "Supported intents: implementation, bug_fix, root_cause_analysis, planning, discovery, review, testing, documentation, release, learning, coordination, maintenance, analysis, unknown, other.",
-                "Supported phases: planning, discovery, implementation, debugging, review, testing, documentation, release, handoff, analysis, unknown, other.",
-                "`--repo <path>` remains supported as a backward-compatible alias; use --workspace in agent guidance.",
-            ],
+            "Usage: cockpit start [--ticket <id>|--clear-ticket] [--topic <label>] [--topic-summary <summary>] [--intent <intent>] [--phase <phase>] [--intent-confidence <0..1>] [--workspace <path>] [--branch <name>] [--json]",
+            "",
+            "Starts collecting your work in the background. If you point it at a parent folder it covers every repo inside.",
+            "Add --ticket only when the work already has a visible ticket; omit it to preserve an existing binding.",
+            "--ticket takes EITHER tracker's id while both are running: a Tower issue (BLI-10000 and up, `cockpit issue list`)",
+            "or a Linear ticket. Tower is asked which row the id names, and the context records both ids when a row proves the pair —",
+            "a Tower-native issue whose title ends in `[BLI-3779]` mirrors that Linear ticket. An id Tower cannot place still binds:",
+            "the reason is printed, and the session is never held up by a tracker lookup.",
+            "Use --clear-ticket to go back to collecting general work with no ticket attached.",
+            "Use --topic/--intent/--phase for planning, discovery, and learning work that has no ticket yet.",
+            "Supported intents: implementation, bug_fix, root_cause_analysis, planning, discovery, review, testing, documentation, release, learning, coordination, maintenance, analysis, unknown, other.",
+            "Supported phases: planning, discovery, implementation, debugging, review, testing, documentation, release, handoff, analysis, unknown, other.",
+            "`--repo <path>` remains supported as a backward-compatible alias; use --workspace in agent guidance.",
         ],
+    ],
+    [
+        "sync",
         [
-            "sync",
-            [
-                "Usage: cockpit sync [--workspace <path>] [--dashboard-url <url>] [--json]",
-                "",
-                "Uploads your latest collected work. If it cannot reach Tower it saves a retry and tries again later.",
-                "Omit --dashboard-url for normal production sync; pass it only for staging/custom dashboards or forced re-pairing.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-                "Parent folders sync each child git worktree; Codex AND Claude Code JSONL",
-                "transcripts (and Claude subagent sidecars) are attributed to repos",
-                "deterministically and ambiguous transcripts are retained as unattributed",
-                "instead of being duplicated across repos. Use `cockpit sessions` to see why",
-                "a session is or is not collected.",
-                "New repos start being collected automatically, with no ticket attached.",
-                "Discovery scans 3 folder levels and up to 50 repos by default; tune with",
-                "--max-depth and --max-repos.",
-                "Also self-updates the CLI from npm latest once per day, strictly after",
-                "collection finishes; set COCKPIT_DISABLE_AUTO_UPDATE=1 to freeze the",
-                "installed version during incident triage.",
-            ],
+            "Usage: cockpit sync [--workspace <path>] [--dashboard-url <url>] [--json]",
+            "",
+            "Uploads your latest collected work. If it cannot reach Tower it saves a retry and tries again later.",
+            "Omit --dashboard-url for normal production sync; pass it only for staging/custom dashboards or forced re-pairing.",
+            "`--repo <path>` remains supported as a backward-compatible alias.",
+            "Parent folders sync each child git worktree; Codex AND Claude Code JSONL",
+            "transcripts (and Claude subagent sidecars) are attributed to repos",
+            "deterministically and ambiguous transcripts are retained as unattributed",
+            "instead of being duplicated across repos. Use `cockpit sessions` to see why",
+            "a session is or is not collected.",
+            "New repos start being collected automatically, with no ticket attached.",
+            "Discovery scans 3 folder levels and up to 50 repos by default; tune with",
+            "--max-depth and --max-repos.",
+            "Also self-updates the CLI from npm latest once per day, strictly after",
+            "collection finishes; set COCKPIT_DISABLE_AUTO_UPDATE=1 to freeze the",
+            "installed version during incident triage.",
         ],
+    ],
+    [
+        "analyze",
         [
-            "analyze",
-            [
-                "Usage: cockpit analyze [--workspace <path>] [--dashboard-url <url>] [--json]",
-                "",
-                "Uploads your latest collected work, then asks Tower to analyse it.",
-                "The command returns after the batch is queued; view status and results in My Work.",
-                "Omit --dashboard-url for production; pass it only for staging/custom dashboards.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-            ],
+            "Usage: cockpit analyze [--workspace <path>] [--dashboard-url <url>] [--json]",
+            "",
+            "Uploads your latest collected work, then asks Tower to analyse it.",
+            "The command returns after the batch is queued; view status and results in My Work.",
+            "Omit --dashboard-url for production; pass it only for staging/custom dashboards.",
+            "`--repo <path>` remains supported as a backward-compatible alias.",
         ],
-        // BLI-10445: JARVIS, models, Scout and ops live in `local-help-commands-tower-ops.ts`;
-        // slack, workbook, brief, notes and memory joined `local-help-commands-tower.ts`.
-        ...TOWER_OPS_COMMAND_HELP,
+    ],
+    // BLI-10445: JARVIS, models, Scout and ops live in `local-help-commands-tower-ops.ts`;
+    // slack, workbook, brief, notes and memory joined `local-help-commands-tower.ts`.
+    ...TOWER_OPS_COMMAND_HELP,
+    [
+        "correct",
         [
-            "correct",
-            [
-                "Usage: cockpit correct --claim <claimId> --text \"<what is wrong>\" [--for <person>] [--version <pageId>] [--supersedes <id>] [--dashboard-url <url>] [--json]",
-                "",
-                "Tells Tower that one line on the page is wrong. Same door the website's correction form uses.",
-                "Get the claim id from `cockpit brief --claims`; an id the page does not carry is refused before anything is written.",
-                "--text may be omitted when the correction is piped in on stdin.",
-                "The claim is checked against the live record FIRST. If the record disagrees, JARVIS says so and the correction is still filed with that outcome on it.",
-                "--supersedes <correctionId> takes an earlier correction back; nothing is ever edited or deleted.",
-            ],
+            "Usage: cockpit correct --claim <claimId> --text \"<what is wrong>\" [--for <person>] [--version <pageId>] [--supersedes <id>] [--dashboard-url <url>] [--json]",
+            "",
+            "Tells Tower that one line on the page is wrong. Same door the website's correction form uses.",
+            "Get the claim id from `cockpit brief --claims`; an id the page does not carry is refused before anything is written.",
+            "--text may be omitted when the correction is piped in on stdin.",
+            "The claim is checked against the live record FIRST. If the record disagrees, JARVIS says so and the correction is still filed with that outcome on it.",
+            "--supersedes <correctionId> takes an earlier correction back; nothing is ever edited or deleted.",
         ],
+    ],
+    [
+        "backfill",
         [
-            "backfill",
-            [
-                "Usage: cockpit backfill (--since-days <n>|--all) [--source codex|claude] [--dry-run] [--max-files <n>] [--max-depth <n>] [--max-repos <n>] [--lock-wait <seconds>] [--yes] [--workspace <path>] [--json]",
-                "",
-                "Backfills historical Codex and Claude Code session evidence using the saved collection roots from local config when --workspace is omitted.",
-                "Omit --source to scan both sources; there is no --source all literal.",
-                "The non-all window is capped at the collector session paired_at timestamp.",
-                "--all requires a dry-run review and TTY confirmation; pass --yes for headless agent runs.",
-                "Repo discovery scans 3 folder levels and up to 50 repos by default.",
-                "Raise --max-depth or --max-repos when a partial result reports a discovery cap.",
-                "--dry-run validates the paired collector and dashboard reachability, prints the same summary tables, and writes nothing.",
-                "Sessions outside every saved root upload too, labelled outside; only an explicit opt-out withholds a session.",
-                "When the scheduled sync holds the collection lock, backfill waits up to --lock-wait seconds (default 600) and exits 1 with sync_lock_held if it never frees.",
-            ],
+            "Usage: cockpit backfill (--since-days <n>|--all) [--source codex|claude] [--dry-run] [--max-files <n>] [--max-depth <n>] [--max-repos <n>] [--lock-wait <seconds>] [--yes] [--workspace <path>] [--json]",
+            "",
+            "Backfills historical Codex and Claude Code session evidence using the saved collection roots from local config when --workspace is omitted.",
+            "Omit --source to scan both sources; there is no --source all literal.",
+            "The non-all window is capped at the collector session paired_at timestamp.",
+            "--all requires a dry-run review and TTY confirmation; pass --yes for headless agent runs.",
+            "Repo discovery scans 3 folder levels and up to 50 repos by default.",
+            "Raise --max-depth or --max-repos when a partial result reports a discovery cap.",
+            "--dry-run validates the paired collector and dashboard reachability, prints the same summary tables, and writes nothing.",
+            "Sessions outside every saved root upload too, labelled outside; only an explicit opt-out withholds a session.",
+            "When the scheduled sync holds the collection lock, backfill waits up to --lock-wait seconds (default 600) and exits 1 with sync_lock_held if it never frees.",
         ],
+    ],
+    [
+        "status",
         [
-            "status",
-            [
-                "Usage: cockpit status [--workspace <path>] [--json]",
-                "",
-                "Prints install, pairing, active work, upload, and retry state.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-            ],
+            "Usage: cockpit status [--workspace <path>] [--json]",
+            "",
+            "Prints install, pairing, active work, upload, and retry state.",
+            "`--repo <path>` remains supported as a backward-compatible alias.",
         ],
+    ],
+    [
+        "sessions",
         [
-            "sessions",
-            [
-                "Usage: cockpit sessions [--source codex|claude] [--since-days <n>|--all] [--workspace <path>] [--json]",
-                "",
-                "Read-only: re-runs Codex + Claude session attribution and prints each",
-                "session's id, source, state, reason, scores, signals, and per-sidecar",
-                "skip reasons. No upload, no cursor writes. Answers \"why is session X",
-                "missing?\" locally — counts and labels only, never paths or content.",
-                "--since-days uses the same paired_at cap as `cockpit backfill`; --all scans the full local history.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-            ],
+            "Usage: cockpit sessions [--source codex|claude] [--since-days <n>|--all] [--workspace <path>] [--json]",
+            "",
+            "Read-only: re-runs Codex + Claude session attribution and prints each",
+            "session's id, source, state, reason, scores, signals, and per-sidecar",
+            "skip reasons. No upload, no cursor writes. Answers \"why is session X",
+            "missing?\" locally — counts and labels only, never paths or content.",
+            "--since-days uses the same paired_at cap as `cockpit backfill`; --all scans the full local history.",
+            "`--repo <path>` remains supported as a backward-compatible alias.",
         ],
+    ],
+    [
+        "serve",
         [
-            "serve",
-            [
-                "Usage: cockpit serve [--port <port>] [--workspace <path>]",
-                "",
-                "Starts the local collector HTTP status server.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-            ],
+            "Usage: cockpit serve [--port <port>] [--workspace <path>]",
+            "",
+            "Starts the local collector HTTP status server.",
+            "`--repo <path>` remains supported as a backward-compatible alias.",
         ],
+    ],
+    [
+        "autostart",
         [
-            "autostart",
-            [
-                "Usage: cockpit autostart [install|uninstall|status] [--workspace <path>] [--dashboard-url <url>] [--interval-seconds <n>] [--json]",
-                "",
-                "Installs background sync through launchd on Apple Silicon macOS or a",
-                "per-user Task Scheduler task on native Windows.",
-                "Runs `cockpit sync` every 15 min by default and survives reboots;",
-                "the Windows task runs while the user is signed in.",
-                "Action defaults to `install`. `--workspace` is the parent work folder to sync.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-                "Omit --dashboard-url for production; pass it only for staging/custom dashboards.",
-                "See docs/runbooks/cockpit-launchd-sync.md and",
-                "docs/runbooks/cockpit-windows-task-scheduler-sync.md.",
-            ],
+            "Usage: cockpit autostart [install|uninstall|status] [--workspace <path>] [--dashboard-url <url>] [--interval-seconds <n>] [--json]",
+            "",
+            "Installs background sync through launchd on Apple Silicon macOS or a",
+            "per-user Task Scheduler task on native Windows.",
+            "Runs `cockpit sync` every 15 min by default and survives reboots;",
+            "the Windows task runs while the user is signed in.",
+            "Action defaults to `install`. `--workspace` is the parent work folder to sync.",
+            "`--repo <path>` remains supported as a backward-compatible alias.",
+            "Omit --dashboard-url for production; pass it only for staging/custom dashboards.",
+            "See docs/runbooks/cockpit-launchd-sync.md and",
+            "docs/runbooks/cockpit-windows-task-scheduler-sync.md.",
         ],
+    ],
+    [
+        "agent-rules",
         [
-            "agent-rules",
-            [
-                "Usage: cockpit agent-rules [install|uninstall|status] [--host codex|claude|all] [--workspace <path>] [--json]",
-                "",
-                "Installs a managed Tower-first block into ~/.codex/AGENTS.md",
-                "and ~/.claude/CLAUDE.md by default. Pass --host to manage only one.",
-                "The block is scoped to --workspace, or the current directory when omitted,",
-                "so ticketed work only binds inside that onboarded folder.",
-                "If CLAUDE.md already includes ~/.codex/AGENTS.md and both hosts are",
-                "installed together, CLAUDE.md is left to the include instead of duplicating it.",
-                "Action defaults to `install`.",
-            ],
+            "Usage: cockpit agent-rules [install|uninstall|status] [--host codex|claude|all] [--workspace <path>] [--json]",
+            "",
+            "Installs a managed Tower-first block into ~/.codex/AGENTS.md",
+            "and ~/.claude/CLAUDE.md by default. Pass --host to manage only one.",
+            "The block is scoped to --workspace, or the current directory when omitted,",
+            "so ticketed work only binds inside that onboarded folder.",
+            "If CLAUDE.md already includes ~/.codex/AGENTS.md and both hosts are",
+            "installed together, CLAUDE.md is left to the include instead of duplicating it.",
+            "Action defaults to `install`.",
         ],
+    ],
+    [
+        "clean",
         [
-            "clean",
-            [
-                "Usage: cockpit clean [--dry-run] [--all-committed] [--reconcile] [--dashboard-url <url>] [--json]",
-                "",
-                "Reclaims this machine's disk. Prints what it would delete and why, per bucket,",
-                "then deletes: a staged copy Tower has already accepted goes (a retry re-reads",
-                "the source file), and anything the upload ledger has NOT vouched for is kept,",
-                "counted and named — retention never deletes undelivered evidence.",
-                "--dry-run stops after the printing. --all-committed drops any retry window set",
-                "with COCKPIT_STAGING_RETENTION_HOURS, so every already-accepted copy goes now, and is the only thing that removes a",
-                "manual-study-evidence-vault folder (and only when every file in it is accepted).",
-                "--reconcile asks Tower's own upload ledger about every object this machine's",
-                "local memory can no longer classify (\"unknown\") before the buckets print — a",
-                "confirmed-committed pack prunes under the ordinary rule this same run; a pack",
-                "the server has never seen becomes an ordinary, never-deleted \"uncommitted\"",
-                "object instead of \"unknown\". A server failure never blocks the rest of clean",
-                "and is printed on its own line. Combine with --dry-run to ask and print",
-                "without deleting.",
-                "The scheduled sync does the same prune on every tick (reconciling one batch first",
-                "when there is anything unknown); this is the door for \"show me\" and for a",
-                "laptop that has been off.",
-            ],
+            "Usage: cockpit clean [--dry-run] [--all-committed] [--reconcile] [--dashboard-url <url>] [--json]",
+            "",
+            "Reclaims this machine's disk. Prints what it would delete and why, per bucket,",
+            "then deletes: a staged copy Tower has already accepted goes (a retry re-reads",
+            "the source file), and anything the upload ledger has NOT vouched for is kept,",
+            "counted and named — retention never deletes undelivered evidence.",
+            "--dry-run stops after the printing. --all-committed drops any retry window set",
+            "with COCKPIT_STAGING_RETENTION_HOURS, so every already-accepted copy goes now, and is the only thing that removes a",
+            "manual-study-evidence-vault folder (and only when every file in it is accepted).",
+            "--reconcile asks Tower's own upload ledger about every object this machine's",
+            "local memory can no longer classify (\"unknown\") before the buckets print — a",
+            "confirmed-committed pack prunes under the ordinary rule this same run; a pack",
+            "the server has never seen becomes an ordinary, never-deleted \"uncommitted\"",
+            "object instead of \"unknown\". A server failure never blocks the rest of clean",
+            "and is printed on its own line. Combine with --dry-run to ask and print",
+            "without deleting.",
+            "The scheduled sync does the same prune on every tick (reconciling one batch first",
+            "when there is anything unknown); this is the door for \"show me\" and for a",
+            "laptop that has been off.",
         ],
+    ],
+    [
+        "sources",
         [
-            "sources",
-            [
-                "Usage: cockpit sources check [--older-than <days>] [--dashboard-url <url>] [--json]",
-                "",
-                "Answers, for every Codex and Claude transcript on this machine, whether Tower",
-                "holds it: stored in full, stored in part, or not stored, with the reason.",
-                "--older-than <days> checks only files not modified in that many days.",
-                "--json lists every file with its path, verdict and reason.",
-                "Read-only. Tower never deletes these files; deleting one is your own act.",
-                "Before deleting any transcript by hand, run this and delete only files it",
-                "answers \"stored in full\". See docs/runbooks/freeing-disk-on-a-collector-machine.md.",
-            ],
+            "Usage: cockpit sources check [--older-than <days>] [--dashboard-url <url>] [--json]",
+            "",
+            "Answers, for every Codex and Claude transcript on this machine, whether Tower",
+            "holds it: stored in full, stored in part, or not stored, with the reason.",
+            "--older-than <days> checks only files not modified in that many days.",
+            "--json lists every file with its path, verdict and reason.",
+            "Read-only. Tower never deletes these files; deleting one is your own act.",
+            "Before deleting any transcript by hand, run this and delete only files it",
+            "answers \"stored in full\". See docs/runbooks/freeing-disk-on-a-collector-machine.md.",
         ],
+    ],
+    [
+        "release",
         [
-            "release",
-            [
-                "Usage: cockpit release [--dry-run] [--skip-checks] [--no-floor] [--tag <tag>] [--access <public|restricted>] [--otp <code>]",
-                "",
-                "Maintainer-only helper. Run from inside the bli-cockpit repo checkout.",
-                "Requires a clean `main` branch and runs `git pull --ff-only` before publishing.",
-                "Delegates to `npm run publish:public -- ...` so public packages are",
-                "built, checked, and published in the safe telemetry-core then CLI order.",
-                "A successful --tag latest publish raises the fleet forced-update floor so",
-                "every collector pulls the new CLI on its next sync tick; --no-floor skips",
-                "that for a staged rollout, and --tag next never touches it.",
-            ],
+            "Usage: cockpit release [--dry-run] [--skip-checks] [--no-floor] [--tag <tag>] [--access <public|restricted>] [--otp <code>]",
+            "",
+            "Maintainer-only helper. Run from inside the bli-cockpit repo checkout.",
+            "Requires a clean `main` branch and runs `git pull --ff-only` before publishing.",
+            "Delegates to `npm run publish:public -- ...` so public packages are",
+            "built, checked, and published in the safe telemetry-core then CLI order.",
+            "A successful --tag latest publish raises the fleet forced-update floor so",
+            "every collector pulls the new CLI on its next sync tick; --no-floor skips",
+            "that for a staged rollout, and --tag next never touches it.",
         ],
-    ]);
+    ],
+]);
+export function localSubcommandHelp(command) {
     // BLI-10431: a Tower page name answers with its own usage line first, then
     // the manual of the noun it routes to, so `cockpit work --help` names every
     // ticket verb instead of `Unknown command: work`.
@@ -421,8 +422,8 @@ export function localSubcommandHelp(command) {
             `\`cockpit ${command}\` is the Tower page's name for \`cockpit ${aliasTarget}\`; both spellings run the same command.`,
             ...(aliasTarget === "issue" ? ["Projects the Tower tickets are filed under: `cockpit project list`."] : []),
             "",
-            ...(helpByCommand.get(aliasTarget) ?? [localCommandHelp()]),
+            ...(COMMAND_HELP.get(aliasTarget) ?? [localCommandHelp()]),
         ].join("\n");
     }
-    return (helpByCommand.get(command) ?? [localCommandHelp()]).join("\n");
+    return (COMMAND_HELP.get(command) ?? [localCommandHelp()]).join("\n");
 }