@bli-cockpit/cli 0.2.239 → 0.2.241

package/dist/commands/local-args-tower-manager.js

@@ -4,27 +4,33 @@
  *   cockpit manager clients
  *   cockpit manager client <client>
  *   cockpit manager home <client>
- *   cockpit manager summary <client> --version <v>|none [--health on_track|at_risk|blocked] [--headline <t>] [--bullet "YYYY-MM-DD: t"|"t"]... [--next <t>|none] [--blocker <t>|none]
+ *   cockpit manager summary <client> --version <v>|none [--health on_track|at_risk|blocked] [--headline <t>] [--bullet 'YYYY-MM-DD: t'|'t']... [--next <t>|none] [--blocker <t>|none]
  *   cockpit manager run <run-id>
  *   cockpit manager list <client> [--timeline] [--needs-review] [--status open|done|dropped|closed|all] [--owner <name> | --no-owner] [--overdue] [--kind <kind>] [--search <text>] [--archived] [--review dismissed|all]
  *   cockpit manager queue <client>
  *   cockpit manager show <id> [--timeline]
- *   cockpit manager add <client> --title <t> [--owners "A, B"] [--due YYYY-MM-DD] [--meeting <timeline-id>] [--detail <text>] [--source-url <url>] [--source-note <text>] [--request-id <uuid>]
+ *   cockpit manager add <client> --title <t> [--owners 'A, B'] [--due YYYY-MM-DD] [--meeting <timeline-id>] [--detail <text>] [--source-url <url>] [--source-note <text>] [--request-id <uuid>]
  *   cockpit manager add <client> --timeline --kind <kind> --title <t> [--date YYYY-MM-DD] [--owner <one name>] [--detail <text>] [--source-url <url>] [--source-note <text>] [--request-id <uuid>]
- *   cockpit manager edit <id> --version <v> [--timeline] [--title] [--detail] [--due <date>|none] [--owners "A, B"|none]
+ *   cockpit manager edit <id> --version <v> [--timeline] [--title] [--detail] [--due <date>|none] [--owners 'A, B'|none]
  *                            (timeline: --kind, --date <date>|none, --owner <one name>|none)
- *   cockpit manager done|reopen <action> --version <v>
+ *   cockpit manager done|drop|reopen <action> --version <v>
  *   cockpit manager link <action> --version <v> --meeting <timeline-id> | --none
  *   cockpit manager approve <id> --version <v> [--timeline] [--restore]   (--restore brings a dismissed item back)
  *   cockpit manager dismiss|archive|unarchive <id> --version <v> [--timeline]
  *   cockpit manager proposal <id> <proposal-id> accept|dismiss|add-new --version <v> [--timeline]
  *
+ * Free text goes in a JSON file or on stdin with `--fields-file <path>|-` on add, edit and summary (no shell quoting at all,
+ * `manager-fields-file.ts`); on a flag it goes in SINGLE quotes (the shell leaves `$` alone) and the help says how to write
+ * an apostrophe. The parser is synchronous and a file is not: `--fields-file` parses to a command that carries `fieldsFile`
+ * and `rawArgs`, and `runManager` reads the file and parses the same args again with its text (`options.fieldsText`).
  * Every verb is one `/api/manager` door on this machine's device token. A bare `cockpit manager`,
  * `help` and `--help` are the help, never a list and never another command.
  */
-import { optionalNonEmpty, optionalUrl, parseNamedArgs } from "./local-arg-values.js";
+import { optionalNonEmpty, optionalUrl, parseNamedArgs, rejectSecretLikeValue } from "./local-arg-values.js";
+import { mergeFieldsFile } from "./manager-fields-file.js";
+import { runIdRefusal } from "./manager-hints.js";
 export const MANAGER_VERBS = [
-    "clients", "client", "home", "summary", "run", "list", "queue", "show", "add", "edit", "done", "reopen", "link",
+    "clients", "client", "home", "summary", "run", "list", "queue", "show", "add", "edit", "done", "drop", "reopen", "link",
     "approve", "dismiss", "proposal", "archive", "unarchive",
 ];
 export const MANAGER_ACTION_STATUSES = ["open", "done", "dropped", "closed", "all"];
@@ -38,14 +44,16 @@ const ONE_VERB = `manager takes one verb: ${MANAGER_VERBS.join(", ")}. Example:
 const OWN_FLAGS = [
     "--timeline", "--needs-review", "--status", "--owner", "--owners", "--no-owner", "--kind", "--search", "--archived", "--review",
     "--title", "--detail", "--due", "--date", "--meeting", "--none", "--version", "--request-id", "--restore", "--overdue", "--source-url", "--source-note",
-    "--health", "--headline", "--bullet", "--next", "--blocker",
+    "--health", "--headline", "--bullet", "--next", "--blocker", "--fields-file",
 ];
 const COMMON_FLAGS = ["--home", "--dashboard-url", "--json", "--help"];
 const VALUE_FLAGS = [
     "--status", "--owner", "--owners", "--kind", "--search", "--review", "--title", "--detail", "--due", "--date", "--meeting",
     "--version", "--request-id", "--source-url", "--source-note", "--home", "--dashboard-url",
-    "--health", "--headline", "--bullet", "--next", "--blocker",
+    "--health", "--headline", "--bullet", "--next", "--blocker", "--fields-file",
 ];
+/** The flags whose value is a person's own words (not an id, a version or a choice). */
+const TEXT_FLAGS = ["--title", "--detail", "--headline", "--bullet", "--next", "--blocker", "--owners", "--owner", "--source-note", "--source-url"];
 /** `summary --bullet` is given once per bullet: the one value flag that may repeat. */
 const REPEATABLE_FLAGS = new Set(["--bullet"]);
 /** Which flags each verb owns, so a flag on the wrong verb is refused by name rather than ignored. */
@@ -53,14 +61,15 @@ export const FLAGS_BY_VERB = {
     clients: [],
     client: [],
     home: [],
-    summary: ["--version", "--health", "--headline", "--bullet", "--next", "--blocker"],
+    summary: ["--version", "--health", "--headline", "--bullet", "--next", "--blocker", "--fields-file"],
     run: [],
     list: ["--timeline", "--needs-review", "--status", "--owner", "--no-owner", "--overdue", "--kind", "--search", "--archived", "--review"],
     queue: [],
     show: ["--timeline"],
-    add: ["--timeline", "--title", "--detail", "--owners", "--owner", "--due", "--meeting", "--kind", "--date", "--source-url", "--source-note", "--request-id"],
-    edit: ["--timeline", "--version", "--title", "--detail", "--owners", "--owner", "--due", "--kind", "--date"],
+    add: ["--timeline", "--title", "--detail", "--owners", "--owner", "--due", "--meeting", "--kind", "--date", "--source-url", "--source-note", "--request-id", "--fields-file"],
+    edit: ["--timeline", "--version", "--title", "--detail", "--owners", "--owner", "--due", "--kind", "--date", "--fields-file"],
     done: ["--version"],
+    drop: ["--version"],
     reopen: ["--version"],
     link: ["--version", "--meeting", "--none"],
     approve: ["--timeline", "--version", "--restore"],
@@ -82,6 +91,7 @@ const POSITIONALS = {
     add: ["client"],
     edit: ["id"],
     done: ["action id"],
+    drop: ["action id"],
     reopen: ["action id"],
     link: ["action id"],
     approve: ["id"],
@@ -103,9 +113,13 @@ function refuseRepeatedFlags(args) {
         }
     }
 }
-export function parseManagerArgs(args) {
+export function parseManagerArgs(args, options = {}) {
     refuseRepeatedFlags(args);
     const values = parseNamedArgs(args, { allowedFlags: [...OWN_FLAGS, ...COMMON_FLAGS], valueFlags: VALUE_FLAGS });
+    // Free text is the one place a key could be pasted by mistake: the wider secret rulebook runs on these flags (and on a fields file's values), no other command's.
+    for (const flag of TEXT_FLAGS)
+        for (const value of values.flagValues.get(flag) ?? [])
+            rejectSecretLikeValue(value, flag);
     const base = {
         kind: "manager",
         dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")),
@@ -136,9 +150,9 @@ export function parseManagerArgs(args) {
     if (CLIENT_VERBS.has(verb))
         shape.client = rest[0];
     else if (verb === "run")
-        shape.runId = readId(rest[0], "A run");
+        shape.runId = readRunId(rest[0]);
     else if (verb !== "clients")
-        shape.id = readId(rest[0], verb === "done" || verb === "reopen" || verb === "link" ? "An action" : "An item");
+        shape.id = readId(rest[0], verb === "done" || verb === "drop" || verb === "reopen" || verb === "link" ? "An action" : "An item");
     if (verb === "proposal") {
         shape.proposalId = rest[1];
         shape.decision = readDecision(rest[2]);
@@ -146,8 +160,16 @@ export function parseManagerArgs(args) {
     const needsVersion = !["clients", "client", "home", "summary", "run", "list", "queue", "show", "add"].includes(verb);
     if (needsVersion)
         shape.version = readVersion(flag("--version"), verb);
+    let fileBullets;
+    const fieldsFile = flag("--fields-file");
+    if (fieldsFile !== undefined && (verb === "add" || verb === "edit" || verb === "summary")) {
+        // Not read yet: `runManager` reads the file (or stdin) and parses these same args again with its text.
+        if (options.fieldsText === undefined)
+            return { ...shape, fieldsFile, rawArgs: args };
+        fileBullets = mergeFieldsFile(values, verb, options.fieldsText).bullets;
+    }
     if (verb === "summary")
-        readSummaryFields(values, shape);
+        readSummaryFields(values, shape, fileBullets);
     if (verb === "list")
         readListFilters(values, shape);
     if (verb === "add")
@@ -160,6 +182,12 @@ export function parseManagerArgs(args) {
         shape.restore = true;
     return shape;
 }
+/** A run's receipt id: a uuid. Anything else is refused with where run ids really come from (a read's workflow id, `sched_wf_…`, is named for what it is). */
+function readRunId(value) {
+    if (!ID.test(value))
+        throw new Error(runIdRefusal(value));
+    return value;
+}
 function readId(value, what) {
     if (!ID.test(value))
         throw new Error(`${what} id looks like 8f14e45f-ceea-467a-9575-1d3a4e7b2c10 (\`cockpit manager list <client>\` prints them).`);
@@ -253,13 +281,24 @@ function refuseWrongItemFlags(values, shape) {
     }
     else {
         if (given("--owner"))
-            throw new Error("An action has several owners: use --owners \"A, B\" (or --owners none). --owner is for a timeline item.");
+            throw new Error("An action has several owners: use --owners 'A, B' (or --owners none). --owner is for a timeline item.");
         const item = ["--kind", "--date"].find(given);
         if (item)
             throw new Error(`${item} belongs to a timeline item. Add --timeline, or use --due for an action's date.`);
     }
 }
+/** A day written with a month name at the start of a bullet: "Oct 3:", "Sat, Oct 3rd, 2026:", "3 October:". */
+const MONTH = "(?:jan(?:uary)?|feb(?:ruary)?|mar(?:ch)?|apr(?:il)?|may|june?|july?|aug(?:ust)?|sep(?:t(?:ember)?)?|oct(?:ober)?|nov(?:ember)?|dec(?:ember)?)\\.?";
+const MONTH_NAME_DAY = new RegExp(`^((?:(?:mon|tue|wed|thu|fri|sat|sun)[a-z]*\\.?,?\\s+)?(?:${MONTH}\\s+\\d{1,2}(?:st|nd|rd|th)?|\\d{1,2}(?:st|nd|rd|th)?\\s+${MONTH})(?:,?\\s+\\d{4})?)\\s*:`, "i");
 const isNone = (value) => value.trim().toLowerCase() === "none";
+/**
+ * Nothing a person can read: empty, whitespace, or only invisible characters, the same set the server's "Where we are"
+ * blank test reads as invisible (`summary-answer.ts` INVISIBLE: default-ignorable code points, format characters,
+ * combining marks such as U+FE0F and U+034F, the Hangul fillers and the blank braille U+2800), plus control characters.
+ * `trim()` alone leaves U+FE0F and U+200B behind, so free text that looks empty used to be sent (and, as --next, cleared
+ * the field while the terminal said "Saved").
+ */
+const isBlank = (value) => /^[\s\p{Z}\p{Cc}\p{Default_Ignorable_Code_Point}\p{Cf}\p{M}\u115F\u1160\u3164\uFFA0\u2800]*$/u.test(value);
 /** `--owners "A, B"` replaces the whole list; `none` is the only way to clear it; a list of blanks is neither. */
 function readOwnersList(raw) {
     if (isNone(raw))
@@ -282,7 +321,11 @@ function readOneOwner(raw) {
 }
 function readAddFields(values, shape) {
     refuseWrongItemFlags(values, shape);
-    const title = optionalNonEmpty(values.flags.get("--title"));
+    const raw = values.flags.get("--title");
+    // A title of only invisible characters (U+200B, U+FE0F, U+3164 …) shows nothing: refused as blank, like edit's.
+    if (raw !== undefined && raw.trim() !== "" && isBlank(raw))
+        throw new Error("--title cannot be blank.");
+    const title = optionalNonEmpty(raw);
     if (!title)
         throw new Error("`cockpit manager add` needs --title <text>.");
     shape.title = title;
@@ -338,7 +381,7 @@ function readEditFields(values, shape) {
     let changes = 0;
     const title = values.flags.get("--title");
     if (title !== undefined) {
-        if (title.trim() === "")
+        if (isBlank(title))
             throw new Error("--title cannot be blank.");
         shape.title = title.trim();
         changes += 1;
@@ -397,24 +440,69 @@ function readSummaryVersion(raw) {
         throw new Error("--version is the card's summary.updatedAt exactly as `cockpit manager home <client> --json` gives it, like 2026-10-09T17:03:11.123456+00:00, or none.");
     return raw;
 }
-/** `--bullet "2026-10-14: Signed the SOW"` is a dated bullet; without a leading `YYYY-MM-DD: ` it is undated. */
+/**
+ * The card's text limits, in characters (code points), as the help and the server's `TOWER_MANAGER_SUMMARY_LIMITS` say
+ * (`manager-cli-limits.test.ts` in the dashboard fails when they differ). Checked here so a long text is refused by this
+ * sentence, not by the server's raw schema message ("String must contain at most 4000 character(s)") that a text over 4,000 reaches first.
+ */
+export const SUMMARY_TEXT_LIMITS = { headline: 140, bullet: 160, next: 200, blocker: 200 };
+function refuseTooLong(flag, text, max) {
+    const length = [...text].length;
+    if (length > max)
+        throw new Error(`${flag} is ${length.toLocaleString("en-US")} characters; at most ${max}. Shorten it.`);
+}
+/** `--bullet '2026-10-14: Signed the SOW'` is a dated bullet; without a leading `YYYY-MM-DD: ` it is undated. */
 export function readBullet(raw) {
     // A bullet pasted from a list keeps no "- " or "* " of its own.
     const value = raw.trim().replace(/^[-*•]\s+/u, "");
-    const dated = /^(\d{4}-\d{2}-\d{2}):\s*(.*)$/s.exec(value);
-    const dateLike = dated ? null : /^(\d{1,4}[-/.]\d{1,2}[-/.]\d{1,4})\s*:/.exec(value);
+    const dated = /^(\d{4}-\d{2}-\d{2})\s*:\s*(.*)$/s.exec(value);
+    // A shape of digits split by dashes or slashes was always read as a mistyped day ("26-10-01:", "10/14/2026:",
+    // "2026-10/14:"). A DOT only counts with a 4-digit year: first and then dash/slash or dot ("2026-10.14:",
+    // "2026.10.14:"), or last in a dotted-only shape ("14.10.2026:"). Short ranges ("1-2.5:", "9-10.30:") and
+    // versions ("2.1.0:") are plain text.
+    const dateLike = dated ? null : /^(\d{1,4}[-/]\d{1,2}[-/]\d{1,4}|\d{4}[-/]\d{1,2}\.\d{1,4}|\d{4}\.\d{1,2}\.\d{1,2}|\d{1,2}\.\d{1,2}\.\d{4})\s*:/.exec(value);
     if (dateLike)
         throw new Error(`--bullet "${raw}" starts with ${dateLike[1]}, which is not a YYYY-MM-DD day. Write it like 2026-10-14, or leave the date out for an undated bullet.`);
+    // A day spelled with a month name ("Oct 3: x", "3 October 2026: x") is a date too: saved undated it would lose the day without a word.
+    const worded = dated ? null : MONTH_NAME_DAY.exec(value);
+    if (worded)
+        throw new Error(`--bullet "${raw}" starts with ${worded[1].trim()}, which looks like a date but is not YYYY-MM-DD. Write it like 2026-10-14 to date the bullet, or reword the text so it does not start with a date.`);
     const date = dated ? dated[1] : null;
     const text = (dated ? dated[2] : value).trim();
     if (date !== null && !isCalendarDate(date))
         throw new Error(`--bullet "${raw}" starts with ${date}, which is not a real day. Write the date YYYY-MM-DD, like 2026-10-14, or leave it out for an undated bullet.`);
-    if (text === "")
-        throw new Error("--bullet needs words after its date. Example: --bullet \"2026-10-14: Signed the SOW\".");
+    return checkedBullet(date, text);
+}
+/** A bullet's words are never blank (the same rule for `--bullet` and a fields file's `{date, text}`). */
+function checkedBullet(date, text) {
+    if (isBlank(text)) {
+        throw new Error(date === null
+            ? "--bullet needs some words, and this one is empty. Example: --bullet 'Export still missing' (a day first makes it dated: --bullet '2026-10-14: Signed the SOW')."
+            : "--bullet needs words after its date. Example: --bullet '2026-10-14: Signed the SOW'.");
+    }
     return { date, text };
 }
+/**
+ * A fields file's `{date, text}` bullet. With a date, the date must be a real day and the text is the text. With none (null or
+ * left out), the text is read exactly like a `--bullet` value: a leading "YYYY-MM-DD: " dates it, a day spelled any other way is
+ * refused, never saved undated (the same rule MCP's manager_set_summary applies).
+ */
+function readObjectBullet(bullet) {
+    if (bullet.date === null)
+        return readBullet(bullet.text);
+    if (!isCalendarDate(bullet.date)) {
+        throw new Error(`A bullet's date "${bullet.date}" is not a real day. Write the date YYYY-MM-DD, like 2026-10-14, or null for an undated bullet.`);
+    }
+    return checkedBullet(bullet.date, bullet.text.trim());
+}
+/** --next and --blocker: text, or `none` to clear. A value with nothing readable in it is refused, never sent as a silent clear. */
+function readClearable(flag, raw) {
+    if (isBlank(raw))
+        throw new Error(`${flag} is blank, and a blank would clear it. To clear ${flag} write ${flag} none; otherwise give words.`);
+    return raw.trim();
+}
 /** The card's fields. Counts, lengths and "blocked needs a blocker" are the server's rules, refused there by name. */
-function readSummaryFields(values, shape) {
+function readSummaryFields(values, shape, fileBullets) {
     shape.version = readSummaryVersion(values.flags.get("--version"));
     let changes = 0;
     const health = values.flags.get("--health");
@@ -426,26 +514,38 @@ function readSummaryFields(values, shape) {
     }
     const headline = values.flags.get("--headline");
     if (headline !== undefined) {
-        if (headline.trim() === "")
+        if (isBlank(headline))
             throw new Error("--headline cannot be blank.");
+        refuseTooLong("--headline", headline.trim(), SUMMARY_TEXT_LIMITS.headline);
         shape.headline = headline.trim();
         changes += 1;
     }
     const bullets = values.flagValues.get("--bullet");
-    if (bullets !== undefined && bullets.length > 0) {
+    if (fileBullets !== undefined) {
+        // An empty list is a mistake, not "no change": the server wants 1 to 5 and refuses 0 by name.
+        shape.bullets = fileBullets.map((bullet) => (typeof bullet === "string" ? readBullet(bullet) : readObjectBullet(bullet)));
+        changes += 1;
+    }
+    else if (bullets !== undefined && bullets.length > 0) {
         shape.bullets = bullets.map(readBullet);
         changes += 1;
     }
+    for (const bullet of shape.bullets ?? [])
+        refuseTooLong("A bullet", bullet.text, SUMMARY_TEXT_LIMITS.bullet);
     const next = values.flags.get("--next");
     if (next !== undefined) {
-        shape.next = isNone(next) ? null : next.trim();
+        shape.next = isNone(next) ? null : readClearable("--next", next);
         changes += 1;
     }
     const blocker = values.flags.get("--blocker");
     if (blocker !== undefined) {
-        shape.blocker = isNone(blocker) ? null : blocker.trim();
+        shape.blocker = isNone(blocker) ? null : readClearable("--blocker", blocker);
         changes += 1;
     }
+    if (shape.next)
+        refuseTooLong("--next", shape.next, SUMMARY_TEXT_LIMITS.next);
+    if (shape.blocker)
+        refuseTooLong("--blocker", shape.blocker, SUMMARY_TEXT_LIMITS.blocker);
     if (changes === 0) {
         throw new Error("`cockpit manager summary` has nothing to change. Give at least one of --health, --headline, --bullet (1 to 5 of them, replacing the list), --next, --blocker. A flag you leave out keeps its value; none clears --next or --blocker.");
     }

package/dist/commands/local-args-tower-msg.js

@@ -1,5 +1,6 @@
 import { optionalNonEmpty, optionalPositiveInteger, optionalUrl, parseNamedArgs } from "./local-arg-values.js";
-const MSG_ACTIONS = new Set(["channels", "read", "send", "thread", "create", "dm", "show", "unread"]);
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const MSG_ACTIONS = new Set(["channels", "read", "send", "thread", "create", "dm", "show", "unread", "edit", "delete", "outcome"]);
 const MSG_ACTIONS_NEEDING_A_CHANNEL = new Set(["read", "send", "unread"]);
 /**
  * `--members a@x.test,b@y.test` — addresses only, split on commas, never
@@ -37,9 +38,14 @@ export function parseMsgArgs(args) {
             "--description",
             "--from",
             "--mark-read",
+            "--request-id",
+            "--expected-revision",
             "--json",
         ],
-        valueFlags: ["--home", "--dashboard-url", "--channel", "--thread", "--limit", "--members", "--description", "--before", "--from"],
+        valueFlags: [
+            "--home", "--dashboard-url", "--channel", "--thread", "--limit", "--members", "--description", "--before", "--from",
+            "--request-id", "--expected-revision",
+        ],
     });
     const { action, rest } = parseMsgAction(values.positionals);
     if (values.flags.has("--before") && action !== "read" && action !== "thread") {
@@ -49,7 +55,35 @@ export function parseMsgArgs(args) {
     const { channelName, dmEmail } = parseMsgCreateTarget(action, rest);
     const { isPrivate, memberEmails, description } = parseMsgCreateFlags(action, values);
     const { channelRef, threadId, limit } = parseMsgReadTarget(action, rest, values);
-    return buildMsgCommand(values, action, channelRef, channelName, dmEmail, memberEmails, description, isPrivate, threadId, limit, markRead, unreadFrom);
+    const writeSafety = parseMsgWriteSafety(action, rest, values);
+    return buildMsgCommand(values, action, channelRef, channelName, dmEmail, memberEmails, description, isPrivate, threadId, limit, markRead, unreadFrom, writeSafety);
+}
+/** `send|edit|delete --request-id`, `edit|delete --expected-revision`, and the id `edit`/`delete`/`outcome` name (BLI-21314). */
+function parseMsgWriteSafety(action, rest, values) {
+    const requestId = optionalNonEmpty(values.flags.get("--request-id"));
+    if (requestId && !UUID_PATTERN.test(requestId))
+        throw new Error("--request-id must be a UUID.");
+    if (requestId && action !== "send" && action !== "edit" && action !== "delete") {
+        throw new Error("--request-id belongs to `cockpit msg send`, `edit` or `delete`.");
+    }
+    const expectedRevision = optionalPositiveInteger(values.flags.get("--expected-revision"), "--expected-revision");
+    if (expectedRevision !== undefined && action !== "edit" && action !== "delete") {
+        throw new Error("--expected-revision belongs to `cockpit msg edit` or `delete`.");
+    }
+    let targetId;
+    if (action === "edit" || action === "delete" || action === "outcome") {
+        targetId = optionalNonEmpty(rest[0]);
+        if (!targetId) {
+            throw new Error(action === "outcome"
+                ? "msg outcome needs the request UUID, e.g. `cockpit msg outcome <request-uuid>`."
+                : `msg ${action} needs a message id, e.g. \`cockpit msg ${action} <message-id>\`.`);
+        }
+        if (rest.length > 1)
+            throw new Error(`msg ${action} takes one id, not ${rest.length}.`);
+        if (action === "outcome" && !UUID_PATTERN.test(targetId))
+            throw new Error("msg outcome takes a request UUID.");
+    }
+    return { targetId, requestId, expectedRevision };
 }
 /** `read --mark-read` and `unread --from <message-id>` (BLI-21299): the read line, moved on purpose. */
 function parseMsgReadLineFlags(action, values) {
@@ -68,7 +102,7 @@ function parseMsgAction(positionals) {
     const first = positionals[0];
     const action = (first === undefined ? "channels" : first);
     if (!MSG_ACTIONS.has(action)) {
-        throw new Error(`Unknown msg command: ${first}. Try channels, read, unread, send, thread, create, dm, or show.`);
+        throw new Error(`Unknown msg command: ${first}. Try channels, read, unread, send, thread, create, dm, or show; to change a message: edit, delete or outcome.`);
     }
     return { action, rest: positionals.slice(first === undefined ? 0 : 1) };
 }
@@ -129,7 +163,7 @@ function parseMsgReadTarget(action, rest, values) {
         if (rest.length > 1)
             throw new Error(`msg thread takes one thread id, not ${rest.length}.`);
     }
-    else if (action !== "create" && action !== "dm" && rest.length > 0) {
+    else if (action !== "create" && action !== "dm" && action !== "edit" && action !== "delete" && action !== "outcome" && rest.length > 0) {
         throw new Error(`msg ${action} does not take "${rest[0]}".`);
     }
     const threadFlag = optionalNonEmpty(values.flags.get("--thread"));
@@ -145,7 +179,7 @@ function parseMsgReadTarget(action, rest, values) {
     }
     return { channelRef, threadId, limit };
 }
-function buildMsgCommand(values, action, channelRef, channelName, dmEmail, memberEmails, description, isPrivate, threadId, limit, markRead, unreadFrom) {
+function buildMsgCommand(values, action, channelRef, channelName, dmEmail, memberEmails, description, isPrivate, threadId, limit, markRead, unreadFrom, writeSafety) {
     return {
         kind: "msg",
         action,
@@ -162,6 +196,9 @@ function buildMsgCommand(values, action, channelRef, channelName, dmEmail, membe
         ...(limit === undefined ? {} : { limit }),
         ...(markRead ? { markRead } : {}),
         ...(unreadFrom ? { unreadFrom } : {}),
+        ...(writeSafety.targetId ? { targetId: writeSafety.targetId } : {}),
+        ...(writeSafety.requestId ? { requestId: writeSafety.requestId } : {}),
+        ...(writeSafety.expectedRevision === undefined ? {} : { expectedRevision: writeSafety.expectedRevision }),
         json: values.booleans.has("--json"),
     };
 }

package/dist/commands/local-args-tower-work.js

@@ -68,6 +68,15 @@ const ISSUE_ALLOWED_FLAGS = [
     "--parent",
     "--file",
     "--version",
+    "--cursor",
+    "--q",
+    "--created-after",
+    "--created-before",
+    "--updated-after",
+    "--updated-before",
+    "--sort",
+    "--dir",
+    "--all",
     "--body-stdin",
     "--json",
 ];
@@ -88,6 +97,14 @@ const ISSUE_VALUE_FLAGS = [
     "--parent",
     "--file",
     "--version",
+    "--cursor",
+    "--q",
+    "--created-after",
+    "--created-before",
+    "--updated-after",
+    "--updated-before",
+    "--sort",
+    "--dir",
 ];
 export function parseIssueArgs(args) {
     const values = parseNamedArgs(args, {
@@ -108,9 +125,13 @@ export function parseIssueArgs(args) {
     validateIssueState(moveState, "issue move state must be one of: ");
     const stateFilter = readIssueStateFilter(action, values);
     const title = readIssueTitle(action, values);
-    if (action !== "board" && (values.flags.has("--label") || values.flags.has("--rows"))) {
-        throw new Error("--label and --rows filter cockpit tickets board only.");
+    if (action !== "board" && values.flags.has("--rows")) {
+        throw new Error("--rows widens cockpit tickets board only.");
     }
+    if (action !== "board" && action !== "list" && values.flags.has("--label")) {
+        throw new Error("--label filters cockpit tickets board and cockpit tickets list.");
+    }
+    const page = readIssuePage(action, values);
     const boardProject = optionalNonEmpty(values.flags.get("--project"));
     if (action === "board" && boardProject && !UUID_PATTERN.test(boardProject))
         throw new Error("board --project requires a uuid.");
@@ -119,7 +140,51 @@ export function parseIssueArgs(args) {
     const assignee = readIssueAssignee(action, values);
     const limit = readIssueLimit(action, values);
     const versionNumber = readIssueVersion(action, values);
-    return buildIssueCommand(values, action, issueRef, issueRefs, moveState, stateFilter, title, priority, estimate, assignee, limit, versionNumber);
+    return buildIssueCommand(values, action, issueRef, issueRefs, moveState, stateFilter, title, priority, estimate, assignee, limit, versionNumber, page);
+}
+const INSTANT = /^\d{4}-\d\d-\d\d(?:T\d\d:\d\d:\d\d(?:\.\d{1,6})?(?:Z|[+-]\d\d:\d\d))?$/;
+/** BLI-21315: the cursor contract's flags. Filters and sort belong to `list`; `--cursor` also to `history`. */
+function readIssuePage(action, values) {
+    const named = ["--q", "--created-after", "--created-before", "--updated-after", "--updated-before", "--sort", "--dir"];
+    for (const flag of named) {
+        if (values.flags.has(flag) && action !== "list")
+            throw new Error(`${flag} belongs to \`cockpit ticket list\`.`);
+    }
+    if (values.booleans.has("--all") && action !== "list")
+        throw new Error("--all belongs to `cockpit ticket list`.");
+    if (values.flags.has("--cursor") && action !== "list" && action !== "history") {
+        throw new Error("--cursor belongs to `cockpit ticket list` and `cockpit ticket history`.");
+    }
+    const instants = {};
+    for (const flag of ["--created-after", "--created-before", "--updated-after", "--updated-before"]) {
+        const value = optionalNonEmpty(values.flags.get(flag));
+        if (value !== undefined && (!INSTANT.test(value) || !Number.isFinite(Date.parse(value)))) {
+            throw new Error(`${flag} must be a UTC instant like 2026-10-01T00:00:00Z or a date like 2026-10-01.`);
+        }
+        instants[flag] = value;
+    }
+    const sort = optionalNonEmpty(values.flags.get("--sort"));
+    if (sort !== undefined && sort !== "updated_at" && sort !== "created_at")
+        throw new Error("--sort must be updated_at or created_at.");
+    const dir = optionalNonEmpty(values.flags.get("--dir"));
+    if (dir !== undefined && dir !== "asc" && dir !== "desc")
+        throw new Error("--dir must be asc or desc.");
+    const all = values.booleans.has("--all");
+    const cursor = optionalNonEmpty(values.flags.get("--cursor"));
+    if (all && cursor)
+        throw new Error("--all walks from the start; drop --cursor, or pass --cursor without --all to read one page.");
+    const q = optionalNonEmpty(values.flags.get("--q"));
+    return {
+        ...(cursor ? { cursor } : {}),
+        ...(q ? { q } : {}),
+        ...(instants["--created-after"] ? { createdAfter: instants["--created-after"] } : {}),
+        ...(instants["--created-before"] ? { createdBefore: instants["--created-before"] } : {}),
+        ...(instants["--updated-after"] ? { updatedAfter: instants["--updated-after"] } : {}),
+        ...(instants["--updated-before"] ? { updatedBefore: instants["--updated-before"] } : {}),
+        ...(sort ? { sort } : {}),
+        ...(dir ? { dir } : {}),
+        ...(all ? { all } : {}),
+    };
 }
 function readIssueAction(values) {
     const first = values.positionals[0];
@@ -230,7 +295,7 @@ function readIssueLimit(action, values) {
     }
     return limit;
 }
-function buildIssueCommand(values, action, issueRef, issueRefs, moveState, stateFilter, title, priority, estimate, assignee, limit, versionNumber) {
+function buildIssueCommand(values, action, issueRef, issueRefs, moveState, stateFilter, title, priority, estimate, assignee, limit, versionNumber, page) {
     return {
         kind: "issue",
         requestId: optionalNonEmpty(values.flags.get("--request-id")),
@@ -247,6 +312,7 @@ function buildIssueCommand(values, action, issueRef, issueRefs, moveState, state
         rows: optionalNonEmpty(values.flags.get("--rows")),
         project: optionalNonEmpty(values.flags.get("--project")),
         ...(limit === undefined ? {} : { limit }),
+        ...page,
         ...(versionNumber === undefined ? {} : { versionNumber }),
         title,
         ...(priority === undefined ? {} : { priority }),
@@ -259,8 +325,8 @@ function buildIssueCommand(values, action, issueRef, issueRefs, moveState, state
 }
 export function parseProjectArgs(args) {
     const values = parseNamedArgs(args, {
-        allowedFlags: ["--home", "--dashboard-url", "--archived", "--json"],
-        valueFlags: ["--home", "--dashboard-url"],
+        allowedFlags: ["--home", "--dashboard-url", "--archived", "--cursor", "--limit", "--json"],
+        valueFlags: ["--home", "--dashboard-url", "--cursor", "--limit"],
     });
     const first = values.positionals[0];
     const action = (first === undefined ? "list" : first);
@@ -275,6 +341,8 @@ export function parseProjectArgs(args) {
         homeDir: optionalNonEmpty(values.flags.get("--home")),
         dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")),
         includeArchived: values.booleans.has("--archived"),
+        ...(optionalNonEmpty(values.flags.get("--cursor")) ? { cursor: optionalNonEmpty(values.flags.get("--cursor")) } : {}),
+        ...(values.flags.has("--limit") ? { limit: optionalPositiveInteger(values.flags.get("--limit"), "--limit") } : {}),
         json: values.booleans.has("--json"),
     };
 }