@bli-cockpit/cli 0.2.241 → 0.2.243

package/dist/commands/project.js

@@ -1,20 +1,21 @@
 /**
- * `cockpit project list` — the projects issues are filed under (BLI-3716).
+ * `cockpit project list|show|create|update|archive|restore` — the projects issues are filed under
+ * (BLI-3716 list; BLI-21659 the rest).
  *
- * One verb, because `GET /api/work/projects` is the whole of the Work
- * surface's project door today (BLI-3703 scoped projects to list-only; there
- * is no create/update/delete route to put a terminal in front of). Its own
- * command rather than `cockpit issue projects` because a person says
- * "projects", and `cockpit issue list --project <name>` resolves a name
- * against exactly this list.
+ * Its own command rather than `cockpit issue projects` because a person says "projects", and
+ * `cockpit issue list --project <name>` resolves a name against exactly this list. Writes go through
+ * `/api/work/projects` (receipt, `tower_only` delivery: nothing reaches Linear); no verb deletes a project.
  */
 import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor } from "./agent-door.js";
 import { writeLine } from "./cli-io.js";
 import { pageFieldsOf, pageFooter } from "./issue-list-page.js";
+import { readBody } from "./issue-contracts.js";
 const TAG = "[project cli]";
 const READ_DEADLINE_MS = 30_000;
 export async function runProject(command, io) {
     const door = await openAgentDoor("project", command, io);
+    if (command.action !== "list")
+        return await runProjectVerb(command, door);
     const params = new URLSearchParams();
     if (command.includeArchived)
         params.set("include_archived", "true");
@@ -47,4 +48,67 @@ export async function runProject(command, io) {
     if (footer)
         writeLine(door.io.stdout, footer);
     return 0;
+}
+async function runProjectVerb(command, door) {
+    const base = "/api/work/projects";
+    const ref = command.ref ? `${base}/${encodeURIComponent(command.ref)}` : base;
+    if (command.action === "show") {
+        const answer = await askAgentDoor(door, { path: ref, method: "GET", label: "project show", timeoutMs: READ_DEADLINE_MS });
+        if (!answer.ok)
+            return failAgentDoor(door, TAG, answer.reason, answer.detail);
+        const body = answer.body;
+        if (door.json)
+            return emitAgentDoor(door, { ok: true, ...body, ...pageFieldsOf(body) });
+        const project = body.project;
+        const out = door.io.stdout;
+        writeLine(out, `${project?.name ?? command.ref}  (${project?.archived_at ? "archived" : "active"}, ${project?.source ?? "native"})`);
+        writeLine(out, `id ${project?.id ?? ""}  updated ${project?.updated_at ?? ""}`);
+        if (project?.description)
+            writeLine(out, project.description);
+        for (const issue of body.issues ?? [])
+            writeLine(out, `${issue.identifier ?? ""}  ${issue.state ?? ""}  ${issue.title ?? ""}`);
+        const footer = pageFooter(body, "tickets");
+        if (footer)
+            writeLine(out, footer);
+        if (body.href)
+            writeLine(out, `Filtered list: ${body.href}`);
+        return 0;
+    }
+    const payload = {
+        ...(command.requestId ? { request_id: command.requestId } : {}),
+        ...(command.expectedUpdatedAt ? { expected_updated_at: command.expectedUpdatedAt } : {}),
+    };
+    if (command.action === "create" || command.action === "update") {
+        if (command.name !== undefined)
+            payload["name"] = command.name;
+        if (command.color !== undefined)
+            payload["color"] = command.color;
+        if (command.filePath) {
+            const read = await readBody({ filePath: command.filePath }, door.io);
+            if (!read.ok)
+                return failAgentDoor(door, TAG, read.reason, read.detail);
+            payload["description"] = read.text;
+        }
+        else if (command.description !== undefined) {
+            payload["description"] = command.description;
+        }
+    }
+    const path = command.action === "create" ? base : command.action === "update" ? ref : `${ref}/${command.action}`;
+    const answer = await askAgentDoor(door, {
+        path,
+        method: command.action === "update" ? "PATCH" : "POST",
+        label: `project ${command.action}`,
+        timeoutMs: READ_DEADLINE_MS,
+        body: payload,
+    });
+    if (!answer.ok) {
+        const mutation = answer.body?.mutation;
+        return failAgentDoor(door, TAG, answer.reason, answer.detail, mutation ? { mutation } : {});
+    }
+    const body = answer.body;
+    console.error(`${TAG} ${command.action} committed`, JSON.stringify({ project_id: body.project?.id, delivery: body.mutation?.delivery?.status }));
+    if (door.json)
+        return emitAgentDoor(door, { ok: true, project: body.project, mutation: body.mutation });
+    writeLine(door.io.stdout, `${command.action} committed: ${body.project?.name ?? ""} (${body.project?.id ?? ""}), delivery ${body.mutation?.delivery?.status ?? "tower_only"}.`);
+    return 0;
 }

package/dist/commands/public-root.js

@@ -21,7 +21,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.241");
+    writeLine(io?.stdout ?? process.stdout, "0.2.243");
     return 0;
   }
 

package/dist/commands/push.js

@@ -0,0 +1,50 @@
+/**
+ * `cockpit push status` and `cockpit push test`: phone notifications from the terminal (BLI-21497).
+ *
+ * `status` reads `GET /api/push/subscriptions` (the caller's own saved devices, and whether the server has its VAPID
+ * keys); `test` posts `POST /api/push/test` (a test push to every saved device). The same doors the Settings page and the
+ * `push_status` and `push_test` MCP tools use. Turning a phone on is the browser's own permission prompt, so there is no
+ * terminal verb for it. `--json` prints the door's body untouched.
+ */
+import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor } from "./agent-door.js";
+import { writeLine } from "./cli-io.js";
+import { optionalNonEmpty, optionalUrl, parseNamedArgs } from "./local-arg-values.js";
+const USAGE = "Usage: cockpit push status | test [--dashboard-url <url>] [--json]";
+export function parsePushArgs(args) {
+    const values = parseNamedArgs(args, { allowedFlags: ["--json", "--home", "--dashboard-url"], valueFlags: ["--home", "--dashboard-url"] });
+    const [action, ...rest] = values.positionals;
+    if ((action !== "status" && action !== "test") || rest.length > 0)
+        throw new Error(USAGE);
+    return { kind: "push", action, json: values.booleans.has("--json"), homeDir: optionalNonEmpty(values.flags.get("--home")), dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")) };
+}
+export function renderPushStatus(body) {
+    const devices = body.devices ?? [];
+    const lines = [`Server push keys: ${body.configured ? "set" : "not set (nothing can be sent yet)"}.`, `Saved devices: ${devices.length}.`];
+    for (const device of devices)
+        lines.push(`  ${device.created_at.slice(0, 16).replace("T", " ")}Z  ${device.user_agent ?? "unknown browser"}`);
+    if (devices.length === 0)
+        lines.push("Turn notifications on from Settings, on the phone (add TOWER to the Home Screen first on iPhone).");
+    return lines;
+}
+export function renderPushTest(body) {
+    if (body.skipped === "push_not_configured")
+        return ["Nothing sent: the server has no VAPID keys yet."];
+    if (body.skipped === "no_devices")
+        return ["Nothing sent: no device is saved. Turn notifications on from Settings on the phone."];
+    if (body.skipped)
+        return [`Nothing sent: ${body.skipped}.`];
+    const reasons = Object.entries(body.reasons ?? {}).map(([reason, count]) => `${reason} x${count}`).join(", ");
+    return [`Test push: ${body.accepted ?? 0} of ${body.devices ?? 0} devices accepted, ${body.failed ?? 0} failed${reasons ? ` (${reasons})` : ""}.`];
+}
+export async function runPush(command, io) {
+    const door = await openAgentDoor("push", command, io);
+    const status = command.action === "status";
+    const answer = await askAgentDoor(door, { path: status ? "/api/push/subscriptions" : "/api/push/test", method: status ? "GET" : "POST", label: `push ${command.action}`, timeoutMs: 60_000, ...(status ? {} : { body: {} }) });
+    if (!answer.ok)
+        return failAgentDoor(door, "[push cli]", answer.reason, answer.detail);
+    if (door.json)
+        return emitAgentDoor(door, answer.body);
+    for (const line of status ? renderPushStatus(answer.body) : renderPushTest(answer.body))
+        writeLine(door.io.stdout, line);
+    return 0;
+}

package/dist/commands/search.js

@@ -26,6 +26,8 @@
  */
 import { askAgentDoor, emitAgentDoor, failAgentDoor, openAgentDoor, } from "./agent-door.js";
 import { writeLine } from "./cli-io.js";
+import { appendDocSearchParams } from "./docs-search-args.js";
+import { appendMsgSearchParams } from "./msg-search-args.js";
 const TAG = "[search cli]";
 const READ_DEADLINE_MS = 30_000;
 /** Group headings, in the order a person reads them. Mirrors the overlay. */
@@ -56,6 +58,12 @@ export async function runSearch(command, io) {
         params.set("kinds", command.kinds.join(","));
     if (command.limit !== undefined)
         params.set("limit", String(command.limit));
+    // BLI-21658: message filters ride the same door, which answers them only for kinds=msg.
+    if (command.msgFilters)
+        appendMsgSearchParams(params, command.msgFilters);
+    // BLI-21697: document filters ride the same door, which answers them only for kinds=doc.
+    if (command.docFilters)
+        appendDocSearchParams(params, command.docFilters);
     const answer = await askAgentDoor(door, {
         path: `/api/search?${params.toString()}`,
         method: "GET",
@@ -139,6 +147,21 @@ function render(door, body) {
             writeLine(door.io.stdout, `${KIND_LABELS[kind] ?? kind.toUpperCase()} did not answer (${reason}). Nothing from there is in this list.`);
         }
     }
+    // Named, so a filtered list is not read as the ranked, semantic one (BLI-21658).
+    if (body.degraded?.msg === "filtered_lexical_only") {
+        writeLine(door.io.stdout, "");
+        writeLine(door.io.stdout, "MESSAGES were filtered: keyword matching only (filtered_lexical_only), newest first, not ranked.");
+        if (body.msgPaging?.hasMore && body.msgPaging.nextCursor) {
+            writeLine(door.io.stdout, `More messages exist: \`cockpit msg search ... --before ${body.msgPaging.nextCursor}\` continues with the same filters.`);
+        }
+    }
+    if (body.degraded?.doc === "filtered_lexical_only") {
+        writeLine(door.io.stdout, "");
+        writeLine(door.io.stdout, "DOCUMENTS were filtered: keyword matching only (filtered_lexical_only), not ranked by meaning.");
+        if (body.docCoverage && body.docCoverage.coverage !== "exhausted") {
+            writeLine(door.io.stdout, `Documents coverage: ${body.docCoverage.coverage}${body.docCoverage.reason ? ` (${body.docCoverage.reason})` : ""}; ${body.docCoverage.matched} matched.`);
+        }
+    }
     writeLine(door.io.stdout, "");
     writeLine(door.io.stdout, `${hits.length} result(s) in ${body.elapsedMs ?? 0} ms.`);
     return 0;

package/dist/commands/session-sync-failures.js

@@ -13,7 +13,7 @@
  * without saying why.
  */
 import { claudeAttributionReadFailureCount, codexAttributionReadFailureCount, } from "./agent-session-report.js";
-import { isDeliveryHoldReason } from "./session-sync-hold.js";
+import { budgetStarved, isDeliveryHoldReason } from "./session-sync-hold.js";
 import { sourceScanFailureReason } from "./session-sync-scan.js";
 /**
  * The label used when a sync fails and nothing on the way there said why.
@@ -55,8 +55,15 @@ export function createSyncFailureLedger() {
  * hold in `session-sync-hold.ts` and rides the same receipt — and a tick that
  * ALSO failed for a real reason still fails on that reason. Nothing is
  * silenced; only the verdict changed.
+ *
+ * Ticket 21952 does the same for the per-tick size budget. Overflow defers to the next tick by design, so a tick that
+ * sent something and held the rest reports a named hold (`held_budget:` in `session-sync-hold.ts`) instead of failing:
+ * one machine was RED on every tick from 2026-10-15 while it uploaded 2 GiB each time. Only a STARVED tick, one that
+ * deferred evidence and let nothing through, still fails `deferred_byte_budget` / `deferred_object_budget`. Without
+ * `budgetUse` (an older caller) the old rule stands: any deferral fails.
  */
-export function recordWorktreeDeliveryFailures(ledger, outcomes) {
+export function recordWorktreeDeliveryFailures(ledger, outcomes, budgetUse) {
+    const budgetHolds = budgetUse !== undefined && !budgetStarved(budgetUse);
     for (const outcome of outcomes) {
         recordWorktreeSyncFailure(ledger, outcome);
         const { sync } = outcome;
@@ -71,15 +78,21 @@ export function recordWorktreeDeliveryFailures(ledger, outcomes) {
         for (const reason of sync.raw_evidence_retry_reasons ?? []) {
             if (isDeliveryHoldReason(reason))
                 continue;
+            if (budgetHolds && isBudgetDeferralReason(reason))
+                continue;
             ledger.add({
                 label: "raw_evidence_retry_required",
                 rendered: `raw_evidence_retry:${reason}`,
             });
         }
-        ledger.fail(sync.raw_evidence_deferred_byte_budget > 0, "deferred_byte_budget");
-        ledger.fail(sync.raw_evidence_deferred_object_budget > 0, "deferred_object_budget");
+        ledger.fail(!budgetHolds && sync.raw_evidence_deferred_byte_budget > 0, "deferred_byte_budget");
+        ledger.fail(!budgetHolds && sync.raw_evidence_deferred_object_budget > 0, "deferred_object_budget");
     }
 }
+/** The two reasons the per-tick budget writes when it defers a file. Exact labels, never a pattern. */
+function isBudgetDeferralReason(reason) {
+    return reason === "deferred_byte_budget" || reason === "deferred_object_budget";
+}
 function recordWorktreeSyncFailure(ledger, { worktree, sync }) {
     if (sync.status === "uploaded")
         return;

package/dist/commands/session-sync-health.js

@@ -13,7 +13,7 @@ import { collectionRootLabel } from "./heartbeat.js";
 import { workDirectories } from "../root-work.js";
 import { createSyncFailureLedger, recordSourceScanFailures, recordUnexplainedFailure, recordUnpostedSessionReportFailure, recordWorktreeDeliveryFailures, } from "./session-sync-failures.js";
 import { countSessionsNewThisTick, countSessionsPendingUpload, } from "./session-sync-counters.js";
-import { logDeliveryHold, summarizeDeliveryHold } from "./session-sync-hold.js";
+import { logBudgetHold, logDeliveryHold, summarizeBudgetHold, summarizeDeliveryHold } from "./session-sync-hold.js";
 /**
  * Decide whether this tick failed, and record every condition that decided it.
  *
@@ -23,7 +23,7 @@ import { logDeliveryHold, summarizeDeliveryHold } from "./session-sync-hold.js";
 export function decideSyncHealth(options) {
     const { outcomes } = options.worktreePass;
     const ledger = createSyncFailureLedger();
-    recordWorktreeDeliveryFailures(ledger, outcomes);
+    recordWorktreeDeliveryFailures(ledger, outcomes, options.worktreePass.budgetUse);
     recordSourceScanFailures(ledger, options.scan);
     const sessionsOutsideRoot = options.sessions.filter((session) => OUTSIDE_APPROVED_ROOT_REASONS.has(session.attribution_reason)).length;
     const nothingInRoot = nothingInRootCount({
@@ -54,6 +54,10 @@ export function decideSyncHealth(options) {
     const hold = summarizeDeliveryHold(outcomes);
     if (hold && ok)
         logDeliveryHold(hold);
+    // Ticket 21952: the size-budget hold, said on every tick that has one, ok or not.
+    const budgetHold = summarizeBudgetHold(options.worktreePass.budgetUse);
+    if (budgetHold)
+        logBudgetHold(budgetHold);
     const records = ledger.sortedRecords();
     return {
         ok,
@@ -61,6 +65,7 @@ export function decideSyncHealth(options) {
         failure_records: records,
         notice,
         hold,
+        budgetHold,
         sessions_outside_root: sessionsOutsideRoot,
         outside_root_directories: workDirectories([...(options.scan.codexAttribution.results ?? []), ...(options.scan.claudeAttribution.results ?? [])].filter(result => OUTSIDE_APPROVED_ROOT_REASONS.has(result.reason)))
             .map(entry => ({ ...collectionRootLabel(entry.directory), count: entry.count }))

package/dist/commands/session-sync-hold.js

@@ -11,7 +11,7 @@
  * reads every `session-sync*.ts` sibling and demands that only the failure
  * ledger writes one, and this file is not it.
  */
-import { formatDeliveryHoldNotice, } from "../delivery-hold-notice.js";
+import { formatBudgetHoldNotice, formatDeliveryHoldNotice, } from "../delivery-hold-notice.js";
 import { DELIVERY_BACKOFF_HOLDING_REASON } from "../raw-evidence-staging.js";
 /**
  * Is this reason a delivery hold rather than a delivery failure?
@@ -87,4 +87,45 @@ export function logDeliveryHold(hold) {
         last_reason: hold.lastReason,
         next_action: "nothing until the next attempt is due; run `cockpit doctor` if it is already past",
     }));
+}
+/** The token's leading word, owned with its grammar by `delivery-hold-notice.ts` so the fleet board parses what this writes. */
+export { BUDGET_HOLD_NOTICE_PREFIX } from "../delivery-hold-notice.js";
+/** Reads the shared budget's counters, or null when the pass carried none. */
+export function budgetUseOf(budget) {
+    if (!budget)
+        return undefined;
+    return {
+        admittedBytes: budget.admittedBytes ?? 0,
+        admittedObjects: budget.admittedObjects ?? 0,
+        deferredBytes: budget.deferredBytes ?? 0,
+        deferredObjects: budget.deferredObjects ?? 0,
+    };
+}
+/**
+ * Did the budget hold anything back while still letting something through?
+ *
+ * The collector's design is that overflow defers and converges: the next tick starts with a fresh budget and picks up
+ * what this one held. A tick that admitted at least one object made progress, so what it deferred is a hold. A tick
+ * that deferred and admitted NOTHING made no progress at all, which stays a failure (`budgetStarved`).
+ */
+export function summarizeBudgetHold(use) {
+    if (!use || use.deferredObjects <= 0 || budgetStarved(use))
+        return null;
+    const notice = formatBudgetHoldNotice(use);
+    return notice ? { ...use, notice } : null;
+}
+/** True when the budget deferred evidence and let nothing through this tick. */
+export function budgetStarved(use) {
+    return Boolean(use && use.deferredObjects > 0 && use.admittedObjects === 0);
+}
+/** The run's line for a size-budget hold: bytes sent, bytes held, and that the next tick takes the rest. */
+export function logBudgetHold(hold) {
+    console.error("[session-sync] raw evidence held back by the per-tick size budget, the next tick takes the rest", JSON.stringify({
+        reason: hold.notice,
+        sent_bytes: hold.admittedBytes,
+        sent_objects: hold.admittedObjects,
+        held_bytes: hold.deferredBytes,
+        held_objects: hold.deferredObjects,
+        next_action: "none; the next tick starts with a fresh budget",
+    }));
 }

package/dist/commands/session-sync-upload.js

@@ -13,6 +13,7 @@ import { liveSyncTargetKey, liveSyncTargetWorktrees, matchesLiveSyncWorktree, }
 import { isOutsideRootsWorkspace } from "./backfill-outside-roots.js";
 import { giveOutsideRootsTheirOwnAllowance, outsideRootsLast, } from "./session-sync-outside-roots.js";
 import { runYieldingAtBoundaries } from "./sync-yield.js";
+import { budgetUseOf } from "./session-sync-hold.js";
 const CLAUDE_DAMP_GROWTH_BYTES = 256 * 1024;
 const CLAUDE_DAMP_MAX_AGE_MS = 6 * 60 * 60 * 1000;
 /**
@@ -54,6 +55,7 @@ export async function syncEveryTargetWorktree(options) {
         claudePriorDurablePointers: claudeDurablePointersFromCursor(options.plan.claudeCursorBefore),
         growthDampedSessionCount: dampedClaudePointers.size,
         yieldedWorktreesLeft: loop.left,
+        budgetUse: budgetUseOf(rawEvidenceBudget),
     };
 }
 function syncTargetWithAllowance(options, worktree, syncWorktrees, rawEvidenceBudget, discoveredWorktreeKeys, dampedClaudePointers) {

package/dist/commands/session-sync.js

@@ -190,6 +190,7 @@ async function finishAttributedSync(options, context) {
         failure_records: health.failure_records,
         notice: health.notice,
         hold: health.hold,
+        budgetHold: health.budgetHold ?? null,
         yielded_worktrees_left: worktreePass.yieldedWorktreesLeft,
         sessions_observed: sessions.length,
         sessions_outside_root: health.sessions_outside_root,

package/dist/commands/sync-doctor.js

@@ -14,6 +14,7 @@ import { doctorNeedsPerson, sanitizeEventCode } from "./doctor-report.js";
 import { runSelfUpdate } from "./install-update.js";
 import { reportInstallEventsBestEffort } from "./install-receipts.js";
 import { clearDoctorRequest, requestedDoctorId } from "./sync-doctor-request.js";
+import { envWithNodeRuntimeOnPath } from "../scheduled-self-update.js";
 export async function runDoctorAfterSync(command, io, dashboardUrl, overrides = {}, facts) {
     if (shouldSuppressFleetReceipts({ dashboardUrl }).suppressed) {
         console.error("[sync-doctor] checkout does not repair the fleet machine", JSON.stringify({ reason: "receipt_suppressed:dev_build" }));
@@ -69,11 +70,23 @@ export async function runDoctorAfterSync(command, io, dashboardUrl, overrides =
         await lock.handle.release();
     }
 }
+/**
+ * Ticket 21952. launchd hands the tick `PATH=/usr/bin:/bin:/usr/sbin:/sbin`, where neither `node` nor `npm` lives, so
+ * the tick doctor's `npm view` and `npm install` could not start on any Mac: every macOS receipt read
+ * `latest_version_unknown -> fail:npm_install_failed` while already on the newest CLI, and Windows (whose scheduler
+ * keeps the user's PATH) read `already_latest`. The scheduled self-update already runs npm with the running node's bin
+ * dir on PATH (`envWithNodeRuntimeOnPath`); the tick doctor now does the same. A caller's explicit env still wins.
+ */
+export function withNodeRuntimeOnPath(io) {
+    const env = envWithNodeRuntimeOnPath(io.env ?? process.env);
+    const wrap = (runner) => runner ? (cmd, args, options) => runner(cmd, args, { ...options, env: options?.env ?? env }) : undefined;
+    return { exec: wrap(io.exec), interactiveExec: wrap(io.interactiveExec) };
+}
 async function collectDoctorReceipt(command, io, dashboardUrl, overrides, facts, paths, requestId) {
     const session = await readLocalCollectorSessionFile(paths).catch(() => null);
     let receipt = null;
     const quiet = new Writable({ write(_chunk, _encoding, done) { done(); } });
-    const doctorIo = { ...io, stdout: quiet };
+    const doctorIo = { ...io, stdout: quiet, ...withNodeRuntimeOnPath(io) };
     await runDoctor({ kind: "doctor", alias: "doctor", automaticTick: true, homeDir: command.homeDir, dashboardUrl, json: true, dryRun: false }, doctorIo, {
         selfUpdate: (updateIo, options) => runSelfUpdate({ ...updateIo, stdout: quiet }, options),
         runLogin: async () => { throw new Error("automatic_doctor_cannot_prompt"); },

package/dist/commands/sync-report.js

@@ -152,7 +152,7 @@ function syncResult(run) {
         notice: run.notice,
         // BLI-4022: unlike the reasons, the hold survives a successful run — it is
         // what the tick withheld, not why it failed.
-        holdNotice: run.hold?.notice ?? null,
+        holdNotice: run.hold?.notice ?? run.budgetHold?.notice ?? null,
         sessionsObserved: run.sessions_observed,
         sessionsOutsideRoot: run.sessions_outside_root,
         outsideRootDirectories: run.outside_root_directories,

package/dist/commands/template-args.js

@@ -0,0 +1,122 @@
+/**
+ * `cockpit ticket templates [list|show|versions|save|update|apply]` argument parsing (BLI-21779, P11).
+ * `templates` is an `issue` action; its flags are read here so `local-args-tower-work.ts` only dispatches,
+ * the way `view-args.ts` does for views.
+ *
+ * Property flags mean the same on save, update and apply: `--description <text|->` (`-` reads stdin),
+ * `--state`, `--priority 0-4`, `--size S|M|L`, `--project <name|id>`, `--label <name>` (repeatable).
+ * On save and update, the value `none` clears a preset; on apply, `none` clears what the template would
+ * have copied. Nothing here carries a title except `apply`, and nothing stores one.
+ */
+import { estimateForSize } from "./issue-contracts.js";
+import { optionalNonEmpty, optionalUrl } from "./local-arg-values.js";
+export const TEMPLATE_VERBS = ["list", "show", "versions", "save", "update", "apply"];
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const STATES = ["backlog", "todo", "in_progress", "in_review", "done", "canceled"];
+const NONE = (value) => value.trim().toLowerCase() === "none";
+export function parseTemplateArgs(values, rest) {
+    const first = rest[0];
+    const verb = (first === undefined ? "list" : first);
+    if (!TEMPLATE_VERBS.includes(verb)) {
+        throw new Error(`Unknown templates command: ${first}. Try list, show, versions, save, update or apply.`);
+    }
+    const positional = rest.slice(first === undefined ? 0 : 1);
+    const needsRef = verb !== "list" && verb !== "save";
+    if (needsRef && positional.length !== 1)
+        throw new Error(`ticket templates ${verb} takes exactly one template id or name.`);
+    if (!needsRef && positional.length > 0)
+        throw new Error(`ticket templates ${verb} does not take "${positional[0]}".`);
+    const given = (flag) => values.flags.has(flag) || values.booleans.has(flag);
+    const writes = verb === "save" || verb === "update" || verb === "apply";
+    for (const flag of ["--description", "--state", "--priority", "--size", "--project", "--label"]) {
+        if (given(flag) && !writes)
+            throw new Error(`${flag} belongs to \`cockpit ticket templates save\`, \`update\` and \`apply\`.`);
+    }
+    if (given("--name") && verb !== "save" && verb !== "update")
+        throw new Error("--name belongs to `cockpit ticket templates save` and `update`.");
+    if (verb !== "update" && (given("--archive") || given("--restore") || given("--expected-updated-at"))) {
+        throw new Error("--archive, --restore and --expected-updated-at belong to `cockpit ticket templates update`.");
+    }
+    if (verb !== "apply" && (given("--title") || given("--assignee") || given("--parent") || given("--due"))) {
+        throw new Error("--title, --assignee, --parent and --due belong to `cockpit ticket templates apply`; a template never stores them.");
+    }
+    if (verb !== "list" && given("--include-archived"))
+        throw new Error("--include-archived belongs to `cockpit ticket templates list`.");
+    if (given("--archive") && given("--restore"))
+        throw new Error("Give --archive or --restore, not both.");
+    if ((verb === "save" || verb === "apply") === false && given("--request-id")) {
+        throw new Error("--request-id belongs to `cockpit ticket templates save` and `apply`.");
+    }
+    if (given("--expected-revision") || given("--limit") || given("--shared") || given("--private")) {
+        throw new Error("That flag does not belong to ticket templates.");
+    }
+    const name = optionalNonEmpty(values.flags.get("--name"));
+    if (verb === "save" && !name)
+        throw new Error('ticket templates save needs --name "<name>".');
+    const rawDescription = values.flags.get("--description");
+    const rawState = optionalNonEmpty(values.flags.get("--state"));
+    if (rawState && !NONE(rawState) && !STATES.includes(rawState))
+        throw new Error(`--state must be one of: ${STATES.join(", ")} (or none).`);
+    const rawPriority = optionalNonEmpty(values.flags.get("--priority"));
+    let priority;
+    if (rawPriority !== undefined) {
+        if (NONE(rawPriority))
+            priority = null;
+        else {
+            priority = Number(rawPriority);
+            if (!Number.isInteger(priority) || priority < 0 || priority > 4) {
+                throw new Error("--priority must be 0-4 (0 none, 1 urgent, 2 high, 3 medium, 4 low), or the word none to clear it.");
+            }
+        }
+    }
+    const rawSize = optionalNonEmpty(values.flags.get("--size"));
+    const estimate = rawSize === undefined ? undefined : NONE(rawSize) ? null : estimateForSize(rawSize);
+    const rawProject = optionalNonEmpty(values.flags.get("--project"));
+    const labelValues = (values.flagValues.get("--label") ?? []).map((v) => v.trim()).filter(Boolean);
+    const labels = labelValues.length === 1 && NONE(labelValues[0]) ? [] : labelValues;
+    const assignee = optionalNonEmpty(values.flags.get("--assignee"));
+    if (assignee !== undefined && assignee !== "me" && !UUID.test(assignee))
+        throw new Error('--assignee must be "me" or a person\'s uuid.');
+    const due = optionalNonEmpty(values.flags.get("--due"));
+    if (due && !NONE(due) && !/^\d{4}-\d{2}-\d{2}$/.test(due))
+        throw new Error("--due must be YYYY-MM-DD (or none).");
+    const expectedUpdatedAt = optionalNonEmpty(values.flags.get("--expected-updated-at"));
+    if (expectedUpdatedAt && Number.isNaN(Date.parse(expectedUpdatedAt))) {
+        throw new Error("--expected-updated-at must be the updated_at timestamp you last read.");
+    }
+    const requestId = optionalNonEmpty(values.flags.get("--request-id"));
+    if (requestId && !UUID.test(requestId))
+        throw new Error("--request-id must be a UUID.");
+    const changes = rawDescription !== undefined || rawState !== undefined || priority !== undefined || estimate !== undefined
+        || rawProject !== undefined || labelValues.length > 0 || name !== undefined;
+    if (verb === "update" && !changes && !given("--archive") && !given("--restore")) {
+        throw new Error("ticket templates update needs a field to change: --name, --description, --state, --priority, --size, --project, --label, --archive or --restore.");
+    }
+    const templates = {
+        verb,
+        ...(needsRef ? { ref: positional[0] } : {}),
+        ...(name ? { name } : {}),
+        ...(rawDescription === undefined ? {} : { description: NONE(rawDescription) ? null : rawDescription }),
+        ...(rawState === undefined ? {} : { state: NONE(rawState) ? null : rawState }),
+        ...(priority === undefined ? {} : { priority }),
+        ...(estimate === undefined ? {} : { estimate }),
+        ...(rawProject === undefined ? {} : { project: NONE(rawProject) ? null : rawProject }),
+        ...(labelValues.length > 0 ? { labels } : {}),
+        ...(optionalNonEmpty(values.flags.get("--title")) ? { title: optionalNonEmpty(values.flags.get("--title")) } : {}),
+        ...(assignee ? { assignee } : {}),
+        ...(optionalNonEmpty(values.flags.get("--parent")) ? { parentRef: optionalNonEmpty(values.flags.get("--parent")) } : {}),
+        ...(due === undefined ? {} : { due: NONE(due) ? null : due }),
+        ...(given("--archive") ? { archived: true } : given("--restore") ? { archived: false } : {}),
+        ...(given("--include-archived") ? { includeArchived: true } : {}),
+        ...(expectedUpdatedAt ? { expectedUpdatedAt } : {}),
+    };
+    return {
+        kind: "issue",
+        action: "templates",
+        homeDir: optionalNonEmpty(values.flags.get("--home")),
+        dashboardUrl: optionalUrl(values.flags.get("--dashboard-url")),
+        ...(requestId ? { requestId } : {}),
+        json: values.booleans.has("--json"),
+        templates,
+    };
+}