@bli-cockpit/cli 0.2.58 → 0.2.60

package/dist/commands/local-help.js

@@ -8,12 +8,14 @@
  * user-visible contract like any other.
  */
 import { DEFAULT_DASHBOARD_URL } from "../local-state.js";
+import { localSubcommandHelp } from "./local-help-commands.js";
 export const rootCommandNames = new Set([
     "onboard",
     "update",
     "upgrade",
     "do-everything",
     "fix",
+    "doctor",
     "install",
     "login",
     "pair",
@@ -44,6 +46,7 @@ export const rootCommandNames = new Set([
     "msg",
     "issue",
     "project",
+    "search",
     "release",
 ]);
 export function localCommandHelp(command) {
@@ -55,17 +58,18 @@ export function localCommandHelp(command) {
         "  cockpit upgrade [same flags as update]",
         "  cockpit do-everything [--workspace <path>] [--dashboard-url <url>] [--update-tag <tag>] [--dry-run] [--json]",
         "  cockpit fix [same flags as do-everything]",
+        "  cockpit doctor [same flags as do-everything]",
         "  cockpit install [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--json]",
-        "  cockpit login [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",
-        "  cockpit pair [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",
+        "  cockpit login [--pair <code>] [--no-browser] [--legacy-pair] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",
+        "  cockpit pair [--pair <code>] [--no-browser] [--legacy-pair] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",
         "  cockpit logout [--revoke] [--yes] [--dashboard-url <url>] [--json]",
         "  cockpit start [--ticket <id>|--clear-ticket] [--topic <label>] [--intent <intent>] [--phase <phase>] [--workspace <path>] [--branch <name>] [--max-depth <n>] [--max-repos <n>] [--json]",
         "  cockpit sync [--workspace <path>] [--dashboard-url <url>] [--max-depth <n>] [--max-repos <n>] [--json]",
         "  cockpit analyze [--workspace <path>] [--dashboard-url <url>] [--max-depth <n>] [--max-repos <n>] [--json]",
-        "  cockpit jarvis [question] [--prompt <question>] [--as <person>] [--date <YYYY-MM-DD>] [--thread <name>] [--model <key>] [--image <path>|--file <path>] [--no-stream] [--threads|--history [--limit <n>]] [--trace <id|last>] [--dashboard-url <url>] [--json]",
+        "  cockpit jarvis [question] [--prompt <question>] [--as <person>] [--date <YYYY-MM-DD>] [--thread <name>] [--model <key>] [--image <path>|--file <path>] [--no-stream] [--threads|--history [--limit <n>]] [--trace <id|last>] [--dashboard-url <url>] [--json [--show-approval-code]]",
         "  cockpit model [show|set <provider:model>] [--json]",
         "  cockpit scout [start|dismiss|undo <experiment-id>] [--days <n>] [--dashboard-url <url>] [--json]",
-        "  cockpit ops [status [--job <id>] [--skips] | recompile --person <email|name|id> [--dry-run]] [--dashboard-url <url>] [--json]",
+        "  cockpit ops [status [--job <id>] [--skips] [--memory] | recompile --person <email|name|id> [--dry-run]] [--dashboard-url <url>] [--json]",
         "  cockpit slack [coverage [--workspace bli|blue_pearl] [--stale-only] | read [--person <p>] [--channel <c>] [--query <text>] [--since <YYYY-MM-DD>] [--until <YYYY-MM-DD>] [--limit <n>]] [--json]",
         "  cockpit settings [personal [--chat-model <key>] [--brief-model <key>] | switches [set <key> <value>] | models [set --chat <key>] [--memory <id>] | cli-floor [<version>] | env list|set --project <p> --file <f> --content-stdin|delete --id <uuid> [--yes]] [--json]",
         "  cockpit team [members | invite <email> --role <role> [--team-id <uuid>] | role <userId> --role <role> [--yes] | device [list] | device revoke <id|name> --reason <label> [--note \"<text>\"] [--yes]] [--json]",
@@ -82,591 +86,16 @@ export function localCommandHelp(command) {
         "  cockpit agent-rules [install|uninstall|status] [--host codex|claude|all] [--workspace <path>] [--json]",
         "  cockpit memory [install|status] [--dashboard-url <url>] [--dry-run] [--json]",
         "  cockpit clean [--dry-run] [--all-committed] [--reconcile] [--dashboard-url <url>] [--json]",
-        "  cockpit docs [list|tree|read <id|slug>|create --title <t>|update <id>] [--parent <id>|--clear-parent] [--visibility org|private] [--file <path>|--body-stdin] [--dashboard-url <url>] [--json]",
-        "  cockpit msg [channels|read <channel>|send <channel>|thread <id> --channel <channel>] [--thread <id>] [--limit <n>] [--dashboard-url <url>] [--json]",
+        "  cockpit docs [list|tree|read <id|slug>|create --title <t>|update <id>] [--parent <id>|root|--clear-parent] [--query <text>] [--limit <n>] [--visibility org|private] [--file <path>|--body-stdin] [--allow-empty] [--dashboard-url <url>] [--json]",
+        "  cockpit msg [channels|create <name>|dm <email>|read <channel>|send <channel>|thread <id> --channel <channel>] [--private] [--members a@x,b@y] [--description <text>] [--thread <id>] [--limit <n>] [--dashboard-url <url>] [--json]",
         "  cockpit issue [list|show <BLI-id>|create --title <t>|update <BLI-id>|move <BLI-id> <state>|comment <BLI-id>|history <BLI-id>] [--state <s>] [--assignee me|unassigned|<uuid>] [--project <name|id>] [--limit <n>] [--priority 0-4] [--parent <BLI-id>] [--file <path>|--body-stdin] [--dashboard-url <url>] [--json]",
         "  cockpit project [list] [--archived] [--dashboard-url <url>] [--json]",
+        "  cockpit search \"<words>\" [--kind doc,msg,issue,note,memory] [--limit <n>] [--dashboard-url <url>] [--json]",
         "  cockpit release [--dry-run] [--skip-checks] [--no-floor] [--tag <tag>] [--access <public|restricted>] [--otp <code>]",
         "",
         `Default dashboard: ${DEFAULT_DASHBOARD_URL}. Omit --dashboard-url for normal production use; pass it only for staging/custom dashboards or to force a different pairing.`,
     ].join("\n");
 }
-function localSubcommandHelp(command) {
-    const helpByCommand = new Map([
-        [
-            "onboard",
-            [
-                "Usage: cockpit onboard [--ticket <id>] [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--branch <name>] [--no-auth] [--max-depth <n>] [--max-repos <n>] [--json]",
-                "",
-                "Installs, pairs, starts work context(s), syncs once, completes all-history",
-                "Codex and Claude backfill for the saved roots, and then tells you it is working.",
-                "If --workspace is a parent folder, scans child git repos/worktrees and rolls them up by repo.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-                `Omit --dashboard-url for normal production setup (${DEFAULT_DASHBOARD_URL}).`,
-                "Pass --dashboard-url only for staging/custom dashboards or to force a different pairing.",
-                "Run with no flags in a terminal and it prompts for the dashboard email and OTP code; pass --email to skip the email prompt. Use --no-auth to force the manual approval fallback.",
-                "Interactive runs also offer to add Tower ticket-binding rules to AGENTS.md and CLAUDE.md after readiness proof.",
-            ],
-        ],
-        [
-            "install",
-            [
-                "Usage: cockpit install [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--json]",
-                "",
-                "Writes local collector config. Pair with `cockpit login`, then run `cockpit start` when work begins.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-                "Omit --dashboard-url for the production dashboard; pass it only for staging/custom dashboards.",
-            ],
-        ],
-        [
-            "update",
-            [
-                "Usage: cockpit update [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--workspace <path>] [--allow-home-root] [--no-auth] [--json]",
-                "",
-                "Updates the global public CLI from npm, then reruns `cockpit onboard`",
-                "with the same setup flags so pairing, saved roots, all-history backfill,",
-                "agent rules, autostart, and the initial sync are refreshed in one command.",
-                "`cockpit upgrade` is an alias.",
-            ],
-        ],
-        [
-            "upgrade",
-            [
-                "Usage: cockpit upgrade [same flags as cockpit update]",
-                "",
-                "Alias for `cockpit update`.",
-            ],
-        ],
-        [
-            "do-everything",
-            [
-                "Usage: cockpit do-everything [--workspace <path>] [--dashboard-url <url>] [--update-tag <tag>] [--dry-run] [--json]",
-                "",
-                "Gets this machine fully set up, whether it is brand new, already set up, or handed down: latest CLI, sign-in and collection-root recovery when needed, saved folders, background sync, catching up on old sessions, cleaning up old files, and one fresh upload.",
-                "`cockpit fix` is an alias.",
-                "Maintainers only: use `--update-tag next` so self-update and re-exec stay on the prerelease candidate.",
-                "--dry-run shows what it would do without changing anything.",
-            ],
-        ],
-        [
-            "fix",
-            [
-                "Usage: cockpit fix [same flags as cockpit do-everything]",
-                "",
-                "Alias for `cockpit do-everything`.",
-            ],
-        ],
-        [
-            "login",
-            [
-                "Usage: cockpit login [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",
-                "",
-                "Signs in with an email OTP when interactive, starts dashboard device pairing, and stores the approved local session.",
-                "Omit --dashboard-url for the production dashboard; pass it only for staging/custom dashboards.",
-            ],
-        ],
-        [
-            "pair",
-            [
-                "Usage: cockpit pair [--email <owner@email>] [--device-name <name>] [--dashboard-url <url>] [--no-auth] [--json]",
-                "",
-                "Alias for `cockpit login`.",
-            ],
-        ],
-        [
-            "logout",
-            [
-                "Usage: cockpit logout [--revoke] [--yes] [--dashboard-url <url>] [--json]",
-                "",
-                "Removes the local device session.",
-                "--revoke also asks Tower to end this device's token, which is what you want",
-                "when the machine is being handed back: without it this laptop stops collecting",
-                "but the token it held is still one the server would honour.",
-                "A device can only revoke ITSELF; revoking someone else's machine stays in the browser.",
-                "The local session is removed either way, and the two outcomes are reported separately.",
-            ],
-        ],
-        [
-            "model",
-            [
-                "Usage: cockpit model [show|set <provider:model>] [--json]",
-                "",
-                "Shows or changes YOUR chat model — the short way to say",
-                "`cockpit settings personal --chat-model`. Affects your account, not the org.",
-                "An unrecognised key is refused by the dashboard, not by this command.",
-            ],
-        ],
-        [
-            "settings",
-            [
-                "Usage: cockpit settings [section] [verb] [flags] [--json]",
-                "",
-                "With no section it shows everything you can see; a section you cannot see reads",
-                "`admin only` rather than failing, because that is the system working.",
-                "",
-                "  cockpit settings personal [--chat-model <key>] [--brief-model <key>]",
-                "      Your teams and your two model choices. No flags = show.",
-                "  cockpit settings switches [set <key> <value>]",
-                "      Access and feature switches. Everyone may look; only an admin may set.",
-                "  cockpit settings models [set --chat <key>] [--memory <id>]",
-                "      The ORG-WIDE model map. Admin only, in both directions.",
-                "  cockpit settings cli-floor [<version>]",
-                "      The fleet forced-update floor: every collector below it updates on its",
-                "      next sync tick. Everyone may look; only an admin may raise it, and it",
-                "      only ever goes UP — lowering it is a rollback a human makes deliberately.",
-                "      A `--tag latest` publish raises it for you (scripts/publish-public-packages.mjs).",
-                "  cockpit settings env list",
-                "      Stored env files: project, name, when, id. Never a value — the server",
-                "      cannot return one and this command has no flag that prints one.",
-                "  cockpit settings env set --project <project> --file <name> --content-stdin",
-                "      Pipe the file in; there is no --content flag, because a secret on a",
-                "      command line lands in shell history and in every process listing.",
-                "      macOS:      cat <path> | cockpit settings env set --project <project> --file <name> --content-stdin",
-                "      PowerShell: Get-Content <path> -Raw | cockpit settings env set --project <project> --file <name> --content-stdin",
-                "      Run `cockpit settings env list` to see which file names this project accepts.",
-                "  cockpit settings env delete --id <uuid> [--yes]",
-                "      Asks first unless --yes; a headless run without --yes is refused, not assumed.",
-            ],
-        ],
-        [
-            "team",
-            [
-                "Usage: cockpit team [members | invite <email> --role <role> | role <userId> --role <role> | device [list] | device revoke <id|name> --reason <label>] [--json]",
-                "",
-                "  cockpit team [members]",
-                "      Everyone on your team — roster and accounts together, with each person's id.",
-                "      Open to every role; it says so when the view is read-only for you.",
-                "  cockpit team invite <email> --role <role> [--team-id <uuid>]",
-                "      Admin only. Defaults to your own team; Tower emails them a sign-in link.",
-                "  cockpit team role <userId> --role <role> [--yes]",
-                "      Admin only. Asks first unless --yes. You cannot change your own role.",
-                "  cockpit team device [list] [--json]",
-                "      Every paired collector device: name, id, trust state, owner, and why",
-                "      (revoked reason, or when it was approved, or that it's still waiting).",
-                "      Admin only.",
-                "  cockpit team device revoke <id|name> --reason <label> [--note \"<text>\"] [--yes]",
-                "      Admin only. Names the device, asks first unless --yes, then revokes it —",
-                "      this cannot be undone. --reason must be one of: stale_test_pairing,",
-                "      machine_retired, person_left, re_pairing, other.",
-            ],
-        ],
-        [
-            "start",
-            [
-                "Usage: cockpit start [--ticket <id>|--clear-ticket] [--topic <label>] [--topic-summary <summary>] [--intent <intent>] [--phase <phase>] [--intent-confidence <0..1>] [--workspace <path>] [--branch <name>] [--json]",
-                "",
-                "Starts collecting your work in the background. If you point it at a parent folder it covers every repo inside.",
-                "Add --ticket only when the work already has a visible ticket; omit it to preserve an existing binding.",
-                "Use --clear-ticket to go back to collecting general work with no ticket attached.",
-                "Use --topic/--intent/--phase for planning, discovery, and learning work that has no ticket yet.",
-                "Supported intents: implementation, bug_fix, root_cause_analysis, planning, discovery, review, testing, documentation, release, learning, coordination, maintenance, analysis, unknown, other.",
-                "Supported phases: planning, discovery, implementation, debugging, review, testing, documentation, release, handoff, analysis, unknown, other.",
-                "`--repo <path>` remains supported as a backward-compatible alias; use --workspace in agent guidance.",
-            ],
-        ],
-        [
-            "sync",
-            [
-                "Usage: cockpit sync [--workspace <path>] [--dashboard-url <url>] [--json]",
-                "",
-                "Uploads your latest collected work. If it cannot reach Tower it saves a retry and tries again later.",
-                "Omit --dashboard-url for normal production sync; pass it only for staging/custom dashboards or forced re-pairing.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-                "Parent folders sync each child git worktree; Codex AND Claude Code JSONL",
-                "transcripts (and Claude subagent sidecars) are attributed to repos",
-                "deterministically and ambiguous transcripts are retained as unattributed",
-                "instead of being duplicated across repos. Use `cockpit sessions` to see why",
-                "a session is or is not collected.",
-                "New repos start being collected automatically, with no ticket attached.",
-                "Discovery scans 3 folder levels and up to 50 repos by default; tune with",
-                "--max-depth and --max-repos.",
-                "Also self-updates the CLI from npm latest once per day, strictly after",
-                "collection finishes; set COCKPIT_DISABLE_AUTO_UPDATE=1 to freeze the",
-                "installed version during incident triage.",
-            ],
-        ],
-        [
-            "analyze",
-            [
-                "Usage: cockpit analyze [--workspace <path>] [--dashboard-url <url>] [--json]",
-                "",
-                "Uploads your latest collected work, then asks Tower to analyse it.",
-                "The command returns after the batch is queued; view status and results in My Work.",
-                "Omit --dashboard-url for production; pass it only for staging/custom dashboards.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-            ],
-        ],
-        [
-            "jarvis",
-            [
-                "Usage: cockpit jarvis [question] [--prompt <question>] [--as <person>] [--date <YYYY-MM-DD>] [--thread <name>] [--model <key>] [--image <path>|--file <path>] [--no-stream] [--threads|--history [--limit <n>]] [--trace <id|last>] [--dashboard-url <url>] [--json]",
-                "",
-                "Chats with the same JARVIS used by Tower web chat and the BLI Slack DM.",
-                "--as selects the existing website person space; it changes who the chat is about, never who is authenticated.",
-                "--date <YYYY-MM-DD> binds the page that was live on one of that person's days (`today` and `yesterday` work too), so the turn is about that day's page instead of the newest one. A day with nothing compiled binds no page and JARVIS says so rather than answering from a different day.",
-                "--model <key> requests one provider:model pair (e.g. openai:gpt-5.6-terra); an unrecognised key is refused by the dashboard, not this command.",
-                "--image <path> (alias --file) attaches one local PNG, JPEG, or WEBP under 10 MB with the question, the same one-image gate the JARVIS panel uses. A bad path, an unsupported type, or an oversized file is refused with its own plain sentence — never a stack trace.",
-                "Run with no question for an interactive terminal conversation.",
-                "Agents can pass --prompt, positional text, or pipe one question on stdin.",
-                "Each answer prints a per-tool trace line and, only on a fallback or model mismatch, one model receipt line.",
-                "Trace lines arrive live while JARVIS works; pass --no-stream to wait for the whole answer in one piece instead.",
-                "--json writes one machine-readable response (including trace and model) to stdout; operational metadata stays on stderr. A --json run never streams fragments, whichever mode it is in.",
-                "A turn that outlives the dashboard's own ceiling is reported as turn_timed_out — an incomplete answer is never printed as a finished one.",
-                "The command uses the existing paired device identity. It cannot override the caller, team, role, or person scope.",
-                "--threads lists the terminal conversations on this account; --thread <name> --history replays one (the newest --limit <n> messages). Neither takes a question, and neither can reach anybody else's conversations.",
-                "--trace <id|last> prints the step tree of one turn — every model step, tool call and server-side memory step, with how long each took, which model ran it, the tokens it spent and what failed. `last` opens the turn this machine asked most recently. Like --threads it takes no question and reaches no model.",
-                "Run `cockpit login` first if this machine is not paired.",
-            ],
-        ],
-        [
-            "scout",
-            [
-                "Usage: cockpit scout [start|dismiss|undo <experiment-id>] [--days <n>] [--dashboard-url <url>] [--json]",
-                "",
-                "Prints the same Scout board the Tower page shows, in the same words: the standing",
-                "watch line, the cards waiting on a decision, and the raw signal watch underneath.",
-                "This is the board itself. To ask a QUESTION about it — what it means, whether it is",
-                "worth doing here — use `cockpit jarvis`, whose readScout tool reads the same rows.",
-                "--days <n> widens or narrows the window (1 to 90; the board defaults to 14).",
-                "Reading follows the Scout page audience setting, so whoever can open /scout can run this.",
-                "start, dismiss, and undo move one card and are super_admin actions on every surface;",
-                "a refusal is printed as Tower worded it and the board stays readable underneath.",
-                "The id can be the first 6 or more characters printed beside each card; an ambiguous",
-                "prefix is refused with the candidates rather than acting on the first match.",
-                "--json writes one object to stdout; operational lines stay on stderr.",
-                "Run `cockpit login` first if this machine is not paired.",
-            ],
-        ],
-        [
-            "ops",
-            [
-                "Usage: cockpit ops [status [--job <id>] [--skips] | recompile --person <email|name|id> [--dry-run]] [--json]",
-                "",
-                "  cockpit ops status",
-                "      One line per scheduled job: when it last produced something, and whether that",
-                "      is late FOR THAT JOB. A once-daily job quiet for 18 hours reads ok; a",
-                "      quarter-hourly one does not. Every line names the schedule it is judged against.",
-                "      A job that is not ok also prints what its artifact does and does not prove —",
-                "      several only write a row when there is something new, so quiet can mean a quiet",
-                "      week rather than a broken cron.",
-                "      --job <id> asks about one; --skips adds the open Slack and external-sync skips,",
-                "      grouped by reason. Exits 1 if anything is stale, empty or unreadable.",
-                "  cockpit ops recompile --person <email|name|id> [--dry-run]",
-                "      Writes that person's page again, now. Your own page is always yours to",
-                "      recompile; somebody else's is for the people who read across the team.",
-                "      --dry-run resolves the person and says which page is being served, compiling",
-                "      nothing. A compile only ever ADDS a version — nothing is overwritten.",
-                "      It can take minutes, and if Tower's 800-second budget runs out first you are",
-                "      told exactly that: the compile may still have finished. Check with",
-                "      `cockpit brief --for <person>`.",
-                "      There is no --cadence: the compile path behind this writes a daily, and a flag",
-                "      that was accepted and dropped would be worse than no flag.",
-            ],
-        ],
-        [
-            "slack",
-            [
-                "Usage: cockpit slack [coverage [--workspace bli|blue_pearl] [--stale-only] | read [filters]] [--json]",
-                "",
-                "  cockpit slack coverage",
-                "      What Cockpit's Slack bot can see: how many channels it is in, what each",
-                "      visibility state means, which cursors have not moved, and which ingest skips",
-                "      are open. No message text at all, so anybody signed in can run it.",
-                "      This is the command that tells an empty search apart from a coverage gap.",
-                "      --stale-only drops the per-state breakdown and shows just what is behind.",
-                "  cockpit slack read --person <p> | --channel <c> | --query <text>",
-                "      The messages themselves, through the same reader JARVIS uses. At least one",
-                "      filter is required. --since/--until are YYYY-MM-DD; --limit caps the rows.",
-                "      Reading Slack reads across the team, so this is for the people who do that",
-                "      job; being refused it never costs you `cockpit slack coverage`.",
-                "      An empty or partial answer prints Tower's own sentence about WHY, word for",
-                "      word — none of those reasons means nothing was said.",
-            ],
-        ],
-        [
-            "workbook",
-            [
-                "Usage: cockpit workbook [<project> [<doc>]] [--section <id>] [--markdown] [--width <n>] [--dashboard-url <url>] [--json]",
-                "",
-                "Reads the Tower workbook library: written project documents — workbooks, runbooks —",
-                "each with an author and a date. With no arguments it lists every compartment and the",
-                "command that opens each document.",
-                "`cockpit workbook tower` lists one project's shelf; `cockpit workbook tower workbook`",
-                "prints that document as wrapped plain text.",
-                "--section <id> prints one section, named by the anchors listed with the document.",
-                "--markdown prints the server's Markdown unchanged, for piping into anything else.",
-                "--width <n> sets the wrap column; otherwise the terminal's width is used, held between 60 and 100.",
-                "There is no pager: pipe it into one if you want paging.",
-                "Sign-in is the only gate, exactly as on the website page.",
-                "Run `cockpit login` first if this machine is not paired.",
-            ],
-        ],
-        [
-            "brief",
-            [
-                "Usage: cockpit brief [edit|rewrite|history] [--for <person>] [--date <YYYY-MM-DD>] [--delta [--against <YYYY-MM-DD>]] [--version <pageId>] [--tldr|--full] [--versions] [--claims] [--days <n>] [--reason \"<why>\"] [--wait|--no-wait] [--dashboard-url <url>] [--json]",
-                "",
-                "Prints the TODAY page — the same page the Tower website shows, rendered for a terminal.",
-                "--for opens somebody else's page; the website's own rule decides whether you may, and it refuses in plain words when you may not.",
-                "--tldr prints the ten-second version; the whole page is the default.",
-                "--version <pageId> steps back to one exact earlier version; --versions lists them with their ids.",
-                "--claims prints the [claimId] beside every line, which is what `cockpit correct --claim` takes.",
-                "Reading it here counts as opening it, exactly as opening it in a browser does.",
-                "",
-                "--date <YYYY-MM-DD> reads the page that was live on one day — `today` and `yesterday` work too. Days are that person's own days, in their own timezone, so a page always sits on the date its own masthead says.",
-                "  A day with nothing compiled says so by name, and says which day is nearest. It never quietly hands you a different day's page.",
-                "--delta says what changed between that day and the day before it, in the same words the website's version history uses. --against <day> compares against a day you name instead.",
-                "  Comparisons that skip versions are worked out fresh each time and say `(not kept)` — a day with several compiles is one of those.",
-                "",
-                "history — the days there are, newest first, each with its masthead line and how many times it compiled that day. --days <n> asks for more than the last 14.",
-                "  Pass any date it prints back to `--date`.",
-                "",
-                "  cockpit brief status [--who <person>] [--render]",
-                "      Why your brief did or did not arrive this morning — one reason, from the same",
-                "      chain the Slack DM cron itself follows: not_due, not_monday, not_the_1st,",
-                "      no_page, page_stale, no_slack_identity, engagement_write_failed, delivered.",
-                "      It shows your delivery window, which cadence owns this morning, whether a",
-                "      Slack identity is on record, and the delivered/opened/clicked receipts.",
-                "      --render adds the TLDR the DM would have carried.",
-                "      --who <person> asks about somebody else and is for the people who read across",
-                "      the team. Exits 0 only on `delivered`.",
-                "edit — opens the page in $VISUAL/$EDITOR as a document: one [claimId] line per sentence you may rewrite, everything else a # comment. Change the words after an id, save, close. Only the lines that really changed are sent, so an accidental save writes nothing.",
-                "  An id you delete or invent is refused by name BEFORE anything is sent: a missing line reads as no opinion at all, not as a sentence to remove, and Tower cannot tell those apart.",
-                "  --reason \"<why>\" rides on every row, exactly like a commit message. Optional; the before-and-after already teaches on its own.",
-                "  With no editor, or with something piped in, the edited document is read from stdin instead — `cockpit brief edit < page.md`.",
-                "  The edit IS the correction: each changed line is filed in the ledger before the page is republished, so a publish that falls over never costs you the edit.",
-                "",
-                "rewrite — asks Tower to compile the page again and waits for the new version. Writing a page takes minutes, so this queues the work and watches your page rather than holding one long request open.",
-                "  --no-wait returns as soon as the ask is on the record. Waiting is the default.",
-                "  Running out of patience is not a failure and says so: the work is still going, and `cockpit brief` will show it when it lands.",
-                "  Whose page you may ask about is the website's own rule — your own always, anybody's if you are an admin.",
-                "The command uses the existing paired device identity. Run `cockpit login` first if this machine is not paired.",
-            ],
-        ],
-        [
-            "notes",
-            [
-                "Usage: cockpit notes [list|show <id>|shelf|shelves|upload <paths...>|paste|share <id>|unshare <id>|move <id>] [flags]",
-                "",
-                "The /meeting-notes surface, typed. Bare `cockpit notes` lists the library.",
-                "list [--series <shelf>] [--kind <kind>] [--since <YYYY-MM-DD>] [--until <YYYY-MM-DD>] [--limit <n>] — every note you may open, grouped by shelf, newest meeting first. Never a word of a note.",
-                "show <id> — one note with its text, its shelf, and why you are allowed to see it.",
-                "shelf [--limit <n>] — the notes YOU have put in, and what became of each.",
-                "shelves — the shelves in use, with how many notes are on each.",
-                "upload <paths...> [--exclude \"<sentence>\"] — put one or more local files in. Explicit paths only; your shell does any globbing, and a file that does not exist is named rather than skipped.",
-                "paste [--file <path>] [--name <n>] [--exclude \"<sentence>\"] — put text in. --file <path> is safest (any editor encoding is decoded). Stdin works too: `pbpaste | cockpit notes paste` on macOS; on Windows use PowerShell 7 (`Get-Clipboard | cockpit notes paste`) — PowerShell 5.1 turns non-ASCII into `?` on pipes.",
-                "--exclude carries your own sentence about what to leave out, exactly as the browser's box does.",
-                "share <id> [--yes] — let everyone signed in read the statements that are safe to share. Asks first in a terminal; --yes is required without one, and --json implies --yes.",
-                "unshare <id> — take it back. Never asks: it only ever narrows who can read.",
-                "move <id> (--to \"<shelf>\"|--clear-shelf) — put it on a different shelf, or take the shelf off.",
-                "A large note is read by a model on the server and can take a couple of minutes; the terminal says so before it waits.",
-                "--json writes one machine-readable object to stdout; every reason, receipt and progress line stays on stderr.",
-                "Sharing and moving need a signed-in session the database can see. If this deployment cannot mint one, they are refused as needs_signed_in_session rather than done with no permission check — and reads say when they came back narrower than the browser's.",
-                "The command uses the existing paired device identity. Run `cockpit login` first if this machine is not paired.",
-            ],
-        ],
-        [
-            "correct",
-            [
-                "Usage: cockpit correct --claim <claimId> --text \"<what is wrong>\" [--for <person>] [--version <pageId>] [--supersedes <id>] [--dashboard-url <url>] [--json]",
-                "",
-                "Tells Tower that one line on the page is wrong. Same door the website's correction form uses.",
-                "Get the claim id from `cockpit brief --claims`; an id the page does not carry is refused before anything is written.",
-                "--text may be omitted when the correction is piped in on stdin.",
-                "The claim is checked against the live record FIRST. If the record disagrees, JARVIS says so and the correction is still filed with that outcome on it.",
-                "--supersedes <correctionId> takes an earlier correction back; nothing is ever edited or deleted.",
-            ],
-        ],
-        [
-            "backfill",
-            [
-                "Usage: cockpit backfill (--since-days <n>|--all) [--source codex|claude] [--dry-run] [--max-files <n>] [--max-depth <n>] [--max-repos <n>] [--yes] [--workspace <path>] [--json]",
-                "",
-                "Backfills historical Codex and Claude Code session evidence using the saved collection roots from local config when --workspace is omitted.",
-                "Omit --source to scan both sources; there is no --source all literal.",
-                "The non-all window is capped at the collector session paired_at timestamp.",
-                "--all requires a dry-run review and TTY confirmation; pass --yes for headless agent runs.",
-                "Repo discovery scans 3 folder levels and up to 50 repos by default.",
-                "Raise --max-depth or --max-repos when a partial result reports a discovery cap.",
-                "--dry-run validates the paired collector and dashboard reachability, prints the same summary tables, and writes nothing.",
-            ],
-        ],
-        [
-            "status",
-            [
-                "Usage: cockpit status [--workspace <path>] [--json]",
-                "",
-                "Prints install, pairing, active work, upload, and retry state.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-            ],
-        ],
-        [
-            "sessions",
-            [
-                "Usage: cockpit sessions [--source codex|claude] [--since-days <n>|--all] [--workspace <path>] [--json]",
-                "",
-                "Read-only: re-runs Codex + Claude session attribution and prints each",
-                "session's id, source, state, reason, scores, signals, and per-sidecar",
-                "skip reasons. No upload, no cursor writes. Answers \"why is session X",
-                "missing?\" locally — counts and labels only, never paths or content.",
-                "--since-days uses the same paired_at cap as `cockpit backfill`; --all scans the full local history.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-            ],
-        ],
-        [
-            "serve",
-            [
-                "Usage: cockpit serve [--port <port>] [--workspace <path>]",
-                "",
-                "Starts the local collector HTTP status server.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-            ],
-        ],
-        [
-            "autostart",
-            [
-                "Usage: cockpit autostart [install|uninstall|status] [--workspace <path>] [--dashboard-url <url>] [--interval-seconds <n>] [--json]",
-                "",
-                "Installs background sync through launchd on Apple Silicon macOS or a",
-                "per-user Task Scheduler task on native Windows.",
-                "Runs `cockpit sync` every 15 min by default and survives reboots;",
-                "the Windows task runs while the user is signed in.",
-                "Action defaults to `install`. `--workspace` is the parent work folder to sync.",
-                "`--repo <path>` remains supported as a backward-compatible alias.",
-                "Omit --dashboard-url for production; pass it only for staging/custom dashboards.",
-                "See docs/runbooks/cockpit-launchd-sync.md and",
-                "docs/runbooks/cockpit-windows-task-scheduler-sync.md.",
-            ],
-        ],
-        [
-            "agent-rules",
-            [
-                "Usage: cockpit agent-rules [install|uninstall|status] [--host codex|claude|all] [--workspace <path>] [--json]",
-                "",
-                "Installs a managed Tower Ticket Binding block into ~/.codex/AGENTS.md",
-                "and ~/.claude/CLAUDE.md by default. Pass --host to manage only one.",
-                "The block is scoped to --workspace, or the current directory when omitted,",
-                "so Codex and Claude only run Tower ticket binding inside that onboarded folder.",
-                "Action defaults to `install`.",
-            ],
-        ],
-        [
-            "memory",
-            [
-                "Usage: cockpit memory [install|status] [--dashboard-url <url>] [--dry-run] [--json]",
-                "",
-                "Registers BLI Memory on this machine: the `bli-memory` MCP server plus the",
-                "recall/save hooks, for Claude Code (~/.claude.json, ~/.claude/settings.json)",
-                "and for Codex (~/.codex/config.toml, ~/.codex/skills/bli-memory/).",
-                "Idempotent: it merges with what is already there, never duplicates its own",
-                "entries, and reads the stored config back before reporting success.",
-                "`do-everything` runs it, and the sync tick re-runs it at most once a day.",
-                "Action defaults to `install`. See docs/runbooks/bli-memory-install.md.",
-            ],
-        ],
-        [
-            "clean",
-            [
-                "Usage: cockpit clean [--dry-run] [--all-committed] [--reconcile] [--dashboard-url <url>] [--json]",
-                "",
-                "Reclaims this machine's disk. Prints what it would delete and why, per bucket,",
-                "then deletes: staged evidence Tower has already accepted goes after a 48-hour",
-                "retry window, and anything the upload ledger has NOT vouched for is kept,",
-                "counted and named — retention never deletes undelivered evidence.",
-                "--dry-run stops after the printing. --all-committed drops the retry window,",
-                "so every already-accepted copy goes now, and is the only thing that removes a",
-                "manual-study-evidence-vault folder (and only when every file in it is accepted).",
-                "--reconcile asks Tower's own upload ledger about every object this machine's",
-                "local memory can no longer classify (\"unknown\") before the buckets print — a",
-                "confirmed-committed pack prunes under the ordinary rule this same run; a pack",
-                "the server has never seen becomes an ordinary, never-deleted \"uncommitted\"",
-                "object instead of \"unknown\". A server failure never blocks the rest of clean",
-                "and is printed on its own line. Combine with --dry-run to ask and print",
-                "without deleting.",
-                "The scheduled sync does the same prune once a day (reconciling one batch first",
-                "when there is anything unknown); this is the door for a laptop that is full",
-                "right now.",
-            ],
-        ],
-        [
-            "docs",
-            [
-                "Usage: cockpit docs [list|tree|read <id|slug>|create|update <id>] [flags]",
-                "",
-                "The Tower document library, typed. Bare `cockpit docs` lists every document you may read.",
-                "list — every document you may see: id, visibility, slug, title.",
-                "tree — the same documents nested under their parent, for a sidebar-shaped view.",
-                "read <id|slug> — one document's title, slug, visibility, and its body.",
-                "create --title \"<title>\" [--parent <id>] [--visibility org|private] [--file <path>|--body-stdin] — the body comes from --file, or stdin (`cat body.md | cockpit docs create --title \"...\"`); neither means an empty body, matching the browser's own default.",
-                "update <id|slug> [--title \"<t>\"] [--visibility org|private] [--parent <id>|--clear-parent] [--file <path>|--body-stdin] — only the fields you pass change; a `--parent` change IS a move, there is no separate move verb.",
-                "A document body is never accepted on the command line — --file (safest on Windows) or a pipe only, same discipline as `cockpit notes paste`.",
-                "--json writes one machine-readable object to stdout; every reason and receipt line stays on stderr.",
-                "A refusal keeps Tower's own reason label — needs_rls_client, document_not_found_or_unreadable, document_not_writable, slug_taken, circular_parent, and so on.",
-                "The command uses the existing paired device identity. Run `cockpit login` first if this machine is not paired.",
-            ],
-        ],
-        [
-            "msg",
-            [
-                "Usage: cockpit msg [channels|read <channel>|send <channel>|thread <id> --channel <channel>] [flags]",
-                "",
-                "Channels and messages, typed. <channel> is a channel id, or its name with or without a leading #.",
-                "channels — every channel you are a member of (or, as a super_admin, every channel).",
-                "read <channel> [--limit <n>] [--thread <id>] — the channel's most recent top-level messages, oldest first; --thread <id> reads one thread's replies instead.",
-                "send <channel> [--thread <id>] — posts a message. The content is never accepted on the command line: pipe it in, e.g. `echo \"hello\" | cockpit msg send general`.",
-                "thread <id> --channel <channel> — one thread's replies by the parent message's id.",
-                "--json writes one machine-readable object to stdout; every reason and receipt line stays on stderr.",
-                "A refusal keeps Tower's own reason label — needs_rls_client, channel_not_found_or_unreadable, content_too_long, and so on.",
-                "The command uses the existing paired device identity. Run `cockpit login` first if this machine is not paired.",
-            ],
-        ],
-        [
-            "issue",
-            [
-                "Usage: cockpit issue [list|show <id>|create|update <id>|move <id> <state>|comment <id>|history <id>] [flags]",
-                "",
-                "Tower's issue tracker. <id> is a BLI-#### identifier (BLI-3654) or an issue's uuid — both work everywhere an issue is named.",
-                "list [--state <s>] [--assignee me|unassigned|<uuid>] [--project <name|id>] [--limit <n>] — the issues you may see, most recently updated first.",
-                "show <id> — one issue: title, state, priority, assignee, description, and every comment on it.",
-                "create --title \"<title>\" [--project <name|id>] [--priority 0-4] [--assignee me|<uuid>] [--parent <id>] [--file <path>] — the DESCRIPTION comes from --file or stdin (`cat plan.md | cockpit issue create --title \"...\"`); neither means no description.",
-                "update <id> [--title \"<t>\"] [--priority 0-4] [--assignee me|<uuid>] [--project <name|id>] [--parent <id>] [--file <path>|--body-stdin] — only the fields you pass change. State does NOT move here; use move.",
-                "move <id> <state> — moves an issue and records the move. States: backlog, todo, in_progress, in_review, done, canceled.",
-                "comment <id> — posts a comment. The body is never taken on the command line: `echo \"shipped\" | cockpit issue comment BLI-3654`.",
-                "history <id> [--limit <n>] — every recorded state move and reassignment, oldest first.",
-                "A project may be named instead of id'd; the name is matched exactly (case-insensitively) against `cockpit project list`.",
-                "--json writes one machine-readable object to stdout; every reason and receipt line stays on stderr.",
-                "A refusal keeps Tower's own reason label — needs_rls_client, issue_not_found_or_unreadable, issue_not_writable, invalid_state, comment_too_long, and so on.",
-                "The command uses the existing paired device identity. Run `cockpit login` first if this machine is not paired.",
-            ],
-        ],
-        [
-            "project",
-            [
-                "Usage: cockpit project [list] [--archived] [--json]",
-                "",
-                "The projects issues are filed under. Bare `cockpit project` lists them.",
-                "list [--archived] — id, active/archived, name. --archived includes archived projects.",
-                "There is no create/update/delete verb: `GET /api/work/projects` is the whole of Tower's project door today.",
-                "--json writes one machine-readable object to stdout; every reason and receipt line stays on stderr.",
-            ],
-        ],
-        [
-            "release",
-            [
-                "Usage: cockpit release [--dry-run] [--skip-checks] [--no-floor] [--tag <tag>] [--access <public|restricted>] [--otp <code>]",
-                "",
-                "Maintainer-only helper. Run from inside the bli-cockpit repo checkout.",
-                "Requires a clean `main` branch and runs `git pull --ff-only` before publishing.",
-                "Delegates to `npm run publish:public -- ...` so public packages are",
-                "built, checked, and published in the safe telemetry-core then CLI order.",
-                "A successful --tag latest publish raises the fleet forced-update floor so",
-                "every collector pulls the new CLI on its next sync tick; --no-floor skips",
-                "that for a staged rollout, and --tag next never touches it.",
-            ],
-        ],
-    ]);
-    return (helpByCommand.get(command) ?? [localCommandHelp()]).join("\n");
-}
 /** `cockpit <command> --help` — the command name alone, with only the help flag. */
 export function isLocalHelpRequest(argv) {
     const command = argv[0];