@coderook/cli 0.23.0 → 0.25.0

package/dist/cli/src/cli.js

@@ -5,7 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 /**
- * CodeRook from the command line.
+ * cbx — the CodeBox engine from the command line, talking to CodeRook.
  *
  * The same engines the desktop application uses — the same scanner, the same
  * ignore rules, the same upload and download — with a terminal in front of
@@ -24,8 +24,11 @@ const api_js_1 = require("./api.js");
 const registry_js_1 = require("./registry.js");
 const help_js_1 = require("./help.js");
 const progress_js_1 = require("./progress.js");
+const publish_js_1 = require("./publish.js");
 const project_commands_js_1 = require("./project_commands.js");
 const track_commands_js_1 = require("./track_commands.js");
+const tracks_js_1 = require("../../desktop-app/src/main/tracks.js");
+const transfer_command_js_1 = require("./transfer_command.js");
 const mcp_js_1 = require("./mcp.js");
 const skill_command_js_1 = require("./skill_command.js");
 const licence_commands_js_1 = require("./licence_commands.js");
@@ -43,7 +46,7 @@ const runner_js_1 = require("./runner.js");
 const config_js_1 = require("./config.js");
 /*
   Read from the package rather than written twice. A hardcoded copy had
-  already drifted from the published version, which makes `coderook doctor`
+  already drifted from the published version, which makes `cbx doctor`
   worse than useless when working out what somebody is actually running.
 */
 const VERSION = (() => {
@@ -297,7 +300,7 @@ async function commandStatus(parsed) {
     if (stale.length) {
         console.log(dim(`${stale.length} file${stale.length === 1 ? "" : "s"} in the saved version ` +
             `${stale.length === 1 ? "is" : "are"} newer than the cop${stale.length === 1 ? "y" : "ies"} here ` +
-            `— run ${accent("coderook get")} to bring ${stale.length === 1 ? "it" : "them"} down.`));
+            `— run ${accent("cbx get")} to bring ${stale.length === 1 ? "it" : "them"} down.`));
         for (const [path] of stale.slice(0, 10))
             console.log(dim(`  behind  ${path}`));
     }
@@ -328,7 +331,7 @@ async function commandImport(parsed) {
     if (!url) {
         console.error(red("Nothing to import from."));
         console.error("Give the address of a repository, for example:");
-        console.error(`  ${accent("coderook import https://github.com/owner/project")}`);
+        console.error(`  ${accent("cbx import https://github.com/owner/project")}`);
         return 1;
     }
     if (!(0, import_command_js_1.looksLikeRepositoryUrl)(url)) {
@@ -408,7 +411,7 @@ async function commandImport(parsed) {
     if (code === 0 && plan.temporary) {
         console.log(dim(`The working copy stays at ${plan.folder} until you remove it.
 ` +
-            `Run ${accent("coderook get " + plan.name)} anywhere to fetch it fresh.`));
+            `Run ${accent("cbx get " + plan.name)} anywhere to fetch it fresh.`));
     }
     return code;
 }
@@ -455,7 +458,23 @@ async function commandSubmit(parsed) {
     const rules = importing
         ? { shared: "", local: "" }
         : await (0, worktree_js_1.readRules)(folder);
-    const files = await (0, worktree_js_1.changedFiles)(folder, rules, baseline);
+    /*
+      Whether a file that is no longer here means "delete it".
+  
+      The default says no, and that is the right default: a missing path is
+      usually an unmounted drive, a folder moved while something was open, or a
+      scan that ran mid-copy — and the cost of guessing wrong is somebody's work
+      removed from the one place it was safe. So the saved copy is left alone
+      (docs/UPLOAD_POLICY.md).
+  
+      It also meant nothing on this side could ever remove a file. Publishing
+      from git can, because there the question does not arise: `git rm` is a
+      recorded act, so the deletion is known rather than inferred. That left the
+      remote helper as the only route to something the tool itself could not do,
+      which is the wrong way round — so this is that capability, asked for
+      plainly.
+    */
+    const files = await (0, worktree_js_1.changedFiles)(folder, rules, baseline, hasFlag(parsed, "sync") ? "synchronize" : "add-and-update");
     /*
       An upgraded folder with no materialisation record and something that
       differs from its recorded version is ambiguous in the one way that
@@ -478,8 +497,8 @@ async function commandSubmit(parsed) {
             console.error(`${files.length} file${files.length === 1 ? " differs" : "s differ"} here:`);
             for (const file of files.slice(0, 20))
                 console.error(`  ${file.path}`);
-            console.error(`\nIf that is your work, send it with ${accent("coderook submit --force")}.` +
-                `\nIf it is an old copy, take theirs with ${accent("coderook get --replace")}.`);
+            console.error(`\nIf that is your work, send it with ${accent("cbx submit --force")}.` +
+                `\nIf it is an old copy, take theirs with ${accent("cbx get --replace")}.`);
             return 1;
         }
     }
@@ -493,7 +512,7 @@ async function commandSubmit(parsed) {
         console.log(behindOn
             ? `Nothing to submit; your own work is all saved. ${behindOn} file` +
                 `${behindOn === 1 ? "" : "s"} here ${behindOn === 1 ? "is" : "are"} ` +
-                `behind the saved version — run ${accent("coderook get")}.`
+                `behind the saved version — run ${accent("cbx get")}.`
             : "Nothing to submit; this folder matches the saved version.");
         return 0;
     }
@@ -591,18 +610,23 @@ Pass ${accent("--allow-secrets")} if these are not real keys.`);
     if (added) {
         console.log(`${accent("Added an MIT licence")}, so other people may use this.`);
         console.log(dim(`  Change it with `) +
-            accent("coderook licence <name>") +
+            accent("cbx licence <name>") +
             dim(`, or remove it with `) +
-            accent("coderook licence none") +
+            accent("cbx licence none") +
             dim("."));
         console.log("");
     }
     const line = progressLine();
     const uploader = new upload_js_1.Uploader(config_js_1.credentials);
-    const uploadRequest = {
+    /*
+      Built by the shared description, so this and the git remote helper cannot
+      drift. They already had: the helper listed deletions in `deletions` alone
+      and published versions that still held the deleted file.
+    */
+    const uploadRequest = (0, publish_js_1.uploadRequestFor)({
         localPath: folder,
-        include: files.map((file) => file.path),
-        deletions: files.filter((file) => file.deleted).map((file) => file.path),
+        changed: files.filter((file) => !file.deleted).map((file) => file.path),
+        deleted: files.filter((file) => file.deleted).map((file) => file.path),
         message,
         /*
           A folder's name is the right default and the wrong answer for import,
@@ -625,11 +649,8 @@ Pass ${accent("--allow-secrets")} if these are not real keys.`);
           would reject the publication and the import would be lossy.
         */
         ...(hasFlag(parsed, "allow-ignored") ? { allowIgnored: true } : {}),
-        ...(link?.baseVersionId
-            ? { expectedHeadVersionId: link.baseVersionId }
-            : {}),
         ...(link ? { known: link.local ?? link.manifest ?? {} } : {}),
-    };
+    });
     let result;
     try {
         const plan = await uploader.plan(uploadRequest, (progress) => {
@@ -660,23 +681,22 @@ Pass ${accent("--allow-secrets")} if these are not real keys.`);
     }
     catch (error) {
         done(line);
-        const code = error.code;
-        const text = error instanceof Error ? error.message : String(error);
         /*
-          A connection that fails part way through says nothing about whether
-          the work was done. It may well have been — the service records the
-          attempt, so running the same command again is answered with the
-          version it already made rather than a second one. Saying so is the
-          difference between a person retrying and a person wondering.
+          Classified by the shared description rather than by a private regular
+          expression, so a push and a submit disagree about nothing — including
+          what counts as "the connection failed" and what that means for whether
+          the work was saved.
         */
-        if (!code && /fetch failed|ECONNRESET|socket hang up|network|ETIMEDOUT/i.test(text)) {
+        const failure = (0, publish_js_1.classifyPublishFailure)(error);
+        const text = error instanceof Error ? error.message : String(error);
+        if (failure?.kind === "interrupted") {
             console.error(red(`
 The connection failed: ${text}`));
             console.error(`Your work may already have been saved. Run the same command again —` +
                 ` it will not create a second version.`);
             return 1;
         }
-        if (code === "merge_required" || code === "track_moved") {
+        if (failure?.kind === "conflict") {
             /*
               Somebody else saved to this project first. Everything that did not
               overlap has already been combined by the service; what is left is a
@@ -684,7 +704,7 @@ The connection failed: ${text}`));
               at it rather than to try again harder.
             */
             console.error(red(error instanceof Error ? error.message : String(error)));
-            console.error(`\nRun ${accent("coderook get")} to bring the latest version down, then` +
+            console.error(`\nRun ${accent("cbx get")} to bring the latest version down, then` +
                 ` submit again. Nothing was changed on your account.`);
             return 1;
         }
@@ -704,8 +724,8 @@ The connection failed: ${text}`));
         for (const conflict of result.mergeTrack.conflicts.slice(0, 20)) {
             console.log(`  ${red(conflict.path)}  ${dim(conflict.kind)}`);
         }
-        console.log(`\nRun ${accent(`coderook merge ${result.mergeTrack.reference}`)} to decide,` +
-            ` or ${accent("coderook merges")} to see everything waiting.`);
+        console.log(`\nRun ${accent(`cbx merge ${result.mergeTrack.reference}`)} to decide,` +
+            ` or ${accent("cbx merges")} to see everything waiting.`);
         return 0;
     }
     /*
@@ -714,9 +734,29 @@ The connection failed: ${text}`));
       attempt name exists to make survivable.
     */
     (0, faults_js_1.maybeFail)("submit:after-commit");
+    /*
+      What the project is actually called, not what this folder is called.
+  
+      A first publish recorded the folder's own name, which is right only when
+      nothing renamed the project — and two things routinely do: `--name`, and
+      the service turning a display name into a slug. When they differ, every
+      command that finds the project through this folder looks up a name that
+      does not exist: `tracks`, `versions`, `issues`, `releases`, `people`,
+      `watch`, `delete` and the rest all answered "No project matching …" in a
+      folder that had just published to it successfully.
+  
+      Asked of the service rather than guessed, and only on a first publish,
+      because that is the only time this is not already known.
+    */
+    let recordedSlug = link?.slug;
+    if (!recordedSlug) {
+        recordedSlug = await (0, api_js_2.projects)()
+            .then((all) => all.find((candidate) => candidate.id === result.repositoryId)?.slug)
+            .catch(() => undefined);
+    }
     await (0, config_js_1.writeLink)(folder, {
         repositoryId: result.repositoryId,
-        slug: link?.slug ?? node_path_1.default.basename(folder),
+        slug: recordedSlug ?? uploadRequest.projectName ?? node_path_1.default.basename(folder),
         sequence: result.sequence,
         // What this folder is now working from, so the next submit can say so.
         versionId: result.versionId,
@@ -815,8 +855,8 @@ async function commandGet(parsed) {
             console.error(red("This folder was connected by an older version of CodeRook,"));
             console.error("which did not record what it had received, so changed files here");
             console.error("cannot be told apart from copies left behind by a merge.\n");
-            console.error(`Save them with ${accent("coderook submit")} if they are your work, or ` +
-                `take the\nsaved version exactly with ${accent("coderook get --replace")}.`);
+            console.error(`Save them with ${accent("cbx submit")} if they are your work, or ` +
+                `take the\nsaved version exactly with ${accent("cbx get --replace")}.`);
             return 1;
         }
     }
@@ -846,15 +886,15 @@ async function commandGet(parsed) {
                     incoming.has(file.path) &&
                     edited.some((one) => one.path === file.path));
                 if (!changedInTheGap.length) {
-                    return fetchInto(link.repositoryId, folder, link.slug, link.local ?? null, "replace");
+                    return fetchInto(link.repositoryId, folder, link.slug, link.local ?? null, "replace", await (0, track_commands_js_1.trackFor)(folder));
                 }
                 console.error(red(`${changedInTheGap.length} file${changedInTheGap.length === 1 ? "" : "s"} ` +
                     `changed while the interrupted fetch was stopped:`));
                 for (const file of changedInTheGap.slice(0, 20))
                     console.error(`  ${file.path}`);
                 console.error(`
-Save them with ${accent("coderook submit")}, or finish the fetch and ` +
-                    `discard them with ${accent("coderook get --replace")}.`);
+Save them with ${accent("cbx submit")}, or finish the fetch and ` +
+                    `discard them with ${accent("cbx get --replace")}.`);
                 return 1;
             }
             /*
@@ -874,8 +914,8 @@ Save them with ${accent("coderook submit")}, or finish the fetch and ` +
                     console.error(`  ${file.path}`);
                 if (atRisk.length > 20)
                     console.error(dim(`  …and ${atRisk.length - 20} more`));
-                console.error(`\nSave them first with ${accent("coderook submit")}, or discard them ` +
-                    `with ${accent("coderook get --replace")}.`);
+                console.error(`\nSave them first with ${accent("cbx submit")}, or discard them ` +
+                    `with ${accent("cbx get --replace")}.`);
                 return 1;
             }
         }
@@ -885,12 +925,14 @@ Save them with ${accent("coderook submit")}, or finish the fetch and ` +
       what the version actually changed is written over — unless somebody asks
       for an exact copy, which is how a damaged folder is repaired.
     */
-    return fetchInto(link.repositoryId, folder, link.slug, link.local ?? null, replacing ? "replace" : "reconcile");
+    return fetchInto(link.repositoryId, folder, link.slug, link.local ?? null, replacing ? "replace" : "reconcile", 
+    // The line this folder saves to, so catching up brings that line down.
+    await (0, track_commands_js_1.trackFor)(folder));
 }
 async function commandClone(parsed) {
     const reference = parsed.positional[0];
     if (!reference) {
-        console.error(red("Which project? Try: coderook clone <project>"));
+        console.error(red("Which project? Try: cbx clone <project>"));
         return 1;
     }
     const project = await (0, api_js_2.findProject)(reference);
@@ -903,7 +945,34 @@ async function commandClone(parsed) {
         return 1;
     }
     const destination = node_path_1.default.resolve(parsed.positional[1] ?? project.slug);
-    return fetchInto(project.id, destination, project.slug);
+    /*
+      A clone opens on the project's default line, or on the one named.
+  
+      It used to take whichever version was newest across every line, which is
+      only the same thing while a project has one. As soon as somebody pushed to
+      a branch, that branch held the newest version — so cloning the project
+      handed you their unfinished work under the impression it was the project.
+      Nothing said so: the fetch reported a version number and the files looked
+      like a project, just not the one anybody asked for.
+  
+      Naming a line here also removes the clone-switch-fetch dance that was the
+      only way to get a branch before, which is what exposed the same fault in
+      `get`.
+    */
+    const wanted = flagText(parsed, "track") ?? project.defaultBranch;
+    /*
+      Falling back rather than failing when the default line does not exist.
+      `defaultBranch` is a property of the project and a line can be renamed out
+      from under it; refusing to clone at all in that case would be a worse
+      answer than the old behaviour. An explicitly named line is still refused,
+      because there the person said which one they meant.
+    */
+    const lines = await new tracks_js_1.Tracks(config_js_1.credentials).list(project.id);
+    const usable = lines.some((line) => line.kind === "line" && line.name === wanted && line.headVersionId);
+    if (!usable && !flagText(parsed, "track")) {
+        console.log(dim(`This project has no line called ${wanted}; taking its newest version.`));
+    }
+    return fetchInto(project.id, destination, project.slug, null, "replace", usable || flagText(parsed, "track") ? wanted : undefined);
 }
 async function fetchInto(repositoryId, destination, slug, 
 /*
@@ -912,9 +981,45 @@ async function fetchInto(repositoryId, destination, slug,
   is removed, because "missing from the version" cannot then be told from
   "never came from the version at all".
 */
-held, mode = "replace") {
+held, mode = "replace", 
+/*
+  The line to fetch. Omitted means the project's newest version, which is
+  right for a clone and wrong for a folder that has chosen a line.
+*/
+trackName) {
     const downloader = new download_js_1.Downloader(config_js_1.credentials);
-    const latest = (await downloader.versions(repositoryId))[0];
+    const all = await downloader.versions(repositoryId);
+    /*
+      The head of this folder's line, not the newest version in the project.
+  
+      Those are the same thing only while a project has one line. With two, the
+      newest version usually belongs to the *other* one — so switching to a line
+      and fetching brought down the line you had just left, reported success,
+      and left the folder holding the wrong contents while still claiming to
+      save to the line you asked for. The next publish would then be computed
+      against a baseline from somewhere else.
+  
+      Worse than a wrong answer: `track` ends by telling you to run `get`, so
+      the command that set this up was the one recommending it.
+    */
+    let latest = all[0];
+    if (trackName) {
+        const chosen = (await new tracks_js_1.Tracks(config_js_1.credentials).list(repositoryId)).find((candidate) => candidate.name === trackName && candidate.kind === "line");
+        if (!chosen) {
+            console.error(red(`This project has no line called ${trackName}.`));
+            return 1;
+        }
+        if (!chosen.headVersionId) {
+            console.error(red(`The line ${trackName} has nothing saved to it yet.`));
+            return 1;
+        }
+        const head = all.find((version) => version.id === chosen.headVersionId);
+        if (!head) {
+            console.error(red(`Could not read the current version of ${trackName}.`));
+            return 1;
+        }
+        latest = head;
+    }
     if (!latest) {
         console.error(red("That project has no saved version."));
         return 1;
@@ -953,6 +1058,16 @@ held, mode = "replace") {
         // version holds and the two agree again.
         local: result.manifest,
         manifest: result.manifest,
+        /*
+          The line this folder is on survives being caught up.
+    
+          This record is built fresh rather than merged, so anything not named
+          here is dropped — and `track` was not named. Fetching therefore moved
+          the folder back to `main` every time, silently: the files were right,
+          the folder reported the wrong line, and the next publish went somewhere
+          nobody chose.
+        */
+        ...(trackName ? { track: trackName } : {}),
         // Reached the end, so there is no longer a fetch in flight.
     });
     // The record is written; the run has not reported success yet.
@@ -994,7 +1109,7 @@ async function suggestRules(folder, apply) {
     const recommended = suggestions.filter((one) => one.recommended);
     if (!apply) {
         console.log("");
-        console.log(dim("Add the + ones with ") + accent("coderook ignore --suggest --apply"));
+        console.log(dim("Add the + ones with ") + accent("cbx ignore --suggest --apply"));
         return 0;
     }
     if (!recommended.length) {
@@ -1056,7 +1171,7 @@ async function commandBundle(parsed) {
 async function commandUnbundle(parsed) {
     const source = parsed.positional[0];
     if (!source) {
-        console.error(red("Which bundle? Try: coderook unbundle <file.cbx> [folder]"));
+        console.error(red("Which bundle? Try: cbx unbundle <file.cbx> [folder]"));
         return 1;
     }
     const manifest = await (0, cbx_js_1.readManifest)(node_path_1.default.resolve(source));
@@ -1073,7 +1188,7 @@ async function commandUnbundle(parsed) {
 async function commandInspect(parsed) {
     const source = parsed.positional[0];
     if (!source) {
-        console.error(red("Which bundle? Try: coderook inspect <file.cbx>"));
+        console.error(red("Which bundle? Try: cbx inspect <file.cbx>"));
         return 1;
     }
     const manifest = await (0, cbx_js_1.readManifest)(node_path_1.default.resolve(source));
@@ -1090,7 +1205,7 @@ async function commandInspect(parsed) {
 }
 async function commandDoctor() {
     const service = await (0, api_js_2.health)().catch(() => null);
-    console.log(`CodeRook CLI ${VERSION} · Node ${node_process_1.default.versions.node} · ${node_process_1.default.platform}`);
+    console.log(`cbx ${VERSION} · Node ${node_process_1.default.versions.node} · ${node_process_1.default.platform}`);
     console.log(`Config: ${(0, config_js_1.configDirectory)()}`);
     console.log(service
         ? `Service: ${service.status} · schema ${service.schemaVersion}` +
@@ -1134,7 +1249,7 @@ async function commandMerges(parsed) {
         console.log(`${accent(merge.reference)}  ${counts ? `${counts.unresolved} of ${counts.total} still to decide` : ""}  ${dim(new Date(merge.createdAt).toLocaleString())}`);
     }
     console.log(dim(`
-Run coderook merge <reference> to look at one.`));
+Run cbx merge <reference> to look at one.`));
     return 0;
 }
 /** Find a merge by the reference a person would type, such as M-2. */
@@ -1157,7 +1272,7 @@ async function findMerge(folder, reference) {
 async function commandMerge(parsed) {
     const reference = parsed.positional[0];
     if (!reference) {
-        console.error(red("Which merge? Try: coderook merge M-1"));
+        console.error(red("Which merge? Try: cbx merge M-1"));
         return 1;
     }
     const folder = folderFor({ ...parsed, positional: parsed.positional.slice(1) });
@@ -1216,7 +1331,7 @@ ${accent(now.mergeTrack.reference)} · ${now.provisional.fileCount} files · ` +
         const applied = await (0, api_js_1.applyMerge)(summary.id);
         console.log(`
 Applied as ${accent(`v${applied.version.sequence}`)}.`);
-        console.log(dim("Run coderook get to bring it down to this folder."));
+        console.log(dim("Run cbx get to bring it down to this folder."));
         return 0;
     }
     if (!decision) {
@@ -1227,7 +1342,7 @@ Add --path <file> for one file, then --apply when ready.`));
     }
     else if (now.provisional.ready) {
         console.log(dim(`
-Run coderook merge ${now.mergeTrack.reference} --apply to publish it.`));
+Run cbx merge ${now.mergeTrack.reference} --apply to publish it.`));
     }
     return 0;
 }
@@ -1247,7 +1362,7 @@ Run coderook merge ${now.mergeTrack.reference} --apply to publish it.`));
 async function commandRunner(parsed) {
     const reference = parsed.positional[0] ?? flagText(parsed, "project", "p");
     if (!reference) {
-        console.error(red("Which project? coderook runner <project>"));
+        console.error(red("Which project? cbx runner <project>"));
         return 1;
     }
     const project = await (0, api_js_2.findProject)(reference);
@@ -1393,7 +1508,7 @@ const SPECS = [
     },
     {
         name: "submit",
-        aliases: ["publish"],
+        aliases: ["publish", "push"],
         group: "Working with a folder",
         summary: "send the changes as a new version",
         usage: 'submit [folder] -m "…"',
@@ -1411,6 +1526,10 @@ const SPECS = [
                 flags: "--allow-secrets",
                 description: "send files that look like credentials, and files with keys inside",
             },
+            {
+                flags: "--sync",
+                description: "treat a file that is no longer here as deleted, rather than keeping the saved copy",
+            },
             {
                 flags: "--track <name>",
                 description: "save onto this line, just this once",
@@ -1421,8 +1540,8 @@ const SPECS = [
             },
         ],
         examples: [
-            'coderook submit -m "Fix the export dialog"',
-            'coderook submit --track spike -m "Try the other encoder"',
+            'cbx submit -m "Fix the export dialog"',
+            'cbx submit --track spike -m "Try the other encoder"',
         ],
         run: commandSubmit,
     },
@@ -1453,11 +1572,48 @@ const SPECS = [
             },
         ],
         examples: [
-            "coderook import https://github.com/owner/project",
-            "coderook import git@github.com:owner/project.git ./project",
+            "cbx import https://github.com/owner/project",
+            "cbx import git@github.com:owner/project.git ./project",
         ],
         run: commandImport,
     },
+    {
+        /*
+          Distinct from `import`, which takes a snapshot. This moves the history,
+          the branches, the tags and what the project says about itself — the
+          things somebody leaving a host is actually worried about losing.
+        */
+        name: "transfer",
+        aliases: ["migrate"],
+        group: "Getting started",
+        summary: "move a whole repository here from GitHub, GitLab or Codeberg",
+        usage: "transfer <address>",
+        detail: "Brings the commits, every branch, the tags and the description across.\n" +
+            "Each commit becomes a version and each branch a line, so a long history\n" +
+            "takes a while; the count and an estimate are printed before it starts.\n\n" +
+            "The history is published by running `git push` against the CodeRook\n" +
+            "remote — the same route anybody else uses, deliberately, because the\n" +
+            "claim being made is that git repositories work here.\n\n" +
+            "A private repository needs a read token in the environment:\n" +
+            "GITHUB_TOKEN, GITLAB_TOKEN or FORGE_TOKEN. It is never asked for on the\n" +
+            "command line and never stored.\n\n" +
+            "The project is created private whatever the source was, unless you say\n" +
+            "otherwise. Pull requests, CI configuration and collaborators do not come\n" +
+            "across; the report at the end lists what did and what did not.",
+        options: [
+            { flags: "--name <name>", description: "call the project this, rather than the repository's name" },
+            {
+                flags: "--visibility <how>",
+                description: "private (default), same as the source, or public",
+            },
+            { flags: "--issues", description: "also bring the open issues; needs a read token" },
+        ],
+        examples: [
+            "cbx transfer https://github.com/owner/project",
+            "cbx transfer https://codeberg.org/owner/project --visibility same",
+        ],
+        run: transfer_command_js_1.commandTransfer,
+    },
     {
         /*
           Where the next save goes, which is a property of this folder rather
@@ -1465,14 +1621,14 @@ const SPECS = [
           different lines, which is most of the point of having them.
         */
         name: "track",
-        aliases: ["switch"],
+        aliases: ["switch", "checkout"],
         group: "Working with a folder",
         summary: "show or change the line this folder saves to",
         usage: "track [name]",
         detail: "With no name, prints the line this folder saves to. With one, switches\n" +
             "to it. Switching says where the next save goes and nothing else: no\n" +
             "files move and nothing is fetched, so it is instant and safe to change\n" +
-            "your mind. Run `coderook get` afterwards to bring that line's files\n" +
+            "your mind. Run `cbx get` afterwards to bring that line's files\n" +
             "into the folder.\n\n" +
             "A name that does not exist is refused rather than created, because a\n" +
             "typo in a branch name is an ordinary thing to do and a line called\n" +
@@ -1481,23 +1637,25 @@ const SPECS = [
         options: [
             { flags: "-n, --new", description: "start this line from where the project is now" },
         ],
-        examples: ["coderook track", "coderook track spike --new", "coderook track main"],
+        examples: ["cbx track", "cbx track spike --new", "cbx track main"],
         run: track_commands_js_1.commandTrack,
     },
     {
         name: "tracks",
+        aliases: ["branch", "branches"],
         group: "Your projects",
         summary: "the lines a project has, and any waiting on a decision",
         usage: "tracks [project]",
         detail: "Lists every line on the project, marking the one this folder saves to.\n" +
             "Merges waiting on a decision are listed beside them rather than hidden,\n" +
             "because somebody looking for where they can save needs to see the one\n" +
-            "they cannot. Finish one with `coderook merge`.",
-        examples: ["coderook tracks", "coderook tracks my-project"],
+            "they cannot. Finish one with `cbx merge`.",
+        examples: ["cbx tracks", "cbx tracks my-project"],
         run: track_commands_js_1.commandTracks,
     },
     {
         name: "get",
+        aliases: ["pull"],
         group: "Working with a folder",
         summary: "bring this folder up to date",
         usage: "get [folder]",
@@ -1511,6 +1669,13 @@ const SPECS = [
         group: "Working with a folder",
         summary: "fetch a project into a new folder",
         usage: "clone <project> [dir]",
+        options: [
+            {
+                flags: "--track <name>",
+                description: "fetch this line rather than the project's newest version",
+            },
+        ],
+        examples: ["cbx clone my-project", "cbx clone my-project --track spike"],
         run: commandClone,
     },
     {
@@ -1540,7 +1705,7 @@ const SPECS = [
                 description: "replace a licence that is already there",
             },
         ],
-        examples: ["coderook licence", "coderook licence MIT", "coderook licence Apache-2.0"],
+        examples: ["cbx licence", "cbx licence MIT", "cbx licence Apache-2.0"],
         run: licence_commands_js_1.commandLicence,
     },
     {
@@ -1587,6 +1752,7 @@ const SPECS = [
     },
     {
         name: "versions",
+        aliases: ["log"],
         group: "Your projects",
         summary: "what has been saved to a project",
         usage: "versions [project]",
@@ -1612,9 +1778,9 @@ const SPECS = [
             { flags: "--request [off]", description: "automated calls to its endpoints" },
         ],
         examples: [
-            "coderook ai my-project",
-            "coderook ai my-project --read off",
-            "coderook ai my-project --download off --request off",
+            "cbx ai my-project",
+            "cbx ai my-project --read off",
+            "cbx ai my-project --download off --request off",
         ],
         run: project_commands_js_1.commandAi,
     },
@@ -1627,16 +1793,43 @@ const SPECS = [
             { flags: '--new "<title>"', description: "open a new issue" },
             { flags: "--body <text>", description: "the description for a new one" },
         ],
-        examples: ['coderook issues my-project --new "Crash on export"'],
+        examples: ['cbx issues my-project --new "Crash on export"'],
         run: service_commands_js_1.commandIssues,
     },
     {
         name: "releases",
+        aliases: ["tags"],
         group: "Your projects",
         summary: "what has been released, and its files",
         usage: "releases [project]",
         run: service_commands_js_1.commandReleases,
     },
+    {
+        /*
+          A release is a version with a name on it, so this names one rather than
+          creating anything. Pushing a git tag does the same thing by the same
+          route — the tag is the name, the tagged commit picks the version.
+        */
+        name: "release",
+        aliases: ["tag"],
+        group: "Your projects",
+        summary: "give a version a name, so people know which one to fetch",
+        usage: "release <name> [project]",
+        detail: "Names the newest version unless you name another with --version.\n" +
+            "Nothing is uploaded: a release is a version with a name on it, so the\n" +
+            "version has to exist already.\n\n" +
+            "The same thing happens when a git tag is pushed to a CodeRook remote —\n" +
+            "`git push cbx v1.0` and `cbx release v1.0` are one action.",
+        options: [
+            { flags: "--version <n>", description: "name this version instead of the newest" },
+            { flags: "--notes <text>", description: "what changed, for the release page" },
+        ],
+        examples: [
+            "cbx release v1.0",
+            'cbx release v1.2 --version 41 --notes "Fixes the export dialog"',
+        ],
+        run: service_commands_js_1.commandRelease,
+    },
     {
         name: "actions",
         aliases: ["workflows"],
@@ -1644,7 +1837,7 @@ const SPECS = [
         summary: "the automations a project has",
         usage: "actions [project]",
         detail: "Shows what each action runs, what it runs on, and how many of its\n" +
-            "runs have passed. Use `coderook runner` to execute them on this machine.",
+            "runs have passed. Use `cbx runner` to execute them on this machine.",
         run: service_commands_js_1.commandWorkflows,
     },
     {
@@ -1661,7 +1854,7 @@ const SPECS = [
                 description: "queued, running, passed, failed or cancelled",
             },
         ],
-        examples: ["coderook runs --status failed"],
+        examples: ["cbx runs --status failed"],
         run: service_commands_js_1.commandRuns,
     },
     {
@@ -1672,7 +1865,7 @@ const SPECS = [
         detail: "The output the runner sent up, in order. Anything the command wrote to\n" +
             "stderr is shown in red. Exits 1 when the run failed, so this can be\n" +
             "the last line of a script.",
-        examples: ["coderook logs 12", "coderook logs #12 my-project"],
+        examples: ["cbx logs 12", "cbx logs #12 my-project"],
         run: service_commands_js_1.commandLogs,
     },
     {
@@ -1696,7 +1889,7 @@ const SPECS = [
             { flags: "--invite <email>", description: "ask somebody to join" },
             { flags: "--role <role>", description: "what they may do (default member)" },
         ],
-        examples: ["coderook people my-project --invite sam@example.com"],
+        examples: ["cbx people my-project --invite sam@example.com"],
         run: service_commands_js_1.commandCollaborators,
     },
     {
@@ -1781,7 +1974,7 @@ const SPECS = [
             { flags: "--labels <a,b>", description: "what kinds of run it answers to" },
             { flags: "--poll <seconds>", description: "how long between asks" },
         ],
-        examples: ["coderook runner my-game --labels windows,signing"],
+        examples: ["cbx runner my-game --labels windows,signing"],
         run: commandRunner,
     },
     {
@@ -1805,7 +1998,7 @@ const SPECS = [
             "repository for everybody who clones it.\n" +
             "\n" +
             "It teaches the command line rather than the MCP server, because that\n" +
-            "needs no configuration at all. `coderook mcp` is still there when a\n" +
+            "needs no configuration at all. `cbx mcp` is still there when a\n" +
             "structured connection is wanted.\n",
         options: [
             {
@@ -1813,7 +2006,7 @@ const SPECS = [
                 description: "install into this project rather than for you",
             },
         ],
-        examples: ["coderook skill", "coderook skill --project"],
+        examples: ["cbx skill", "cbx skill --project"],
         run: skill_command_js_1.commandSkill,
     },
     {
@@ -1832,11 +2025,11 @@ const SPECS = [
             "assistant at it and it starts and stops the process itself.\n" +
             "\n" +
             "Claude Code:\n" +
-            "  claude mcp add coderook -- coderook mcp\n" +
+            "  claude mcp add coderook -- cbx mcp\n" +
             "\n" +
             "Codex, in ~/.codex/config.toml:\n" +
             "  [mcp_servers.coderook]\n" +
-            "  command = 'coderook'\n" +
+            "  command = 'cbx'\n" +
             "  args = ['mcp']\n" +
             "\n" +
             "Everything it offers reads. It lists projects, versions and files, shows\n" +
@@ -1846,7 +2039,7 @@ const SPECS = [
             "\n" +
             "A project whose owner has turned off machine reading is refused, in\n" +
             "words rather than as a status code.\n",
-        examples: ["claude mcp add coderook -- coderook mcp"],
+        examples: ["claude mcp add coderook -- cbx mcp"],
         run: () => (0, mcp_js_1.commandMcp)(VERSION),
     },
     {
@@ -1869,7 +2062,7 @@ async function main(argv) {
         return 0;
     }
     /*
-      `coderook help submit` and `coderook submit --help` reach the same page.
+      `cbx help submit` and `cbx submit --help` reach the same page.
       People reach for both, and one of them silently doing something else is
       the kind of small betrayal that makes a tool feel unreliable.
     */