@oxagen/cli 0.4.0 → 0.6.0

package/dist/commands/audit.log.query.js

@@ -0,0 +1,42 @@
+import { Command } from "commander";
+import { apiRequest } from "../lib/api-client.js";
+export const auditLogQueryCommand = new Command("query")
+    .description("Query the org's security and automation audit events with filters — " +
+    "actor, capability, outcome, event type, time range — newest first.")
+    .option("-s, --source <source>", "Which spine: all | security | playbook", "all")
+    .option("-e, --event-type <type>", "Exact event-type match")
+    .option("--actor <userId>", "Filter security events by acting user id")
+    .option("-c, --capability <name>", "Filter security events by capability name")
+    .option("-o, --outcome <outcome>", "Filter security events: allow | deny | error | success")
+    .option("--run <playbookRunId>", "Filter playbook events to a single run")
+    .option("--workspace <workspaceId>", "Restrict to one workspace")
+    .option("--from <iso>", "Inclusive ISO-8601 lower bound on occurredAt")
+    .option("--to <iso>", "Exclusive ISO-8601 upper bound on occurredAt")
+    .option("--limit <n>", "Max events (1–200)", "50")
+    .option("--offset <n>", "Pagination offset", "0")
+    .action(async (options) => {
+    try {
+        const result = await apiRequest("/audit/log/query", {
+            method: "POST",
+            body: JSON.stringify({
+                source: options.source,
+                eventType: options.eventType,
+                actorUserId: options.actor,
+                capability: options.capability,
+                outcome: options.outcome,
+                playbookRunId: options.run,
+                workspaceId: options.workspace,
+                from: options.from,
+                to: options.to,
+                limit: Number(options.limit),
+                offset: Number(options.offset),
+            }),
+        });
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (error) {
+        console.error("Failed to query audit log:", error);
+        process.exit(1);
+    }
+});
+//# sourceMappingURL=audit.log.query.js.map

package/dist/commands/audit.log.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.log.query.js","sourceRoot":"","sources":["../../src/commands/audit.log.query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KACrD,WAAW,CACV,sEAAsE;IACpE,oEAAoE,CACvE;KACA,MAAM,CAAC,uBAAuB,EAAE,wCAAwC,EAAE,KAAK,CAAC;KAChF,MAAM,CAAC,yBAAyB,EAAE,wBAAwB,CAAC;KAC3D,MAAM,CAAC,kBAAkB,EAAE,0CAA0C,CAAC;KACtE,MAAM,CAAC,yBAAyB,EAAE,2CAA2C,CAAC;KAC9E,MAAM,CAAC,yBAAyB,EAAE,wDAAwD,CAAC;KAC3F,MAAM,CAAC,uBAAuB,EAAE,wCAAwC,CAAC;KACzE,MAAM,CAAC,2BAA2B,EAAE,2BAA2B,CAAC;KAChE,MAAM,CAAC,cAAc,EAAE,8CAA8C,CAAC;KACtE,MAAM,CAAC,YAAY,EAAE,8CAA8C,CAAC;KACpE,MAAM,CAAC,aAAa,EAAE,oBAAoB,EAAE,IAAI,CAAC;KACjD,MAAM,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC;KAChD,MAAM,CAAC,KAAK,EAAE,OAAgC,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,kBAAkB,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,OAAO,CAAC,KAAK;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,GAAG;gBAC1B,WAAW,EAAE,OAAO,CAAC,SAAS;gBAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC5B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aAC/B,CAAC;SACH,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/automation.create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"automation.create.d.ts","sourceRoot":"","sources":["../../src/commands/automation.create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,eAAO,MAAM,uBAAuB,SAyBhC,CAAC"}
+{"version":3,"file":"automation.create.d.ts","sourceRoot":"","sources":["../../src/commands/automation.create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,eAAO,MAAM,uBAAuB,SA2FjC,CAAC"}

package/dist/commands/automation.create.js

@@ -3,23 +3,62 @@ import { apiRequest, ApiError } from "../lib/api-client.js";
 export const automationCreateCommand = new Command("create")
     .description("Create a new automation")
     .requiredOption("-n, --name <name>", "Automation name")
-    .option("-t, --trigger <event>", "Trigger event type")
-    .option("-a, --action <type>", "Action type")
+    .option("-d, --description <text>", "What this automation does and when it fires")
+    .option("--trigger-type <type>", "Trigger type: event | schedule | api (default: api)", "api")
+    .option("--entity-type <type>", "Graph entity type to watch (required for event triggers)")
+    .option("--event-type <type>", "Graph event type: node.created | node.updated | node.deleted (required for event triggers)")
+    .option("--conditions <json>", "JSON array of propertyConditions for event triggers")
+    .option("--cron <expression>", "POSIX cron expression (required for schedule triggers, e.g. '0 9 * * 1')")
+    .option("--timezone <tz>", "IANA timezone for schedule triggers (default: UTC)")
+    .option("--steps <json>", "JSON array of step objects to scaffold in the playbook")
+    .option("--enabled", "Start the trigger enabled (human-origin only; AI calls are forced off)")
     .action(async (options) => {
     try {
+        const triggerConfig = {};
+        if (options.entityType)
+            triggerConfig.entityType = options.entityType;
+        if (options.eventType)
+            triggerConfig.eventType = options.eventType;
+        if (options.conditions) {
+            try {
+                triggerConfig.propertyConditions = JSON.parse(options.conditions);
+            }
+            catch {
+                throw new Error("Invalid --conditions JSON");
+            }
+        }
+        if (options.cron)
+            triggerConfig.cronExpression = options.cron;
+        if (options.timezone)
+            triggerConfig.timezone = options.timezone;
+        let steps = [];
+        if (options.steps) {
+            try {
+                steps = JSON.parse(options.steps);
+            }
+            catch {
+                throw new Error("Invalid --steps JSON");
+            }
+        }
         console.log(`Creating automation "${options.name}"...`);
         const data = await apiRequest("/automation/create", {
             method: "POST",
             body: JSON.stringify({
                 name: options.name,
-                trigger: options.trigger,
-                action: options.action,
+                description: options.description,
+                triggerType: options.triggerType,
+                triggerConfig,
+                steps,
+                enabled: options.enabled ?? false,
             }),
         });
         console.log(`✓ Automation created`);
         console.log(`  ID: ${data.automation_id}`);
+        console.log(`  Playbook ID: ${data.playbook_id}`);
         console.log(`  Name: ${data.name}`);
         console.log(`  Status: ${data.status}`);
+        console.log(`  Trigger type: ${data.triggerType}`);
+        console.log(`  Enabled: ${data.enabled}`);
     }
     catch (err) {
         const msg = err instanceof ApiError ? err.message : String(err);

package/dist/commands/automation.create.js.map

@@ -1 +1 @@
-{"version":3,"file":"automation.create.js","sourceRoot":"","sources":["../../src/commands/automation.create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAQ5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACzD,WAAW,CAAC,yBAAyB,CAAC;KACtC,cAAc,CAAC,mBAAmB,EAAE,iBAAiB,CAAC;KACtD,MAAM,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;KACrD,MAAM,CAAC,qBAAqB,EAAE,aAAa,CAAC;KAC5C,MAAM,CAAC,KAAK,EAAE,OAA4D,EAAE,EAAE;IAC7E,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,CAAC,IAAI,MAAM,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,UAAU,CAA2B,oBAAoB,EAAE;YAC5E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC;SACH,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"automation.create.js","sourceRoot":"","sources":["../../src/commands/automation.create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAW5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACzD,WAAW,CAAC,yBAAyB,CAAC;KACtC,cAAc,CAAC,mBAAmB,EAAE,iBAAiB,CAAC;KACtD,MAAM,CAAC,0BAA0B,EAAE,6CAA6C,CAAC;KACjF,MAAM,CACL,uBAAuB,EACvB,qDAAqD,EACrD,KAAK,CACN;KACA,MAAM,CAAC,sBAAsB,EAAE,0DAA0D,CAAC;KAC1F,MAAM,CACL,qBAAqB,EACrB,4FAA4F,CAC7F;KACA,MAAM,CAAC,qBAAqB,EAAE,qDAAqD,CAAC;KACpF,MAAM,CACL,qBAAqB,EACrB,0EAA0E,CAC3E;KACA,MAAM,CAAC,iBAAiB,EAAE,oDAAoD,CAAC;KAC/E,MAAM,CAAC,gBAAgB,EAAE,wDAAwD,CAAC;KAClF,MAAM,CAAC,WAAW,EAAE,wEAAwE,CAAC;KAC7F,MAAM,CACL,KAAK,EAAE,OAWN,EAAE,EAAE;IACH,IAAI,CAAC;QASH,MAAM,aAAa,GAAkB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,UAAU;YAAE,aAAa,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtE,IAAI,OAAO,CAAC,SAAS;YAAE,aAAa,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnE,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,aAAa,CAAC,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,IAAI;YAAE,aAAa,CAAC,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;QAC9D,IAAI,OAAO,CAAC,QAAQ;YAAE,aAAa,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAEhE,IAAI,KAAK,GAAc,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAc,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,CAAC,IAAI,MAAM,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,UAAU,CAA2B,oBAAoB,EAAE;YAC5E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,aAAa;gBACb,KAAK;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;aAClC,CAAC;SACH,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/commands/automation.disable.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const automationDisableCommand: Command;
+//# sourceMappingURL=automation.disable.d.ts.map

package/dist/commands/automation.disable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.disable.d.ts","sourceRoot":"","sources":["../../src/commands/automation.disable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,eAAO,MAAM,wBAAwB,SAmBjC,CAAC"}

package/dist/commands/automation.disable.js

@@ -0,0 +1,24 @@
+import { Command } from "commander";
+import { apiRequest, ApiError } from "../lib/api-client.js";
+export const automationDisableCommand = new Command("disable")
+    .description("Disable an automation trigger so it stops firing")
+    .argument("<id>", "Automation trigger public ID")
+    .action(async (id) => {
+    try {
+        console.log(`Disabling automation ${id}...`);
+        const data = await apiRequest("/automation/disable", {
+            method: "POST",
+            body: JSON.stringify({ automation_id: id }),
+        });
+        console.log(`✓ Automation disabled`);
+        console.log(`  ID: ${data.automation_id}`);
+        console.log(`  Enabled: ${data.enabled}`);
+        console.log(`  Status: ${data.status}`);
+    }
+    catch (err) {
+        const msg = err instanceof ApiError ? err.message : String(err);
+        console.error(`Error: ${msg}`);
+        process.exit(1);
+    }
+});
+//# sourceMappingURL=automation.disable.js.map

package/dist/commands/automation.disable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.disable.js","sourceRoot":"","sources":["../../src/commands/automation.disable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAQ5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;KAC3D,WAAW,CAAC,kDAAkD,CAAC;KAC/D,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;KAChD,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,UAAU,CAA4B,qBAAqB,EAAE;YAC9E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/automation.enable.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const automationEnableCommand: Command;
+//# sourceMappingURL=automation.enable.d.ts.map

package/dist/commands/automation.enable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.enable.d.ts","sourceRoot":"","sources":["../../src/commands/automation.enable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,eAAO,MAAM,uBAAuB,SAmBhC,CAAC"}

package/dist/commands/automation.enable.js

@@ -0,0 +1,24 @@
+import { Command } from "commander";
+import { apiRequest, ApiError } from "../lib/api-client.js";
+export const automationEnableCommand = new Command("enable")
+    .description("Enable an automation trigger so it fires live")
+    .argument("<id>", "Automation trigger public ID")
+    .action(async (id) => {
+    try {
+        console.log(`Enabling automation ${id}...`);
+        const data = await apiRequest("/automation/enable", {
+            method: "POST",
+            body: JSON.stringify({ automation_id: id }),
+        });
+        console.log(`✓ Automation enabled`);
+        console.log(`  ID: ${data.automation_id}`);
+        console.log(`  Enabled: ${data.enabled}`);
+        console.log(`  Status: ${data.status}`);
+    }
+    catch (err) {
+        const msg = err instanceof ApiError ? err.message : String(err);
+        console.error(`Error: ${msg}`);
+        process.exit(1);
+    }
+});
+//# sourceMappingURL=automation.enable.js.map

package/dist/commands/automation.enable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.enable.js","sourceRoot":"","sources":["../../src/commands/automation.enable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAQ5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACzD,WAAW,CAAC,+CAA+C,CAAC;KAC5D,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;KAChD,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,UAAU,CAA2B,oBAAoB,EAAE;YAC5E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/automation.update.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const automationUpdateCommand: Command;
+//# sourceMappingURL=automation.update.d.ts.map

package/dist/commands/automation.update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.update.d.ts","sourceRoot":"","sources":["../../src/commands/automation.update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,eAAO,MAAM,uBAAuB,SAuCjC,CAAC"}

package/dist/commands/automation.update.js

@@ -0,0 +1,42 @@
+import { Command } from "commander";
+import { apiRequest, ApiError } from "../lib/api-client.js";
+export const automationUpdateCommand = new Command("update")
+    .description("Edit an existing automation: rename, change description, or replace trigger config")
+    .argument("<id>", "Automation trigger public ID")
+    .option("-n, --name <name>", "New name")
+    .option("-d, --description <description>", "New description")
+    .option("--trigger-config <json>", "Replacement trigger config as a JSON string")
+    .action(async (id, opts) => {
+    try {
+        const body = { automation_id: id };
+        if (opts.name !== undefined)
+            body.name = opts.name;
+        if (opts.description !== undefined)
+            body.description = opts.description;
+        if (opts.triggerConfig !== undefined) {
+            try {
+                body.triggerConfig = JSON.parse(opts.triggerConfig);
+            }
+            catch {
+                console.error("Error: --trigger-config must be valid JSON");
+                process.exit(1);
+            }
+        }
+        console.log(`Updating automation ${id}...`);
+        const data = await apiRequest("/automation/update", {
+            method: "PATCH",
+            body: JSON.stringify(body),
+        });
+        console.log(`✓ Automation updated`);
+        console.log(`  ID: ${data.automation_id}`);
+        console.log(`  Name: ${data.name}`);
+        console.log(`  Status: ${data.status}`);
+        console.log(`  Trigger: ${data.triggerType} (enabled: ${data.enabled})`);
+    }
+    catch (err) {
+        const msg = err instanceof ApiError ? err.message : String(err);
+        console.error(`Error: ${msg}`);
+        process.exit(1);
+    }
+});
+//# sourceMappingURL=automation.update.js.map

package/dist/commands/automation.update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.update.js","sourceRoot":"","sources":["../../src/commands/automation.update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAW5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACzD,WAAW,CAAC,oFAAoF,CAAC;KACjG,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;KAChD,MAAM,CAAC,mBAAmB,EAAE,UAAU,CAAC;KACvC,MAAM,CAAC,iCAAiC,EAAE,iBAAiB,CAAC;KAC5D,MAAM,CAAC,yBAAyB,EAAE,6CAA6C,CAAC;KAChF,MAAM,CACL,KAAK,EACH,EAAU,EACV,IAAqE,EACrE,EAAE;IACF,IAAI,CAAC;QACH,MAAM,IAAI,GAA4B,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACxE,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,UAAU,CAA2B,oBAAoB,EAAE;YAC5E,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,WAAW,cAAc,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/commands/code.d.ts

@@ -0,0 +1,14 @@
+export declare function handleCodeDiff(beforeFile: string, afterFile: string, opts: {
+    path?: string;
+    context?: string;
+}): Promise<void>;
+export declare function handleCodeFormat(file: string, opts: {
+    language?: string;
+    indent?: string;
+    write?: boolean;
+}): Promise<void>;
+export declare function handleCodePatch(diffFile: string, opts: {
+    dir?: string;
+    write?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=code.d.ts.map

package/dist/commands/code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code.d.ts","sourceRoot":"","sources":["../../src/commands/code.ts"],"names":[],"mappings":"AAmCA,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5D,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACtC,OAAO,CAAC,IAAI,CAAC,CA0Bf"}

package/dist/commands/code.js

@@ -0,0 +1,100 @@
+/**
+ * `oxagen code …` — sandboxed code utilities (diff, patch, format) over the
+ * org-scoped /v1 API. Thin shell: each command reads/writes local files and
+ * delegates the actual computation to the code.diff / code.patch / code.format
+ * capabilities so the CLI stays in parity with the API, MCP, and agent surfaces.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { apiPost } from "../lib/api.js";
+export async function handleCodeDiff(beforeFile, afterFile, opts) {
+    const before = readFileSync(beforeFile, "utf8");
+    const after = readFileSync(afterFile, "utf8");
+    const body = { before, after };
+    if (opts.path)
+        body.path = opts.path;
+    if (opts.context !== undefined)
+        body.contextLines = parseInt(opts.context, 10);
+    const res = await apiPost("code/diff", body);
+    if (!res.changed) {
+        process.stderr.write("(no changes)\n");
+        return;
+    }
+    process.stdout.write(res.diff);
+    process.stderr.write(`\n+${res.additions} -${res.deletions}\n`);
+}
+export async function handleCodeFormat(file, opts) {
+    const source = readFileSync(file, "utf8");
+    const language = opts.language ?? inferLanguage(file);
+    if (!language) {
+        process.stderr.write(`Could not infer language for ${file}; pass --language json|python.\n`);
+        process.exit(1);
+    }
+    const body = { language, source };
+    if (opts.indent !== undefined)
+        body.indent = parseInt(opts.indent, 10);
+    const res = await apiPost("code/format", body);
+    if (opts.write) {
+        writeFileSync(file, res.formatted);
+        process.stderr.write(`✓ formatted ${file}${res.changed ? "" : " (already formatted)"}\n`);
+    }
+    else {
+        process.stdout.write(res.formatted);
+    }
+}
+export async function handleCodePatch(diffFile, opts) {
+    const diff = readFileSync(diffFile, "utf8");
+    const dir = opts.dir ?? ".";
+    const files = readWorkspaceForDiff(diff, dir);
+    const res = await apiPost("code/patch", { files, diff });
+    for (const f of res.files) {
+        process.stdout.write(`${f.status.padEnd(8)} ${f.path}\n`);
+    }
+    if (opts.write) {
+        for (const f of res.files) {
+            const abs = join(dir, f.path);
+            if (f.status === "deleted") {
+                if (existsSync(abs))
+                    rmSync(abs);
+            }
+            else {
+                mkdirSync(dirname(abs), { recursive: true });
+                writeFileSync(abs, f.content);
+            }
+        }
+        process.stderr.write(`✓ applied ${res.changedCount} file(s) to ${dir}\n`);
+    }
+    else {
+        process.stderr.write(`(dry run — re-run with --write to apply ${res.changedCount} change(s))\n`);
+    }
+}
+/** json from .json, python from .py; undefined when unknown. */
+function inferLanguage(file) {
+    if (file.endsWith(".json"))
+        return "json";
+    if (file.endsWith(".py"))
+        return "python";
+    return undefined;
+}
+/**
+ * Discover the existing workspace files a diff touches by scanning its ---/+++
+ * file headers, then read them from `dir`. This only ASSEMBLES the workspace to
+ * send; the authoritative apply (and path-traversal confinement) happens
+ * server-side in code.patch, so this is a best-effort input gather, not a parser.
+ */
+function readWorkspaceForDiff(diff, dir) {
+    const files = {};
+    for (const line of diff.split("\n")) {
+        const m = /^(?:---|\+\+\+) (?:[ab]\/)?(.+?)(?:\t.*)?$/.exec(line);
+        if (!m)
+            continue;
+        const p = m[1];
+        if (!p || p === "/dev/null" || files[p])
+            continue;
+        const abs = join(dir, p);
+        if (existsSync(abs))
+            files[p] = readFileSync(abs, "utf8");
+    }
+    return files;
+}
+//# sourceMappingURL=code.js.map

package/dist/commands/code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code.js","sourceRoot":"","sources":["../../src/commands/code.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AA2BxC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,SAAiB,EACjB,IAAyC;IAEzC,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,IAAI,GAA4B,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxD,IAAI,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACrC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAE/E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAe,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,IAA6D;IAE7D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gCAAgC,IAAI,kCAAkC,CACvE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAA4B,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEvE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAiB,aAAa,EAAE,IAAI,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,IAAI,CACpE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,IAAuC;IAEvC,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC;IAC5B,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAE9C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAgB,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7C,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,YAAY,eAAe,GAAG,IAAI,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C,GAAG,CAAC,YAAY,eAAe,CAC3E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,IAAY,EAAE,GAAW;IACrD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC;YAAE,SAAS;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACzB,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/commands/config.d.ts

@@ -0,0 +1,2 @@
+export declare function handleConfig(key?: string, value?: string): Promise<void>;
+//# sourceMappingURL=config.d.ts.map

package/dist/commands/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AA+BA,wBAAsB,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAwC9E"}

package/dist/commands/config.js

@@ -0,0 +1,66 @@
+/**
+ * Config command — view or set local CLI configuration.
+ *
+ * Usage:
+ *   oxagen config              Show all config
+ *   oxagen config token        Show token (masked)
+ *   oxagen config token sk-... Set token
+ *   oxagen config model        Show model
+ *   oxagen config model gpt-4  Set model
+ *   oxagen config api-url      Show API URL
+ */
+import { readConfig, writeConfig } from "../lib/config.js";
+const VALID_KEYS = ["token", "model", "api-url", "org", "workspace"];
+function keyToConfigField(key) {
+    switch (key) {
+        case "token": return "token";
+        case "api-url": return "apiUrl";
+        case "org": return "orgSlug";
+        case "workspace": return "workspaceSlug";
+        case "model": return "model";
+    }
+}
+function maskToken(token) {
+    if (token.length <= 8)
+        return "****";
+    return token.slice(0, 4) + "…" + token.slice(-4);
+}
+export async function handleConfig(key, value) {
+    const config = readConfig();
+    // No args: show all
+    if (!key) {
+        console.log("Configuration (~/.config/oxagen/config.json):\n");
+        console.log(`  token:     ${config.token ? maskToken(config.token) : "(not set)"}`);
+        console.log(`  api-url:   ${config.apiUrl ?? "https://api.oxagen.sh"}`);
+        console.log(`  org:       ${config.orgSlug ?? "(not set)"}`);
+        console.log(`  workspace: ${config.workspaceSlug ?? "(not set)"}`);
+        console.log(`\nSet a value: oxagen config <key> <value>`);
+        return;
+    }
+    if (!VALID_KEYS.includes(key)) {
+        console.error(`Unknown config key: "${key}"`);
+        console.error(`Valid keys: ${VALID_KEYS.join(", ")}`);
+        process.exitCode = 1;
+        return;
+    }
+    const field = keyToConfigField(key);
+    // Get
+    if (value === undefined) {
+        const current = config[field];
+        if (!current) {
+            console.log(`${key}: (not set)`);
+        }
+        else if (key === "token") {
+            console.log(`${key}: ${maskToken(current)}`);
+        }
+        else {
+            console.log(`${key}: ${current}`);
+        }
+        return;
+    }
+    // Set
+    writeConfig({ [field]: value });
+    const display = key === "token" ? maskToken(value) : value;
+    console.log(`✓ ${key} = ${display}`);
+}
+//# sourceMappingURL=config.js.map

package/dist/commands/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAkB,MAAM,kBAAkB,CAAC;AAE3E,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,CAAU,CAAC;AAG9E,SAAS,gBAAgB,CAAC,GAAc;IACtC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;QAC7B,KAAK,SAAS,CAAC,CAAC,OAAO,QAAQ,CAAC;QAChC,KAAK,KAAK,CAAC,CAAC,OAAO,SAAS,CAAC;QAC7B,KAAK,WAAW,CAAC,CAAC,OAAO,eAAe,CAAC;QACzC,KAAK,OAAO,CAAC,CAAC,OAAO,OAA0B,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,KAAc;IAC7D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,oBAAoB;IACpB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,aAAa,IAAI,WAAW,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAgB,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,KAAK,CAAC,wBAAwB,GAAG,GAAG,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,eAAe,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAgB,CAAC,CAAC;IAEjD,MAAM;IACN,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,aAAa,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM;IACN,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,MAAM,OAAO,EAAE,CAAC,CAAC;AACvC,CAAC"}

package/dist/commands/conversation.files.list.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const conversationFilesListCommand: Command;
+//# sourceMappingURL=conversation.files.list.d.ts.map

package/dist/commands/conversation.files.list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.files.list.d.ts","sourceRoot":"","sources":["../../src/commands/conversation.files.list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBpC,eAAO,MAAM,4BAA4B,SA2CtC,CAAC"}

package/dist/commands/conversation.files.list.js

@@ -0,0 +1,39 @@
+import { Command } from "commander";
+import { apiRequest, requireAuth, ApiError } from "../lib/api-client.js";
+export const conversationFilesListCommand = new Command("files")
+    .description("List generated files attached to a conversation")
+    .requiredOption("-c, --conversation <id>", "Conversation public ID")
+    .option("--kind <kind>", "Filter by kind: image|video|document|spreadsheet|presentation|pdf|archive")
+    .option("--limit <n>", "Maximum results (1–200)", "50")
+    .option("--cursor <cursor>", "Pagination cursor (ISO createdAt of last row)")
+    .action(async (options) => {
+    requireAuth();
+    try {
+        const qs = new URLSearchParams();
+        if (options.kind)
+            qs.set("kind", options.kind);
+        if (options.limit)
+            qs.set("limit", options.limit);
+        if (options.cursor)
+            qs.set("cursor", options.cursor);
+        const data = await apiRequest(`/conversations/${options.conversation}/files?${qs}`);
+        if (data.files.length === 0) {
+            console.log("No files found.");
+            return;
+        }
+        console.log("Files:");
+        for (const f of data.files) {
+            const size = f.sizeBytes !== null ? ` (${Math.round(f.sizeBytes / 1024)}KB)` : "";
+            console.log(`  ${f.publicId}  [${f.kind}]  ${f.name}${size}  ${f.createdAt}`);
+        }
+        if (data.nextCursor) {
+            console.log(`\nNext cursor: ${data.nextCursor}`);
+        }
+    }
+    catch (err) {
+        const _msg = err instanceof ApiError ? err.message : String(err);
+        console.error(`Error: ${_msg}`);
+        process.exit(1);
+    }
+});
+//# sourceMappingURL=conversation.files.list.js.map

package/dist/commands/conversation.files.list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.files.list.js","sourceRoot":"","sources":["../../src/commands/conversation.files.list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAuBzE,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7D,WAAW,CAAC,iDAAiD,CAAC;KAC9D,cAAc,CAAC,yBAAyB,EAAE,wBAAwB,CAAC;KACnE,MAAM,CAAC,eAAe,EAAE,2EAA2E,CAAC;KACpG,MAAM,CAAC,aAAa,EAAE,yBAAyB,EAAE,IAAI,CAAC;KACtD,MAAM,CAAC,mBAAmB,EAAE,+CAA+C,CAAC;KAC5E,MAAM,CACL,KAAK,EAAE,OAKN,EAAE,EAAE;IACH,WAAW,EAAE,CAAC;IACd,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,IAAI;YAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,KAAK;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM;YAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B,kBAAkB,OAAO,CAAC,YAAY,UAAU,EAAE,EAAE,CACrD,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,GACR,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC,SAAS,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/commands/env.d.ts

@@ -0,0 +1,19 @@
+export declare function handleEnvList(opts: {
+    json?: boolean;
+}): Promise<void>;
+export declare function handleEnvGet(idOrSlug: string, opts: {
+    json?: boolean;
+}): Promise<void>;
+export declare function handleEnvCreate(name: string, opts: {
+    slug?: string;
+    description?: string;
+}): Promise<void>;
+export declare function handleEnvUpdate(idOrSlug: string, opts: {
+    name?: string;
+    slug?: string;
+    description?: string;
+    active?: boolean;
+}): Promise<void>;
+export declare function handleEnvRemove(idOrSlug: string): Promise<void>;
+export declare function handleEnvSetDefault(idOrSlug: string): Promise<void>;
+//# sourceMappingURL=env.d.ts.map

package/dist/commands/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/commands/env.ts"],"names":[],"mappings":"AAoBA,wBAAsB,aAAa,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB3E;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAO5F;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAC7E,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIrE;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMzE"}

package/dist/commands/env.js

@@ -0,0 +1,64 @@
+/** `oxagen env …` — manage workspace environments via the org-scoped API. */
+import { apiPost, printTable } from "../lib/api.js";
+import { resolveEnvironmentId } from "../lib/resolve.js";
+function slugify(name) {
+    return name
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+}
+export async function handleEnvList(opts) {
+    const { environments } = await apiPost("environment/list", {});
+    if (opts.json) {
+        process.stdout.write(JSON.stringify(environments, null, 2) + "\n");
+        return;
+    }
+    printTable(["NAME", "SLUG", "DEFAULT", "ACTIVE", "ID"], environments.map((e) => [
+        e.name,
+        e.slug,
+        e.isDefault ? "★" : "",
+        e.isActive ? "yes" : "no",
+        e.id,
+    ]));
+}
+export async function handleEnvGet(idOrSlug, opts) {
+    const environmentId = await resolveEnvironmentId(idOrSlug);
+    const { environment } = await apiPost("environment/get", {
+        environmentId,
+    });
+    process.stdout.write(JSON.stringify(environment, null, 2) + "\n");
+    void opts;
+}
+export async function handleEnvCreate(name, opts) {
+    const slug = opts.slug ?? slugify(name);
+    const { environment } = await apiPost("environment/create", {
+        name,
+        slug,
+        description: opts.description ?? null,
+    });
+    process.stdout.write(`✓ created environment ${environment.name} (${environment.slug}) ${environment.id}\n`);
+}
+export async function handleEnvUpdate(idOrSlug, opts) {
+    const environmentId = await resolveEnvironmentId(idOrSlug);
+    const { environment } = await apiPost("environment/update", {
+        environmentId,
+        name: opts.name,
+        slug: opts.slug,
+        description: opts.description,
+        isActive: opts.active,
+    });
+    process.stdout.write(`✓ updated environment ${environment.name} (${environment.slug})\n`);
+}
+export async function handleEnvRemove(idOrSlug) {
+    const environmentId = await resolveEnvironmentId(idOrSlug);
+    await apiPost("environment/delete", { environmentId });
+    process.stdout.write(`✓ removed environment ${idOrSlug}\n`);
+}
+export async function handleEnvSetDefault(idOrSlug) {
+    const environmentId = await resolveEnvironmentId(idOrSlug);
+    const { environment } = await apiPost("environment/set-default", {
+        environmentId,
+    });
+    process.stdout.write(`✓ default environment: ${environment.name} (${environment.slug})\n`);
+}
+//# sourceMappingURL=env.js.map

package/dist/commands/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/commands/env.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAWzD,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAwB;IAC1D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,OAAO,CAAiC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IACD,UAAU,CACR,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,EAC3C,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACtB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACtB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACzB,CAAC,CAAC,EAAE;KACL,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAwB;IAC3E,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,OAAO,CAA8B,iBAAiB,EAAE;QACpF,aAAa;KACd,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,KAAK,IAAI,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,IAA6C;IAE7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,OAAO,CAA8B,oBAAoB,EAAE;QACvF,IAAI;QACJ,IAAI;QACJ,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;KACtC,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;AAC9G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,IAA8E;IAE9E,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,OAAO,CAA8B,oBAAoB,EAAE;QACvF,aAAa;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,MAAM;KACtB,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB;IACpD,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,OAAO,CAAkB,oBAAoB,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,QAAQ,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,OAAO,CAA8B,yBAAyB,EAAE;QAC5F,aAAa;KACd,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC;AAC7F,CAAC"}