@oxagen/cli 2.1.4-534 → 2.1.4-544

package/oxagen.mjs

@@ -5706,7 +5706,7 @@ function bundleSkillChars(skill) {
   for (const file of skill.files) chars += file.path.length + file.content.length;
   return chars;
 }
-var TACHO_BATCH_SCHEMA, TACHO_BUNDLE_SCHEMA, TACHO_COMMANDS_SCHEMA, TACHO_ENROLLMENT_CLAIMS_SCHEMA, TACHO_ENFORCEMENT_TIER_ATTR, TACHO_GATEWAY_TIER, TACHO_GATEWAY_SESSION_HEADER, TACHO_GATEWAY_GENESIS_HEADER, MCP_STREAMABLE_HTTP_ACCEPT, TACHO_METERING_ATTR, TACHO_METERING_OBSERVED, TACHO_MODEL_SESSION_HEADER, TACHO_CREDENTIAL_BASIS_ATTR, TACHO_CREDENTIAL_GATEWAY_BROKERED, TACHO_CREDENTIAL_HARNESS_HELD, TACHO_CREDENTIAL_BASES, TACHO_RUN_TOKEN_ATTR, BUNDLE_FEATURE_GATEWAY_TOOLS, BUNDLE_FEATURE_MODEL_PRICES, BUNDLE_FEATURE_MODEL_ALLOWLIST, BUNDLE_FEATURE_INDEPENDENT_MODELS, BUNDLE_FEATURE_HOOK_FAIL_OPEN, BUNDLE_FEATURE_STEERING_MANIFEST, BUNDLE_FEATURE_CONTAINMENT, BUNDLE_FEATURE_DAILY_BUDGET, BUNDLE_FEATURE_STEER_NEXT_STEP, BUNDLE_FEATURE_UNBOUND_REPO, BUNDLE_FEATURE_CEDAR, BUNDLE_FEATURE_SKILLS, BUNDLE_FEATURE_CACHE_KEEP_ALIVE, BUNDLE_FEATURE_WORK_ORDERS, TACHO_BUNDLE_FEATURES, bundleFeaturesSchema, hostEnrollmentIdSchema, tachoPlatformSchema, tachoHarnessSchema, TACHO_HARNESS_LABELS, TACHO_HARNESS_TIERS, WRAPPED_HARNESSES, CONNECTED_HARNESSES, HARNESS_BINARY, MODEL_HARNESS_ROUTES, MODEL_ROUTED_HARNESSES, BROKERABLE_HARNESSES, BROKERABLE_HARNESS_PROVIDER, TACHO_TIER_SUMMARY, CUSTOM_AGENT_NAME_PATTERN, RESERVED_AGENT_NAMES, customAgentNameSchema, tachoHostStatusSchema, tachoBundleModeSchema, tachoCommandSchema, tachoCommandStatusSchema, tachoCommandAckStatusSchema, tachoDeliveryModeSchema, denyGenerationSchema, deliveredCommandSchema, deliveredCommandResponseSchema, WORK_ORDER_ID_PATTERN, WORK_ITEM_ID_PATTERN, workOrderCommandPayloadSchema, WORK_ORDER_CLAIM_PATH, WORK_ORDER_REJECT_PATH, workOrderClaimResponseSchema, workOrderRejectResponseSchema, WORK_CRITERION_CLAIM_PATH, WORK_CRITERION_ID_PATTERN, WORK_HEAD_SHA_PATTERN, WORK_CRITERION_CLAIM_TEXT_MAX, workCriterionClaimResponseSchema, WORK_ORDER_ENV, WORK_ORDER_ATTR, steeringForceSchema, steeringItemKindSchema, steeringCutReasonSchema, steeringManifestItemSchema, STEERING_MANIFEST_SCHEMA, steeringManifestSchema, steeringManifestFrameSchema, cedarIdSchema, cedarPrincipalSchema, cedarToolSchema, cedarBundleSchema, BUNDLE_SKILLS_MAX, BUNDLE_SKILL_FILES_MAX, BUNDLE_SKILLS_CHARS_MAX, BASE64_PATTERN, bundleSkillFileSchema, bundleSkillSchema, policyBundleSchema, enrollmentClaimsSchema, tachoEventWireSchema, daemonHealthSchema, TACHO_MAX_BATCH, TACHO_MAX_BODY_BYTES, TACHO_MAX_REQUEST_BYTES, TACHO_REQUEST_ENVELOPE_BYTES, tachoBodySchema, tachoBatchSchema, agentDaySpendSchema, controlEnvelopeSchema, ingestResponseSchema, bundleResponseSchema, commandAcknowledgementSchema, commandsResponseSchema, enrollmentResponseSchema, tokenEnrollmentResponseSchema;
+var TACHO_BATCH_SCHEMA, TACHO_BUNDLE_SCHEMA, TACHO_COMMANDS_SCHEMA, TACHO_ENROLLMENT_CLAIMS_SCHEMA, TACHO_ENFORCEMENT_TIER_ATTR, TACHO_GATEWAY_TIER, TACHO_GATEWAY_SESSION_HEADER, TACHO_GATEWAY_GENESIS_HEADER, MCP_STREAMABLE_HTTP_ACCEPT, TACHO_METERING_ATTR, TACHO_METERING_OBSERVED, TACHO_MODEL_SESSION_HEADER, TACHO_CREDENTIAL_BASIS_ATTR, TACHO_CREDENTIAL_GATEWAY_BROKERED, TACHO_CREDENTIAL_HARNESS_HELD, TACHO_CREDENTIAL_BASES, TACHO_RUN_TOKEN_ATTR, BUNDLE_FEATURE_GATEWAY_TOOLS, BUNDLE_FEATURE_MODEL_PRICES, BUNDLE_FEATURE_MODEL_ALLOWLIST, BUNDLE_FEATURE_INDEPENDENT_MODELS, BUNDLE_FEATURE_HOOK_FAIL_OPEN, BUNDLE_FEATURE_STEERING_MANIFEST, BUNDLE_FEATURE_STEERING_INCOMPLETE, BUNDLE_FEATURE_CONTAINMENT, BUNDLE_FEATURE_DAILY_BUDGET, BUNDLE_FEATURE_STEER_NEXT_STEP, BUNDLE_FEATURE_UNBOUND_REPO, BUNDLE_FEATURE_CEDAR, BUNDLE_FEATURE_SKILLS, BUNDLE_FEATURE_CACHE_KEEP_ALIVE, BUNDLE_FEATURE_WORK_ORDERS, TACHO_BUNDLE_FEATURES, bundleFeaturesSchema, hostEnrollmentIdSchema, tachoPlatformSchema, tachoHarnessSchema, TACHO_HARNESS_LABELS, TACHO_HARNESS_TIERS, WRAPPED_HARNESSES, CONNECTED_HARNESSES, HARNESS_BINARY, MODEL_HARNESS_ROUTES, MODEL_ROUTED_HARNESSES, BROKERABLE_HARNESSES, BROKERABLE_HARNESS_PROVIDER, TACHO_TIER_SUMMARY, CUSTOM_AGENT_NAME_PATTERN, RESERVED_AGENT_NAMES, customAgentNameSchema, tachoHostStatusSchema, tachoBundleModeSchema, tachoCommandSchema, tachoCommandStatusSchema, tachoCommandAckStatusSchema, tachoDeliveryModeSchema, denyGenerationSchema, deliveredCommandSchema, deliveredCommandResponseSchema, WORK_ORDER_ID_PATTERN, WORK_ITEM_ID_PATTERN, workOrderCommandPayloadSchema, WORK_ORDER_CLAIM_PATH, WORK_ORDER_REJECT_PATH, workOrderClaimResponseSchema, workOrderRejectResponseSchema, WORK_CRITERION_CLAIM_PATH, WORK_CRITERION_ID_PATTERN, WORK_HEAD_SHA_PATTERN, WORK_CRITERION_CLAIM_TEXT_MAX, workCriterionClaimResponseSchema, WORK_ORDER_ENV, WORK_ORDER_ATTR, steeringForceSchema, steeringItemKindSchema, steeringCutReasonSchema, steeringManifestItemSchema, STEERING_MANIFEST_SCHEMA, steeringManifestSchema, steeringManifestFrameSchema, cedarIdSchema, cedarPrincipalSchema, cedarToolSchema, cedarBundleSchema, BUNDLE_SKILLS_MAX, BUNDLE_SKILL_FILES_MAX, BUNDLE_SKILLS_CHARS_MAX, BASE64_PATTERN, bundleSkillFileSchema, bundleSkillSchema, policyBundleSchema, enrollmentClaimsSchema, tachoEventWireSchema, daemonHealthSchema, TACHO_MAX_BATCH, TACHO_MAX_BODY_BYTES, TACHO_MAX_REQUEST_BYTES, TACHO_REQUEST_ENVELOPE_BYTES, tachoBodySchema, tachoBatchSchema, agentDaySpendSchema, controlEnvelopeSchema, ingestResponseSchema, bundleResponseSchema, commandAcknowledgementSchema, commandsResponseSchema, enrollmentResponseSchema, tokenEnrollmentResponseSchema;
 var init_wire = __esm({
   "../../packages/tacho/src/wire.ts"() {
     "use strict";
@@ -5740,6 +5740,7 @@ var init_wire = __esm({
     BUNDLE_FEATURE_INDEPENDENT_MODELS = "models_independent";
     BUNDLE_FEATURE_HOOK_FAIL_OPEN = "hook_fail_open";
     BUNDLE_FEATURE_STEERING_MANIFEST = "steering_manifest";
+    BUNDLE_FEATURE_STEERING_INCOMPLETE = "steering_incomplete";
     BUNDLE_FEATURE_CONTAINMENT = "containment";
     BUNDLE_FEATURE_DAILY_BUDGET = "daily_budget";
     BUNDLE_FEATURE_STEER_NEXT_STEP = "steer_next_step";
@@ -5762,7 +5763,8 @@ var init_wire = __esm({
       BUNDLE_FEATURE_CEDAR,
       BUNDLE_FEATURE_SKILLS,
       BUNDLE_FEATURE_CACHE_KEEP_ALIVE,
-      BUNDLE_FEATURE_WORK_ORDERS
+      BUNDLE_FEATURE_WORK_ORDERS,
+      BUNDLE_FEATURE_STEERING_INCOMPLETE
     ];
     bundleFeaturesSchema = external_exports.array(external_exports.string().max(64)).max(32);
     hostEnrollmentIdSchema = external_exports.string().regex(/^tch_[a-z0-9]{22}$/, "a host enrollment public id");
@@ -5958,11 +5960,17 @@ var init_wire = __esm({
       "policy",
       "instruction"
     ]);
-    steeringCutReasonSchema = external_exports.enum(["tier", "budget", "superseded"]);
+    steeringCutReasonSchema = external_exports.enum([
+      "tier",
+      "budget",
+      "superseded",
+      "incomplete"
+    ]);
     steeringManifestItemSchema = external_exports.object({
       id: external_exports.string().min(1).max(256),
       kind: steeringItemKindSchema,
-      force: steeringForceSchema,
+      // Absent only on an `incomplete` item whose record has no force.
+      force: steeringForceSchema.optional(),
       recorded_at: external_exports.string().max(64),
       tokens: external_exports.number().int().nonnegative(),
       outcome: external_exports.enum(["included", "cut"]),
@@ -23817,7 +23825,7 @@ import { readFileSync as readFileSync11 } from "node:fs";
 import { dirname as dirname9, resolve as resolve3 } from "node:path";
 import { fileURLToPath } from "node:url";
 function readVersion() {
-  if (true) return "2.1.4-534";
+  if (true) return "2.1.4-544";
   try {
     const here = dirname9(fileURLToPath(import.meta.url));
     const pkg = JSON.parse(
@@ -27941,6 +27949,16 @@ function ceilingLines(ceiling) {
     );
   return lines;
 }
+function routingWarning(gateway, entry2) {
+  if (gateway?.listening !== true) return void 0;
+  if (entry2.ours && entry2.shadowedBy === void 0) return void 0;
+  const lead = `Warning     ${entry2.harness} model calls bypass the proxy, so Oxagen does not record them or enforce budget and model limits on them.`;
+  if (entry2.shadowedBy !== void 0)
+    return `${lead} ${entry2.shadowedBy.file} sets ${entry2.key} and overrides the enrolled value. Remove ${entry2.key} from that file, then run \`oxagen agent enroll\`.`;
+  if (entry2.leftAlone !== void 0)
+    return `${lead} ${entry2.leftAlone}. Change that file, then run \`oxagen agent enroll\`.`;
+  return `${lead} Run \`oxagen agent enroll\` to route them through the proxy.`;
+}
 function printStatus(report, deps) {
   const h = report.host;
   if (h === void 0) {
@@ -27986,6 +28004,10 @@ function printStatus(report, deps) {
         `            ${entry2.harness}: env.ENABLE_TOOL_SEARCH is ${entry2.toolSearch.current === null ? "not set" : JSON.stringify(entry2.toolSearch.current)}, so every request carries the whole MCP tool catalog and a large one overflows the context (run \`oxagen agent enroll\` to set it)`
       );
   }
+  for (const entry2 of modelBaseUrls ?? []) {
+    const warning = routingWarning(gateway, entry2);
+    if (warning !== void 0) deps.out(warning);
+  }
   for (const entry2 of modelCredentials ?? [])
     deps.out(`Credential  ${describeHarness(entry2)}`);
   for (const harness of h.harnesses)
@@ -53744,7 +53766,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@oxagen/cli",
-      version: "2.1.4-534",
+      version: "2.1.4-544",
       description: "Oxagen governance CLI \u2014 spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
       type: "module",
       main: "./dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxagen/cli",
-  "version": "2.1.4-534",
+  "version": "2.1.4-544",
   "description": "Oxagen governance CLI — spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
   "type": "module",
   "bin": {