@oxagen/cli 3.0.1-61 → 3.0.1-624

package/README.md

@@ -138,8 +138,8 @@ command for its flags. The full command tree lives in
 `apps/cli/src/program.ts` and is documented at
 https://docs.oxagen.sh/docs/cli/commands.
 
-Everything except `cost`, `logs`, `telemetry` and `codegraph` talks to the
-platform API and needs `oxagen login` first. `oxagen agent enroll` with a one-time enrollment
+Everything except `cost`, `logs`, `telemetry` and the code graph commands
+under `graph` talks to the platform API and needs `oxagen login` first. `oxagen agent enroll` with a one-time enrollment
 token needs no login either.
 
 **Meter and bill**
@@ -157,13 +157,11 @@ oxagen router preview|policy        # the verified-outcome market router
 **Map the code:** the local code graph and CI upload
 
 ```bash
-oxagen codegraph init [path]        # index a repo on this machine, watch it, and write the codegraph MCP entry
-oxagen codegraph init --embed-url http://127.0.0.1:11434/v1/embeddings   # embed through a server on this machine
-oxagen codegraph init --scip        # also build SCIP links
-oxagen codegraph status             # each local graph with its pin, build state, and pending jobs
-oxagen codegraph rebuild [path]     # build a fresh copy from the working tree
-oxagen codegraph stop [path]        # stop watching and remove the MCP entries; --purge deletes the local tables
-oxagen codegraph upload --coverage "lcov=coverage/lcov.info"   # CI: send coverage, reports, profiles, dumps, plans, and specs
+oxagen graph init [path]            # give each agent the oxagen MCP entry, then build the repo's code graph here
+oxagen graph status                 # each local graph with its pin, build state, and base commit
+oxagen graph rebuild [path]         # build again, even when the working tree has not changed
+oxagen graph stop                   # stop the local code graph server; --purge deletes every local graph
+oxagen graph upload --coverage "lcov=coverage/lcov.info"   # CI: send coverage, reports, profiles, dumps, plans, and specs
 ```
 
 `init` needs an enrolled machine. The local graph never leaves the machine.
@@ -173,6 +171,40 @@ needs no login. Its other flags are `--test-report`, `--runtime`,
 and `--fail-on-unconnected`. Each file flag takes `source=pattern` lines and
 can repeat. See https://docs.oxagen.sh/docs/cli/code-graph.
 
+Use `oxagen graph` in scripts and CI jobs. The `oxagen codegraph` command has been removed.
+
+## MCP tools
+
+Use the MCP commands to list, inspect, and call the tools the server ships.
+They use the token saved by `oxagen login`, or `OXAGEN_API_TOKEN` when set.
+The server applies the token's workspace scope and permissions to each call.
+
+```sh
+oxagen mcp list
+oxagen mcp describe send_work_item
+oxagen mcp call list_work_items --input '{}'
+oxagen mcp call send_work_item --input-file work-input.json
+cat work-input.json | oxagen mcp call send_work_item --input-file -
+```
+
+Each command prints JSON. `list` follows every page and includes the tool
+schemas. `describe` prints the complete descriptor for one tool. `call`
+prints the complete MCP result, including content and structured output.
+A tool refusal or a connection or protocol error exits with a nonzero code.
+The server validates arguments against the tool's schema.
+
+Input defaults to `{}` and must be a JSON object. Use `--input-file` for
+sensitive input so it stays out of shell history and the process list.
+`--input` and `--input-file` cannot be combined.
+
+The default endpoint is `https://mcp.oxagen.sh/mcp`. Use `--endpoint <url>`
+only for a trusted MCP server: the CLI sends your token to that address.
+The URL must use HTTPS without credentials, query parameters, or a fragment.
+The CLI refuses redirects. `--timeout-ms <ms>` sets the deadline for the
+connection and request, including all catalogue pages. The default is 60000
+milliseconds and the maximum is 600000 milliseconds. A timed-out call may
+have reached the server; inspect the affected record before retrying a write.
+
 **Explain:** runs and audit
 
 ```bash
@@ -208,12 +240,19 @@ oxagen agent verify --harness codex               # one headless turn, confirmed
 oxagen agent run --name my-agent -- ./my-agent    # one custom agent session under Oxagen
 oxagen agent detect                               # which harnesses this machine has
 oxagen agent reassign|unenroll|export|hosts       # move, remove, export, list machines
+oxagen agent export --session <id> --format recorder|trace|otlp
 ```
 
 `oxagen hook`, `oxagen daemon`, `oxagen mcp-stdio`, `oxagen credential`,
 `oxagen github`, and `oxagen arp` are hidden from help. The hooks, the user
 service, and the connected apps that enrollment installs run them.
 
+The recorder also ships as its own `recorder` executable, with the same
+commands. It was named `tacho` until #7501, and `tacho` still runs it. Typed
+by a person under the old name, a command prints one warning line on stderr
+that names the `recorder` command. `agent export --format` still takes
+`tacho` and reads it as `recorder`.
+
 **Telemetry**
 
 ```bash