@oxygen-agent/cli 1.1011.322 → 1.1011.405

package/node_modules/@oxygen/shared/dist/contracts/connectors.js

@@ -1,10 +1,19 @@
-import { nullable, obj, str } from "./schema.js";
+import { AGENT_RUN_APPROVED_CEILING_MAX_CREDITS } from "../plan-limits.js";
+import { bool, int, nullable, obj, str } from "./schema.js";
 export const CONNECTOR_UPDATE_CONTRACT = obj({
     default_workspace: nullable(str({
         minLength: 1,
         maxLength: 200,
         description: "Workspace id, slug or exact name (you must be a member). null = ask each time.",
     })),
+    credit_ceiling: nullable(int({
+        minimum: 0,
+        maximum: AGENT_RUN_APPROVED_CEILING_MAX_CREDITS,
+        description: "Most credits the app may spend in any 24 hours while it holds event subscriptions. null = the plan default.",
+    })),
+    approve_above_default: bool({
+        description: "Approve a credit_ceiling above the plan default.",
+    }),
 });
 const inferMatchesRoute = true;
 void inferMatchesRoute;
@@ -17,7 +26,7 @@ export const CONNECTOR_UPDATE_OPERATION = {
     contract: CONNECTOR_UPDATE_CONTRACT,
     cli: {
         path: ["connectors", "set"],
-        summary: "Set the default workspace of one connected app (ChatGPT, Claude, Codex or another app connected to OXYGEN with OAuth), so that app works there without asking. Only that app changes; your other apps and this CLI keep their own workspace. It is the same setting the app changes when you pick a workspace inside it, so the latest choice wins. --clear-default-workspace makes the app ask again. Free; `connectors list` shows your apps and each one's current default.",
+        summary: "Change one connected app's settings (ChatGPT, Claude, Codex or another app connected to OXYGEN with OAuth); only that app changes. --default-workspace: where it works without asking (the same setting the app changes when you pick a workspace inside it; latest wins; --clear-default-workspace makes it ask again). --credit-ceiling: the most credits it may spend in any 24 hours while it holds event subscriptions (--clear-credit-ceiling restores the plan default; above the default also needs --approve-above-default). Free; `connectors list` shows each app's current settings.",
         argument: {
             name: "connection",
             description: "The app's id from `connectors list`, or its name (e.g. ChatGPT) when you have one app of that name.",
@@ -25,8 +34,51 @@ export const CONNECTOR_UPDATE_OPERATION = {
     },
     mcp: {
         name: "oxygen_connector_update",
-        title: "Oxygen: Set Connected App Workspace",
-        description: "Sets the default workspace of one connected app (ChatGPT, Claude, Codex…), leaving your other apps unchanged. Same setting as picking a workspace inside that app; latest wins. connection: id or name from oxygen_connector_list, or \"current\" for this app. Free.",
+        title: "Oxygen: Change Connected App Settings",
+        description: "Changes one connected app's settings (ChatGPT, Claude, Codex…), leaving your other apps unchanged: default_workspace (same setting as picking a workspace inside that app; latest wins) and credit_ceiling (most credits it may spend in 24 hours while it holds event subscriptions; above the plan default also needs approve_above_default). connection: id or name from oxygen_connector_list, or \"current\" for this app. Free.",
+        pack: "workspace",
+    },
+    mutates: true,
+    spends: false,
+};
+/**
+ * `POST /api/cli/connectors/{connection}/events/revoke`: stop one connected
+ * app's MCP event subscription, or every live one it holds (ADR 0030 §10;
+ * OXP-11.5.22). Destructive and lasting: the app cannot renew a subscription
+ * revoked here. The events/* protocol methods the app itself calls stay outside
+ * this contract; they are host-driven.
+ */
+export const CONNECTOR_EVENTS_REVOKE_CONTRACT = obj({
+    subscription: str({
+        minLength: 1,
+        maxLength: 200,
+        description: "The subscription id from the app's event subscriptions, or \"all\" for every live one.",
+    }),
+    workspace: str({
+        minLength: 1,
+        maxLength: 200,
+        description: "Only in this workspace (id, slug or exact name). Omit for all your workspaces.",
+    }),
+}, { required: ["subscription"] });
+const revokeInferMatchesRoute = true;
+void revokeInferMatchesRoute;
+export const CONNECTOR_EVENTS_REVOKE_OPERATION = {
+    id: "connectors.events.revoke",
+    route: "/api/cli/connectors/{connection}/events/revoke",
+    method: "POST",
+    contract: CONNECTOR_EVENTS_REVOKE_CONTRACT,
+    cli: {
+        path: ["connectors", "events", "revoke"],
+        summary: "Stop OXYGEN sending events to one connected app: revoke one of its event subscriptions (--subscription <id>) or every live one (--subscription all), optionally only in one --workspace. Lasting: the app cannot renew a subscription revoked here, and nothing else about the app changes. Free; `connectors events get <app>` shows what it is subscribed to first.",
+        argument: {
+            name: "connection",
+            description: "The app's id from `connectors list`, or its name (e.g. ChatGPT) when you have one app of that name.",
+        },
+    },
+    mcp: {
+        name: "oxygen_connector_events_revoke",
+        title: "Oxygen: Revoke Connected App Event Subscriptions",
+        description: "Destructive: stops OXYGEN sending events to one connected app (ChatGPT…) by revoking one event subscription, or \"all\" of its live ones, optionally in one workspace. The app cannot renew a revoked subscription; nothing else about it changes. Read first with oxygen_connector_events_get. Free.",
         pack: "workspace",
     },
     mutates: true,

package/node_modules/@oxygen/shared/dist/contracts/crm-support.d.ts

@@ -0,0 +1,117 @@
+export declare const CRM_NOTE_BODY_MAX_CHARS = 20000;
+export declare const CRM_NOTE_TITLE_MAX_CHARS = 300;
+export declare const CRM_FILE_LABEL_MAX_CHARS = 300;
+export declare const CRM_NOTE_EDIT_CONTRACT: import("./schema.js").ContractObject<{
+    readonly body: import("./schema.js").StringProperty;
+    readonly title: {
+        oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+        description?: string;
+    };
+    readonly pinned: import("./schema.js").BooleanProperty;
+}, never>;
+export declare const CRM_FILE_ATTACH_CONTRACT: import("./schema.js").ContractObject<{
+    readonly name: import("./schema.js").StringProperty;
+    readonly content_base64: import("./schema.js").StringProperty;
+    readonly label: {
+        oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+        description?: string;
+    };
+}, "content_base64" | "name">;
+export declare const CRM_FILE_PREPARE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly name: import("./schema.js").StringProperty;
+    readonly byte_length: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly sha256: import("./schema.js").StringProperty;
+}, "byte_length" | "name" | "sha256">;
+export declare const CRM_FILE_COMPLETE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly label: {
+        oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+        description?: string;
+    };
+}, never>;
+export declare const CRM_PHOTOS_CONTRACT: import("./schema.js").ContractObject<{
+    readonly mode: {
+        type: "string";
+        enum: readonly ("dry_run" | "live")[];
+        description?: string;
+    };
+    readonly live: import("./schema.js").BooleanProperty;
+    readonly limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+}, never>;
+export declare const CRM_OBJECTS_QUERY_CONTRACT: import("./schema.js").ContractObject<{
+    readonly projection: {
+        type: "string";
+        enum: readonly ("compact" | "full")[];
+        description?: string;
+    };
+    readonly cursor: import("./schema.js").StringProperty;
+    readonly limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly max_chars: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+}, never>;
+export declare const CRM_CONNECTIONS_QUERY_CONTRACT: import("./schema.js").ContractObject<{
+    readonly projection: {
+        type: "string";
+        enum: readonly ("compact" | "full")[];
+        description?: string;
+    };
+    readonly max_chars: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly conversation_limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly sequence_limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+}, never>;
+export declare const CRM_TASKS_QUERY_CONTRACT: import("./schema.js").ContractObject<{
+    readonly status: {
+        type: "string";
+        enum: readonly ("all" | "cancelled" | "completed" | "open")[];
+        description?: string;
+    };
+    readonly assignee: import("./schema.js").StringProperty;
+    readonly limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly cursor: import("./schema.js").StringProperty;
+}, never>;

package/node_modules/@oxygen/shared/dist/contracts/crm-support.js

@@ -0,0 +1,43 @@
+import { bool, enumOf, int, nullable, obj, str } from "./schema.js";
+export const CRM_NOTE_BODY_MAX_CHARS = 20_000;
+export const CRM_NOTE_TITLE_MAX_CHARS = 300;
+export const CRM_FILE_LABEL_MAX_CHARS = 300;
+export const CRM_NOTE_EDIT_CONTRACT = obj({
+    body: str({ minLength: 1, maxLength: CRM_NOTE_BODY_MAX_CHARS, description: "Replacement Markdown text." }),
+    title: nullable(str({ maxLength: CRM_NOTE_TITLE_MAX_CHARS, description: "Replacement title; null or empty clears." })),
+    pinned: bool({ description: "Whether the note is pinned; false unpins." }),
+});
+export const CRM_FILE_ATTACH_CONTRACT = obj({
+    name: str({ minLength: 1, description: "Original filename." }),
+    content_base64: str({ minLength: 1, description: "Inline bytes; entire JSON request must fit 2 MB. Larger files use upload prepare/complete." }),
+    label: nullable(str({ maxLength: CRM_FILE_LABEL_MAX_CHARS, description: "Optional record-local label." })),
+}, { required: ["name", "content_base64"] });
+export const CRM_FILE_PREPARE_CONTRACT = obj({
+    name: str({ minLength: 1, description: "Original filename." }),
+    byte_length: int({ minimum: 0, maximum: 100 * 1024 * 1024, description: "Exact byte length; maximum 100 MiB." }),
+    sha256: str({ minLength: 64, maxLength: 64, description: "Hex SHA-256 of the exact bytes to PUT." }),
+}, { required: ["name", "byte_length", "sha256"] });
+export const CRM_FILE_COMPLETE_CONTRACT = obj({ label: nullable(str({ maxLength: CRM_FILE_LABEL_MAX_CHARS, description: "Optional record-local label." })) });
+export const CRM_PHOTOS_CONTRACT = obj({
+    mode: enumOf(["dry_run", "live"], { description: "Default dry_run. Inspect preview before live." }),
+    live: bool({ description: "Shortcut for mode=live; conflicts with mode=dry_run." }),
+    limit: int({ minimum: 1, maximum: 10_000, description: "Rows scanned; default 2000." }),
+});
+export const CRM_OBJECTS_QUERY_CONTRACT = obj({
+    projection: enumOf(["compact", "full"], { description: "compact lists names and table/identity bindings; full includes all field configuration. HTTP default full." }),
+    cursor: str({ maxLength: 2000, description: "Previous next_cursor; bound to projection." }),
+    limit: int({ minimum: 1, maximum: 100, description: "Objects in one batch; default 20 for bounded reads." }),
+    max_chars: int({ minimum: 2000, maximum: 40_000, description: "Complete response window; oversized objects refuse without advancing." }),
+});
+export const CRM_CONNECTIONS_QUERY_CONTRACT = obj({
+    projection: enumOf(["compact", "full"], { description: "Compact returns identifiers and short communication previews. HTTP default full." }),
+    max_chars: int({ minimum: 2000, maximum: 40_000, description: "Complete recent-window response; hasMore includes omitted links." }),
+    conversation_limit: int({ minimum: 1, maximum: 100, description: "Most recent conversation links; server maximum 100." }),
+    sequence_limit: int({ minimum: 1, maximum: 100, description: "Most recent sequence links; server maximum 100." }),
+});
+export const CRM_TASKS_QUERY_CONTRACT = obj({
+    status: enumOf(["open", "completed", "cancelled", "all"], { description: "Workspace default open; record default all. all omits the API filter." }),
+    assignee: str({ description: "Workspace scope only: member email, user id, or me." }),
+    limit: int({ minimum: 1, maximum: 200, description: "Maximum tasks; default 50." }),
+    cursor: str({ minLength: 1, maxLength: 500, description: "Previous nextCursor." }),
+});

package/node_modules/@oxygen/shared/dist/contracts/dashboard-tabs.d.ts

@@ -0,0 +1,3 @@
+export declare const DASHBOARD_TAB_CREATE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly title: import("./schema.js").StringProperty;
+}, "title">;

package/node_modules/@oxygen/shared/dist/contracts/dashboard-tabs.js

@@ -0,0 +1,2 @@
+import { obj, str } from "./schema.js";
+export const DASHBOARD_TAB_CREATE_CONTRACT = obj({ title: str({ minLength: 1, description: "Tab title." }) }, { required: ["title"] });

package/node_modules/@oxygen/shared/dist/contracts/integration-connect.d.ts

@@ -0,0 +1,4 @@
+/** Account selection is shared; the remaining provider-specific connect fields have separate owners. */
+export declare const INTEGRATION_CONNECT_ACCOUNT_CONTRACT: import("./schema.js").ContractObject<{
+    readonly account_id: import("./schema.js").StringProperty;
+}, never>;

package/node_modules/@oxygen/shared/dist/contracts/integration-connect.js

@@ -0,0 +1,7 @@
+import { obj, str } from "./schema.js";
+/** Account selection is shared; the remaining provider-specific connect fields have separate owners. */
+export const INTEGRATION_CONNECT_ACCOUNT_CONTRACT = obj({
+    account_id: str({
+        description: "Cloudflare account id from needs_account_selection. Omit for a single-account token.",
+    }),
+});

package/node_modules/@oxygen/shared/dist/contracts/operations.js

@@ -4,8 +4,9 @@
  * The CLI command, the MCP tool and the route read the same spec, so the three
  * cannot disagree on which fields exist. Leaf and browser-safe.
  */
-import { CONNECTOR_UPDATE_OPERATION } from "./connectors.js";
+import { CONNECTOR_EVENTS_REVOKE_OPERATION, CONNECTOR_UPDATE_OPERATION } from "./connectors.js";
 import { SENDER_LIMITS_SET_OPERATION } from "./sender-limits.js";
+import { WORKSPACE_PAGES_UPDATE_OPERATION } from "./workspace-pages.js";
 /** The route with its `{param}` segments filled in, each URL-encoded. */
 export function operationPath(spec, params) {
     return spec.route.replace(/\{(\w+)\}/g, (_match, name) => {
@@ -15,4 +16,9 @@ export function operationPath(spec, params) {
         return encodeURIComponent(value);
     });
 }
-export const OPERATION_SPECS = [SENDER_LIMITS_SET_OPERATION, CONNECTOR_UPDATE_OPERATION];
+export const OPERATION_SPECS = [
+    SENDER_LIMITS_SET_OPERATION,
+    CONNECTOR_UPDATE_OPERATION,
+    CONNECTOR_EVENTS_REVOKE_OPERATION,
+    WORKSPACE_PAGES_UPDATE_OPERATION,
+];

package/node_modules/@oxygen/shared/dist/contracts/workspace-pages.d.ts

@@ -0,0 +1,16 @@
+/**
+ * `POST /api/cli/settings/pages`: the web app's sidebar pages a workspace hides
+ * for every member (Settings → Customise; Philipp, 2026-09-30). Presentation
+ * only: a hidden page leaves the sidebar and the ⌘K palette, and stays
+ * reachable by URL and deep-link. Admins and owners change it; every member
+ * reads it through `GET` on the same route.
+ */
+import type { OperationSpec } from "./operations.js";
+import { type Infer } from "./schema.js";
+export declare const WORKSPACE_PAGES_UPDATE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly hide: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    readonly show: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    readonly show_all: import("./schema.js").BooleanProperty;
+}, never>;
+export type WorkspacePagesUpdate = Infer<typeof WORKSPACE_PAGES_UPDATE_CONTRACT>;
+export declare const WORKSPACE_PAGES_UPDATE_OPERATION: OperationSpec<typeof WORKSPACE_PAGES_UPDATE_CONTRACT>;

package/node_modules/@oxygen/shared/dist/contracts/workspace-pages.js

@@ -0,0 +1,37 @@
+import { arr, bool, obj, str } from "./schema.js";
+const pageRef = str({ minLength: 1, maxLength: 200 });
+export const WORKSPACE_PAGES_UPDATE_CONTRACT = obj({
+    hide: arr(pageRef, {
+        minItems: 1,
+        maxItems: 100,
+        description: "Pages to hide for everyone, each by its path (/unibox) or name (Unibox) from the page list. Hiding a section hides its sub-pages.",
+    }),
+    show: arr(pageRef, {
+        minItems: 1,
+        maxItems: 100,
+        description: "Hidden pages to show again, by path or name.",
+    }),
+    show_all: bool({
+        description: "Show every page again. With hide, only those pages stay hidden.",
+    }),
+});
+const inferMatchesRoute = true;
+void inferMatchesRoute;
+export const WORKSPACE_PAGES_UPDATE_OPERATION = {
+    id: "workspace_pages.update",
+    route: "/api/cli/settings/pages",
+    method: "POST",
+    contract: WORKSPACE_PAGES_UPDATE_CONTRACT,
+    cli: {
+        path: ["settings", "pages", "set"],
+        summary: "Hide or show pages in the web app's sidebar navigation menu for everyone in this workspace (Settings → Customise): --hide Unibox,Publishing, --show Unibox, --show-all. Name pages by path or name from `settings pages list`; hiding a section hides its sub-pages. Nothing is deleted and hidden pages stay reachable by URL. Admins and owners only; free.",
+    },
+    mcp: {
+        name: "oxygen_settings_pages_update",
+        title: "Oxygen: Hide or Show Sidebar Pages",
+        description: "Hides or shows pages in the OXYGEN web app's sidebar navigation for everyone in this workspace (Settings → Customise). hide/show take page paths or names from oxygen_settings_pages_get; show_all shows every page again. Nothing is deleted and hidden pages stay reachable by URL. Admins and owners only. Free.",
+        pack: "workspace",
+    },
+    mutates: true,
+    spends: false,
+};

package/node_modules/@oxygen/shared/dist/decision-ledger-parser.d.ts

@@ -0,0 +1,32 @@
+export type DecisionLedgerStatus = "ratified" | "proposed" | "open";
+export type DecisionLedgerEntry = {
+    /** Ledger id as written, e.g. "D24" or "D34a". */
+    id: string;
+    /** The "Decision" cell as plain text. */
+    title: string;
+    /** The answer as plain text: the ratified or proposed answer, or the Open table's "Status" cell. */
+    answer: string;
+    /** In force (`ratified`), awaiting the founder (`proposed`), or undecided (`open`). */
+    status: DecisionLedgerStatus;
+    /** The table the row sits in. A Proposed row ratified in chat keeps `proposed` here. */
+    table: "ratified" | "open" | "proposed";
+    /** The ISO date (YYYY-MM-DD) it was ratified, when the ledger records one. */
+    ratifiedOn: string | null;
+    /**
+     * Where it shipped or lands: the Ratified table's "Shipped / lands" cell, the
+     * Open table's "Owner / forcing function" cell, or what follows the
+     * ratification clause in a Proposed row's status cell.
+     */
+    lands: string | null;
+    /** Decisions that replace this one outright, sorted by id. */
+    supersededBy: string[];
+    /**
+     * Decisions that replace only part of this one while the rest stands
+     * ("Supersedes only D19(a)'s … clause", "Supersedes D55's company half",
+     * "Superseded by D29 … as a routing posture"), sorted by id. A decision that
+     * another statement calls replaced outright is listed in `supersededBy` only.
+     */
+    partlySupersededBy: string[];
+};
+/** Parse the ledger markdown into entries sorted by decision id. */
+export declare function parseDecisionLedger(markdown: string): DecisionLedgerEntry[];