@oxygen-agent/cli 1.1011.326 → 1.1011.405

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.1011.326
+Version: 1.1011.405

package/dist/command-manifest.js

@@ -173,6 +173,13 @@ const READ_ONLY_COMMANDS = new Set([
 // invocation still previews, so machine-readable discovery must not imply that
 // calling the command without its confirmation flag writes anything.
 const PREVIEW_BY_DEFAULT_COMMANDS = new Set([
+    // /api/cli/find/run treats an omitted mode as dry_run for every Find capability.
+    "find email",
+    "find personal-email",
+    "find phone",
+    "find linkedin",
+    "find person",
+    "find company",
     "inbox delete-message",
     "inbox forget-whatsapp-chat",
     "tables watcher preview",

package/dist/connectors-commands.d.ts

@@ -5,7 +5,10 @@ type JsonOptions = {
 };
 type Handle = (command: string, options: JsonOptions, action: () => Promise<unknown>) => Promise<void>;
 export declare const CONNECTORS_FLAG_OVERLAY: ContractFlagOverlay;
-/** The PATCH body for the flags given; one of the two workspace flags is required. */
+export declare const CONNECTOR_EVENTS_REVOKE_FLAG_OVERLAY: ContractFlagOverlay;
+/** The revoke body for the flags given; --subscription is required. */
+export declare function buildConnectorEventsRevokeBody(options: Record<string, unknown>): Record<string, unknown>;
+/** The PATCH body for the flags given; a workspace or a credit ceiling flag is required. */
 export declare function buildConnectorUpdateBody(options: Record<string, unknown>): Record<string, unknown>;
 export declare function registerConnectorsCommands(program: Command, handle: Handle): void;
 export {};

package/dist/connectors-commands.js

@@ -5,45 +5,114 @@
 // disagree about what can be set.
 import { Command } from "commander";
 import { OxygenError } from "@oxygen/shared/cli-result";
-import { CONNECTOR_UPDATE_OPERATION } from "@oxygen/shared/contracts/connectors";
+import { CONNECTOR_EVENTS_REVOKE_OPERATION, CONNECTOR_UPDATE_OPERATION } from "@oxygen/shared/contracts/connectors";
 import { operationPath } from "@oxygen/shared/contracts/operations";
 import { addContractFlags, readContractFlags } from "./contract-flags.js";
 import { requestOxygen } from "./http-client.js";
 const update = CONNECTOR_UPDATE_OPERATION;
+const revokeEvents = CONNECTOR_EVENTS_REVOKE_OPERATION;
 export const CONNECTORS_FLAG_OVERLAY = {
     default_workspace: {
         help: "The workspace this app should work in without asking: its id, slug or exact name from `orgs list`. You must be a member.",
         valueName: "<workspace>",
     },
+    credit_ceiling: {
+        help: "The most credits this app may spend in any 24 hours while it holds OXYGEN event subscriptions (0 = no paid calls then). --clear-credit-ceiling restores the plan default.",
+        valueName: "<credits>",
+    },
+    approve_above_default: {
+        help: "Approve a --credit-ceiling above your plan's default.",
+        negateHelp: "Do not approve a ceiling above the default (the default behaviour).",
+    },
+};
+export const CONNECTOR_EVENTS_REVOKE_FLAG_OVERLAY = {
+    subscription: {
+        help: "The subscription id from `connectors events get <app>`, or `all` for every live one.",
+        valueName: "<id|all>",
+    },
+    workspace: {
+        help: "Only this workspace's subscriptions (id, slug or exact name). Omit for all your workspaces.",
+        valueName: "<workspace>",
+    },
 };
-/** The PATCH body for the flags given; one of the two workspace flags is required. */
+/** The revoke body for the flags given; --subscription is required. */
+export function buildConnectorEventsRevokeBody(options) {
+    const body = readContractFlags(options, revokeEvents.contract, CONNECTOR_EVENTS_REVOKE_FLAG_OVERLAY);
+    if (typeof body.subscription !== "string") {
+        throw new OxygenError("invalid_request", "Pass --subscription <id> (from `connectors events get <app>`), or --subscription all to revoke every live one.", { exitCode: 1 });
+    }
+    return body;
+}
+/** The PATCH body for the flags given; a workspace or a credit ceiling flag is required. */
 export function buildConnectorUpdateBody(options) {
     const body = readContractFlags(options, update.contract, CONNECTORS_FLAG_OVERLAY);
-    if (!("default_workspace" in body)) {
-        throw new OxygenError("invalid_request", "Pass --default-workspace <workspace> to set where the app works, or --clear-default-workspace to have it ask each time.", { exitCode: 1 });
+    if (!("default_workspace" in body) && !("credit_ceiling" in body)) {
+        throw new OxygenError("invalid_request", "Pass --default-workspace <workspace> (or --clear-default-workspace) to set where the app works, or --credit-ceiling <credits> (or --clear-credit-ceiling) to set what it may spend in 24 hours.", { exitCode: 1 });
     }
     return body;
 }
 export function registerConnectorsCommands(program, handle) {
     const connectors = program
         .command("connectors")
-        .description("Connected apps: ChatGPT, Claude, Codex and any other app you connected to OXYGEN with OAuth, and the default workspace each one works in without asking. "
-        + "`connectors list` shows them; `connectors set <app> --default-workspace <workspace>` changes that app only. "
-        + "Picking a workspace inside an app changes the same setting, and the latest choice wins. This CLI keeps its own workspace (`orgs use`). "
-        + "Web: https://oxygen-agent.com/settings/connected-apps.");
+        .description("Connected apps (ChatGPT, Claude, Codex… connected to OXYGEN with OAuth): the workspace each one works in, the OXYGEN events it is subscribed to, and what it may spend. "
+        + "`connectors list` shows them; `connectors events get <app>` shows an app's event subscriptions and what OXYGEN sent it, and `connectors events revoke` stops them. "
+        + "`connectors set <app>` changes one app only: --default-workspace (picking a workspace inside the app changes the same setting; latest wins; this CLI keeps its own, `orgs use`) "
+        + "and --credit-ceiling (while it holds event subscriptions, its paid calls stay under this many credits in any 24 hours; the plan default otherwise). "
+        + "Web: the Connected apps page, /settings/connected-apps; every response carries its `web_url`.");
     connectors.addCommand(new Command("list")
-        .description("List your connected apps with each one's default workspace, when it was last used, and the workspaces you can choose from. Read-only, 0 credits.")
+        .description("List your connected apps with each one's default workspace, its live event subscriptions, its daily credit ceiling and what it spent in the last 24 hours, when it was last used, and the workspaces you can choose from. Read-only, 0 credits.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handle("connectors list", options, () => requestOxygen("/api/cli/connectors"));
     }));
     connectors.addCommand(new Command("get")
-        .description("Show one connected app and its default workspace. Read-only, 0 credits.")
+        .description("Show one connected app: its default workspace, its daily credit ceiling and what it spent in the last 24 hours in each workspace where it spends, and how many event subscriptions it holds. Read-only, 0 credits.")
         .argument("<connection>", update.cli.argument?.description ?? "The app's id or name.")
         .option("--json", "Print a JSON envelope.")
         .action(async (connection, options) => {
         await handle("connectors get", options, () => requestOxygen(`/api/cli/connectors/${encodeURIComponent(connection)}`));
     }));
+    const events = new Command("events")
+        .description("The events OXYGEN sends one connected app: what it subscribed to (a reply was classified, a run settled, an approval is waiting…), "
+        + "each subscription's filters, status and expiry, and what OXYGEN delivered to it and how each delivery went (never the content). "
+        + "`get` reads them; `revoke` stops them. Only apps connected with OAuth, such as ChatGPT, subscribe.");
+    events.addCommand(new Command("get")
+        .description("Show one connected app's event subscriptions (filters, status, granted, renew-by and expiry, workspace) and its recent deliveries (status, attempts, failure category, times; never content). Ended subscriptions stay listed for 7 days; `active_subscriptions` counts the live ones. Read-only, 0 credits.")
+        .argument("<connection>", update.cli.argument?.description ?? "The app's id or name.")
+        .option("--workspace <workspace>", "Only this workspace (id, slug or exact name). Omit for all your workspaces.")
+        .option("--deliveries <n>", "Recent deliveries to show per subscription (0-50, default 10).")
+        .option("--json", "Print a JSON envelope.")
+        .addHelpText("after", `
+Examples:
+  oxygen connectors events get ChatGPT
+  oxygen connectors events get ChatGPT --workspace "Acme GTM" --deliveries 20
+`)
+        .action(async (connection, options) => {
+        const query = new URLSearchParams();
+        if (options.workspace?.trim())
+            query.set("workspace", options.workspace.trim());
+        if (options.deliveries?.trim())
+            query.set("deliveries", options.deliveries.trim());
+        const queryString = query.toString();
+        const suffix = queryString ? `?${queryString}` : "";
+        await handle("connectors events get", options, () => requestOxygen(`/api/cli/connectors/${encodeURIComponent(connection)}/events${suffix}`));
+    }));
+    events.addCommand(addContractFlags(new Command(revokeEvents.cli.path.at(-1) ?? "revoke")
+        .description(revokeEvents.cli.summary)
+        .argument(`<${revokeEvents.cli.argument?.name ?? "connection"}>`, revokeEvents.cli.argument?.description), revokeEvents.contract, CONNECTOR_EVENTS_REVOKE_FLAG_OVERLAY)
+        .option("--json", "Print a JSON envelope.")
+        .addHelpText("after", `
+Examples:
+  oxygen connectors events revoke ChatGPT --subscription all
+  oxygen connectors events revoke ChatGPT --subscription <id> --workspace "Acme GTM"
+`)
+        .action(async (connection, options) => {
+        await handle("connectors events revoke", options, () => requestOxygen(operationPath(revokeEvents, { connection }), {
+            method: revokeEvents.method,
+            body: buildConnectorEventsRevokeBody(options),
+        }));
+    }));
+    connectors.addCommand(events);
     connectors.addCommand(addContractFlags(new Command(update.cli.path.at(-1) ?? "set")
         .description(update.cli.summary)
         .argument(`<${update.cli.argument?.name ?? "connection"}>`, update.cli.argument?.description), update.contract, CONNECTORS_FLAG_OVERLAY)
@@ -53,6 +122,8 @@ Examples:
   oxygen connectors list
   oxygen connectors set ChatGPT --default-workspace "Acme GTM"
   oxygen connectors set <id> --clear-default-workspace
+  oxygen connectors set ChatGPT --credit-ceiling 300
+  oxygen connectors set ChatGPT --credit-ceiling 50000 --approve-above-default
 `)
         .action(async (connection, options) => {
         await handle("connectors set", options, () => requestOxygen(operationPath(update, { connection }), {

package/dist/contract-flags.d.ts

@@ -10,6 +10,8 @@ export type ContractFlagOverlayEntry = {
     aliases?: readonly string[];
     /** Boolean: help for the `--no-<flag>` form. */
     negateHelp?: string;
+    /** Boolean: do not generate the `--no-<flag>` form, for a field whose `false` changes nothing. */
+    noNegate?: boolean;
     /**
      * Boolean as two flags, e.g. `--warmup-restart` (true) / `--warmup-disable`
      * (false). When both are given, `off` wins.

package/dist/contract-flags.js

@@ -84,7 +84,9 @@ export function addContractFlags(command, contract, overlay = {}) {
         }
         if (spec.kind === "boolean") {
             command.addOption(new Option(`--${spec.flag}`, helpFor(spec, property)));
-            command.addOption(new Option(`--no-${spec.flag}`, spec.entry.negateHelp ?? `Sends ${spec.path.join(".")}: false.`));
+            if (!spec.entry.noNegate) {
+                command.addOption(new Option(`--no-${spec.flag}`, spec.entry.negateHelp ?? `Sends ${spec.path.join(".")}: false.`));
+            }
             continue;
         }
         const valueName = spec.entry.valueName ?? (spec.kind === "json" ? "<json>" : "<value>");
@@ -210,7 +212,7 @@ export function contractFlagNames(contract, overlay = {}) {
             case "pair":
                 return [`--${spec.on}`, `--${spec.off}`];
             case "boolean":
-                return [`--${spec.flag}`, `--no-${spec.flag}`];
+                return spec.entry.noNegate ? [`--${spec.flag}`] : [`--${spec.flag}`, `--no-${spec.flag}`];
             case "clear":
                 return [`--${spec.flag}`];
             default:

package/dist/crm-support-flags.d.ts

@@ -0,0 +1,11 @@
+import type { Command } from "commander";
+/** Existing command names, positional arguments, formatters and actions stay owned by index.ts. */
+export declare function registerCrmSupportFlags(program: Command): void;
+export declare function readCrmNoteEditFields(options: object): Record<string, unknown>;
+export declare function readCrmPhotoFields(options: {
+    live?: boolean;
+    dryRun?: boolean;
+}): Record<string, unknown>;
+export declare function readCrmFileLabel(options: object): Record<string, unknown>;
+export declare function buildCrmObjectsPath(options: object): string;
+export declare function buildCrmConnectionsPath(object: string, rowId: string, options: object): string;

package/dist/crm-support-flags.js

@@ -0,0 +1,60 @@
+import { OxygenError } from "@oxygen/shared/cli-result";
+import { CRM_CONNECTIONS_QUERY_CONTRACT, CRM_NOTE_EDIT_CONTRACT, CRM_OBJECTS_QUERY_CONTRACT, CRM_PHOTOS_CONTRACT, CRM_FILE_COMPLETE_CONTRACT } from "@oxygen/shared/contracts/crm-support";
+import { validateContract } from "@oxygen/shared/contracts/schema";
+import { addContractFlags, readContractFlags } from "./contract-flags.js";
+import { assertModeFlagsExclusive } from "./cli-values.js";
+const NOTE_OVERLAY = { pinned: { pair: { on: "pin", onHelp: "Pin the note.", off: "unpin", offHelp: "Unpin the note." } } };
+function child(parent, name) { return parent?.commands.find((command) => command.name() === name); }
+function replaceFlags(command, attributes, contract, overlay) {
+    if (!command)
+        throw new Error("Register CRM commands before their shared flags.");
+    const retained = command.options.filter((option) => !attributes.includes(option.attributeName()));
+    // Commander exposes this mutable runtime collection as readonly in its types.
+    // Replace only the flags this leaf owns before parsing the existing commands.
+    const options = command.options;
+    options.splice(0, options.length, ...retained);
+    addContractFlags(command, contract, overlay);
+}
+/** Existing command names, positional arguments, formatters and actions stay owned by index.ts. */
+export function registerCrmSupportFlags(program) {
+    const crm = child(program, "crm");
+    replaceFlags(child(crm, "objects"), [], CRM_OBJECTS_QUERY_CONTRACT);
+    replaceFlags(child(crm, "connections"), ["conversationLimit", "sequenceLimit"], CRM_CONNECTIONS_QUERY_CONTRACT);
+    replaceFlags(child(child(crm, "notes"), "update"), ["body", "title", "pin", "unpin"], CRM_NOTE_EDIT_CONTRACT, NOTE_OVERLAY);
+    replaceFlags(child(crm, "photos"), ["limit", "live"], CRM_PHOTOS_CONTRACT);
+    replaceFlags(child(child(crm, "files"), "attach"), ["label"], CRM_FILE_COMPLETE_CONTRACT);
+}
+function checkedFlags(options, contract, overlay) {
+    const value = readContractFlags(options, contract, overlay);
+    const checked = validateContract(contract, value, { unknown: "reject", overMax: "reject" });
+    if (!checked.ok)
+        throw new OxygenError("invalid_request", "Invalid CRM command fields.", { exitCode: 1, details: { fields: checked.issues.map((issue) => issue.path) } });
+    return checked.value;
+}
+export function readCrmNoteEditFields(options) {
+    const value = checkedFlags(options, CRM_NOTE_EDIT_CONTRACT, NOTE_OVERLAY);
+    // Preserve the existing --title "" spelling in addition to --clear-title.
+    if (options.title === "")
+        value.title = null;
+    return value;
+}
+export function readCrmPhotoFields(options) {
+    assertModeFlagsExclusive(options);
+    const value = checkedFlags(options, CRM_PHOTOS_CONTRACT);
+    if (options.dryRun)
+        value.mode = "dry_run";
+    if (value.mode === "dry_run" && value.live === true)
+        throw new OxygenError("invalid_request", "Pass either dry_run or live.", { exitCode: 1 });
+    if (value.mode === undefined && value.live !== true)
+        value.mode = "dry_run";
+    return value;
+}
+export function readCrmFileLabel(options) { return checkedFlags(options, CRM_FILE_COMPLETE_CONTRACT); }
+function queryPath(path, query) {
+    const params = new URLSearchParams(Object.entries(query).map(([key, value]) => [key, String(value)]));
+    return params.size ? `${path}?${params}` : path;
+}
+export function buildCrmObjectsPath(options) { return queryPath("/api/cli/crm/objects", checkedFlags(options, CRM_OBJECTS_QUERY_CONTRACT)); }
+export function buildCrmConnectionsPath(object, rowId, options) {
+    return queryPath(`/api/cli/crm/objects/${encodeURIComponent(object)}/records/${encodeURIComponent(rowId)}/connections`, checkedFlags(options, CRM_CONNECTIONS_QUERY_CONTRACT));
+}

package/dist/help.js

@@ -20,6 +20,12 @@ const HELP_GROUPS = [
             "status",
             "home",
             "orgs",
+            // Where each connected app (ChatGPT, Claude…) works by default: read
+            // beside `orgs`, where a founder asking "which workspace" looks first.
+            "connectors",
+            // Workspace settings (the sidebar pages everyone sees): the 2026-09-30
+            // blind baseline typed `oxygen settings --help` before anything else.
+            "settings",
             "commands",
             "skills",
             "session",
@@ -205,6 +211,10 @@ const COMMAND_SYNONYMS = {
     exec: ["run", "start", "call"],
     execute: ["run", "start", "call"],
     find: ["search", "query", "list"],
+    // The product's own copy calls a Sequence a campaign; a blind agent's first
+    // guess was `oxygen campaigns` (Plain T-220 baseline, 2026-09-30).
+    campaign: ["sequences"],
+    campaigns: ["sequences"],
 };
 /**
  * The extra line printed after `error: unknown command '<x>'`.