@oxygen-agent/cli 1.139.9 → 1.142.4

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation and support, visit https://oxygen-agent.com.
 
-Version: 1.139.9
+Version: 1.142.4

package/dist/index.js

@@ -420,9 +420,13 @@ export function createProgram() {
     }))
         .addCommand(new Command("migrate")
         .description("Apply pending tenant database migrations for the current organization.")
+        .option("--rotate-credentials", "Rotate the tenant runtime/read DB passwords and rewrite stored credentials. Use only to repair a tenant whose stored credentials are out of sync; routine migrations do not need it.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
-        await handleAsyncAction("db migrate", options, async () => requestOxygen("/api/cli/db/migrate", { method: "POST", body: {} }));
+        await handleAsyncAction("db migrate", options, async () => requestOxygen("/api/cli/db/migrate", {
+            method: "POST",
+            body: options.rotateCredentials ? { rotate_credentials: true } : {},
+        }));
     }))
         .addCommand(new Command("migrate-all")
         .description("Apply pending tenant database migrations across all ready tenants (staff only).")
@@ -1732,10 +1736,12 @@ export function createProgram() {
         .option("--max-credits <n>", "Maximum managed/provider credits to reserve for this run.")
         .option("--max-concurrency <n>", "Maximum concurrent row items for this run.")
         .option("--metadata-json <json>", "Optional metadata object to attach to the run.")
+        .option("--then-json <json>", "JSON array of sequential follow-up steps. Each step runs after the previous terminates with completed or completed_with_errors. Paid steps require selection and max_credits. Shape: [{actions:[{type:'tool_column',column}],selection,force,max_concurrency,max_credits,metadata,run_on_failure}].")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
         const maxCredits = readPositiveNumber(options.maxCredits);
         const maxConcurrency = readPositiveInt(options.maxConcurrency);
+        const chainSteps = readChainStepsOption(options.thenJson);
         await handleAsyncAction("table-runs create", options, async () => requestOxygen("/api/cli/table-action-runs", {
             method: "POST",
             body: {
@@ -1747,6 +1753,7 @@ export function createProgram() {
                 ...(maxCredits !== undefined ? { max_credits: maxCredits } : {}),
                 ...(maxConcurrency ? { max_concurrency: maxConcurrency } : {}),
                 ...(options.metadataJson ? { metadata: parseJsonObject(options.metadataJson) } : {}),
+                ...(chainSteps.length > 0 ? { then: chainSteps } : {}),
             },
         }));
     }))
@@ -2276,22 +2283,50 @@ export function createProgram() {
         await handleAsyncAction("billing balance", options, async () => requestOxygen("/api/cli/billing/balance"));
     }))
         .addCommand(new Command("usage")
-        .description("Show recent credit ledger events.")
+        .description("Show credit ledger events.")
         .option("--days <n>", "Lookback window in days. Defaults to 30.")
+        .option("--from <iso>", "Only include ledger events at or after this ISO timestamp.")
+        .option("--to <iso>", "Only include ledger events at or before this ISO timestamp.")
         .option("--limit <n>", "Maximum events to return. Defaults to 50.")
+        .option("--cursor <cursor>", "Opaque cursor from a previous usage response.")
+        .option("--type <type>", "Filter by transaction type, such as reserve, capture, release, grant, or byok_usage.")
+        .option("--category <category>", "Filter by transaction category, such as managed_enrichment, managed_ai, byok, subscription, or admin.")
+        .option("--provider <provider>", "Filter by provider id.")
+        .option("--source <source_id>", "Filter by source_id/provider operation.")
+        .option("--source-id <source_id>", "Alias for --source.")
+        .option("--run-id <run_id>", "Filter by run id recorded in ledger metadata.")
+        .option("--nonzero", "Only include events that changed available or reserved credits.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("billing usage", options, async () => {
-            const params = new URLSearchParams();
-            const days = readPositiveInt(options.days);
-            const limit = readPositiveInt(options.limit);
-            if (days)
-                params.set("days", String(days));
-            if (limit)
-                params.set("limit", String(limit));
+            const params = buildBillingLedgerParams(options);
             const suffix = params.toString() ? `?${params.toString()}` : "";
             return requestOxygen(`/api/cli/billing/usage${suffix}`);
         });
+    }))
+        .addCommand(new Command("audit")
+        .description("Summarize where managed credits were granted, reserved, captured, released, or spent.")
+        .option("--days <n>", "Lookback window in days. Defaults to 365.")
+        .option("--from <iso>", "Only include ledger events at or after this ISO timestamp.")
+        .option("--to <iso>", "Only include ledger events at or before this ISO timestamp.")
+        .option("--limit <n>", "Maximum grouped rows to return. Defaults to 100.")
+        .option("--group-by <keys>", "Comma-separated grouping keys. Defaults to provider,source.")
+        .option("--type <type>", "Filter by transaction type, such as reserve, capture, release, grant, or byok_usage.")
+        .option("--category <category>", "Filter by transaction category, such as managed_enrichment, managed_ai, byok, subscription, or admin.")
+        .option("--provider <provider>", "Filter by provider id.")
+        .option("--source <source_id>", "Filter by source_id/provider operation.")
+        .option("--source-id <source_id>", "Alias for --source.")
+        .option("--run-id <run_id>", "Filter by run id recorded in ledger metadata.")
+        .option("--nonzero", "Only include events that changed available or reserved credits. Default for audit except BYOK filters.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("billing audit", options, async () => {
+            const params = buildBillingLedgerParams(options);
+            if (readOption(options.groupBy))
+                params.set("group_by", readOption(options.groupBy));
+            const suffix = params.toString() ? `?${params.toString()}` : "";
+            return requestOxygen(`/api/cli/billing/audit${suffix}`);
+        });
     }))
         .addCommand(new Command("grant")
         .description("Grant managed credits to the current organization (staff only).")
@@ -3753,6 +3788,24 @@ function readTableRunActions(options) {
         exitCode: 1,
     });
 }
+// Parse --then-json into an array of chain steps. Server validates the shape;
+// we only enforce that the top-level value is an array of objects so users get
+// a clear local error before round-tripping to the API.
+function readChainStepsOption(value) {
+    if (!value)
+        return [];
+    const parsed = parseJsonArray(value);
+    for (let i = 0; i < parsed.length; i += 1) {
+        const entry = parsed[i];
+        if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+            throw new OxygenError("invalid_table_run", "--then-json entries must be objects.", {
+                details: { index: i },
+                exitCode: 1,
+            });
+        }
+    }
+    return parsed;
+}
 function readTableRunSelection(options) {
     const hasAll = Boolean(options.all);
     const limit = readPositiveInt(options.limit);
@@ -6143,6 +6196,35 @@ function contextAssetsQuery(options) {
     const value = query.toString();
     return value ? `?${value}` : "";
 }
+function buildBillingLedgerParams(options) {
+    const params = new URLSearchParams();
+    const days = readPositiveInt(options.days);
+    const limit = readPositiveInt(options.limit);
+    if (days)
+        params.set("days", String(days));
+    if (limit)
+        params.set("limit", String(limit));
+    if (readOption(options.from))
+        params.set("from", readOption(options.from));
+    if (readOption(options.to))
+        params.set("to", readOption(options.to));
+    if (readOption(options.cursor))
+        params.set("cursor", readOption(options.cursor));
+    if (readOption(options.type))
+        params.set("type", readOption(options.type));
+    if (readOption(options.category))
+        params.set("category", readOption(options.category));
+    if (readOption(options.provider))
+        params.set("provider", readOption(options.provider));
+    const sourceId = readOption(options.sourceId) ?? readOption(options.source);
+    if (sourceId)
+        params.set("source_id", sourceId);
+    if (readOption(options.runId))
+        params.set("run_id", readOption(options.runId));
+    if (options.nonzero)
+        params.set("nonzero", "true");
+    return params;
+}
 function buildContextResolveBody(options) {
     const assetTypes = readCsvOption(options.assetType);
     const tags = readCsvOption(options.tags);

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const OXYGEN_VERSION = "1.139.9";
+export declare const OXYGEN_VERSION = "1.142.4";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.135.0";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,3 +1,3 @@
-export const OXYGEN_VERSION = "1.139.9";
+export const OXYGEN_VERSION = "1.142.4";
 // Bump this only when deployed CLI/API contracts require a newer CLI.
 export const OXYGEN_MINIMUM_CLI_VERSION = "1.135.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.139.9",
+  "version": "1.142.4",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",