@oxygen-agent/cli 1.275.1 → 1.284.3

package/dist/index.js

@@ -7,14 +7,16 @@ import { createInterface } from "node:readline/promises";
 import { stdin as input, stdout as output } from "node:process";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { Command, Option } from "commander";
-import { AGENCY_DIRECTORY_REGIONS, AGENCY_DIRECTORY_SERVICES, formatCellForDisplay, formatPublicBudgetScopes, OXYGEN_VERSION, OxygenError, success, toFailure, } from "@oxygen/shared";
+import { applyOxygenHelp } from "./help.js";
+import { buildCommandManifest } from "./command-manifest.js";
+import { AGENCY_DIRECTORY_REGIONS, AGENCY_DIRECTORY_SERVICES, formatCellForDisplay, formatPublicBudgetScopes, exitCodeForOxygenError, isVersionGreater, isVersionLess, OXYGEN_VERSION, OxygenError, parseKnowledgePageMarkdown, success, toFailure, } from "@oxygen/shared";
 import { inferImportColumnLabels, inferRowsFileFormat, normalizeImportColumnKey, normalizeRowsForNewTable, normalizeRowsFormat, parseRowsFileBuffer, } from "@oxygen/shared/file-import";
 import { assertRecipeBundleSafe, assertWorkflowManifest, buildRecipeManifest, compileWorkflowDefinition, isAnyWorkflowManifest, isRecipeManifest, isWorkflowDefinition, isWorkflowManifest, } from "@oxygen/workflows";
 import { isRecipeDefinition } from "@oxygen/recipe-sdk";
 import { createBrowserLoginSession, openBrowser } from "./browser-login.js";
 import { clearCredentials, defaultApiUrl, listCredentialProfiles, loadCredentials, normalizeApiUrl, pickProfileNameForIdentity, pickProfileNameForUserSession, resolveActiveProfile, saveCredentials, switchCredentialProfile, updateActiveOrganizationForProfile, } from "./credentials.js";
 import { ensureFreshCliForApiUrl, requestOxygen } from "./http-client.js";
-import { acquireMirrorLock, clearConflictFiles, deletePageFile, emptyMirrorState, findMirrorSlugByPageId, isFileDirty, listConflictFiles, markMirrorStale, mirrorExists, purgeMirror, resetMirrorForFullResync, quarantineDirtyFile, readMirrorState, releaseMirrorLock, resolveDefaultConfigDir, resolveMirrorDir, writeGeneratedIndexFile, writeGeneratedLogFile, writeMirrorState, writePageFile, } from "./knowledge-mirror.js";
+import { acquireMirrorLock, clearConflictFiles, deletePageFile, emptyMirrorState, findMirrorSlugByPageId, isFileDirty, listConflictFiles, localPageSha256, markMirrorStale, mirrorExists, pageFilePath, planMirrorPush, purgeMirror, resetMirrorForFullResync, quarantineDirtyFile, readMirrorState, releaseMirrorLock, resolveDefaultConfigDir, resolveMirrorDir, writeGeneratedIndexFile, writeGeneratedLogFile, writeMirrorState, writePageFile, } from "./knowledge-mirror.js";
 import { waitForCliRun } from "./run-wait.js";
 import { runLocalCustomHttpColumn } from "./local-custom-http-column.js";
 import { captureCurrentTranscript, collectFeedbackEnvironment, TranscriptCaptureError, } from "./transcript.js";
@@ -119,12 +121,35 @@ async function handleAsyncAction(command, options, action) {
     try {
         const data = await action();
         emitSuccess(command, data, options);
+        writeCreditsReceipt(data);
     }
     catch (error) {
         const failure = toFailure(command, error);
         writeJson(failure);
         writeMaxCreditsHint(error);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+    }
+}
+// Paid envelopes (push 3 legibility) carry a `credits` block: quote on
+// dry_run, receipt on live, remaining balance on both. Mirror it as one
+// stderr line so spend stays visible in a terminal without polluting the
+// machine-read stdout envelope.
+function writeCreditsReceipt(data) {
+    if (!data || typeof data !== "object" || Array.isArray(data))
+        return;
+    const credits = data.credits;
+    if (!credits || typeof credits !== "object" || Array.isArray(credits))
+        return;
+    const block = credits;
+    const remaining = typeof block.credits_remaining === "number"
+        ? block.credits_remaining.toLocaleString("en-US")
+        : null;
+    if (typeof block.credits_used === "number") {
+        process.stderr.write(`spent ${block.credits_used.toLocaleString("en-US")} credits${remaining !== null ? `, ${remaining} remaining` : ""}\n`);
+        return;
+    }
+    if (typeof block.estimated_credits === "number") {
+        process.stderr.write(`estimated ${block.estimated_credits.toLocaleString("en-US")} credits for a live run${remaining !== null ? `, ${remaining} available` : ""}\n`);
     }
 }
 // Paid live runs are refused server-side with typed spend-gate errors
@@ -1069,7 +1094,7 @@ export function createProgram() {
     const binaryName = resolveCliBinaryName();
     program
         .name(binaryName)
-        .description("CLI/API-first GTM platform for GTM tool and workflow primitives.")
+        .description("Revenue infrastructure for B2B startups — agent-operated GTM: tables, enrichment, sequences, workflows, CRM, knowledge. MCP + CLI first; every state-changing action returns a web_url deep-link.")
         .version(OXYGEN_VERSION)
         .option("--profile <name>", "Use a stored CLI profile for this command.")
         .option("--org <organization>", "Use an organization id, Clerk org id, or slug for this command.");
@@ -1201,9 +1226,17 @@ export function createProgram() {
         .command("whoami")
         .description("Show the current Oxygen CLI identity.")
         .option("--json", "Print a JSON envelope.")
+        .option("--summary-json", "Print a compact identity envelope with no credential-shaped fields (safe for health probes and logs).")
         .action(async (options) => {
         await handleWhoamiAction(options);
     });
+    program
+        .command("commands")
+        .description("Print the machine-readable command manifest: every command with flags, spend/mutation markers, and the reserved exit-code table.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("commands", options, async () => buildCommandManifest(program, binaryName));
+    });
     program
         .command("onboarding")
         .description("Onboarding helpers.")
@@ -1239,14 +1272,26 @@ export function createProgram() {
                 requireAuth: false,
                 enforceMinimumCliVersion: false,
             });
+            // Explicit skew semantics: in_sync=false alone forced every ops sweep
+            // to hand-interpret whether a version gap was safe (fleet friction,
+            // recurring since 2026-06-18). `skew` names the direction and
+            // `compatible` answers the only question that matters: is this CLI at
+            // or above the server's enforced minimum?
+            const minimum = server.minimum_cli_version ?? null;
             return {
                 client_version: OXYGEN_VERSION,
                 api_url: apiUrl,
                 server_version: server.server_version,
-                minimum_cli_version: server.minimum_cli_version ?? null,
+                minimum_cli_version: minimum,
                 sha: server.sha,
                 region: server.region,
                 in_sync: server.server_version === OXYGEN_VERSION,
+                skew: isVersionGreater(OXYGEN_VERSION, server.server_version)
+                    ? "client_ahead"
+                    : isVersionLess(OXYGEN_VERSION, server.server_version)
+                        ? "client_behind"
+                        : "in_sync",
+                compatible: minimum === null || !isVersionLess(OXYGEN_VERSION, minimum),
             };
         });
     });
@@ -3160,6 +3205,28 @@ export function createProgram() {
             method: "POST",
             body: {},
         }));
+    }))
+        .addCommand(new Command("synthesize")
+        .description("Synthesize knowledge from workspace evidence (one low-cost AI call): campaign learnings from auto-filed outreach outcomes, or a voice guide from sent messages. Previews by default; --approved writes the result.")
+        .option("--kind <kind>", "What to synthesize: campaign_learnings (default) or voice.", "campaign_learnings")
+        .option("--sequence <sequence_id>", "Scope campaign learnings to one sequence's learnings page. Omit for the org-wide [[outreach-learnings]] page.")
+        .option("--approved", "Write the synthesized result (learnings page revision / pinned voice guide) instead of previewing.")
+        .option("--body <markdown>", "With --approved: save this edited body verbatim instead of re-synthesizing.")
+        .option("--title <title>", "Optional title for a newly created page/asset.")
+        .option("--limit <n>", "Voice only: how many recent sent messages to learn from (max 200).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("knowledge synthesize", options, () => requestOxygen("/api/cli/knowledge/synthesize", {
+            method: "POST",
+            body: {
+                kind: options.kind ?? "campaign_learnings",
+                ...(readOption(options.sequence) ? { sequence: readOption(options.sequence) } : {}),
+                ...(options.approved ? { approved: true } : {}),
+                ...(readOption(options.body) ? { body: readOption(options.body) } : {}),
+                ...(readOption(options.title) ? { title: readOption(options.title) } : {}),
+                ...(readPositiveInt(options.limit) !== undefined ? { limit: readPositiveInt(options.limit) } : {}),
+            },
+        }));
     }))
         .addCommand(new Command("sync")
         .description("Clone or refresh the local knowledge mirror: server-rendered page markdown under the CLI config dir.")
@@ -3169,6 +3236,13 @@ export function createProgram() {
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("knowledge sync", options, () => runKnowledgeMirrorSync(options));
+    }))
+        .addCommand(new Command("push")
+        .description("Push locally edited or newly created mirror pages back to the workspace wiki. Edits to canonical voice/brand/positioning pages become approval proposals instead of writing live.")
+        .option("--dry-run", "List what would be pushed without writing anything.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("knowledge push", options, () => runKnowledgeMirrorPush(options));
     }))
         .addCommand(new Command("status")
         .description("Report the local knowledge mirror: path, page count, last sync, quarantined conflicts.")
@@ -5721,6 +5795,7 @@ export function createProgram() {
         .option("--profile-views-per-day <n>", "Daily profile views cap.")
         .option("--follows-per-day <n>", "Daily follows cap.")
         .option("--likes-per-day <n>", "Daily likes cap.")
+        .option("--comments-per-day <n>", "Daily comments cap.")
         .option("--total-actions-per-day <n>", "Daily cap across all send/action types.")
         .option("--relations-reads-per-day <n>", "Daily cap on relations/connections list reads (scrape protection).")
         .option("--messages-reads-per-day <n>", "Daily cap on chat and message-history reads.")
@@ -7281,6 +7356,95 @@ export function createProgram() {
             });
         });
     })));
+    program.addCommand(new Command("managed-inboxes")
+        .description("Managed whitelabel sending inboxes on the OXYGEN-managed Cold Mail Reseller (CMR) account: subscribe a domain + N mailboxes (google/microsoft) as a recurring MONTHLY subscription billed to Oxygen credits, list/get your subscriptions, and cancel. Subscribe/cancel are approval-gated (preview → re-run with --approved --quote).")
+        .addCommand(new Command("subscribe")
+        .description("Subscribe a domain + mailboxes as a managed monthly CMR inbox subscription. WITHOUT --approved this prints a priced PREVIEW with a quote_id (nothing ordered or charged); re-run with --approved --quote <id> to place the order. Fails closed until the managed CMR wallet (CMR_RESELLER_API_KEY) + founder-signed pricing (CMR_MANAGED_INBOX_CREDITS_PER_MAILBOX) are configured.")
+        .requiredOption("--domain <domain>", "Sending domain to register + host the mailboxes (e.g. send.acme.com).")
+        .requiredOption("--provider <provider>", "Mailbox provider: google or microsoft.")
+        .option("--mailboxes <json>", "JSON array of mailboxes: [{\"username\",\"first_name\",\"last_name\",\"profile_picture?\"}].")
+        .option("--file <path>", "Path to a JSON file { \"mailboxes\": [...] } (alternative to --mailboxes).")
+        .option("--years <n>", "Years to register the domain for (positive whole number). Defaults to 1.")
+        .option("--billing <path>", "Path to a JSON file with the CMR billing address (required on the FIRST subscribe for an org that has no CMR account yet).")
+        .option("--zapshield", "Add the Zapshield deliverability-protection add-on to the domain (a one-time per-domain add-on billed once its price is founder-signed; recorded but not charged until then).")
+        .option("--approved", "Place the order (requires --quote). Without it, a priced preview is returned.")
+        .option("--quote <id>", "The quote_id from a fresh preview. Required with --approved.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("managed-inboxes subscribe", options, () => {
+            const domain = readOption(options.domain);
+            const provider = readOption(options.provider);
+            if (!domain)
+                throw new Error("--domain is required.");
+            if (!provider)
+                throw new Error("--provider is required (google or microsoft).");
+            let mailboxes;
+            const mailboxesJson = readOption(options.mailboxes);
+            const filePath = readOption(options.file);
+            if (mailboxesJson) {
+                mailboxes = JSON.parse(mailboxesJson);
+            }
+            else if (filePath) {
+                const parsed = readJsonFileValue(resolve(filePath), "--file");
+                mailboxes = parsed.mailboxes ?? [];
+            }
+            else {
+                throw new Error("Provide --mailboxes <json> or --file <path>.");
+            }
+            const years = readOption(options.years);
+            const billingPath = readOption(options.billing);
+            const billing = billingPath ? readJsonFileValue(resolve(billingPath), "--billing") : undefined;
+            const quote = readOption(options.quote);
+            return requestOxygen("/api/cli/managed-inboxes/subscribe", {
+                method: "POST",
+                body: {
+                    domain,
+                    provider,
+                    mailboxes,
+                    ...(years ? { years: Number(years) } : {}),
+                    ...(billing ? { billing } : {}),
+                    ...(options.zapshield ? { zapshield: true } : {}),
+                    ...(options.approved ? { approved: true } : {}),
+                    ...(quote ? { quote_id: quote } : {}),
+                },
+            });
+        });
+    }))
+        .addCommand(new Command("list")
+        .description("List the org's managed inbox subscriptions with provider, mailbox count, monthly price, CMR lifecycle status, and internal billing posture. Read-only, 0 Oxygen credits.")
+        .option("--status <status>", "Filter by status: pending, active, renewing, past_due, expired, cancelled, or failed.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("managed-inboxes list", options, () => {
+            const params = new URLSearchParams();
+            const status = readOption(options.status);
+            if (status)
+                params.set("status", status);
+            const suffix = params.toString();
+            return requestOxygen(`/api/cli/managed-inboxes${suffix ? `?${suffix}` : ""}`);
+        });
+    }))
+        .addCommand(new Command("get")
+        .description("Get one managed inbox subscription by domain (provider, mailbox count, monthly price, CMR subscription id, lifecycle status, auto-renew, period end, internal billing status). Read-only, 0 Oxygen credits.")
+        .argument("<domain>", "The managed inbox domain (e.g. send.acme.com).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (domain, options) => {
+        await handleAsyncAction("managed-inboxes get", options, () => requestOxygen(`/api/cli/managed-inboxes/${encodeURIComponent(domain)}`));
+    }))
+        .addCommand(new Command("cancel")
+        .description("Cancel a managed inbox subscription by domain (stops CMR's recurring monthly charge and frees the domain at period end). WITHOUT --approved prints a preview; re-run with --approved to cancel. Cancelling is free — 0 Oxygen credits.")
+        .argument("<domain>", "The managed inbox domain to cancel.")
+        .option("--approved", "Actually cancel (otherwise a preview is returned).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (domain, options) => {
+        await handleAsyncAction("managed-inboxes cancel", options, () => requestOxygen("/api/cli/managed-inboxes/cancel", {
+            method: "POST",
+            body: {
+                domain,
+                ...(options.approved ? { approved: true } : {}),
+            },
+        }));
+    })));
     program.addCommand(new Command("mailboxes")
         .description("Native email sending pool: register/refresh Google/Microsoft mailboxes a campaign rotates over, pause/disable inboxes, and delegate warmup to Instantly (BYOK — Instantly bills your account, 0 Oxygen credits).")
         .addCommand(new Command("list")
@@ -7527,6 +7691,28 @@ export function createProgram() {
             const suffix = params.toString();
             return requestOxygen(`/api/cli/mailboxes/warmup/status${suffix ? `?${suffix}` : ""}`);
         });
+    }))
+        .addCommand(new Command("provision")
+        .description("Export sending mailboxes into the Instantly workspace via Zapmail (the prerequisite for warmup), then let the worker enable warmup once the export completes. Targets the whole pool unless --mailboxes is given. Uses the org's Zapmail connection (BYOK) or the OXYGEN-managed wallet.")
+        .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses to provision. Omit for the whole pool.")
+        .option("--connection <id>", "Zapmail connection id. Defaults to the org's active Zapmail connection (or the managed wallet).")
+        .option("--force", "Re-export mailboxes already exporting/warming/active (default skips them).")
+        .option("--dry-run", "Simulate without calling Zapmail (reports the mailboxes that would be exported).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("mailboxes warmup provision", options, () => {
+            const mailboxes = readCsvOption(options.mailboxes);
+            const connection = readOption(options.connection);
+            return requestOxygen("/api/cli/mailboxes/warmup/provision", {
+                method: "POST",
+                body: {
+                    ...(mailboxes.length > 0 ? { mailboxes } : {}),
+                    ...(connection ? { connection_id: connection } : {}),
+                    ...(options.force ? { force: true } : {}),
+                    ...(options.dryRun ? { dry_run: true } : {}),
+                },
+            });
+        });
     })))
         .addCommand(new Command("order")
         .description("Order NEW sending mailboxes (domain + inboxes + warmup) on the OXYGEN-managed Zapmail wallet, billed to Oxygen credits. Without --approved returns a priced preview + quote_id. FAILS CLOSED (409) until managed ordering is enabled.")
@@ -8194,6 +8380,7 @@ export function createProgram() {
         .action(async (options) => {
         await handleAsyncAction("skills install", options, () => installAgentSkills(options));
     }));
+    applyOxygenHelp(program, binaryName);
     return program;
 }
 /**
@@ -10771,6 +10958,27 @@ async function handleWhoamiAction(options) {
             enforceMinimumCliVersion: false,
         });
         const context = await resolveActiveProfileWithSource();
+        // Compact, credential-free identity shape for health probes and ops
+        // sweeps: the full envelope carries apiKey token prefix/suffix metadata,
+        // which forced every automated consumer to sanitize before logging
+        // (recurring fleet friction since 2026-06-18).
+        if (options.summaryJson) {
+            writeJson(success("whoami", {
+                user: { id: identity.user.id, email: identity.user.email },
+                organization: {
+                    id: identity.organization.id,
+                    name: identity.organization.name,
+                    slug: identity.organization.slug,
+                },
+                auth_type: identity.authType ?? identity.apiKey?.kind ?? null,
+                onboarding_complete: identity.onboarding?.complete ?? null,
+                profile: context.resolution.exists ? context.resolution.name : null,
+                profile_source: context.source,
+                api_url: context.resolution.credentials?.apiUrl ?? null,
+                cli_version: OXYGEN_VERSION,
+            }));
+            return;
+        }
         if (context.resolution.exists) {
             const existingCredentials = context.resolution.credentials;
             const cached = existingCredentials?.identity;
@@ -10806,7 +11014,7 @@ async function handleWhoamiAction(options) {
     catch (error) {
         const failure = toFailure("whoami", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function handleOnboardingStartAction(options) {
@@ -10821,7 +11029,7 @@ async function handleOnboardingStartAction(options) {
     catch (error) {
         const failure = toFailure("onboarding start", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function handleOnboardingResetAction(options) {
@@ -10845,7 +11053,7 @@ async function handleOnboardingResetAction(options) {
     catch (error) {
         const failure = toFailure("onboarding reset", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 function formatOnboardingReset(data) {
@@ -10903,7 +11111,7 @@ async function handleLoginAction(options) {
     catch (error) {
         const failure = toFailure("login", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function handleAuthUseTokenAction(options) {
@@ -10933,7 +11141,7 @@ async function handleAuthUseTokenAction(options) {
             writeJson(failure);
         else
             process.stderr.write(`${failure.error.message}\n`);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function handleAuthDoctorAction(options) {
@@ -10948,7 +11156,7 @@ async function handleAuthDoctorAction(options) {
     catch (error) {
         const failure = toFailure("auth doctor", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function runAuthDoctor() {
@@ -11039,7 +11247,7 @@ async function handleOrgUseAction(organization, options, command) {
     catch (error) {
         const failure = toFailure(command, error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function handleProfilesListAction(options) {
@@ -11058,7 +11266,7 @@ async function handleProfilesListAction(options) {
     catch (error) {
         const failure = toFailure("profiles list", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function handleProfilesUseAction(profile, options) {
@@ -11079,7 +11287,7 @@ async function handleProfilesUseAction(profile, options) {
     catch (error) {
         const failure = toFailure("profiles use", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function handleProfilesEnvAction(profile, options) {
@@ -11118,7 +11326,7 @@ async function handleProfilesEnvAction(profile, options) {
     catch (error) {
         const failure = toFailure("profiles env", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function handleProfilesCurrentAction(options) {
@@ -11142,7 +11350,7 @@ async function handleProfilesCurrentAction(options) {
     catch (error) {
         const failure = toFailure("profiles current", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 function shellQuote(value) {
@@ -11171,7 +11379,7 @@ async function handleLogoutAction(options) {
     catch (error) {
         const failure = toFailure("logout", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function handleUpdateAction(options) {
@@ -11186,7 +11394,7 @@ async function handleUpdateAction(options) {
     catch (error) {
         const failure = toFailure("update", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 function buildApiKeyCreateBody(options) {
@@ -11797,7 +12005,7 @@ async function handleSequenceSignalAction(sequence, options) {
         const failure = toFailure("sequences signal", error);
         writeJson(failure);
         writeMaxCreditsHint(error);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function handleSequenceVariantsAction(sequence, options) {
@@ -11834,7 +12042,7 @@ async function handleSequenceVariantsAction(sequence, options) {
         const failure = toFailure("sequences variants", error);
         writeJson(failure);
         writeMaxCreditsHint(error);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 function formatVariantCell(value) {
@@ -11965,7 +12173,7 @@ async function handleTablesTidySuggestAction(table, options) {
         const failure = toFailure("tables tidy-suggest", error);
         writeJson(failure);
         writeMaxCreditsHint(error);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 function formatTidyCount(value) {
@@ -12348,7 +12556,7 @@ async function handleSupportAdminWorkflowAction(ticketId, options) {
     catch (error) {
         const failure = toFailure("support admin workflow", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 async function handleSupportAdminUpdateAction(ticketId, options) {
@@ -12364,7 +12572,7 @@ async function handleSupportAdminUpdateAction(ticketId, options) {
     catch (error) {
         const failure = toFailure("support admin update", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 function formatSupportAdminWorkflowStep(styles, label, status, artifactLabel, artifact) {
@@ -12915,6 +13123,152 @@ async function runKnowledgeMirrorSync(options) {
         releaseMirrorLock(target.dir);
     }
 }
+// One page's push: parse the local file, guard identity, upsert with the manifest
+// revision as the optimistic-concurrency base, and translate the two expected
+// gate outcomes (approval proposal, revision conflict) into statuses.
+async function pushOneMirrorPage(dir, state, candidate) {
+    const { slug, kind, record } = candidate;
+    let contents;
+    try {
+        contents = readFileSync(pageFilePath(dir, slug), "utf8");
+    }
+    catch {
+        return { slug, kind, status: "skipped", reason: "file_unreadable" };
+    }
+    const parsed = parseKnowledgePageMarkdown(contents);
+    if (record && parsed.id && parsed.id !== record.id) {
+        return { slug, kind, status: "skipped", reason: "id_mismatch_with_manifest" };
+    }
+    if (parsed.slug && parsed.slug !== slug) {
+        return { slug, kind, status: "skipped", reason: "frontmatter_slug_differs_from_filename" };
+    }
+    const body = {
+        slug,
+        body: parsed.body,
+        ...(parsed.title ? { title: parsed.title } : {}),
+        ...(parsed.type ? { type: parsed.type } : {}),
+        ...(parsed.status ? { status: parsed.status } : {}),
+        ...(parsed.tags ? { tags: parsed.tags } : {}),
+        // A frontmatter block owns the summary line: pushing an emptied summary
+        // clears it server-side; a plain new file leaves summary untouched.
+        ...(parsed.hasFrontmatter ? { summary: parsed.summary } : {}),
+        ...(record ? { expected_revision: record.revision } : {}),
+    };
+    try {
+        const data = await requestOxygen("/api/cli/knowledge/pages/upsert", { method: "POST", body });
+        const page = data.page ?? {};
+        if (typeof page.id === "string" && typeof page.revision === "number") {
+            // Record the pushed bytes as the manifest truth so the follow-up sync
+            // overwrites this file with the server rendering instead of quarantining
+            // the very edit we just pushed.
+            const localSha = localPageSha256(dir, slug);
+            if (localSha) {
+                state.pages[slug] = { id: page.id, revision: page.revision, content_sha256: localSha };
+            }
+        }
+        return {
+            slug,
+            kind,
+            status: "pushed",
+            ...(typeof page.revision === "number" ? { revision: page.revision } : {}),
+        };
+    }
+    catch (error) {
+        if (error instanceof OxygenError && error.code === "knowledge_approval_required") {
+            const details = (error.details ?? {});
+            return {
+                slug,
+                kind,
+                status: "proposal_created",
+                ...(typeof details.proposalId === "string" ? { proposal_id: details.proposalId } : {}),
+                ...(typeof details.proposalSlug === "string" ? { proposal_slug: details.proposalSlug } : {}),
+                reason: typeof details.reason === "string" ? details.reason : "sensitive_page",
+            };
+        }
+        if (error instanceof OxygenError && error.code === "knowledge_page_conflict") {
+            return { slug, kind, status: "conflict", reason: "revision_moved_run_knowledge_sync_first" };
+        }
+        if (error instanceof OxygenError) {
+            return { slug, kind, status: "failed", reason: error.code };
+        }
+        throw error;
+    }
+}
+// `oxygen knowledge push` — the write half of the local mirror: locally edited
+// (dirty) and brand-new mirror files upsert back to the workspace wiki through
+// the same gate as every other write surface, then a delta sync converges the
+// mirror onto the server rendering. This is what lets a local agent (Claude
+// Code, Codex) work the wiki as plain markdown files.
+async function runKnowledgeMirrorPush(options) {
+    const target = await resolveKnowledgeMirrorTarget();
+    const state = readMirrorState(target.dir);
+    if (!state) {
+        throw new OxygenError("knowledge_mirror_missing", "No local knowledge mirror exists for this organization yet. Run `oxygen knowledge sync` first.", {
+            details: { mirror_path: target.dir },
+            exitCode: 1,
+        });
+    }
+    const plan = planMirrorPush(target.dir, state);
+    if (options.dryRun) {
+        return {
+            dry_run: true,
+            candidates: plan.candidates.map(({ slug, kind, record }) => ({
+                slug,
+                kind,
+                ...(record ? { base_revision: record.revision } : {}),
+            })),
+            skipped: plan.skipped,
+            mirror_path: target.dir,
+            web_url: target.webUrl,
+        };
+    }
+    // Hold the mirror lock through the push phase so a concurrent sync can't
+    // rewrite files or the manifest mid-push; released before the convergence
+    // sync below, which takes the lock itself.
+    if (!acquireMirrorLock(target.dir)) {
+        throw new OxygenError("knowledge_sync_locked", "Another knowledge sync is running for this mirror. Retry shortly; a crashed sync's lock self-clears after 10 minutes.", {
+            details: { mirror_path: target.dir },
+            exitCode: 1,
+        });
+    }
+    const outcomes = [];
+    let pushedCount = 0;
+    try {
+        for (const candidate of plan.candidates) {
+            outcomes.push(await pushOneMirrorPage(target.dir, state, candidate));
+        }
+        pushedCount = outcomes.filter((outcome) => outcome.status === "pushed").length;
+        if (pushedCount > 0) {
+            writeMirrorState(target.dir, state);
+        }
+    }
+    finally {
+        releaseMirrorLock(target.dir);
+    }
+    // Converge: pull the server's rendering of everything just pushed (plus any
+    // proposal draft pages the gate filed) so local bytes match the server again.
+    let syncedAfter = false;
+    if (pushedCount > 0 || outcomes.some((outcome) => outcome.status === "proposal_created")) {
+        await runKnowledgeMirrorSync({});
+        syncedAfter = true;
+    }
+    return {
+        pushed: pushedCount,
+        proposals: outcomes.filter((outcome) => outcome.status === "proposal_created"),
+        conflicts: outcomes.filter((outcome) => outcome.status === "conflict"),
+        failures: outcomes.filter((outcome) => outcome.status === "failed"),
+        skipped: [
+            ...plan.skipped,
+            ...outcomes
+                .filter((outcome) => outcome.status === "skipped")
+                .map(({ slug, reason }) => ({ file: `${slug}.md`, reason: reason ?? "skipped" })),
+        ],
+        outcomes,
+        synced_after: syncedAfter,
+        mirror_path: target.dir,
+        web_url: target.webUrl,
+    };
+}
 async function runKnowledgeMirrorStatus(options) {
     const target = await resolveKnowledgeMirrorTarget();
     const clearedConflicts = options.clearConflicts ? clearConflictFiles(target.dir) : undefined;
@@ -12948,7 +13302,7 @@ async function handleKnowledgeMirrorPrintPathAction() {
     catch (error) {
         const failure = toFailure("knowledge status", error);
         writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
     }
 }
 // Knowledge page routes accept either a UUID (`id`) or a slug (`slug`); split
@@ -13030,6 +13384,7 @@ options) {
     setLimit("profile_views_per_day", options.profileViewsPerDay);
     setLimit("follows_per_day", options.followsPerDay);
     setLimit("likes_per_day", options.likesPerDay);
+    setLimit("comments_per_day", options.commentsPerDay);
     setLimit("total_actions_per_day", options.totalActionsPerDay);
     setLimit("relations_reads_per_day", options.relationsReadsPerDay);
     setLimit("messages_reads_per_day", options.messagesReadsPerDay);
@@ -13192,4 +13547,13 @@ function muteTokenEcho() {
         return () => undefined;
     }
 }
+// Piping CLI output into a consumer that exits early (`oxygen whoami --json |
+// head -c 20`) otherwise crashes with a raw EPIPE stack after the consumer
+// closes the pipe; a closed pipe is normal shell behavior, not an error.
+process.stdout.on("error", (error) => {
+    if (error.code === "EPIPE")
+        process.exit(0);
+    process.stderr.write(`stdout error: ${error.message}\n`);
+    process.exit(1);
+});
 await createProgram().parseAsync(process.argv);