@oxygen-agent/cli 1.717.11 → 1.739.0

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.717.11
+Version: 1.739.0

package/dist/command-manifest.js

@@ -1,4 +1,4 @@
-import { CLI_EXIT_CODE_TABLE, OXYGEN_VERSION, inferCapabilityRoute, serializeCapabilityRoute, } from "@oxygen/shared";
+import { CLI_EXIT_CODE_TABLE, OXYGEN_VERSION, inferUserCapabilityRoute, serializeCapabilityRoute, } from "@oxygen/shared";
 const DEFAULT_COMMAND_SEARCH_LIMIT = 10;
 const MAX_COMMAND_SEARCH_LIMIT = 25;
 const COMMAND_SEARCH_STOP_WORDS = new Set([
@@ -30,16 +30,16 @@ const MUTATING_VERBS = new Set([
     // Exact leaves, not the `billing` prefix — `orgs billing-owners` is a read.
     // Both move a workspace's billing owner, so an agent must treat them as writes.
     "billing-link", "billing-unlink",
-    "bind", "buy", "call", "cancel", "chat-action", "clear",
+    "bind", "buy", "call", "cancel", "chat-action", "claim", "clear",
     "comment", "configure", "connect", "create", "decide", "delete", "delist", "disable",
     "disconnect", "dispatch", "draft", "duplicate", "edit", "emit", "enable", "enroll",
     "file", "forward", "grant", "harvest", "history", "import", "insert", "interrupt", "invite",
-    "launch", "log", "login", "logout", "mark-all-read", "mark-read", "materialize", "merge",
+    "label-add", "label-remove", "launch", "log", "login", "logout", "mark-all-read", "mark-read", "materialize", "merge",
     "migrate",
-    "move", "note", "off", "onboard", "order", "pause", "pin", "provision",
+    "move", "note", "off", "onboard", "order", "pause", "pin", "priority", "provision",
     "publish", "purchase", "purge", "push", "react", "reconcile", "record", "recover-pending",
     "register", "reject", "relink", "remove", "rename", "reorder", "reply", "request",
-    "rerun", "rescan", "resend", "reset", "resolve", "restore", "resume",
+    "replay", "rerun", "rescan", "resend", "reset", "resolve", "restore", "resume",
     "retry", "retype", "revoke", "rotate", "run", "save", "schedule",
     "seed", "select", "send", "set", "setup", "share", "solve",
     "start", "stop", "subscribe", "sync", "synthesize", "tag", "unarchive", "unpublish", "unshare",
@@ -49,10 +49,24 @@ const MUTATING_VERBS = new Set([
 // `--approved` usually identifies a paid or externally mutating execution
 // mode, but a small number of destructive local operations are explicitly
 // zero-credit. Keep those exceptions exact so discovery never invents spend.
-const ZERO_CREDIT_APPROVAL_COMMANDS = new Set(["mailboxes delete"]);
-// These commands preview when the execution approval is omitted even though
-// their gate is named `--approved` rather than `--live`.
-const APPROVAL_PREVIEW_COMMANDS = new Set(["mailboxes delete"]);
+const ZERO_CREDIT_APPROVAL_COMMANDS = new Set([
+    "mailboxes delete",
+    // Credential replacement is destructive but does not execute the graph,
+    // call a provider, or spend Oxygen credits.
+    "workflows webhooks rotate",
+]);
+// Exact noun-style reads whose leaf happens to look like a mutating verb.
+// `workflows run <id>` gets an existing Workflow run; `workflows call` creates
+// one. Keep the exception exact so genuine `run` actions remain mutations.
+const READ_ONLY_COMMANDS = new Set(["workflows run"]);
+// Exact commands whose execution fence is not named `--live`. A bare
+// invocation still previews, so machine-readable discovery must not imply that
+// calling the command without its confirmation flag writes anything.
+const PREVIEW_BY_DEFAULT_COMMANDS = new Set([
+    "mailboxes delete",
+    "support admin reply",
+    "workflows webhooks rotate",
+]);
 export function buildCommandManifest(program, binaryName) {
     const commands = [];
     for (const child of program.commands) {
@@ -71,7 +85,7 @@ export function buildCommandManifest(program, binaryName) {
 export function searchCommandManifest(manifest, query, requestedLimit = DEFAULT_COMMAND_SEARCH_LIMIT) {
     const normalized = query.trim();
     const tokens = tokenizeCommandQuery(normalized);
-    const route = inferCapabilityRoute(normalized);
+    const route = inferUserCapabilityRoute(normalized);
     const limit = Math.min(MAX_COMMAND_SEARCH_LIMIT, Math.max(1, Math.floor(requestedLimit)));
     const matches = tokens.length === 0
         ? []
@@ -207,9 +221,10 @@ function toManifestEntry(command, path) {
                 // them as free.
                 (path[0] === "copilot" &&
                     (leafVerb === "send" || leafVerb === "approve"))),
-        mutates: MUTATING_VERBS.has(leafVerb) || MUTATING_VERBS.has(verbPrefix),
+        mutates: !READ_ONLY_COMMANDS.has(commandName)
+            && (MUTATING_VERBS.has(leafVerb) || MUTATING_VERBS.has(verbPrefix)),
         preview_by_default: flagStrings.some((flags) => flags.includes("--live")) ||
-            APPROVAL_PREVIEW_COMMANDS.has(commandName),
+            PREVIEW_BY_DEFAULT_COMMANDS.has(commandName),
         json_supported: flagStrings.some((flags) => flags.includes("--json")),
         hidden: isHiddenCommand(command),
     };