@oxygen-agent/cli 1.886.3 → 1.888.6

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.886.3
+Version: 1.888.6

package/dist/command-manifest.js

@@ -50,7 +50,7 @@ const MUTATING_VERBS = new Set([
     "migrate",
     "move", "note", "off", "onboard", "order", "pause", "pin", "priority", "provision",
     "publish", "purchase", "purge", "push", "react", "reconcile", "record", "recover-pending",
-    "register", "reject", "relink", "remove", "rename", "reorder", "reply", "request",
+    "recover-capacity", "register", "reject", "relink", "remove", "rename", "reorder", "reply", "request",
     "replay", "rerun", "rescan", "resend", "reset", "resolve", "restore", "resume",
     "retry", "retype", "revoke", "rotate", "run", "save", "schedule",
     "seed", "select", "send", "set", "setup", "share", "snooze", "solve",
@@ -67,6 +67,9 @@ const MUTATING_VERBS = new Set([
 // zero-credit. Keep those exceptions exact so discovery never invents spend.
 const ZERO_CREDIT_APPROVAL_COMMANDS = new Set([
     "mailboxes delete",
+    // This approval only reopens exact fingerprint-bound tenant rows. It never
+    // calls the provider, dispatches an action, or touches the credit ledger.
+    "sequences recover-capacity",
     // Credential replacement is destructive but does not execute the graph,
     // call a provider, or spend Oxygen credits.
     "workflows webhooks rotate",
@@ -89,6 +92,7 @@ const PREVIEW_BY_DEFAULT_COMMANDS = new Set([
     "linkedin intent autoenroll",
     "mailboxes emailguard auto-enroll",
     "mailboxes delete",
+    "sequences recover-capacity",
     "support admin done",
     "support admin reply",
     // A bare call reads the Plain workspace and prints the plan; --apply writes.

package/dist/index.js

@@ -2720,6 +2720,7 @@ export function createProgram() {
                 query,
                 route: serializeCapabilityRoute(inferUserCapabilityRoute(query)),
                 hint: "Hydrate one exact CLI command with `oxygen commands get <exact-command> --json`, or one MCP tool with `oxygen_capabilities_schema`.",
+                alternate_search_hint: `If this route does not fit the outcome, run \`oxygen skills search ${JSON.stringify(query)} --json\` for a narrower operational play.`,
             };
         });
     }))
@@ -12683,7 +12684,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     }))
         .addCommand(new Command("delete")
-        .description("Permanently delete a sequence and everything it owns (enrollments, actions, sender links, schedules). Active sequences must be paused first. Runs without --approved to preview the blast radius; pass --approved to purge.")
+        .description("Permanently delete a sequence and everything it owns (enrollments, actions, sender links, schedules). To stop dispatch without deleting, use `sequences pause`; active sequences must be paused first. Runs without --approved to preview the blast radius; pass --approved to purge. The current CLI does not create new archived sequences; legacy archived sequences remain readable and taggable.")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--approved", "Confirm the previewed permanent deletion.")
         .option("--json", "Print a JSON envelope.")
@@ -12787,6 +12788,38 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
                     : {}),
             },
         }));
+    }))
+        .addCommand(new Command("recover-capacity")
+        .description("Preview definitive no-effect terminal provider-capacity failures, or recover the exact signed scope on a PAUSED Sequence. Recovery only restores local action/enrollment state; it never sends, calls a provider, spends credits, or resumes dispatch.")
+        .argument("<sequence>", "Sequence id or slug. Preview may run while active; apply requires paused.")
+        .option("--limit <n>", "Maximum capacity-failure rows to inspect (1-5000, default 500). A truncated preview cannot be approved.")
+        .option("--approval-token <token>", "Exact unexpired token returned by the preview.")
+        .option("--approved", "Apply the exact signed scope. Requires --approval-token; the Sequence remains paused.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (sequence, options) => {
+        await handleAsyncAction("sequences recover-capacity", options, () => {
+            const approvalToken = readOption(options.approvalToken);
+            if (options.approved === true && !approvalToken) {
+                throw new Error("--approval-token is required with --approved.");
+            }
+            if (options.approved !== true && approvalToken) {
+                throw new Error("--approval-token may only be used with --approved.");
+            }
+            const limit = readOption(options.limit)
+                ? readPositiveInt(options.limit)
+                : undefined;
+            if (limit !== undefined && limit > 5_000) {
+                throw new Error("--limit must be between 1 and 5000.");
+            }
+            return requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}/recover-capacity`, {
+                method: "POST",
+                body: {
+                    approved: options.approved === true,
+                    ...(approvalToken ? { approval_token: approvalToken } : {}),
+                    ...(limit === undefined ? {} : { limit }),
+                },
+            });
+        });
     }))
         .addCommand(new Command("stats")
         .description("Show the sequence funnel: enrolled, invites sent, connected, replied, with acceptance and reply rates.")

package/dist/skills.js

@@ -208,6 +208,13 @@ options, runtime = {}) {
     const env = runtime.env ?? process.env;
     const platform = runtime.platform ?? process.platform;
     const spawn = runtime.spawnSync ?? wrapExecFileSync(runtime.execFileSync) ?? spawnSync;
+    const installLocations = resolveSkillInstallLocations(agents, options.project === true, env);
+    // The vendored installer writes immediately once spawned. Tell humans and
+    // agents the exact destination first so a default global install is never a
+    // surprise, while keeping stdout as one stable JSON envelope under --json.
+    process.stderr.write(`note: installing Oxygen skills (${options.project ? "project" : "global"}) into ${installLocations
+        .map((location) => `${location.agent}=${location.path}`)
+        .join(", ")}\n`);
     // A specific shortcut skill can declare prerequisite skills that its SKILL.md
     // invokes (e.g. oxygen-clay-migration → oxygen-gtm, whose recipes it lives in).
     // Installing it alone would leave those missing, so pull them in too. Best-
@@ -304,6 +311,7 @@ options, runtime = {}) {
         skill,
         ...(dependencySkills.length > 0 ? { dependency_skills: dependencySkills } : {}),
         scope: options.project ? "project" : "global",
+        install_locations: installLocations,
         output: outputs.join(""),
         // Truthful counts a caller (human or scripting agent) can trust at a
         // glance: a not-detected agent is never folded into `failed`.
@@ -316,6 +324,23 @@ options, runtime = {}) {
         summary: summarizeInstallOutcome(agents.length, skippedAgents.length, 0),
     };
 }
+function resolveSkillInstallLocations(agents, project, env) {
+    const projectRoots = {
+        codex: resolve(".agents", "skills"),
+        "claude-code": resolve(".claude", "skills"),
+        cursor: resolve(".agents", "skills"),
+    };
+    const globalRoots = {
+        codex: join(env.CODEX_HOME?.trim() || join(homedir(), ".codex"), "skills"),
+        "claude-code": join(env.CLAUDE_CONFIG_DIR?.trim() || join(homedir(), ".claude"), "skills"),
+        cursor: join(homedir(), ".cursor", "skills"),
+    };
+    const roots = project ? projectRoots : globalRoots;
+    return agents.map((agent) => ({
+        agent,
+        path: roots[agent] ?? (project ? resolve(".agents", "skills") : join(homedir(), ".agents", "skills")),
+    }));
+}
 /**
  * Stages the requested skill(s) into `dir` so the installer receives a local
  * filesystem path instead of the org-bound tokenized access URL. Keeping the URL

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,4 +1,4 @@
-export declare const OXYGEN_VERSION = "1.886.3";
+export declare const OXYGEN_VERSION = "1.888.6";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";
 export declare const SUPPORT_AGENT_REPLY_MINIMUM_CLI_VERSION = "1.747.0";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.886.3";
+export const OXYGEN_VERSION = "1.888.6";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.886.3",
+  "version": "1.888.6",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",