@oxygen-agent/cli 1.936.1 → 1.948.1

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.936.1
+Version: 1.948.1

package/dist/command-manifest.js

@@ -84,9 +84,17 @@ const MUTATING_COMMANDS = new Set([
     "mailboxes warmup reconnect",
 ]);
 // `--approved` usually identifies a paid or externally mutating execution
-// mode, but a small number of destructive local operations are explicitly
+// mode, but a small number of approved operations are explicitly
 // zero-credit. Keep those exceptions exact so discovery never invents spend.
 const ZERO_CREDIT_APPROVAL_COMMANDS = new Set([
+    "tables watcher preview",
+    // Creator invitation emails need exact send authorization but cost 0 credits.
+    "ugc creators invite",
+    "ugc creators send-invite",
+    // These approvals record an observed outcome or stop future renewal;
+    // neither operation buys a service or consumes Oxygen credits.
+    "ugc amplification reconcile",
+    "ugc sponsorship cancel",
     // A Function binding stores a cap for future runs; creating it executes nothing.
     "functions bind",
     // Starting an attended session itself is free. This legacy compatibility
@@ -94,6 +102,9 @@ const ZERO_CREDIT_APPROVAL_COMMANDS = new Set([
     // trigger the billed model loop.
     "copilot start",
     "mailboxes delete",
+    // Previews without --approved; with it, removes a program no creator ever
+    // joined. No provider call, no credits.
+    "ugc programs delete",
     // This approval only reopens exact fingerprint-bound tenant rows. It never
     // calls the provider, dispatches an action, or touches the credit ledger.
     "sequences recover-capacity",
@@ -108,14 +119,25 @@ const ZERO_CREDIT_APPROVAL_COMMANDS = new Set([
 // Exact noun-style reads whose leaf happens to look like a mutating verb.
 // `workflows run <id>` gets an existing Workflow run; `workflows call` creates
 // one. Keep the exception exact so genuine `run` actions remain mutations.
-const READ_ONLY_COMMANDS = new Set(["workflows run"]);
+const READ_ONLY_COMMANDS = new Set([
+    "workflows run",
+    // Inspect existing creator receipts; never generate or import again.
+    "ugc posts draft-status",
+    "ugc posts history",
+]);
 // Exact commands whose execution fence is not named `--live`. A bare
 // invocation still previews, so machine-readable discovery must not imply that
 // calling the command without its confirmation flag writes anything.
 const PREVIEW_BY_DEFAULT_COMMANDS = new Set([
+    "tables watcher preview",
+    "ugc creators invite",
+    "ugc creators send-invite",
     "ugc posts draft",
+    "ugc programs delete",
     "ugc voice import",
     "ugc sponsorship preview",
+    "ugc sponsorship cancel",
+    "ugc amplification reconcile",
     // Fenced by --approved, not --live: a bare call resolves the sender, sequence,
     // audience and caps and writes nothing. Without this entry discovery would tell
     // an agent that previewing the play arms it, and the preview would go unrun.

package/dist/help.js

@@ -137,6 +137,7 @@ export function applyOxygenHelp(program, binaryName) {
         // OXYGEN_API_KEY never runs it — without this step nothing on any
         // first-touch surface names the skill that teaches the GTM loops.
         `  2. ${binaryName} skills install --json      load the skills that teach the GTM loops (automatic after login)`,
+        "     Add --project to keep the skills inside the current project, including confined agent sessions.",
         `  3. ${binaryName} context resolve --json     load workspace context before operating primitives`,
         `  4. ${binaryName} capabilities search "<goal>" --json   route the goal, then hydrate one exact command`,
         `  5. ${binaryName} recipes list --json       choose a play from the Recipe catalog for your goal`,