wxcli 1.4.1__tar.gz → 1.4.2__tar.gz

{wxcli-1.4.1 → wxcli-1.4.2}/.claude/agents/wxc-calling-builder.md

@@ -692,12 +692,6 @@ These are non-negotiable. Violating any of these causes failures, data loss, or
 ### Verify Auth Before Executing
 ALWAYS validate the access token before running any commands. A stale token causes cryptic 401 errors mid-execution. Run `wxcli whoami` as a smoke test before starting.
 
-### Present Plan Before Executing
-ALWAYS show the complete deployment plan and get explicit user approval before making any API calls. Never execute without sign-off. The user must see every API call that will be made, with actual parameter values.
-
-### Never Execute Without Approval
-If the user says "just do it" without seeing the plan, show the plan first anyway. This is not optional. The one exception is single read-only operations (GET requests) used for discovery during the interview phase.
-
 ### Handle Rate Limiting
 Webex APIs enforce rate limits. wxcli does NOT auto-retry 429s in normal CLI mode — it raises an error. For shell loops, add `sleep 1` between commands to avoid hitting limits. For bulk async operations, use the semaphore + 429 retry pattern (see Bulk Operations section).
 

{wxcli-1.4.1 → wxcli-1.4.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: wxcli
-Version: 1.4.1
+Version: 1.4.2
 Summary: Webex Calling CLI — terminal-based provisioning for Webex APIs
 Author: Adam Hobgood
 License: Apache-2.0

{wxcli-1.4.1/src/wxcli/_playbook → wxcli-1.4.2}/docs/reference/contact-center-routing.md

@@ -375,8 +375,11 @@ channel. Useful for IVR flows that announce hold times to callers. 1 command.
 
 - `--queue-id` -- Queue ID to check (required)
 - `--lookback-minutes` -- Sampling window, 5-240 (required)
-- `--max-cv` -- Maximum coefficient of variation before EWT is withheld
-- `--min-valid-samples` -- Minimum samples required for a valid EWT
+- `--max-cv` -- Maximum coefficient of variance within a subset of samples (wait times for tasks
+  connected to an agent in a one-minute interval), used to determine whether the average of those
+  values is treated as a valid sample for EWT computation. 1-100, defaults to 40%
+- `--min-valid-samples` -- Minimum percentage of valid samples, with respect to the total number of
+  samples, within the specified lookback window. 1-100, defaults to 40%
 
 ### CLI Examples
 

{wxcli-1.4.1/src/wxcli/_playbook → wxcli-1.4.2}/docs/reference/meetings-core.md

@@ -459,6 +459,7 @@ Registration forms and registrant management for webinar-type meetings. These en
 | `--require-company-name` | Require company name |
 | `--require-job-title` | Require job title |
 | `--require-work-phone` | Require work phone number |
+| `--require-fax` | Require fax number |
 | `--require-address1` | Require address line 1 |
 | `--require-address2` | Require address line 2 |
 | `--require-city` | Require city |

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/_playbook/.claude/agents/wxc-calling-builder.md

@@ -692,12 +692,6 @@ These are non-negotiable. Violating any of these causes failures, data loss, or
 ### Verify Auth Before Executing
 ALWAYS validate the access token before running any commands. A stale token causes cryptic 401 errors mid-execution. Run `wxcli whoami` as a smoke test before starting.
 
-### Present Plan Before Executing
-ALWAYS show the complete deployment plan and get explicit user approval before making any API calls. Never execute without sign-off. The user must see every API call that will be made, with actual parameter values.
-
-### Never Execute Without Approval
-If the user says "just do it" without seeing the plan, show the plan first anyway. This is not optional. The one exception is single read-only operations (GET requests) used for discovery during the interview phase.
-
 ### Handle Rate Limiting
 Webex APIs enforce rate limits. wxcli does NOT auto-retry 429s in normal CLI mode — it raises an error. For shell loops, add `sleep 1` between commands to avoid hitting limits. For bulk async operations, use the semaphore + 429 retry pattern (see Bulk Operations section).
 

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/_playbook/.codex/agents/wxc-calling-builder.toml

@@ -687,12 +687,6 @@ These are non-negotiable. Violating any of these causes failures, data loss, or
 ### Verify Auth Before Executing
 ALWAYS validate the access token before running any commands. A stale token causes cryptic 401 errors mid-execution. Run `wxcli whoami` as a smoke test before starting.
 
-### Present Plan Before Executing
-ALWAYS show the complete deployment plan and get explicit user approval before making any API calls. Never execute without sign-off. The user must see every API call that will be made, with actual parameter values.
-
-### Never Execute Without Approval
-If the user says "just do it" without seeing the plan, show the plan first anyway. This is not optional. The one exception is single read-only operations (GET requests) used for discovery during the interview phase.
-
 ### Handle Rate Limiting
 Webex APIs enforce rate limits. wxcli does NOT auto-retry 429s in normal CLI mode — it raises an error. For shell loops, add `sleep 1` between commands to avoid hitting limits. For bulk async operations, use the semaphore + 429 retry pattern (see Bulk Operations section).
 

{wxcli-1.4.1 → wxcli-1.4.2/src/wxcli/_playbook}/docs/reference/contact-center-routing.md

@@ -375,8 +375,11 @@ channel. Useful for IVR flows that announce hold times to callers. 1 command.
 
 - `--queue-id` -- Queue ID to check (required)
 - `--lookback-minutes` -- Sampling window, 5-240 (required)
-- `--max-cv` -- Maximum coefficient of variation before EWT is withheld
-- `--min-valid-samples` -- Minimum samples required for a valid EWT
+- `--max-cv` -- Maximum coefficient of variance within a subset of samples (wait times for tasks
+  connected to an agent in a one-minute interval), used to determine whether the average of those
+  values is treated as a valid sample for EWT computation. 1-100, defaults to 40%
+- `--min-valid-samples` -- Minimum percentage of valid samples, with respect to the total number of
+  samples, within the specified lookback window. 1-100, defaults to 40%
 
 ### CLI Examples
 

{wxcli-1.4.1 → wxcli-1.4.2/src/wxcli/_playbook}/docs/reference/meetings-core.md

@@ -459,6 +459,7 @@ Registration forms and registrant management for webinar-type meetings. These en
 | `--require-company-name` | Require company name |
 | `--require-job-title` | Require job title |
 | `--require-work-phone` | Require work phone number |
+| `--require-fax` | Require fax number |
 | `--require-address1` | Require address line 1 |
 | `--require-address2` | Require address line 2 |
 | `--require-city` | Require city |

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '1.4.1'
-__version_tuple__ = version_tuple = (1, 4, 1)
+__version__ = version = '1.4.2'
+__version_tuple__ = version_tuple = (1, 4, 2)
 
-__commit_id__ = commit_id = 'g4f3bfa7f3'
+__commit_id__ = commit_id = 'g9318ddb89'

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/auth.py

@@ -79,8 +79,14 @@ class WebexSession:
         return self._json_or_raise(self._request("PATCH", url, json=json, params=params,
                                                  content_type=content_type))
 
-    def rest_delete(self, url: str, params=None) -> dict:
-        return self._json_or_raise(self._request("DELETE", url, params=params))
+    def rest_delete(self, url: str, json=None, params=None) -> dict:
+        # DELETE carries a body on 10 Webex operations: the body is what SCOPES
+        # the delete (`supervisorIds`, `phoneNumbers`, `backgroundImages`...).
+        # Without it the API rejects the call outright — verified live against
+        # /telephony/config/supervisors: 400, errorCode 25024, "Required request
+        # body is missing". It does NOT delete everything; those endpoints gate
+        # delete-all behind an explicit `deleteAll: true`.
+        return self._json_or_raise(self._request("DELETE", url, json=json, params=params))
 
     def follow_pagination(self, url: str, params=None, item_key: str = "items"):
         while url:

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/commands/admin_recordings.py

@@ -301,6 +301,9 @@ def show(
 def delete_recordings(
     recording_id: str = typer.Argument(help="recordingId"),
     host_email: str = typer.Option(None, "--host-email", help="Email address for the meeting host. Only used if the user or"),
+    reason: str = typer.Option(None, "--reason", help="Reason for deleting a recording. Only required when a Compli"),
+    comment: str = typer.Option(None, "--comment", help="Compliance Officer's explanation for deleting a recording. T"),
+    json_body: str = typer.Option(None, "--json-body", help="Full JSON body (overrides other options)"),
     force: bool = typer.Option(False, "--force", help="Skip confirmation"),
     debug: bool = typer.Option(False, "--debug"),
 ):
@@ -312,8 +315,16 @@ def delete_recordings(
     params = {}
     if host_email is not None:
         params["hostEmail"] = host_email
+    if json_body:
+        body = json.loads(json_body)
+    else:
+        body = {}
+        if reason is not None:
+            body["reason"] = reason
+        if comment is not None:
+            body["comment"] = comment
     try:
-        api.session.rest_delete(url, params=params)
+        api.session.rest_delete(url, json=body or None, params=params)
     except WebexError as e:
         handle_rest_error(e)
     typer.echo(f"Deleted: {recording_id}")

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/commands/call_queue.py

@@ -1159,6 +1159,9 @@ def create_supervisors(
 
 @app.command("delete-supervisors-config")
 def delete_supervisors_config(
+    has_cx_essentials: bool = typer.Option(None, "--has-cx-essentials/--no-has-cx-essentials", help="Delete the Customer Assist supervisors, when `true`. Otherwi"),
+    delete_all: bool = typer.Option(None, "--delete-all/--no-delete-all", help="If present the `supervisorIds` array is ignored, and all sup"),
+    json_body: str = typer.Option(None, "--json-body", help="Full JSON body (overrides other options)"),
     force: bool = typer.Option(False, "--force", help="Skip confirmation"),
     debug: bool = typer.Option(False, "--debug"),
 ):
@@ -1171,8 +1174,20 @@ def delete_supervisors_config(
     org_id = get_org_id()
     if org_id is not None:
         params["orgId"] = org_id
+    if json_body:
+        body = json.loads(json_body)
+    else:
+        body = {}
+        if has_cx_essentials is not None:
+            body["hasCxEssentials"] = has_cx_essentials
+        if delete_all is not None:
+            body["deleteAll"] = delete_all
+    missing = [f for f in ['supervisorIds'] if f not in body]
+    if missing:
+        typer.echo(f"Error: required body field(s) missing: {', '.join(missing)}. Pass them via --json-body — this delete needs to know what to delete.", err=True)
+        raise typer.Exit(1)
     try:
-        api.session.rest_delete(url, params=params)
+        api.session.rest_delete(url, json=body or None, params=params)
     except WebexError as e:
         handle_rest_error(e)
     typer.echo("Deleted.")
@@ -1600,6 +1615,7 @@ def create_dnis(
 def delete_dnis_queues(
     location_id: str = typer.Argument(help="locationId"),
     queue_id: str = typer.Argument(help="queueId"),
+    json_body: str = typer.Option(None, "--json-body", help="Full JSON body (overrides other options)"),
     force: bool = typer.Option(False, "--force", help="Skip confirmation"),
     debug: bool = typer.Option(False, "--debug"),
 ):
@@ -1612,8 +1628,16 @@ def delete_dnis_queues(
     org_id = get_org_id()
     if org_id is not None:
         params["orgId"] = org_id
+    if json_body:
+        body = json.loads(json_body)
+    else:
+        body = {}
+    missing = [f for f in ['items'] if f not in body]
+    if missing:
+        typer.echo(f"Error: required body field(s) missing: {', '.join(missing)}. Pass them via --json-body — this delete needs to know what to delete.", err=True)
+        raise typer.Exit(1)
     try:
-        api.session.rest_delete(url, params=params)
+        api.session.rest_delete(url, json=body or None, params=params)
     except WebexError as e:
         handle_rest_error(e)
     typer.echo(f"Deleted: {queue_id}")

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/commands/cc_flow.py

@@ -18,7 +18,7 @@ def cmd_list(
     partial_name_search: str = typer.Option(None, "--partial-name-search", help="Performs a partial string match on the name of the flow. If"),
     search_by: str = typer.Option(None, "--search-by", help="Filter expression in the format `<field>|<value>`. Supports"),
     size: str = typer.Option(None, "--size", help="Defines the number of items to be displayed on a page. If th"),
-    include_pagination: str = typer.Option(None, "--include-pagination", help="If set to to true then a different paginated response object"),
+    include_pagination: str = typer.Option(None, "--include-pagination", help="If set to true then a different paginated response object co"),
     is_validation: str = typer.Option(None, "--is-validation", help="If true, validates the existence of flows by ID regardless o"),
     output: str = typer.Option("table", "--output", "-o", help="Output format: table|json"),
     limit: int = typer.Option(0, "--limit", help="Max results (0=all for paginated endpoints, API default for non-paginated)"),
@@ -429,7 +429,7 @@ def list_validate(
     except WebexError as e:
         handle_rest_error(e)
     result = result or []
-    items = result.get("errors", result.get("data", result if isinstance(result, list) else [])) if isinstance(result, dict) else (result if isinstance(result, list) else [])
+    items = result.get("results", result.get("data", result if isinstance(result, list) else [])) if isinstance(result, dict) else (result if isinstance(result, list) else [])
     if output == "json":
         print_json(items)
     else:

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/commands/converged_recordings.py

@@ -158,6 +158,9 @@ def show(
 @app.command("delete")
 def delete(
     recording_id: str = typer.Argument(help="recordingId"),
+    reason: str = typer.Option(None, "--reason", help="Reason for deleting a recording. Only required when a Compli"),
+    comment: str = typer.Option(None, "--comment", help="Compliance Officer's explanation for deleting a recording. T"),
+    json_body: str = typer.Option(None, "--json-body", help="Full JSON body (overrides other options)"),
     force: bool = typer.Option(False, "--force", help="Skip confirmation"),
     debug: bool = typer.Option(False, "--debug"),
 ):
@@ -166,8 +169,16 @@ def delete(
         typer.confirm(f"Delete {recording_id}?", abort=True)
     api = get_api(debug=debug)
     url = f"https://webexapis.com/v1/convergedRecordings/{recording_id}"
+    if json_body:
+        body = json.loads(json_body)
+    else:
+        body = {}
+        if reason is not None:
+            body["reason"] = reason
+        if comment is not None:
+            body["comment"] = comment
     try:
-        api.session.rest_delete(url)
+        api.session.rest_delete(url, json=body or None)
     except WebexError as e:
         handle_rest_error(e)
     typer.echo(f"Deleted: {recording_id}")

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/commands/dect_devices.py

@@ -526,6 +526,8 @@ def delete_handsets_dect_networks(
 def delete_handsets_dect_networks_1(
     location_id: str = typer.Argument(help="locationId"),
     dect_network_id: str = typer.Argument(help="dectNetworkId"),
+    delete_all: bool = typer.Option(None, "--delete-all/--no-delete-all", help="If present the items array is ignored and all items in the c"),
+    json_body: str = typer.Option(None, "--json-body", help="Full JSON body (overrides other options)"),
     force: bool = typer.Option(False, "--force", help="Skip confirmation"),
     debug: bool = typer.Option(False, "--debug"),
 ):
@@ -538,8 +540,18 @@ def delete_handsets_dect_networks_1(
     org_id = get_org_id()
     if org_id is not None:
         params["orgId"] = org_id
+    if json_body:
+        body = json.loads(json_body)
+    else:
+        body = {}
+        if delete_all is not None:
+            body["deleteAll"] = delete_all
+    missing = [f for f in ['handsetIds'] if f not in body]
+    if missing:
+        typer.echo(f"Error: required body field(s) missing: {', '.join(missing)}. Pass them via --json-body — this delete needs to know what to delete.", err=True)
+        raise typer.Exit(1)
     try:
-        api.session.rest_delete(url, params=params)
+        api.session.rest_delete(url, json=body or None, params=params)
     except WebexError as e:
         handle_rest_error(e)
     typer.echo(f"Deleted: {dect_network_id}")

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/commands/device_settings.py

@@ -1439,6 +1439,7 @@ def list_background_images(
 
 @app.command("delete-background-images")
 def delete_background_images(
+    json_body: str = typer.Option(None, "--json-body", help="Full JSON body (overrides other options)"),
     force: bool = typer.Option(False, "--force", help="Skip confirmation"),
     debug: bool = typer.Option(False, "--debug"),
 ):
@@ -1451,8 +1452,16 @@ def delete_background_images(
     org_id = get_org_id()
     if org_id is not None:
         params["orgId"] = org_id
+    if json_body:
+        body = json.loads(json_body)
+    else:
+        body = {}
+    missing = [f for f in ['backgroundImages'] if f not in body]
+    if missing:
+        typer.echo(f"Error: required body field(s) missing: {', '.join(missing)}. Pass them via --json-body — this delete needs to know what to delete.", err=True)
+        raise typer.Exit(1)
     try:
-        api.session.rest_delete(url, params=params)
+        api.session.rest_delete(url, json=body or None, params=params)
     except WebexError as e:
         handle_rest_error(e)
     typer.echo("Deleted.")

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/commands/meeting_transcripts.py

@@ -213,6 +213,9 @@ def update(
 @app.command("delete")
 def delete(
     transcript_id: str = typer.Argument(help="transcriptId"),
+    reason: str = typer.Option(None, "--reason", help="Reason for deleting a transcript. Only required when a Compl"),
+    comment: str = typer.Option(None, "--comment", help="Explanation for deleting a transcript. The comment can be a"),
+    json_body: str = typer.Option(None, "--json-body", help="Full JSON body (overrides other options)"),
     force: bool = typer.Option(False, "--force", help="Skip confirmation"),
     debug: bool = typer.Option(False, "--debug"),
 ):
@@ -221,8 +224,16 @@ def delete(
         typer.confirm(f"Delete {transcript_id}?", abort=True)
     api = get_api(debug=debug)
     url = f"https://webexapis.com/v1/meetingTranscripts/{transcript_id}"
+    if json_body:
+        body = json.loads(json_body)
+    else:
+        body = {}
+        if reason is not None:
+            body["reason"] = reason
+        if comment is not None:
+            body["comment"] = comment
     try:
-        api.session.rest_delete(url)
+        api.session.rest_delete(url, json=body or None)
     except WebexError as e:
         handle_rest_error(e)
     typer.echo(f"Deleted: {transcript_id}")

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/commands/numbers.py

@@ -88,6 +88,7 @@ def update(
 @app.command("delete")
 def delete(
     location_id: str = typer.Argument(help="locationId"),
+    json_body: str = typer.Option(None, "--json-body", help="Full JSON body (overrides other options)"),
     force: bool = typer.Option(False, "--force", help="Skip confirmation"),
     debug: bool = typer.Option(False, "--debug"),
 ):
@@ -100,8 +101,16 @@ def delete(
     org_id = get_org_id()
     if org_id is not None:
         params["orgId"] = org_id
+    if json_body:
+        body = json.loads(json_body)
+    else:
+        body = {}
+    missing = [f for f in ['phoneNumbers'] if f not in body]
+    if missing:
+        typer.echo(f"Error: required body field(s) missing: {', '.join(missing)}. Pass them via --json-body — this delete needs to know what to delete.", err=True)
+        raise typer.Exit(1)
     try:
-        api.session.rest_delete(url, params=params)
+        api.session.rest_delete(url, json=body or None, params=params)
     except WebexError as e:
         handle_rest_error(e)
     typer.echo(f"Deleted: {location_id}")

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli/migration/preflight/runner.py

@@ -84,7 +84,7 @@ class PreflightRunner:
         def _needs(*checks: str) -> bool:
             return check_filter is None or check_filter in checks
 
-        licenses = self._fetch("licenses", ["licenses-api", "list", "--output", "json"]) if _needs("licenses", "workspace-licenses") else []
+        licenses = self._fetch("licenses", ["licenses", "list", "--output", "json"]) if _needs("licenses", "workspace-licenses") else []
         locations = self._fetch("locations", ["locations", "list"]) if _needs("locations") else []
         numbers = self._fetch("numbers", ["numbers", "list", "--limit", "0"]) if _needs("numbers") else []
         people = self._fetch("people", ["users", "list", "--calling-data", "true", "--limit", "0"]) if _needs("users") else []

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: wxcli
-Version: 1.4.1
+Version: 1.4.2
 Summary: Webex Calling CLI — terminal-based provisioning for Webex APIs
 Author: Adam Hobgood
 License: Apache-2.0

{wxcli-1.4.1 → wxcli-1.4.2}/src/wxcli.egg-info/scm_version.json

@@ -1,7 +1,7 @@
 {
-  "tag": "1.4.1",
+  "tag": "1.4.2",
   "distance": 0,
-  "node": "g4f3bfa7f3b3ade161957468885f47d563509b8e0",
+  "node": "g9318ddb895bd9aa5d50d4ec9d694adcadfe5789e",
   "dirty": false,
   "branch": "HEAD",
   "node_date": "2026-07-14"

{wxcli-1.4.1 → wxcli-1.4.2}/tools/CLAUDE.md

@@ -52,6 +52,10 @@ Mock server URLs (public, no auth required — return saved response examples):
 - **Spec files:** 9 tracked OpenAPI 3.0 specs in `specs/` — all regenerated by `spec_sync.py`: `webex-cloud-calling.json`, `webex-admin.json`, `webex-device.json`, `webex-messaging.json`, `webex-meetings.json`, `webex-contact-center.json`, `webex-ucm.json`, `webex-broadworks.json`, `webex-wholesale.json` (+ untracked dev-only `webex-flow-store.json`). `update-specs.py` pulls upstream refreshes for the first 7 only.
 - **Pull updated specs:** `python3.14 tools/update-specs.py` — downloads latest from GitHub, reports diffs. BroadWorks and Wholesale are excluded.
 - **Tag collision (retired 2026-07-01):** CC Site/Data Sources collisions are resolved by per-spec `cli_name_overrides`; regen order no longer matters for them (see known issue #17).
+- **Multi-tagged ops render into every tag they carry.** Dedup is per-tag, so an op legitimately tagged twice (the 3 `hotDesking/members` ops are both `Features: Hot Desking Members` and `User Call Settings`) appears in both groups. Two guards make that safe — do not remove either without reading known issue #22:
+  - **`tag_op_excludes`** (per-spec, `tag -> [path globs]`) drops spurious tag/operation pairings the upstream spec invents. Reach for it when a group fills with operations that plainly belong elsewhere; it is the right fix for a mis-tagged spec, not a dedup change.
+  - **Secondary-tag ops cannot claim a bare command name.** `parse_tag` derives names primary-tag-first (`tags[0]`), so an op for which the tag is secondary can never take `create`/`show`/`update` from an op the tag actually owns. This protects the multi-tag case only — two ops in the *same* tag racing for a name still needs pinning per issue #18.
+  - Only 27 ops across all 9 specs are multi-tagged. Any regen that moves a command-name count beyond those is a red flag; diff names, not just counts.
 - Regenerate one tag: `PYTHONPATH=. python3.14 tools/generate_commands.py --spec specs/webex-cloud-calling.json --tag "Tag Name"` (the `_registry.py` manifest upserts automatically)
 - Regenerate one spec (all tags): `PYTHONPATH=. python3.14 tools/generate_commands.py --spec specs/webex-cloud-calling.json --all`
 - Regenerate everything (all tracked specs, atomic — pulls specs, regens, updates the manifest, runs the drift gate): `python3.14 tools/spec_sync.py` (`--skip-update` to regen from specs on disk). Land the result as ONE commit. Historical tag-collision order sensitivity is gone (per-spec `cli_name_overrides` for CC Site/Data Sources), but `spec_sync.py` keeps CC-before-admin/meetings order anyway.
@@ -75,20 +79,42 @@ These were removed from root CLAUDE.md (not needed by the builder agent at runti
 
     Fix when triaged: pin a truthful name via `tag_overrides` -> `command_name_overrides` (per issue #18) and make the success message follow the operation's real semantics rather than the verb. Interim protection is documentation only — `configure-features/SKILL.md` Critical Rules #21-22 carry a trap table. That protects an agent that read the skill first; it does not protect anyone reading `--help` alone, and the "Updated." message actively misleads.
 
-21. **The renderer drops `requestBody` on DELETE, so scoped deletes silently become delete-everything.** UNFIXED — logged 2026-07-14, found while fixing doc flag drift. 10 tracked spec operations declare a DELETE request body; **none** of the generated commands can send one (no `--json-body`, no fields). The body is what *narrows* these deletes, so losing it does not fail — it widens the blast radius:
+21. **The renderer dropped `requestBody` on DELETE, so the 5 scoped deletes were inert.** **FIXED 2026-07-14** (renderer + `rest_delete`), and the original severity claim here was **WRONG** — corrected below so nobody re-inherits it.
 
-    | Command | Body the spec defines | Effect without it |
-    |---------|----------------------|-------------------|
-    | `call-queue delete-supervisors-config` | `supervisors[]` | deletes **all supervisors in the org** |
-    | `device-settings delete-background-images` | `backgroundImages[]` | deletes **all background images** |
-    | `numbers delete` | phone numbers to remove | cannot name which numbers |
-    | `call-queue delete-dnis-queues` | `dnis[]` (**required**) | request is unsatisfiable |
+    **What this issue used to say:** that a body-less DELETE "silently becomes delete-everything", e.g. `call-queue delete-supervisors-config` "deletes all supervisors in the org". **That was never tested. It is false.** Live-tested against `/telephony/config/supervisors` with two real supervisors present:
 
-    This is the same family as #20 (a name/behaviour mismatch the generator can see but does not act on) and compounds it: the widened delete is reached through a command whose `--help` gives no hint the scoping input exists.
+    ```
+    DELETE /v1/telephony/config/supervisors   (no body)
+    -> HTTP 400, Cisco-Spark-Error-Codes: 25024
+       {"errorCode":25024,"message":"Invalid JSON format in request body:
+        Required request body is missing: ..."}
+    -> supervisors after: 2 of 2 SURVIVED
+    ```
 
-    Detection: `op.get("requestBody")` on a `delete` operation, cross-referenced against the rendered command's flags — the check that surfaced this is ~10 lines.
+    The API **rejects** a body-less scoped delete. It was **inert, not dangerous** — it could never have worked, and could never have deleted anything. Delete-everything is gated behind an explicit `deleteAll: true` (also live-confirmed: with `deleteAll` passed, all supervisors were removed; without it, only the named `supervisorIds` were). An endpoint that wiped everything on an empty body would not need a `deleteAll` flag — that was the tell, and reading the spec's own field description would have settled it without a live call.
 
-    Fix when triaged: render `--json-body` for DELETE bodies exactly as for PUT/POST (the renderer already knows how; the DELETE branch just never asks). Until then the CLI cannot scope these deletes at all, and the docs say so explicitly rather than showing a `--json-body` that does not exist — `manage-devices/SKILL.md` and `customer-assist/SKILL.md` carry the warning and the raw-HTTP fallback.
+    **The real bug** (verified, now fixed): `_render_delete_command` never rendered body fields, and `rest_delete()` had no `json` parameter. 10 tracked spec ops declare a DELETE body; on 5 the body is what *scopes* the delete, so those 5 commands 400'd on every invocation:
+    `call-queue delete-supervisors-config` (`supervisorIds`), `call-queue delete-dnis-queues` (`items`), `numbers delete` (`phoneNumbers`), `device-settings delete-background-images` (`backgroundImages`), `dect-devices delete-handsets-dect-networks-1` (`handsetIds`). The other 5 take optional metadata only (`reason`/`comment` on recordings/transcripts) and were unaffected.
+
+    **The fix:** the DELETE branch now renders body fields + `--json-body` exactly as PUT/POST do, and required body fields are enforced **client-side** — a delete with no targets exits 1 locally and never reaches the wire, so the API's behaviour on an empty body stops mattering. `body or None` preserves the no-body wire format when nothing is supplied, so the 5 metadata-body deletes are unchanged.
+
+    Live-proven end-to-end on supervisors: scoped delete removed exactly the named target and left the other in place. **Still unproven: the other 4 scoping deletes were fixed by the same code path but not live-tested** — `numbers delete` most deserves it.
+
+    Lesson (this one cost a session): the claim above was inference stated as fact, in a file whose entire purpose is to be trusted. #20 is still UNFIXED and its claim is *observed* (its own `--help` says "Delete", it prints "Updated.") — do not let this correction cast doubt on that one.
+
+22. **A spurious upstream tag can flood a group and steal its bare command name.** **FIXED 2026-07-14** (`tag_op_excludes` + primary-tag-first name derivation). Read this before touching dedup in `generate_commands.py`.
+
+    **The spec artifact:** upstream tags all 24 `/telephony/calls/*` call-control ops with a second `External Voicemail` tag. They are call control (`dial`, `answer`, `hangup`) and already render into `call-controls`. The only real External Voicemail endpoint is `/telephony/externalVoicemail/mwi`. `dial` is not voicemail — the tag is wrong on those 24 ops.
+
+    **Why it stayed hidden:** dedup was global, so the first tag to claim an op won it. `Call Controls` sorts before `External Voicemail`, so the artifact was masked by iteration order — not by any rule. That accident was the only thing keeping `external-voicemail` at 1 command.
+
+    **What broke, once, in a shipped commit:** dedup was made per-tag to fix a real bug — 3 legitimately dual-tagged `hotDesking/members` ops were being dropped from `user-settings`, which is the name six skills document. Correct intent; the artifact then stopped being masked. All 24 call-control ops rendered into `external-voicemail` (1 -> 25) and `dial` won the bare `create` name.
+
+    **Name the damage precisely — it was a rename, not a deletion.** `_dedup_command_names` disambiguates, so the MWI op survived under an auto-suffixed name (`create-mwi`) rather than disappearing. That is *worse* than deletion and the reason this issue exists: a deleted command errors loudly, whereas `external-voicemail create` silently changed from "set the message-waiting indicator" to "dial a call" while every doc kept citing `create`. When triaging this class, check what a bare name now *points at* — do not stop at "the command still exists".
+
+    **The fix:** `tag_op_excludes` drops the bogus pairing at its source, so `external-voicemail` cannot be flooded regardless of dedup; per-tag dedup then restores the 3 hot-desking commands; and `parse_tag` derives names primary-tag-first so a secondary-tag op can never take a bare name from an op the tag owns. Verified by a name-level per-group diff (all 184 groups, committed vs regenerated): zero groups changed, so the generator now reproduces the tree exactly instead of dropping 3 commands.
+
+    Lesson: the fix for a mis-tagged spec is to fix the tagging, not to loosen dedup. The break shipped because its commit message claimed "drift_check.py runs with no new issues" while the gate was in fact failing — that single unverified claim is the whole reason a command got repurposed. Run the gate, paste the output, and diff command *names* (issue #18), not just counts. Note the trap in how it surfaces: the gate reports "docs cite flags that don't exist", which reads like a docs bug. The docs were right and the CLI was wrong; "fixing" the docs to match would have cemented the break.
 
 ## Templates, Examples & Plans
 

{wxcli-1.4.1 → wxcli-1.4.2}/tools/command_renderer.py

@@ -661,6 +661,27 @@ def _render_delete_command(ep: Endpoint, folder_overrides: dict | None = None) -
         params.append(f'    {param}: str = typer.Argument(help="{var}"),')
     qp_defs, qp_build = _render_query_params(ep)
     params.extend(qp_defs)
+
+    # 10 Webex DELETE operations carry a request body, and on 5 of them the body
+    # is what SCOPES the delete (`supervisorIds`, `phoneNumbers`, `items`,
+    # `backgroundImages`, `handsetIds`). This branch used to skip bodies
+    # entirely, which made those 5 commands inert: verified live against
+    # /telephony/config/supervisors — 400, errorCode 25024, "Required request
+    # body is missing". They could never have worked.
+    used_names = _used_param_names(ep)
+    has_body = bool(ep.body_fields)
+    if has_body:
+        for bf in ep.body_fields:
+            param = _safe_param_name(bf.python_name)
+            if bf.field_type in ("object", "array") or param in used_names:
+                continue  # arrays/objects can only be expressed via --json-body
+            help_text = _enum_help(bf)
+            if bf.field_type == "bool":
+                params.append(f'    {param}: bool = typer.Option(None, "--{bf.python_name}/--no-{bf.python_name}", help="{help_text}"),')
+            else:
+                params.append(f'    {param}: str = typer.Option(None, "--{bf.python_name}", help="{help_text}"),')
+        params.append('    json_body: str = typer.Option(None, "--json-body", help="Full JSON body (overrides other options)"),')
+
     has_spec_force = any(qp.name == "force" for qp in ep.query_params)
     if not has_spec_force:
         params.append('    force: bool = typer.Option(False, "--force", help="Skip confirmation"),')
@@ -680,7 +701,38 @@ def _render_delete_command(ep: Endpoint, folder_overrides: dict | None = None) -
     auto_inject = _render_auto_inject_params(ep)
     if not qp_build and has_params:
         qp_build = ["    params = {}"]
-    delete_call = "api.session.rest_delete(url)" if not has_params else "api.session.rest_delete(url, params=params)"
+
+    body_build: list[str] = []
+    if has_body:
+        body_build = ["    if json_body:", "        body = json.loads(json_body)",
+                      "    else:", "        body = {}"]
+        for bf in ep.body_fields:
+            param = _safe_param_name(bf.python_name)
+            if bf.field_type in ("object", "array") or param in used_names:
+                continue
+            body_build.append(f'        if {param} is not None:\n            body["{bf.name}"] = {param}')
+        required = [bf.name for bf in ep.body_fields if bf.required]
+        if required:
+            # Fail HERE, not at the API. A scoped delete whose scope is missing
+            # is the one shape that must never reach the wire: these endpoints
+            # gate delete-everything behind an explicit `deleteAll`, so a body
+            # that merely omits the targets is a mistake, not a request.
+            body_build.extend([
+                f"    missing = [f for f in {required!r} if f not in body]",
+                "    if missing:",
+                '        typer.echo(f"Error: required body field(s) missing: {\', \'.join(missing)}. '
+                'Pass them via --json-body — this delete needs to know what to delete.", err=True)',
+                "        raise typer.Exit(1)",
+            ])
+
+    # `body or None` preserves the no-body wire format when nothing was supplied,
+    # so the 5 metadata-body deletes (reason/comment on recordings) behave exactly
+    # as they do today rather than newly sending `{}`.
+    if has_body:
+        delete_call = ("api.session.rest_delete(url, json=body or None)" if not has_params
+                       else "api.session.rest_delete(url, json=body or None, params=params)")
+    else:
+        delete_call = "api.session.rest_delete(url)" if not has_params else "api.session.rest_delete(url, params=params)"
 
     lines = [
         f'@app.command("{ep.command_name}")',
@@ -695,6 +747,7 @@ def _render_delete_command(ep: Endpoint, folder_overrides: dict | None = None) -
         f'    url = f"{url_expr}"',
         *qp_build,
         *auto_inject,
+        *body_build,
         "    try:",
         f"        {delete_call}",
         _render_error_handler("    "),

{wxcli-1.4.1 → wxcli-1.4.2}/tools/field_overrides.yaml

@@ -7,6 +7,7 @@
 #   table_columns       — display columns for CLI table output (per-group or per-command)
 #   skip_tags           — glob patterns for OpenAPI tags to skip entirely
 #   tag_merge           — merge split tags into one CLI group
+#   tag_op_excludes     — drop spurious tag/operation pairings (tag → path globs)
 #   cli_name_overrides  — human-friendly CLI group names (tag → CLI name)
 #   omit_query_params   — query params stripped from all commands
 #
@@ -596,6 +597,22 @@ skip_tags:
     - health-controller        # health check
     - prometheus-controller    # metrics endpoint
 
+# Drop spurious tag/operation pairings present in the upstream spec.
+# tag -> list of path globs that carry the tag but do not belong to it.
+tag_op_excludes:
+  webex-cloud-calling.json:
+    # Upstream tags all 24 /telephony/calls/* call-control ops with a second
+    # "External Voicemail" tag. They are call control (dial, answer, hangup)
+    # and already render into the call-controls group; the only real External
+    # Voicemail endpoint is /telephony/externalVoicemail/mwi. Without this
+    # filter, per-tag dedup renders all 24 into external-voicemail and the
+    # "dial" op wins the bare `create` name, so `external-voicemail create`
+    # silently dials a call instead of setting the message-waiting indicator.
+    # That exact break shipped once — see known issue #22 in tools/CLAUDE.md.
+    "External Voicemail":
+      - "/telephony/calls"
+      - "/telephony/calls/*"
+
 # Merge split tags into a single CLI group
 tag_merge:
   _global: