oxl new | create a package |
oxl build | compile a package or a single .oxl file; --static links a fully static executable (glibc, libstdc++ and the runtime's libraries inside; implementation extension, D-7703); --image oci:<dir>[:tag] write |
oxl run | build and run one node; runtime flags (III.6): --set K=V --role r1,r2 --data-dir d --listen a --debug-listen a --inspect-ui[=a] --log-level l --insecure-dev |
oxl dev | local cluster of N nodes (127.0.0.1:7000+i), restarted when the code changes |
oxl test | run tests (III.9) |
oxl check | type-check and analyse without generating code; compare the schema with a lock file |
oxl fmt | canonical formatting |
oxl fix | apply the quick fixes of the analyzer and compiler (the fix-its the language server offers) to a package in one batch; --dry-run prints a unified diff and exits 1 when there is something to fix |
oxl doc | HTML documentation of the pub items from `///` comments (build/doc) |
oxl add | add a dependency to oxl.toml and update oxl.lock |
oxl remove | remove a dependency |
oxl update | raise ^/~ requirements to the newest allowed release, refetch vcs branches, re-resolve |
oxl publish | publish to the registry with SemVer and schema checks |
oxl yank | mark a published version as yanked (the resolver no longer chooses it; locks that name it keep working); --undo reverses it |
oxl export | schemas for other languages; role -> method call graph |
oxl gen | typed clients of the pub(api) services |
oxl db | ORM migrations (§12.8): oxl.db.lock + migrations/NNNN_name.up.sql/.down.sql, applied ones recorded in _oxl_migrations |
oxl access | access rights analysis (§13.4): who may call an rpc and through which rules / roles; permissions added or removed since a revision (default HEAD) or a saved model (exit 1 when access widened unless -- |
oxl config | dynamic config of a running cluster |
oxl ab | A/B experiments (§18.5): start creates the dynamic Flag oxl.ab.<name> from the package's `test ab`, status shows the metrics per variant with significance, a violated guard rolls the flag back |
oxl debug | remote debugger (III.7): a DAP adapter on stdin/stdout to a node, directly or through the cluster |
oxl inspect | web interface to a running cluster (III.8): serves the inspector locally against a node's oxl.Inspect |
oxl trace | the call graph of a request across the nodes; --record journals the incoming rpcs of the cluster (docs/oxlrec.md) |
oxl replay | replay recorded requests against a node and compare the responses |
oxl prof | profiler of a running node through the cluster (III.1): cpu sampling, heap allocations, tasks |
oxl keys | new KMS master key (data keys re-wrapped); principal certificates of the cluster CA (D-6653, D-7200) |
oxl storage | snapshots of the built-in storage (§12.8): every Raft group of a node (policy Admin, audited); restore into a stopped node |
oxl lsp | language server (LSP over stdin/stdout) |
oxl dap | debug adapter (DAP over stdin/stdout, proxy over lldb-dap) |
oxl cluster | built-in CA: cluster id, CA, master key file, join tokens, deny-list |
oxl audit | the local sink of @audit decisions |
oxl registry | serve a package registry directory over HTTP (static index + authenticated publish) |