oz0 plugin revoke
Takes functions and agents of other plugins out of a plugin's grant, or the whole grant with --all.
For: Operators and developers looking up a command.
Takes functions and agents of other plugins out of a plugin's grant, or the whole grant with --all. The plugin stays installed; its agents and flows reach only what is left. The edges refuse what is gone within seconds, and the running jobs that held what was revoked, and no other path to it, are cancelled; the command prints the receipt that lists them (oz0 receipt show).
A function a granted <tool>.* covers narrows the wildcard to the tool's other functions, as the nodes listed them. A later install of a version that still declares what was revoked asks for it again (--accept-uses). Tenant admins may; it is audited (uses.revoke).
Usage
oz0 plugin revoke <plugin> [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--agent | stringArray | an agent of another plugin to revoke; repeatable | |
--all | bool | revoke the whole grant | |
--json | bool | print JSON instead of a table | |
--skill | stringArray | a skill of another plugin to revoke, <plugin>/<skill> (or <plugin>/* as granted); repeatable | |
--tenant | string | default | tenant |
--tool | stringArray | a function to revoke, <tool>.<function>, or <tool>.* for all of a tool's; repeatable |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.