oz0 tenant spend

Every agent's jobs in the tenant run with these unless the agent's definition says otherwise.

For: Operators and developers looking up a command.

Every agent's jobs in the tenant run with these unless the agent's definition says otherwise. --on-loop is what a loop does: report (a finding only), wait (the default: the job waits for a person as an approval of kind loop) or stop (the job ends with LoopDetected).

--on-budget is what a job tree's spent budget does: fail, or wait for a person to raise it; unset means wait for a tree a person started and fail for one a routine, a webhook, an event, an API key or a channel started.

--on-unknown is what a write whose outcome is unknown does (its call ran out of time, its node was lost): wait for a person, who says it happened, runs it again under the same idempotency key or stops the job, or fail.

It is the tenant's default: an agent's own on_unknown (its definition, or its plugin's configuration, which wins over the definition) wins over it, and when neither says and it is unset, who started the tree decides, as for --on-budget.

--repeats, --cycles and --no-progress are the loop detectors' thresholds; --warn-share is when the agent is told to wrap up (people are alerted at the shares of oz0 tenant spend-alerts), --soft-wall when the agent may only finish; --forecast-chance and --forecast-min-runs say when the gateway asks a person before the wall.

--reserve is what a model call that does not fit its budget's worst case does: last_call (the default) lets it start when no other call of the budget runs and the budget is not spent, so a tree passes its budget by at most one call's reservation; strict refuses it. --tree-* are the limits of a whole job tree: -1 (or none for --tree-wait) is no limit, and 0 (or empty) takes the platform's default again.

Without flags it shows the defaults in effect. The settings are part of the tenant's tool policy, so oz0 tenant tool-policy keeps them, and a change takes --reason (or $OZ0_REASON) as any tool-policy change does; one that loosens waits for another admin where the tenant turned four eyes on.

Usage

oz0 tenant spend <tenant> [flags]

Flags

FlagTypeDefaultDescription
--cyclesinttimes in a row a sequence of two to four calls repeats before it is a loop
--decision-refstringthe decision or case the change follows, such as a case number (at most 200 characters)
--defaultsboolstart from the platform's defaults instead of the tenant's settings
--forecast-chancefloatshare of the agent's past trees passing the budget at which the gateway asks early, 0.5 to 0.99
--forecast-min-runsintfinished trees of an agent the forecast needs
--forecast-offboolnever ask early from a forecast
--forecast-onboolask early from a forecast again
--jsonboolprint JSON instead of a table
--no-progressinttool results in a row that add nothing before only the answer is left
--on-budgetstringwhat a job tree's spent budget does: fail or wait (empty: by who started it)
--on-loopstringwhat a loop does: report, wait or stop
--on-unknownstringwhat a write whose outcome is unknown does: wait (a person decides) or fail (empty: by who started it)
--reasonstringwhy, required for every governance change (at most 500 characters; default $OZ0_REASON); the audit log keeps it
--repeatsintcalls of one function with the same arguments that are a loop
--reservestringa call whose worst case does not fit: last_call (the default: the last call may start) or strict
--soft-wallfloatshare of a job tree's budget at which the agent may only finish, such as 0.85
--tree-childrenintchild jobs of a whole job tree (-1: no limit, 0: the default)
--tree-depthinthow deep a job tree may go (-1: no limit, 0: the default)
--tree-fan-outintchild jobs of a tree running at once (-1: no limit, 0: the default)
--tree-model-callsintmodel calls of a whole job tree (-1: no limit, 0: the default)
--tree-tokensinttokens of a whole job tree (-1: no limit, 0: the default)
--tree-waitstringthe most a job tree may wait for people in total, such as 8h (none: no limit, empty: the default)
--warn-sharefloatshare of a budget at which the agent is told to wrap up and people are notified, such as 0.8

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026