Skip to content

CLI Reference

.md

The dewee binary is the canonical control-plane client for managing local and remote Dewee gateways.

| Flag | Type | Description | Default | |---|---|---|---| | --config | string | config file (default: config.json or $GOCLAW_CONFIG) | - | | --server | string | gateway server URL override | - | | --tenant | string | gateway tenant ID or slug to scope operator commands to (default: master tenant) | - | | --token | string | gateway bearer token override | - | | --verbose | bool | enable debug logging | false |



Manage agents (add, list, get, status, update, delete)

Terminal window
dewee agent

Add a new agent (interactive, requires running gateway)

Terminal window
dewee agent add

Chat with an agent interactively or send a one-shot message

Chat with an agent via the running gateway (WebSocket client mode).

Examples: dewee agent chat # Interactive REPL dewee agent chat —name coder # Chat with “coder” agent dewee agent chat -m “What time is it?” # One-shot message dewee agent chat -s my-session # Continue a session

Terminal window
dewee agent chat [flags]

| Flag | Type | Description | Default | |---|---|---|---| | -m, --message | string | one-shot message (omit for interactive mode) | - | | -n, --name | string | agent name | default | | -s, --session | string | session key (default: auto-generated) | - |

Delete an agent (requires running gateway)

Terminal window
dewee agent delete <agent-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --force | bool | skip confirmation | false |

Get agent details

Terminal window
dewee agent get <agent-id-or-key> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

List all agents (requires running gateway)

Terminal window
dewee agent list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false | | --type | string | filter by agent type (open|predefined) | - |

Show agent configuration and live router status

Terminal window
dewee agent status <agent-id-or-key> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Update agent fields

Terminal window
dewee agent update <agent-id-or-key> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --enabled | bool | set status active/inactive | true | | --json | bool | output as JSON | false | | --model | string | model name | - | | --name | string | display name | - | | --provider | string | provider type/name | - | | --status | string | agent status | - |

Manage gateway API keys

Manage gateway-issued API keys: list, create, and revoke scoped credentials for tenant, workspace, and user callers.

Authentication uses —token or these environment variables: GOCLAW_GATEWAY_TOKEN bearer token for operator API calls GOCLAW_GATEWAY_URL gateway base URL GOCLAW_SERVER gateway base URL alias

Attribution limitation: the CLI authenticates to the gateway as the fixed identity “system”, so every key created through this command is recorded with created_by=“system” rather than an individual operator identity.

Terminal window
dewee api-keys

Create an API key

Create a new API key. The raw secret is returned only once in the create response and cannot be retrieved again afterward — store it securely.

—tenant-id is only honored for callers with owner-scope credentials; the gateway silently falls back to the caller’s own tenant otherwise. This command warns on stderr if the created key does not carry the tenant/owner you requested.

Terminal window
dewee api-keys create [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --expires-in | int | TTL in seconds (omit for a key that never expires) | 0 | | --json | bool | output as JSON | false | | --name | string | human-readable label (required) | - | | --owner-id | string | user ID to bind the key to | - | | --scopes | stringSlice | comma-separated permission scopes (required) | [] | | --tenant-id | string | tenant UUID to bind the key to (owner-scope callers only; ignored otherwise) | - |

List API keys

Terminal window
dewee api-keys list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false | | --kind | string | filter by key kind: “api_key” (default, hides session tokens), “session”, or “all” | - | | --revoked | bool | filter to revoked (—revoked) or active (—revoked=false) keys; omit to show both | false | | --tenant-id | string | filter to keys bound to this tenant ID | - |

Revoke an API key

Terminal window
dewee api-keys revoke <id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --force | bool | skip confirmation prompt | false | | --json | bool | output as JSON | false |

Authenticate named ChatGPT OAuth accounts

Manage ChatGPT OAuth authentication via the running gateway. Requires the gateway to be running.

Terminal window
dewee auth

Disconnect stored ChatGPT OAuth tokens

Terminal window
dewee auth logout [provider]

Show OAuth authentication status

Check if a named ChatGPT OAuth account is authenticated on the running gateway.

Terminal window
dewee auth status [provider]

Create a full system backup (database + filesystem)

Produces a .tar.gz archive containing a pg_dump of the database and all workspace/data files.

Terminal window
dewee backup [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --exclude-db | bool | skip database dump (filesystem only) | false | | --exclude-files | bool | skip filesystem archive (database only) | false | | -o, --output | string | output path for .tar.gz (default: ./backup-<timestamp>.tar.gz) | - | | --upload-s3 | bool | upload backup to S3 after creation (requires s3 config in config_secrets) | false |

Manage Bitrix24 portals (direct DB access; postgres only)

Manage Bitrix24 portal rows in the database.

dewee expects a bitrix_portals row to exist before an operator runs the OAuth install flow at /bitrix24/install. This command seeds that row without requiring SQL access to the database.

Terminal window
dewee bitrix-portal

Create a bitrix_portals row with client_id/client_secret

Create a new Bitrix24 portal registration.

After the row exists, direct the portal admin to https://&lt;public_url&gt;/bitrix24/install?state=&lt;tenant_id&gt;:&lt;name&gt; to authorize the app — the install handler writes the OAuth token into the state column of this same row.

Terminal window
dewee bitrix-portal create [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --client-id | string | Bitrix24 application client_id / application_id (required) | - | | --client-secret | string | Bitrix24 application client_secret / application key (required) | - | | --domain | string | Bitrix24 portal host, e.g. mycompany.bitrix24.com (required) | - | | --name | string | Short portal name, referenced by channel_instance.config.portal (required) | - | | --tenant-id | string | Tenant UUID this portal belongs to (required) | - |

List bitrix_portals rows (optionally scoped to one tenant)

Terminal window
dewee bitrix-portal list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --tenant-id | string | Filter to one tenant UUID (optional) | - |

Backfill state.public_url for a portal installed pre Phase-01

Set the gateway-public URL used to register Bitrix24 imbot event handlers.

Required for portals that were installed before the dewee release that auto-captures the URL from the /bitrix24/install callback. Without it, the factory cannot build a valid EVENT_MESSAGE_ADD URL for new channels.

After running once, the value is persisted in bitrix_portals.state.public_url and reused on every restart. Subsequent reinstalls (when the public URL rotates) overwrite the value automatically — this command is only for the initial backfill.

Terminal window
dewee bitrix-portal set-public-url [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --name | string | Portal name (required) | - | | --tenant-id | string | Tenant UUID this portal belongs to (required) | - | | --url | string | Gateway public URL, e.g. https://dewee.mycompany.com (required) | - |

Replace client_id/client_secret on an existing portal row

Update OAuth credentials on an existing bitrix_portals row.

Use this when rotating client_secret or migrating from local app to marketplace app. The OAuth state token is cleared by default (state from old credentials cannot refresh under new client_id/secret); pass —keep-state only if rotating the secret of the SAME application.

Terminal window
dewee bitrix-portal update-credentials [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --client-id | string | New Bitrix24 application client_id (required) | - | | --client-secret | string | New Bitrix24 application client_secret (required) | - | | --keep-state | bool | Keep existing OAuth state token (only safe when rotating secret of SAME application) | false | | --name | string | Portal name to update (required) | - | | --tenant-id | string | Tenant UUID this portal belongs to (required) | - |

Manage messaging channels (requires running gateway)

Terminal window
dewee channels

Add a new channel instance (interactive)

Terminal window
dewee channels add

Delete a channel instance

Terminal window
dewee channels delete <id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --force | bool | skip confirmation | false |

List channel instances

Terminal window
dewee channels list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

View and manage configuration

Terminal window
dewee config

Print the config file path

Terminal window
dewee config path

Display current configuration (secrets redacted)

Terminal window
dewee config show

Validate configuration file

Terminal window
dewee config validate

View the channel-collected contact directory

Terminal window
dewee contacts

Get a single contact by ID

Terminal window
dewee contacts get <contact-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

List contacts with pagination and filters

Terminal window
dewee contacts list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --channel-instance | string | filter by channel instance name | - | | --channel-type | string | filter by platform (telegram, discord, slack, …) | - | | --contact-type | string | filter by contact type (user, group) | - | | --json | bool | output as JSON | false | | --limit | int | max results (1-200) | 50 | | --offset | int | pagination offset | 0 | | --peer-kind | string | filter by peer kind (direct, group) | - | | --search | string | filter by display name, username, or sender ID | - |

Manage scheduled cron jobs

Terminal window
dewee cron

Create a cron job

Terminal window
dewee cron create [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent id/key | - | | --channel | string | delivery channel | - | | --deliver | bool | deliver result to a channel | false | | --json | bool | output as JSON | false | | --message | string | message to send when the job runs | - | | --name | string | job name | - | | --schedule | string | schedule JSON, @every/duration, at:RFC3339, or cron expression | - | | --stateless | bool | run without retaining session state | false | | --to | string | delivery target | - | | --wake-heartbeat | bool | wake heartbeat before run | false |

Delete a cron job

Terminal window
dewee cron delete [jobId] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Get a cron job

Terminal window
dewee cron get <job-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

List all cron jobs

Terminal window
dewee cron list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --all | bool | include disabled jobs | false | | --json | bool | output as JSON | false |

Run a cron job now

Terminal window
dewee cron run <job-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --force | bool | force run even if not due | false | | --json | bool | output as JSON | false |

List cron run history

Terminal window
dewee cron runs <job-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false | | --limit | int | max run records | 20 | | --offset | int | run record offset | 0 |

Show cron scheduler status

Terminal window
dewee cron status [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Enable or disable a cron job

Terminal window
dewee cron toggle [jobId] [true|false] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Update a cron job

Terminal window
dewee cron update <job-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent id/key | - | | --channel | string | delivery channel | - | | --delete-after-run | bool | delete after a successful run | false | | --deliver | bool | deliver result to a channel | false | | --enabled | bool | enable or disable | true | | --json | bool | output as JSON | false | | --message | string | message | - | | --name | string | job name | - | | --schedule | string | schedule JSON, @every/duration, at:RFC3339, or cron expression | - | | --stateless | bool | run without retaining session state | false | | --to | string | delivery target | - | | --wake-heartbeat | bool | wake heartbeat before run | false |

Check system environment and configuration health

Terminal window
dewee doctor

Browse and manage workspace file storage

Browse and manage files under the tenant-scoped workspace storage directory (the same tree served by the Runtime Gateway Dashboard and Customer Control Plane Storage pages).

Upload, delete, and move require an admin-scoped gateway token.

Terminal window
dewee files

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false | | -o, --output | string | output format (table|json) | table |

Delete a file or directory from storage

Terminal window
dewee files delete <path> --yes [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --yes | bool | confirm deletion | false |

Get (read or download) a file from storage

Terminal window
dewee files get <path> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --out | string | save file content to this local path instead of printing it | - |

List files and directories in storage

Terminal window
dewee files list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --depth | int | maximum depth to walk (1-20) | 3 | | --path | string | sub path to scope the listing | - |

Move or rename a file within storage

Terminal window
dewee files move --from <path> --to <path> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --from | string | source path | - | | --to | string | destination path | - |

Show total storage size for the tenant workspace

Terminal window
dewee files size

Upload a local file into storage

Terminal window
dewee files upload --file <local-file> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --file | string | local file to upload | - | | --path | string | destination sub path (directory) in storage | - |

Run the standalone fleet package worker

Terminal window
dewee fleet-worker

Pull and reconcile exact fleet package jobs

Terminal window
dewee fleet-worker run

Inspect and manage agent knowledge graph data

Aliases: knowledge-graph

Terminal window
dewee kg

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false | | -o, --output | string | output format (table|json) | table |

Manage KG dedup candidates

Terminal window
dewee kg dedup

Dismiss a KG dedup candidate

Terminal window
dewee kg dedup dismiss --agent <agent> <candidate-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --user | string | user ID for scoped KG | - |

List KG dedup candidates

Terminal window
dewee kg dedup list --agent <agent> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --limit | int | maximum candidates | 50 | | --user | string | user ID for scoped KG | - |

Scan KG entities for duplicates

Terminal window
dewee kg dedup scan --agent <agent> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --limit | int | maximum scan pairs | 100 | | --threshold | float64 | similarity threshold | 0.9 | | --user | string | user ID for scoped KG | - |

List or search KG entities

Terminal window
dewee kg entities --agent <agent> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --limit | int | page size | 50 | | --offset | int | pagination offset | 0 | | -q, --query | string | search query | - | | --type | string | entity type filter | - | | --user | string | user ID for scoped KG | - |

Get one KG entity with relations

Terminal window
dewee kg entity --agent <agent> <entity-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --user | string | user ID for scoped KG | - |

Extract KG entities from text

Terminal window
dewee kg extract --agent <agent> (--file <file>|--text <text>) --provider <provider> --model <model> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --file | string | text file to extract | - | | --min-confidence | float64 | minimum extraction confidence | 0.75 | | --model | string | model name | - | | --provider | string | provider name | - | | --text | string | inline text to extract | - | | --user | string | user ID for scoped KG | - |

Show KG graph

Terminal window
dewee kg graph --agent <agent> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --limit | int | maximum entities | 200 | | --user | string | user ID for scoped KG | - |

Show compact KG graph

Terminal window
dewee kg graph compact --agent <agent> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --limit | int | maximum nodes | 2000 | | --user | string | user ID for scoped KG | - |

Merge duplicate KG entities

Terminal window
dewee kg merge --agent <agent> --target <entity-id> --source <entity-id> --yes [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --source | string | source entity ID | - | | --target | string | target entity ID | - | | --user | string | user ID for scoped KG | - | | --yes | bool | confirm merge | false |

Show KG statistics

Terminal window
dewee kg stats --agent <agent> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --user | string | user ID for scoped KG | - |

Traverse KG relationships

Terminal window
dewee kg traverse --agent <agent> --entity <entity-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --depth | int | maximum traversal depth | 2 | | --entity | string | start entity ID | - | | --user | string | user ID for scoped KG | - |

Manage MCP servers and access grants

Manage MCP servers, tools, connection tests, reloads, and access grants.

Authentication uses —token or these environment variables: GOCLAW_GATEWAY_TOKEN bearer token for operator API calls GOCLAW_GATEWAY_URL gateway base URL GOCLAW_SERVER gateway base URL alias

Terminal window
dewee mcp

Inspect MCP access grants

Terminal window
dewee mcp access

List MCP grants visible to an agent

Terminal window
dewee mcp access agent <agent-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

List access grants for an MCP server

Terminal window
dewee mcp access get <server-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Get an MCP server

Terminal window
dewee mcp get <server-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Grant MCP access

Terminal window
dewee mcp grant

Grant an agent access to an MCP server

Terminal window
dewee mcp grant agent <server-id-or-name> <agent-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

List MCP servers

Terminal window
dewee mcp list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Manage MCP server OAuth configuration and lifecycle

Terminal window
dewee mcp oauth

Get or update redacted MCP OAuth config

Terminal window
dewee mcp oauth config <server-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --clear-client-secret | bool | clear stored client secret | false | | --client-id | string | OAuth client ID | - | | --client-secret | string | write-only client secret (omit to preserve) | - | | --json | bool | output as JSON | false | | --registration-mode | string | pre_registered|client_id_metadata|dynamic | - | | --scope | stringSlice | requested OAuth scope (repeatable) | [] | | --write | bool | force a write even when only optional flags are empty | false |

Disconnect MCP OAuth credentials while preserving registration config

Terminal window
dewee mcp oauth disconnect <server-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Start MCP OAuth authorization for a server

Terminal window
dewee mcp oauth start <server-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Show MCP OAuth status for a server

Terminal window
dewee mcp oauth status <server-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Test saved MCP server connection using runtime OAuth credentials

Terminal window
dewee mcp oauth test <server-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Reload an MCP server connection

Terminal window
dewee mcp reload <server-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Revoke MCP access

Terminal window
dewee mcp revoke

Revoke an agent’s MCP server access

Terminal window
dewee mcp revoke agent <server-id-or-name> <agent-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Test an MCP server connection

Terminal window
dewee mcp test <server-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

List tools exposed by an MCP server

Terminal window
dewee mcp tools <server-id-or-name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Inspect and manage agent memory documents

Terminal window
dewee memory

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false | | -o, --output | string | output format (table|json) | table |

List memory chunks for a document

Terminal window
dewee memory chunks --agent <agent-id-or-key> --path <path> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --path | string | document path | - | | --user | string | user ID for scoped memory | - |

Delete a memory document

Terminal window
dewee memory delete --agent <agent-id-or-key> <path> --yes [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --user | string | user ID for scoped memory | - | | --yes | bool | confirm deletion | false |

Get one memory document

Terminal window
dewee memory get --agent <agent-id-or-key> <path> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --full | bool | print full content in table output | false | | --user | string | user ID for scoped memory | - |

Index one memory document

Terminal window
dewee memory index --agent <agent-id-or-key> <path> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --user | string | user ID for scoped memory | - |

Index all memory documents for an agent

Terminal window
dewee memory index-all --agent <agent-id-or-key> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --user | string | user ID for scoped memory | - |

List memory documents for an agent

Terminal window
dewee memory list --agent <agent-id-or-key> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --user | string | user ID for scoped memory | - |

Put or update a memory document

Terminal window
dewee memory put --agent <agent-id-or-key> <path> --file <file> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --file | string | file content to store | - | | --user | string | user ID for scoped memory | - |

Search agent memory

Terminal window
dewee memory search --agent <agent-id-or-key> --query <query> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID or key | - | | --limit | int | maximum results | 20 | | --min-score | float64 | minimum score | 0 | | -q, --query | string | search query | - | | --user | string | user ID for scoped memory | - |

Database migration management

Terminal window
dewee migrate

| Flag | Type | Description | Default | |---|---|---|---| | --migrations-dir | string | path to migrations directory (default: ./migrations) | - |

Roll back migrations (default: 1 step)

Terminal window
dewee migrate down [flags]

| Flag | Type | Description | Default | |---|---|---|---| | -n, --steps | int | number of steps to roll back | 1 |

Drop all tables (DANGEROUS)

Terminal window
dewee migrate drop

Force set migration version (no migration applied)

Terminal window
dewee migrate force <version>

Migrate to a specific version

Terminal window
dewee migrate goto <version>

Apply all pending migrations

Terminal window
dewee migrate up

Show current migration version

Terminal window
dewee migrate version

Quick setup — configure database, generate keys, run migrations

Terminal window
dewee onboard

Manage runtime packages

Manage runtime package inventory, installs, removals, verification, approvals, and logs.

Authentication uses —token or these environment variables: GOCLAW_GATEWAY_TOKEN bearer token for operator API calls GOCLAW_GATEWAY_URL gateway base URL GOCLAW_SERVER gateway base URL alias

Terminal window
dewee packages

Manage pending package install approvals

Terminal window
dewee packages approvals

Approve a pending package install request

Terminal window
dewee packages approvals approve <approval-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --always | bool | create a scoped, expiring package-install grant when enabled | false | | --json | bool | output as JSON | false |

Deny a pending package install request

Terminal window
dewee packages approvals deny <approval-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false | | --reason | string | reviewer reason recorded with the denial | - |

List pending package install approvals

Terminal window
dewee packages approvals list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --all | bool | include non-package exec approvals | false | | --json | bool | output as JSON | false |

Get an installed package from inventory

Terminal window
dewee packages get <package-or-source:name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Install a runtime package

Install a package. Examples: ripgrep, pip:pandas, npm:typescript, github:cli/cli.

Terminal window
dewee packages install <package> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

List installed runtime packages

Terminal window
dewee packages list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Show package install logs when gateway log persistence is available

Terminal window
dewee packages logs <install-run-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Remove a runtime package

Aliases: uninstall

Terminal window
dewee packages remove <package> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Show runtime availability

Terminal window
dewee packages runtimes [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Verify a package is present in runtime inventory

Terminal window
dewee packages verify <package-or-source:name> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Manage device pairing (approve, list, revoke)

Terminal window
dewee pairing

Approve a pairing code (interactive if no code given)

Terminal window
dewee pairing approve [code]

List pending and paired devices

Terminal window
dewee pairing list

Revoke a paired device

Terminal window
dewee pairing revoke <channel> <senderId>

Manage LLM providers (requires running gateway)

Terminal window
dewee providers

Add a new provider (interactive)

Terminal window
dewee providers add

Delete a provider

Terminal window
dewee providers delete <id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --force | bool | skip confirmation | false |

List configured providers

Terminal window
dewee providers list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false | | --models | bool | also show available models per provider | false |

Update a provider

Terminal window
dewee providers update <id>

Verify provider connectivity (ping) or a specific model

Without —model: pings the provider (registered + reachable check). With —model: sends a small chat request to validate the model alias.

Terminal window
dewee providers verify <id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --model | string | model alias to verify (omit for connectivity ping) | - |

Restore system from a backup archive (database + filesystem)

Restores dewee from a .tar.gz backup archive produced by ‘dewee backup’.

WARNING: This is a destructive operation. The database will be overwritten. Requires —force flag to proceed. Stop the gateway before restoring.

Use —list-s3 to list available S3 backups. Use —from-s3 <key> to download and restore from S3.

Terminal window
dewee restore [archive-path] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --dry-run | bool | inspect archive and show restore plan without executing | false | | --force | bool | required: confirm destructive restore operation | false | | --from-s3 | string | download and restore from this S3 key (e.g. backups/backup-20260409.tar.gz) | - | | --list-s3 | bool | list available backups in S3 and exit | false | | --skip-db | bool | skip database restore (filesystem only) | false | | --skip-files | bool | skip filesystem restore (database only) | false |

Restore an archive into disposable targets as a smoke test

Restores a backup archive into explicitly isolated targets.

The smoke command refuses the configured live database, data dir, and workspace path. It is intended for proving that a backup can be restored before promoting the archive or resuming replicas after a disaster-recovery drill.

Terminal window
dewee restore smoke <archive-path> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --keep-target | bool | preserve temporary filesystem smoke targets for inspection | false | | --skip-db | bool | skip database restore smoke | false | | --skip-files | bool | skip filesystem restore smoke | false | | --target-data-dir | string | disposable data dir for filesystem restore smoke (default: temp dir) | - | | --target-dsn | string | disposable database DSN for database restore smoke | - | | --target-workspace | string | disposable workspace dir for filesystem restore smoke (default: temp dir) | - | | --verify-secrets | bool | verify encrypted restored secrets with GOCLAW_ENCRYPTION_KEY | false |

View and manage chat sessions

Terminal window
dewee sessions

Delete a session

Terminal window
dewee sessions delete [key]

Get session summary and preview

Terminal window
dewee sessions get <session-key> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Show session message history

Terminal window
dewee sessions history <session-key> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --include-tools | bool | include tool messages | false | | --json | bool | output as JSON | false | | --limit | int | max messages | 50 |

List all sessions

Terminal window
dewee sessions list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | filter by agent ID | - | | --json | bool | output as JSON | false |

Clear session history (keep session)

Terminal window
dewee sessions reset [key]

Send a message into a session via chat.send

Terminal window
dewee sessions send <session-key> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent id/key override | - | | --json | bool | output as JSON | false | | -m, --message | string | message content | - |

Show live session run status

Terminal window
dewee sessions status <session-key> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Configuration wizard — providers, agents, channels

Interactive setup for providers, models, agents, and channels. Requires a running gateway.

Terminal window
dewee setup

List and manage skills

Terminal window
dewee skills

Manage skill access mode and effective access

Terminal window
dewee skills access

Inspect effective access for an agent and user

Terminal window
dewee skills access effective [skill-id] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent ID | - | | --json | bool | output as JSON | false | | --user | string | user ID | - |

Show skill access mode and grants

Terminal window
dewee skills access get [skill-id] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Set skill access mode

Terminal window
dewee skills access set [skill-id] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false | | --mode | string | access mode: private, internal, public | - |

Show recent self-evolution activity for a skill

Terminal window
dewee skills activity [skill]

Scan, check, and install skill dependencies

Terminal window
dewee skills deps

Check dependency availability

Terminal window
dewee skills deps check [skill-id-or-path] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Install missing dependencies for a managed skill

Terminal window
dewee skills deps install [skill-id] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Scan dependency declarations

Terminal window
dewee skills deps scan [skill-id-or-path] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Show dependency status

Terminal window
dewee skills deps status [skill-id-or-path] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Manage per-skill self-evolution settings

Terminal window
dewee skills evolve

disable self-evolution for a skill

Terminal window
dewee skills evolve disable [skill]

enable self-evolution for a skill

Terminal window
dewee skills evolve enable [skill]

Set self-evolution mode for a skill

Terminal window
dewee skills evolve mode [skill] [suggest_only|auto_analyze]

Show self-evolution settings for a skill

Terminal window
dewee skills evolve status [skill]

Export a skill archive (ZIP or tar.gz) from the gateway

Download and export a skill as an archive package (ZIP or tar.gz) from the gateway. If —output is not specified, saves to the filename specified in the response or <slug>.<format>.

Aliases: download

Terminal window
dewee skills export <id-or-slug> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | -f, --format | string | archive format: zip or tar.gz | zip | | --json | bool | emit JSON summary on success | false | | -o, --output | string | output file path | - |

Terminal window
dewee skills export my-skill
dewee skills export my-skill --format zip
dewee skills export 11111111-1111-1111-1111-111111111111 --output ./downloaded.zip
dewee skills download my-skill

Grant skill access

Terminal window
dewee skills grant

Grant a skill to an agent

Terminal window
dewee skills grant agent [skill-id] [agent-id] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --can-manage | bool | grant manage permission | false | | --json | bool | output as JSON | false | | --pinned-version | int | pin a specific skill version | 0 |

Grant a skill to a user

Terminal window
dewee skills grant user [skill-id] [user-id] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

List all available skills

Terminal window
dewee skills list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent ID to list skills for (uses gateway API) | - | | --json | bool | output as JSON | false |

Show recorded usage metrics for a skill

Terminal window
dewee skills metrics [skill] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Promote an installed external skill (agents-personal source) into Dashboard Custom Skills

Resolve <slug> against the local skill loader; if it comes from the agents-personal source (~/.agents/skills/<slug>/), package and upload it. Refuses to promote skills coming from other tiers (workspace, agents-project, managed, builtin) — for those, use “dewee skills upload <dir>” with the explicit path.

Terminal window
dewee skills promote <slug> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --dry-run | bool | inspect the package plan without contacting the gateway | false | | --json | bool | emit machine-readable JSON output | false |

Terminal window
dewee skills promote hyperframes
dewee skills promote hyperframes --dry-run

Revoke skill access

Terminal window
dewee skills revoke

Revoke a skill from an agent

Terminal window
dewee skills revoke agent [skill-id] [agent-id]

Revoke a skill from a user

Terminal window
dewee skills revoke user [skill-id] [user-id]

Show details and content of a skill

Terminal window
dewee skills show [name]

Manage skill improvement suggestions

Terminal window
dewee skills suggestions

Apply an approved skill improvement suggestion

Terminal window
dewee skills suggestions apply [skill] [suggestion-id] [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --approve | bool | approve pending suggestion before applying | false |

approve a skill improvement suggestion

Terminal window
dewee skills suggestions approve [skill] [suggestion-id]

List suggestions for a skill

Terminal window
dewee skills suggestions list [skill]

reject a skill improvement suggestion

Terminal window
dewee skills suggestions reject [skill] [suggestion-id]

Package a local skill directory or upload an existing skill ZIP into Dashboard Custom Skills

Package a single skill directory (root SKILL.md plus references/, scripts/, assets/, and any other regular files) or upload an existing skill ZIP archive directly to POST /v1/skills/upload so the skill appears under the Dashboard Skills → Custom tab. Uses the shared —server and bearer-token model; bearer tokens are redacted in all errors.

Terminal window
dewee skills upload <dir-or-zip> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --dry-run | bool | inspect the package plan without contacting the gateway | false | | --json | bool | emit machine-readable JSON output | false |

Terminal window
dewee skills upload ~/.agents/skills/hyperframes
dewee skills upload ./my-skill.zip
dewee skills upload ~/.agents/skills/hyperframes --dry-run
dewee skills upload ~/.agents/skills/hyperframes --server https://dewee.example.com

Create a tenant-scoped backup (database rows + filesystem)

Exports all DB rows belonging to a tenant + workspace/data dirs as a .tar.gz archive.

Terminal window
dewee tenant-backup [flags]

| Flag | Type | Description | Default | |---|---|---|---| | -o, --output | string | output path for .tar.gz | - | | --tenant | string | tenant slug to back up | - | | --tenant-id | string | tenant UUID (alternative to —tenant) | - | | --upload-s3 | bool | upload backup to S3 after creation | false |

Restore a tenant from a backup archive

Restores a tenant from a .tar.gz archive produced by ‘dewee tenant-backup’.

Modes: upsert (default) — INSERT … ON CONFLICT DO NOTHING. Non-destructive. Requires —tenant or —tenant-id. replace — Wipes tenant-scoped data (keeps tenant metadata), then INSERT. Requires —tenant or —tenant-id AND —force. new — Creates a new tenant from archive metadata. Requires —new-tenant-slug. Archive’s tenant_id is remapped to the new tenant. Users, API keys, LLM providers, and all other tenant-scoped data are cloned from the archive.

Terminal window
dewee tenant-restore <archive-path> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --dry-run | bool | inspect archive without making changes | false | | --force | bool | required for replace mode | false | | --mode | string | restore mode: upsert, replace, new | upsert | | --new-tenant-slug | string | slug for the new tenant (required for mode=new) | - | | --tenant | string | target tenant slug (for mode=upsert|replace) | - | | --tenant-id | string | target tenant UUID (for mode=upsert|replace, alternative to —tenant) | - |

Preview, copy, or move resources between tenants (Standard/PostgreSQL)

Remote HTTP client for tenant resource transfer.

Authentication uses —token / DEWEE_API_KEY / GOCLAW_GATEWAY_TOKEN and —server / DEWEE_SERVER / GOCLAW_GATEWAY_URL.

Subcommands: inventory List transferable source-tenant roots preview Create an exact durable preview copy Preview then execute a copy (SSE) move Preview then execute a move (SSE) status Fetch operation status/result

Terminal window
dewee tenant-transfer

Execute a tenant resource copy

Terminal window
dewee tenant-transfer copy [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --destination | string | destination tenant UUID (when creating preview) | - | | --id | stringSlice | resource UUID (repeatable) | [] | | --idempotency-key | string | actor-scoped idempotency key | - | | --include-knowledge | bool | include agent knowledge | false | | --include-memories | bool | include agent memories | false | | --json | bool | print JSON | false | | --kind | stringSlice | resource kind (repeatable) | [] | | --preview-id | string | existing preview ID (skip auto-preview) | - | | --source | string | source tenant UUID (when creating preview) | - |

List transferable resources in a source tenant

Terminal window
dewee tenant-transfer inventory [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | print raw JSON | false | | --source | string | source tenant UUID | - |

Execute a tenant resource move

Terminal window
dewee tenant-transfer move [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --destination | string | destination tenant UUID (when creating preview) | - | | --id | stringSlice | resource UUID (repeatable) | [] | | --idempotency-key | string | actor-scoped idempotency key | - | | --include-knowledge | bool | include agent knowledge | false | | --include-memories | bool | include agent memories | false | | --json | bool | print JSON | false | | --kind | stringSlice | resource kind (repeatable) | [] | | --preview-id | string | existing preview ID (skip auto-preview) | - | | --source | string | source tenant UUID (when creating preview) | - |

Create a durable transfer preview

Terminal window
dewee tenant-transfer preview [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --destination | string | destination tenant UUID | - | | --id | stringSlice | resource UUID (repeatable; pairs with —kind) | [] | | --include-knowledge | bool | include agent knowledge (agent selections) | false | | --include-memories | bool | include agent memories (agent selections) | false | | --json | bool | print raw JSON | false | | --kind | stringSlice | resource kind (repeatable; pairs with —id) | [] | | --mode | string | preview mode (copy|move) | copy | | --source | string | source tenant UUID | - |

Fetch transfer operation status

Terminal window
dewee tenant-transfer status <operation-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | print JSON | false |

Inspect gateway traces

Terminal window
dewee traces

| Flag | Type | Description | Default | |---|---|---|---| | -o, --output | string | output format (table|json) | table |

Export a gzipped trace tree

Terminal window
dewee traces export <trace-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --file | string | write gzip export to file (use - for stdout) | - |

Poll trace changes for a session or agent

Terminal window
dewee traces follow [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent-id | string | filter by agent UUID | - | | --channel | string | filter by raw channel | - | | --include-spans | bool | include spans grouped by trace ID | false | | --limit | int | page size, max 200 | 0 | | --parent-trace-id | string | filter by parent trace UUID | - | | --run-id | string | filter by run ID | - | | --session | string | filter by session key | - | | --since | string | RFC3339 lower bound for changed traces | - | | --status | string | filter by trace status | - | | --tag | string | filter by trace tag | - | | --task-id | string | filter by metadata task ID | - | | --task-type | string | filter by task category tag | - | | --team-id | string | filter by team UUID | - | | --user | string | filter by user ID for admin callers | - |

Get trace details with spans

Terminal window
dewee traces get <trace-id>

List traces

Terminal window
dewee traces list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | search agent display name or key | - | | --agent-id | string | filter by agent UUID | - | | --channel | string | filter by raw channel | - | | --channel-query | string | search channel instance labels | - | | --from | string | start time lower bound, RFC3339 | - | | --has-tool-calls | string | filter true or false | - | | --limit | int | page size, max 200 | 0 | | --max-input-tokens | int | maximum input tokens | 0 | | --max-output-tokens | int | maximum output tokens | 0 | | --max-tool-calls | int | maximum tool calls | 0 | | --min-input-tokens | int | minimum input tokens | 0 | | --min-output-tokens | int | minimum output tokens | 0 | | --min-tool-calls | int | minimum tool calls | 0 | | --offset | int | pagination offset | 0 | | --parent-trace-id | string | filter by parent trace UUID | - | | -q, --query | string | search trace text, IDs, labels, and span previews | - | | --run-id | string | filter by run ID | - | | --session | string | filter by session key | - | | --since | string | alias for —from | - | | --status | string | filter by trace status | - | | --tag | string | filter by trace tag | - | | --task-id | string | filter by metadata task ID | - | | --task-type | string | filter by task category tag | - | | --team-id | string | filter by team UUID | - | | --to | string | start time upper bound, RFC3339 | - | | --tool | string | search span tool names | - | | --until | string | alias for —to | - | | --user | string | filter by user ID for admin callers | - |

Show the run timeline linked to a trace

Terminal window
dewee traces timeline <trace-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --limit | int | page size, max 500 | 0 | | --offset | int | pagination offset | 0 |

Inspect TTS provider capabilities, list voices, and test connections

Inspect TTS provider capabilities, list voices, and test provider connections against the Gateway’s existing TTS endpoints.

Authentication uses —token or these environment variables: GOCLAW_GATEWAY_TOKEN bearer token for operator API calls GOCLAW_GATEWAY_URL gateway base URL GOCLAW_SERVER gateway base URL alias

Terminal window
dewee tts

List TTS providers and their capabilities

Terminal window
dewee tts list-providers [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false |

Test a TTS provider connection

Test a TTS provider connection via POST /v1/tts/test-connection.

Omit —api-key to test the tenant’s previously saved provider configuration via the server’s fallback. The API key value is never echoed back or logged by the CLI.

Terminal window
dewee tts test [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --api-base | string | override API base URL | - | | --api-key | string | API key to test with (omit to reuse the saved provider config; never echoed) | - | | --group-id | string | group ID (MiniMax) | - | | --json | bool | output as JSON | false | | --model-id | string | model ID to test with | - | | --provider | string | TTS provider to test (required) | - | | --timeout-ms | int | request timeout in milliseconds | 0 | | --voice-id | string | voice ID to test with | - |

List TTS voices

List available TTS voices via GET /v1/voices.

Use —refresh to force a live upstream refresh via POST /v1/voices/refresh (requires an admin-scoped token) before listing. This is required, not just faster, when switching —provider: GET /v1/voices serves a tenant-wide voice cache that is not keyed by provider, so a plain listing right after switching providers can silently return stale voices from the previous provider.

—provider is passed through unvalidated: the server currently supports “elevenlabs” (default) and “minimax” for live voice listing, which can differ from the broader set of providers in “dewee tts list-providers”.

Terminal window
dewee tts voices [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false | | --provider | string | TTS provider (optional; server defaults to elevenlabs) | - | | --refresh | bool | force a live refresh (POST /v1/voices/refresh) instead of GET /v1/voices; use when switching providers | false |

Upgrade database schema and run data migrations

Applies pending SQL migrations and Go-based data hooks. Safe to run multiple times (idempotent).

Terminal window
dewee upgrade [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --dry-run | bool | show what would be done without applying changes | false | | --status | bool | show current upgrade status | false |

Inspect token usage and cost metrics

Terminal window
dewee usage

| Flag | Type | Description | Default | |---|---|---|---| | -o, --output | string | output format (table|json) | table |

Inspect raw usage-event analytics (tool calls, skill activations, MCP tool calls)

Terminal window
dewee usage events

List cost/token usage events broken down by resource, event type, or another dimension

Terminal window
dewee usage events list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent-id | string | filter by agent UUID | - | | --channel | string | filter by channel | - | | --event-type | string | filter by event type (tool_call, skill_activation, mcp_tool_call, runtime_tool_call) | - | | --from | string | start time, RFC3339 (default: 24h ago) | - | | --group-by | string | grouping dimension: resource_name (default), event_type, resource_type, source, status, agent, channel, provider, or model | - | | --limit | int | max rows to return (1-100, default 25) | 0 | | --model | string | filter by LLM model | - | | --provider | string | filter by LLM provider | - | | --resource-name | string | filter by resource name | - | | --resource-type | string | filter by resource type (tool, skill, mcp_tool, runtime_tool) | - | | --since | string | alias for —from | - | | --source | string | filter by source (tool_call, use_skill, slash-command) | - | | --status | string | filter by status | - | | --to | string | end time, RFC3339 (default: now) | - | | --until | string | alias for —to | - |

Show aggregated cost/token totals from raw usage events

Terminal window
dewee usage events summary [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent-id | string | filter by agent UUID | - | | --channel | string | filter by channel | - | | --event-type | string | filter by event type (tool_call, skill_activation, mcp_tool_call, runtime_tool_call) | - | | --from | string | start time, RFC3339 (default: 24h ago) | - | | --model | string | filter by LLM model | - | | --provider | string | filter by LLM provider | - | | --resource-name | string | filter by resource name | - | | --resource-type | string | filter by resource type (tool, skill, mcp_tool, runtime_tool) | - | | --since | string | alias for —from | - | | --source | string | filter by source (tool_call, use_skill, slash-command) | - | | --status | string | filter by status | - | | --to | string | end time, RFC3339 (default: now) | - | | --until | string | alias for —to | - |

Show cost/token usage events as time-series points

Terminal window
dewee usage events timeseries [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent-id | string | filter by agent UUID | - | | --channel | string | filter by channel | - | | --event-type | string | filter by event type (tool_call, skill_activation, mcp_tool_call, runtime_tool_call) | - | | --from | string | start time, RFC3339 (default: 24h ago) | - | | --group-by | string | bucket size: hour (default) or day | - | | --model | string | filter by LLM model | - | | --provider | string | filter by LLM provider | - | | --resource-name | string | filter by resource name | - | | --resource-type | string | filter by resource type (tool, skill, mcp_tool, runtime_tool) | - | | --since | string | alias for —from | - | | --source | string | filter by source (tool_call, use_skill, slash-command) | - | | --status | string | filter by status | - | | --to | string | end time, RFC3339 (default: now) | - | | --until | string | alias for —to | - |

List token usage and cost broken down by provider, model, channel, or agent

Terminal window
dewee usage list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent-id | string | filter by agent UUID | - | | --channel | string | filter by channel | - | | --from | string | start time, RFC3339 (default: 24h ago) | - | | --group-by | string | grouping dimension: provider (default), model, channel, or agent | - | | --model | string | filter by LLM model | - | | --provider | string | filter by LLM provider | - | | --since | string | alias for —from | - | | --to | string | end time, RFC3339 (default: now) | - | | --until | string | alias for —to | - |

Show token usage and cost totals for a period, compared to the previous period

Terminal window
dewee usage summary [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent-id | string | filter by agent UUID | - | | --channel | string | filter by channel | - | | --model | string | filter by LLM model | - | | --period | string | comparison window: 24h, today, 7d, or 30d | 24h | | --provider | string | filter by LLM provider | - |

Show token usage and cost as time-series points

Terminal window
dewee usage timeseries [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent-id | string | filter by agent UUID | - | | --channel | string | filter by channel | - | | --from | string | start time, RFC3339 (default: 24h ago) | - | | --group-by | string | bucket size: hour (default) or day | - | | --model | string | filter by LLM model | - | | --provider | string | filter by LLM provider | - | | --since | string | alias for —from | - | | --to | string | end time, RFC3339 (default: now) | - | | --until | string | alias for —to | - |

Inspect and manage Knowledge Vault documents

Terminal window
dewee vault

| Flag | Type | Description | Default | |---|---|---|---| | --json | bool | output as JSON | false | | -o, --output | string | output format (table|json) | table |

Inspect or stop vault enrichment

Terminal window
dewee vault enrichment

Show vault enrichment status

Terminal window
dewee vault enrichment status

Stop vault enrichment

Terminal window
dewee vault enrichment stop --yes [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --yes | bool | confirm stop | false |

Get one vault document

Terminal window
dewee vault get <doc-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID for per-agent route | - |

Show vault relationship graph

Terminal window
dewee vault graph [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID filter | - | | --limit | int | maximum nodes | 2000 | | --team | string | team UUID filter | - |

Manage vault document links

Terminal window
dewee vault link

Create a vault document link

Terminal window
dewee vault link create --from <doc-id> --to <doc-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID for per-agent route | - | | --context | string | link context | - | | --from | string | source document ID | - | | --to | string | target document ID | - | | --type | string | link type | - |

Delete a vault document link

Terminal window
dewee vault link delete <link-id> --yes [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID for per-agent route | - | | --yes | bool | confirm deletion | false |

Show vault document links

Terminal window
dewee vault links <doc-id> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID for per-agent route | - |

List vault documents

Terminal window
dewee vault list [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID filter | - | | --limit | int | page size | 20 | | --offset | int | pagination offset | 0 | | --scope | string | scope filter | - | | --team | string | team UUID filter | - | | --type | string | comma-separated document types | - |

Rescan workspace files into the vault

Terminal window
dewee vault rescan

Search vault documents

Terminal window
dewee vault search --query <query> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID for scoped search | - | | --limit | int | maximum results | 10 | | --query | string | search query | - | | --scope | string | scope filter | - | | --team | string | team UUID filter | - | | --types | string | comma-separated document types | - |

List vault tree entries

Terminal window
dewee vault tree [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID filter | - | | --path | string | path prefix | - | | --scope | string | scope filter | - | | --team | string | team UUID filter | - | | --types | string | comma-separated document types | - |

Upload a file into the vault

Terminal window
dewee vault upload --file <file> [flags]

| Flag | Type | Description | Default | |---|---|---|---| | --agent | string | agent UUID target | - | | --file | string | file to upload | - | | --team | string | team UUID target | - |

Print version information

Terminal window
dewee version