@oxygen-agent/cli 1.1003.12 → 1.1010.1

package/node_modules/@oxygen/cli-ugc/dist/field-parser.d.ts

@@ -3,5 +3,14 @@ export type Field = {
     kind: string;
     description: string;
     required: boolean;
+    /** CLI flag name when it differs from the body key (e.g. `at` for scheduled_for). */
+    flag?: string;
 };
+/** `2/week`, `4/month`, `10/total` or `none` (clears); a count of 1–100. */
+export declare function parsePostingTarget(value: string): {
+    count: number;
+    period: "week" | "month" | "total";
+} | null;
+/** A JSON array of emails, or emails separated by commas, semicolons or whitespace. */
+export declare function parseEmailList(value: string): string[];
 export declare function parseField(value: unknown, field: Field): unknown;

package/node_modules/@oxygen/cli-ugc/dist/field-parser.js

@@ -1,4 +1,38 @@
+/** `2/week`, `4/month`, `10/total` or `none` (clears); a count of 1–100. */
+export function parsePostingTarget(value) {
+    const text = value.trim().toLowerCase();
+    if (text === "none")
+        return null;
+    const match = /^(\d{1,3})\s*\/\s*(week|month|total)$/.exec(text);
+    const count = match ? Number(match[1]) : 0;
+    if (!match || count < 1 || count > 100)
+        throw new Error("--posting-target must be <n>/month, <n>/total or <n>/week with n from 1 to 100, or none.");
+    return { count, period: match[2] };
+}
+/** A JSON array of emails, or emails separated by commas, semicolons or whitespace. */
+export function parseEmailList(value) {
+    const text = value.trim();
+    let items;
+    if (text.startsWith("[")) {
+        items = JSON.parse(text);
+        if (!Array.isArray(items) || !items.every((item) => typeof item === "string"))
+            throw new Error("--emails must be a JSON array of strings or a comma-separated list.");
+    }
+    else
+        items = text.split(/[\s,;]+/);
+    const emails = items.map((item) => item.trim()).filter(Boolean);
+    if (!emails.length)
+        throw new Error("--emails needs at least one email address.");
+    return emails;
+}
 export function parseField(value, field) {
+    if (field.kind === "posting_target")
+        return parsePostingTarget(String(value));
+    if (field.kind === "email_list")
+        return parseEmailList(String(value));
+    // Comma-separated words; an empty value is an empty list (it clears).
+    if (field.kind === "text_list")
+        return String(value).split(",").map((item) => item.trim()).filter(Boolean);
     if (field.kind === "array" || field.kind === "object") {
         const parsed = JSON.parse(String(value));
         if (field.kind === "array"

package/node_modules/@oxygen/recipe-sdk/dist/index.d.ts

@@ -9,6 +9,11 @@ export type RecipeToolRunOptions = {
     connectionId?: string;
     /** Pin the credential rail instead of automatically selecting a connected key. */
     credentialMode?: "managed" | "user_api_key" | "user_oauth";
+    /**
+     * With credentialMode user_api_key on a LinkedIn rail (scraper.*) tool: run on
+     * the workspace's own Up2Data key rather than its HarvestAPI key.
+     */
+    byokKeySource?: "up2data";
 };
 export type RecipeToolApi = {
     run: <T = unknown>(toolId: string, payload?: Record<string, unknown>, options?: RecipeToolRunOptions) => Promise<T>;
@@ -113,9 +118,17 @@ export type RecipeCrmExternalRef = {
     provider_event_id?: string | null;
     confidence?: number | null;
 };
+/** Source evidence only; never registers or resolves a provider external identity. */
+export type RecipeCrmSourceProvenance = {
+    provider: string;
+    object: string;
+    external_id: string;
+    provider_account: string;
+};
 export type RecipeCrmApi = {
     assert: <T = unknown>(object: string, identity: RecipeCrmIdentity, values: Record<string, unknown> | undefined, options: {
         key: string;
+        provenance?: RecipeCrmSourceProvenance;
     }) => Promise<T>;
     assertFromProvider: <T = unknown>(object: string, identity: RecipeCrmIdentity, values: Record<string, unknown> | undefined, external: RecipeCrmExternalRef, options: {
         key: string;

package/node_modules/@oxygen/shared/dist/billing.d.ts

@@ -348,6 +348,8 @@ export declare function resolveBasePricingPlan(tier: string | null | undefined):
 export declare function applyPricingPlanMetadataOverrides(// skipcq: JS-R1005
 plan: PricingPlanDefinition, metadata: PricingPlanMetadata): PricingPlanDefinition;
 export declare function isSelfServePlanTier(value: string): value is SelfServePlanTier;
+export declare const MANAGED_PHONE_PLAN_TIERS: readonly PlanTier[];
+export declare function planAllowsManagedPhoneEnrichment(tier: string): boolean;
 /** True for the six rungs a customer may buy or switch to. */
 export declare function isPurchasablePlanKey(value: string): value is OxygenPlanKey;
 export declare function isBillingCurrency(value: string): value is BillingCurrency;
@@ -368,6 +370,25 @@ export type CreditCycleWindow = {
     /** "July 2026" | "Jun 10 – Jul 10" */
     label: string;
 };
+/**
+ * Whether a subscription row has a real Stripe object behind it that Stripe's
+ * own APIs (retrieve, update, invoice preview, portal flows) can act on.
+ *
+ * Three kinds of row say no: a staff-invoiced manual contract (`manual_contract_`
+ * id and/or `off_stripe` in either spelling the codebase has written), a
+ * control-plane-only internal grant (`internal_dogfood_…`), and a hand-inserted
+ * synthetic row that DOES carry a `sub_` prefix but marks itself
+ * `metadata.synthetic: true`. That last shape is why the id prefix alone is not
+ * the test: the dev dogfood org's `sub_synthetic_dev_dogfood_…` row passed every
+ * `startsWith("sub_")` check and reached `stripe.subscriptions.retrieve`, where
+ * Stripe answered "No such subscription" and the customer read the generic
+ * "Unable to preview the plan change." Every self-serve Stripe mutation must
+ * refuse these rows before it calls Stripe, with a message that names the fix.
+ */
+export declare function isStripeManagedSubscription(subscription: {
+    stripeSubscriptionId?: string | null;
+    metadata?: Record<string, unknown> | null;
+}): boolean;
 /**
  * The window the credit-allowance bar measures: "this month's credits", resolved
  * to the boundary at which the plan's grant actually renews.

package/node_modules/@oxygen/shared/dist/billing.js

@@ -678,6 +678,23 @@ plan, metadata) {
 export function isSelfServePlanTier(value) {
     return SELF_SERVE_PLAN_TIERS.includes(value);
 }
+// Keyed by PlanTier so a new tier is a compile error here until someone decides
+// it. The hand-typed list this replaced predated the 2026-09-19 "oxygen" tier,
+// so every customer on the one purchasable plan was refused managed phone
+// enrichment that Free and the grandfathered plans still had.
+const MANAGED_PHONE_PLAN_TIER_ALLOWED = {
+    free: true,
+    oxygen: true,
+    starter: true,
+    pro: true,
+    team: true,
+    scale: true,
+    enterprise: true,
+};
+export const MANAGED_PHONE_PLAN_TIERS = Object.keys(MANAGED_PHONE_PLAN_TIER_ALLOWED).filter((tier) => MANAGED_PHONE_PLAN_TIER_ALLOWED[tier]);
+export function planAllowsManagedPhoneEnrichment(tier) {
+    return MANAGED_PHONE_PLAN_TIERS.includes(tier);
+}
 /** True for the six rungs a customer may buy or switch to. */
 export function isPurchasablePlanKey(value) {
     return PURCHASABLE_PLAN_KEYS.includes(value);
@@ -755,6 +772,34 @@ function formatUtcDay(date) {
         timeZone: "UTC",
     });
 }
+/**
+ * Whether a subscription row has a real Stripe object behind it that Stripe's
+ * own APIs (retrieve, update, invoice preview, portal flows) can act on.
+ *
+ * Three kinds of row say no: a staff-invoiced manual contract (`manual_contract_`
+ * id and/or `off_stripe` in either spelling the codebase has written), a
+ * control-plane-only internal grant (`internal_dogfood_…`), and a hand-inserted
+ * synthetic row that DOES carry a `sub_` prefix but marks itself
+ * `metadata.synthetic: true`. That last shape is why the id prefix alone is not
+ * the test: the dev dogfood org's `sub_synthetic_dev_dogfood_…` row passed every
+ * `startsWith("sub_")` check and reached `stripe.subscriptions.retrieve`, where
+ * Stripe answered "No such subscription" and the customer read the generic
+ * "Unable to preview the plan change." Every self-serve Stripe mutation must
+ * refuse these rows before it calls Stripe, with a message that names the fix.
+ */
+export function isStripeManagedSubscription(subscription) {
+    // A row with no usable id is not something Stripe manages; answer false
+    // rather than throw, because this runs inside read-only pages (the billing
+    // summary) where a throw becomes a 500 for the whole page.
+    if (typeof subscription.stripeSubscriptionId !== "string")
+        return false;
+    if (!subscription.stripeSubscriptionId.startsWith("sub_"))
+        return false;
+    const metadata = subscription.metadata ?? {};
+    return (metadata.off_stripe !== true
+        && metadata.off_stripe !== "true"
+        && metadata.synthetic !== true);
+}
 /**
  * The window the credit-allowance bar measures: "this month's credits", resolved
  * to the boundary at which the plan's grant actually renews.

package/node_modules/@oxygen/shared/dist/byok-connect.js

@@ -72,13 +72,18 @@ export const NATIVE_API_KEY_CONNECT_INTEGRATION_IDS = new Set([
     // Native api-key connect added in catalog.ts (2026-09-10): connect writes an
     // integration_secrets api_key row the native parallel.* runner reads. T-104.
     "parallel",
+    "pipedrive",
     "predictleads",
     "prospeo",
     "scalelist",
+    // scrapeli / up2data (2026-09-25): the company-followers and LinkedIn post lanes
+    // offer "Bring your own API key"; both connect forms live in catalog.ts.
+    "scrapeli",
     // scraper: dev v1.920.2 added the HarvestAPI workspace-key connect (native api-key form).
     "scraper",
     "serper",
     "signalbase",
+    "up2data",
     "zapmail",
     "zerobounce",
 ]);

package/node_modules/@oxygen/shared/dist/capability-discovery.d.ts

@@ -57,5 +57,15 @@ export declare function getCapabilityRouteMatch(id: string): CapabilityRouteMatc
 export declare function inferCapabilityRoute(query: string): CapabilityRouteMatch | null;
 export declare function inferPrimitiveRoute(query: string): PrimitiveRouteMatch | null;
 export declare function serializeCapabilityRoute(route: CapabilityRouteMatch | null): Record<string, unknown> | null;
+export declare const COMPANY_PAGE_FOLLOWERS_COMMAND = "oxygen tables followers check --company <linkedin company page URL> --records <n> --json";
 /** The exact `companies search plan` invocation for the url_recovery intent. */
 export declare const COMPANY_URL_RECOVERY_COMMAND = "oxygen companies search plan --prompt \"Find the websites for these companies: <company names>\" --source-intent url_recovery";
+/** The free native preview for Google Maps businesses; import follows its reviewed quote. */
+export declare const LOCAL_BUSINESS_SCRAPE_COMMAND = "oxygen companies search preview --source google_maps --filters-json '{\"q\":\"<category> in <city, region>\"}'";
+/**
+ * The free list of classification columns. Production answers it with its one
+ * classification template (B2B or B2C); a deployment that runs the native
+ * Classify column lists that entry here too. Any other scheme is an AI prompt
+ * column through `columns add`, which the route recommends next.
+ */
+export declare const ROW_CLASSIFICATION_COMMAND = "oxygen columns catalog --family classification";

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -195,15 +195,18 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "records",
         layer: "Data",
         primitive: "records",
-        owns: "Canonical companies, people, deals, identities, relationships, activities, merges, and CRM sync state.",
+        owns: "Canonical companies, people, deals, identities, relationships, activities, notes, tasks (reminders), files, merges, and CRM sync state.",
         notFor: "Disposable sourcing, enrichment, or scoring work; use Tables before promotion.",
-        execution: "Operate the hosted native CRM and preserve field/relationship provenance.",
+        execution: "Operate the hosted native CRM and preserve field/relationship provenance. Importing FROM a connected CRM lands here via `crm sync import <provider> --object contacts|companies`, which pulls the whole object and has no list/segment filter. To import ONE HubSpot saved list or ONE Pipedrive saved filter into a new table the user can filter and enrich — optionally suppressing a do-not-contact list/filter first — use `tables hubspot import` or `tables pipedrive import` instead. Open work across the workspace is one read: `crm tasks list`.",
         posture: "workspace_write",
         gatewayTools: ["oxygen_crm_record_search", "oxygen_crm_record_get"],
-        gatewayCommands: ["crm search", "crm get", "crm describe"],
+        gatewayCommands: ["crm search", "crm get", "crm describe", "crm tasks list", "crm notes list"],
         skills: ["oxygen-gtm"],
         endpointSections: ["crm"],
-        intentTerms: ["record", "records", "crm", "company record", "contact", "person record", "deal", "timeline", "merge", "relationship"],
+        // "reminder"/"to-do"/"open tasks" routed to workspace-access before these
+        // terms existed (blind acceptance, 2026-09-22): the customer's phrasing for
+        // the Tasks read has to land on the primitive that owns it.
+        intentTerms: ["record", "records", "crm", "company record", "contact", "person record", "deal", "timeline", "merge", "relationship", "note", "notes", "task", "tasks", "reminder", "reminders", "to-do", "open tasks", "follow-up", "attachment", "files on a record"],
     },
     {
         id: "tables",
@@ -222,12 +225,19 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // `tables create` / `columns add` / `enrich-column preview` — none of which
         // do it. The agent only found the right command by grepping the raw 25k-line
         // command manifest, which is not a discovery path a customer has.
+        // "hubspot list" / "saved segment" / "list import" route here for
+        // `tables hubspot import`. Added after the 2026-09-21 blind ACCEPTANCE run:
+        // the capability shipped that same day, the agent searched "import hubspot
+        // contacts", was routed to `records`, read `crm sync import --help`, found
+        // no --list flag, and reported segment-scoped import as a MISSING native
+        // capability. The records execution text now names the table lane too,
+        // because that is where this phrasing legitimately lands.
         // "founders" / "parent company" / "cloud provider" / "company research" route
         // here for `columns catalog`. Added after the 2026-09-16 blind baseline asked
         // `capabilities search "founders of a company"` and got `route: null` with a
         // generic sourcing pointer, then hand-wrote four research prompts for
         // questions the template catalog now answers by key.
-        intentTerms: ["table", "spreadsheet", "rows", "column", "columns", "dataset", "csv", "import", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup", "link", "link tables", "join", "connect", "relate", "relationship", "function", "functions", "reusable function", "function draft", "function version", "callable", "column template", "skill set", "grad school", "podcast appearance", "keynote", "github profile", "job fit", "founders", "parent company", "subsidiaries", "cloud provider", "company research", "research question", "research column", "web research", "template catalog", "ready-made", "offers demos", "naics", "cost per row", "price per row", "what can i enrich", "enrichment cost", "credits per row"],
+        intentTerms: ["table", "spreadsheet", "rows", "column", "columns", "dataset", "csv", "import", "hubspot list", "hubspot segment", "pipedrive filter", "pipedrive", "saved list", "saved segment", "saved filter", "crm segment", "list import", "segment import", "filter import", "import a segment", "import a list", "import a filter", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup", "link", "link tables", "join", "connect", "relate", "relationship", "function", "functions", "reusable function", "function draft", "function version", "callable", "column template", "skill set", "grad school", "podcast appearance", "keynote", "github profile", "job fit", "founders", "parent company", "subsidiaries", "cloud provider", "company research", "research question", "research column", "web research", "template catalog", "ready-made", "offers demos", "naics", "cost per row", "price per row", "what can i enrich", "enrichment cost", "credits per row"],
     },
     {
         id: "messages",
@@ -363,7 +373,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // "remove program" / "delete program" landed on route: null in a blind eval
         // (2026-09-10); a program is a UGC noun here, and its lifecycle verbs must
         // resolve to the group that owns `ugc programs archive|delete|duplicate`.
-        intentTerms: ["publish", "publishing", "schedule post", "content calendar", "posting calendar", "approve post", "social publishing", "ugc", "creator program", "user generated content", "creator voice", "sponsored creator", "ugc program", "archive program", "delete program", "remove program", "duplicate program", "copy program"],
+        intentTerms: ["publish", "publishing", "schedule post", "content calendar", "posting calendar", "approve post", "social publishing", "video cover", "video thumbnail", "cover image", "post preview", "ugc", "creator program", "user generated content", "creator voice", "sponsored creator", "ugc program", "archive program", "delete program", "remove program", "duplicate program", "copy program"],
     },
     {
         id: "workflows",
@@ -419,7 +429,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayCommands: ["search plan", "sourcing plan", "find company", "tools search"],
         skills: ["oxygen-gtm"],
         endpointSections: ["companies", "find", "lead-sourcing", "people", "search", "sourcing", "tools", "verify"],
-        intentTerms: ["find companies", "find people", "source leads", "build a list", "tam", "prospect", "provider", "tool catalog", "find email", "find phone"],
+        intentTerms: ["find companies", "find people", "source leads", "build a list", "tam", "prospect", "provider", "tool catalog", "find email", "find phone", "local businesses", "local business", "google maps", "storefronts"],
     },
     {
         id: "linkedin-public-research",
@@ -487,15 +497,15 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "connected-linkedin",
         layer: "External",
         primitive: null,
-        owns: "The workspace LinkedIn account network/private data, relationship context such as mutual connections, and connected-account writes used by Signals, Messages, Sequences, and Publishing.",
+        owns: "The workspace LinkedIn account network/private data — everyone you are connected to and everyone who follows you, captured into one self-refreshing 'LinkedIn Network' table — relationship context such as mutual connections, and connected-account writes used by Signals, Messages, Sequences, and Publishing.",
         notFor: "Ordinary public or third-party LinkedIn research; use the cookieless native scraper.",
-        execution: "For mutual/shared connection counts, resolve the connected account with `oxygen senders list --json`, inspect `oxygen tools get linkedin.users_get --json`, then run `oxygen tools run linkedin.users_get --input-json '{\"identifier\":\"<profile-url>\",\"account_id\":\"<connected-account-id>\",\"notify\":false}' --mode live --json`. This read is non-notifying and no-bill. An unavailable count is explicit and never means zero; retrying the same account/profile pair is not expected to reveal a provider-hidden count. Otherwise use the owning primitive gateway; the connected account provides identity and transport, not a competing product runtime.",
+        execution: "To put your own network in a table — connections and followers, one row per person with a Relationship column, kept current in the background — run `oxygen linkedin network setup --json` (add --account <ref> for one account; `oxygen linkedin network status` reports the pace and each account's state, `oxygen linkedin network pause` switches it off). Open connection requests — received and sent, on every connected account, in one table that marks each one accepted or no_longer_pending when it disappears — are `oxygen linkedin invitations setup --json` (`status` and `pause` beside it). Profile viewers are the same per account: `oxygen viewers import --account <ref>` switches one on, `oxygen viewers pause --account <ref>` off, and `oxygen viewers status` lists every account's state and `viewed_account` (whose profile each person viewed). `oxygen viewers enrichment --on` enriches each NEW viewer's full profile automatically at the per-person price `viewers status` quotes (existing viewers never). It is free, read-only on the account, and paced under its own daily read budget. For mutual/shared connection counts, resolve the connected account with `oxygen senders list --json`, inspect `oxygen tools get linkedin.users_get --json`, then run `oxygen tools run linkedin.users_get --input-json '{\"identifier\":\"<profile-url>\",\"account_id\":\"<connected-account-id>\",\"notify\":false}' --mode live --json`. This read is non-notifying and no-bill. An unavailable count is explicit and never means zero; retrying the same account/profile pair is not expected to reveal a provider-hidden count. Otherwise use the owning primitive gateway; the connected account provides identity and transport, not a competing product runtime.",
         posture: "mixed",
-        gatewayTools: ["oxygen_senders_list", "oxygen_linkedin_connections_import", "oxygen_inbox_list"],
-        gatewayCommands: ["senders list", "connections import", "inbox list"],
+        gatewayTools: ["oxygen_linkedin_network_setup", "oxygen_linkedin_invitations_setup", "oxygen_senders_list", "oxygen_linkedin_connections_import", "oxygen_inbox_list"],
+        gatewayCommands: ["linkedin network setup", "linkedin invitations setup", "senders list", "connections import", "inbox list"],
         skills: ["oxygen-linkedin-marketing", "oxygen-sequencer", "oxygen-unibox"],
         endpointSections: ["linkedin"],
-        intentTerms: ["my linkedin", "our linkedin", "own linkedin", "connected linkedin", "connections", "mutual connections", "shared connections", "connections in common", "followers", "profile viewers", "sales navigator", "recruiter", "linkedin inbox"],
+        intentTerms: ["my linkedin", "our linkedin", "own linkedin", "connected linkedin", "connections", "mutual connections", "shared connections", "connections in common", "followers", "my network", "whole network", "linkedin network", "connections and followers", "profile viewers", "sales navigator", "recruiter", "linkedin inbox"],
     },
     {
         id: "connected-whatsapp",
@@ -634,6 +644,23 @@ export function serializeCapabilityRoute(route) {
 function normalizeIntent(query) {
     return query.toLowerCase().replace(/[_-]+/g, " ").replace(/\s+/g, " ").trim();
 }
+/**
+ * "LinkedIn posts about X" / "posts mentioning Y" / "monitor LinkedIn posts by
+ * keyword" is keyword post search, a Signals source with all-of / any-of /
+ * exclude rules. A blind user eval (2026-09-23) asked exactly this and was
+ * routed to Workflows, never learning `signals search --family linkedin_posts`
+ * exists. Posts FROM named profiles stay with the Profile Watcher, and the
+ * workspace's own posts stay with Posts. The free preview leads: it shows real
+ * posts, with the AI filter applied, before a table exists.
+ */
+const LINKEDIN_KEYWORD_POST_COMMAND = 'oxygen signals search preview --family linkedin_posts --keywords "<any of>" --all-keywords "<all of>" --exclude-keywords "<none of>" --ai-filter "<posts to keep>" --json';
+function isLinkedInKeywordPostIntent(query) {
+    return /\blinkedin\b/.test(query)
+        && /\b(posts?|posting)\b/.test(query)
+        && /\b(keywords?|about|mention\w*|topics?|niche|talk\w* about|viral|trending)\b/.test(query)
+        && !/\bprofiles?\b/.test(query)
+        && !/\b(my|our) (own )?posts?\b/.test(query);
+}
 function isLinkedInProfileWatcherIntent(query) {
     return /\blinkedin\b/.test(query)
         && /\bprofiles?\b/.test(query)
@@ -641,9 +668,62 @@ function isLinkedInProfileWatcherIntent(query) {
         && (/\b(engagers?|engaging|engagement|reactions?|comments?|posts?)\b/.test(query) || /\bprofile watcher\b/.test(query))
         && !isNetNewLinkedInInitiation(query);
 }
+/**
+ * "My LinkedIn connections and followers as a table" is the connected account's
+ * own network, not a Tables question. Without this the phrase "into a table"
+ * routed a blind user to the generic Tables card, which never names
+ * `linkedin network setup` (blind eval, 2026-09-22).
+ */
+function isOwnLinkedInNetworkIntent(query) {
+    if (!/\blinkedin\b/.test(query))
+        return false;
+    if (/\b(mutual|shared|in common|public|third party|cookieless|post engagers?)\b/.test(query))
+        return false;
+    const ownNetwork = /\b(my|our|own|whole|entire|existing) (linkedin )?(network|connections|followers)\b/.test(query)
+        || /\b(everyone|everybody|people) (i am|i'm|we are|we're) connected (to|with)\b/.test(query)
+        || /\blinkedin network\b/.test(query);
+    const bothHalves = /\bconnections?\b/.test(query) && /\bfollowers?\b/.test(query);
+    return (ownNetwork || bothHalves) && !isNetNewLinkedInInitiation(query);
+}
+export const COMPANY_PAGE_FOLLOWERS_COMMAND = "oxygen tables followers check --company <linkedin company page URL> --records <n> --json";
+/**
+ * "The people who follow HubSpot on LinkedIn" / "a competitor's followers" is a
+ * vendor order of a company page's audience (`tables followers`), not the
+ * workspace's own network and not a signal. The Signals card claims the bare
+ * word "follower", so without this a blind user (2026-09-24) got only
+ * `signals *` from `commands search "company followers"` and priced the order
+ * through raw `tools run` instead. The own-network ask stays with its owner.
+ */
+function isCompanyPageFollowersIntent(query) {
+    const followers = /\bfollowers?\b/.test(query) || /\b(who|that) follows?\b/.test(query);
+    if (!followers || isOwnLinkedInNetworkIntent(query))
+        return false;
+    if (/\bfollows? (me|us)\b/.test(query) || /\b(my|our) (own )?(linkedin )?followers\b/.test(query))
+        return false;
+    return /\b(compan(y|ies)|competitors?|pages?|brands?|organi[sz]ations?)\b/.test(query)
+        || (/\blinkedin\b/.test(query) && /\bfollows? (?!me\b|us\b)[a-z0-9]/.test(query));
+}
+/**
+ * Open connection requests on the workspace's own accounts are the connected
+ * account's data. A blind user searching "pending LinkedIn connection requests"
+ * was routed nowhere near `linkedin invitations` (blind eval, 2026-09-24).
+ */
+function isOpenLinkedInRequestsIntent(query) {
+    if (!/\blinkedin\b/.test(query))
+        return false;
+    // Sending requests to leads is Sequences, not this table.
+    if (/\b(send|sending|enroll|sequence|campaign|outreach|cadence)\b/.test(query))
+        return false;
+    return /\b(connection|invitation|invite|connect) requests?\b/.test(query)
+        || /\b(pending|open|unanswered|outstanding|received|sent) (linkedin )?(invitations?|invites?)\b/.test(query);
+}
 function explicitCapabilityIntent(query) {
     if (/\b(infographic|graphic designer|render html|carousel pages|visual design|gtm flow image)\b/.test(query))
         return ROUTE_BY_ID.get("visual-rendering") ?? null;
+    if (isOwnLinkedInNetworkIntent(query) || isOpenLinkedInRequestsIntent(query))
+        return ROUTE_BY_ID.get("connected-linkedin") ?? null;
+    if (isCompanyPageFollowersIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     // A whole-motion ask ("set up inbound-led outbound for my posts") is a
     // Recipe kit + playbook, not the connected-LinkedIn signals card that the
     // "my LinkedIn … engagers" rule below would otherwise claim. Resolve it first.
@@ -667,6 +747,21 @@ function explicitCapabilityIntent(query) {
     }
     if (isLinkedInProfileWatcherIntent(query))
         return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    // Profile viewers exist only as a connected account's data, and their capture
+    // owns its own on/off, pause and automatic enrichment. "Automatically enrich
+    // new profile viewers" reads as workflow language, but a hand-built workflow is
+    // the wrong answer when `viewers enrichment --on` is the switch (2026-09-23
+    // enrichment baseline).
+    if (/\bprofile viewers?\b/.test(query))
+        return ROUTE_BY_ID.get("connected-linkedin") ?? null;
+    if (isLinkedInKeywordPostIntent(query))
+        return ROUTE_BY_ID.get("signals") ?? null;
+    // Ahead of the workflow rule, whose "retry" would claim it. Why a post failed and how to get it out is Publishing's attempt ledger and
+    // unlock path: the 2026-09-25 stuck-post baseline sent "publishing failed post
+    // retry outcome uncertain" to Workflows and "why did my LinkedIn post fail to
+    // publish" to the connected-account catalog.
+    if (isFailedPostIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
     if (isHostedWorkflowIntent(query))
         return ROUTE_BY_PRIMITIVE.get("workflows") ?? null;
     if (isOwnedPostCommentIntent(query))
@@ -688,6 +783,17 @@ function explicitCapabilityIntent(query) {
     if (isMutualLinkedInConnectionsIntent(query)) {
         return ROUTE_BY_ID.get("connected-linkedin") ?? null;
     }
+    // Authoring a post's video cover or previewing a draft is Publishing work even
+    // when the ask says "LinkedIn post"; the public-read rule below otherwise sent
+    // "choose video cover frame for linkedin post" to the paid cookieless research
+    // catalog (blind acceptance run, 2026-09-24).
+    if (isPostCoverOrPreviewIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
+    // An X thread, poll, alt text or reply control is how an X post is authored, not
+    // a conversation thread (Messages): the 2026-09-25 X-formats baseline routed
+    // "thread" to Messages and "X poll post" nowhere.
+    if (isXPostFormatIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
     // A deferred acquisition motion starts with the public-data owner. This keeps
     // "find/qualify now, contact later" from skipping straight to the final write
     // step; the recommendation still hands the eventual initiation to Sequences.
@@ -728,6 +834,13 @@ function explicitCapabilityIntent(query) {
     }
     if (/\b(message )?reviews?\b/.test(query))
         return ROUTE_BY_PRIMITIVE.get("messages") ?? null;
+    // Sorting each row into categories ("classify companies by industry with
+    // confidence", "label every row as agency, SaaS or other") is a Tables
+    // column, not a workspace Tag. Before this rule the 2026-09-25 blind baseline
+    // got `route: null` for "classify companies by industry with confidence",
+    // and the "label" wording fell to the Tags card below.
+    if (isRowClassificationIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     if (/\b(tag|tags|label|labels)\b/.test(query))
         return ROUTE_BY_PRIMITIVE.get("tags") ?? null;
     if (/\b(disposable|working)\b.{0,30}\b(list|dataset|table)\b|\b(prospect|sourcing) table\b/.test(query)) {
@@ -768,6 +881,12 @@ function explicitCapabilityIntent(query) {
     // company_enrich preset instead.
     if (isCompanyUrlRecoveryIntent(query))
         return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
+    // A category-plus-place ask ("dental practices in Austin", "local businesses",
+    // "scrape Google Maps") is the companies-search `local` intent. A 2026-09-21
+    // blind user typing "find local businesses like dental practices in a city"
+    // got NO route and fell back to browsing every command group's --help.
+    if (isLocalBusinessIntent(query))
+        return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
     if (/\b(find emails?|find phones?|find companies|find people|source (?:leads?|a list|companies|people)|build (?:me )?a list|tam|prospect)\b/.test(query)) {
         return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
     }
@@ -822,6 +941,17 @@ function highestScoringRoute(query) {
 }
 /** The exact `companies search plan` invocation for the url_recovery intent. */
 export const COMPANY_URL_RECOVERY_COMMAND = 'oxygen companies search plan --prompt "Find the websites for these companies: <company names>" --source-intent url_recovery';
+/** The free native preview for Google Maps businesses; import follows its reviewed quote. */
+export const LOCAL_BUSINESS_SCRAPE_COMMAND = `oxygen companies search preview --source google_maps --filters-json '{"q":"<category> in <city, region>"}'`;
+/**
+ * Storefronts and service businesses by category and place — the Scrape Google
+ * Maps Businesses table source. Named business categories are the everyday
+ * phrasing ("dentists in Austin"), so a short list of them is matched beside the
+ * generic words; "near me" and "in/around <place>" carry the same meaning.
+ */
+function isLocalBusinessIntent(query) {
+    return /\b(local business(?:es)?|google maps|maps listings?|storefronts?|near me|(?:dental|medical|law|veterinary) (?:practices?|offices?|clinics?)|dentists?|restaurants?|cafes?|coffee shops?|gyms?|salons?|plumbers?|electricians?|contractors?|hvac|auto repair|real estate agents?|businesses (?:in|near|around) [a-z])\b/.test(query);
+}
 function recommendationsFor(card, query) {
     if (card.id === "sourcing-and-provider-tools" && isCompanyUrlRecoveryIntent(query)) {
         return {
@@ -830,6 +960,20 @@ function recommendationsFor(card, query) {
             exactCommand: COMPANY_URL_RECOVERY_COMMAND,
         };
     }
+    if (card.primitive === "tables" && isCompanyPageFollowersIntent(query)) {
+        return {
+            tools: ["oxygen_tables_followers", "oxygen_tables_sources"],
+            commands: ["tables followers check", "tables followers order", "tables sources"],
+            exactCommand: COMPANY_PAGE_FOLLOWERS_COMMAND,
+        };
+    }
+    if (card.id === "sourcing-and-provider-tools" && isLocalBusinessIntent(query)) {
+        return {
+            tools: ["oxygen_companies_search_preview", "oxygen_companies_search_run"],
+            commands: ["companies search filters", "companies search preview", "companies search run"],
+            exactCommand: LOCAL_BUSINESS_SCRAPE_COMMAND,
+        };
+    }
     if (card.id === "connected-linkedin" && isMutualLinkedInConnectionsIntent(query)) {
         return {
             tools: ["oxygen_tools_get", "oxygen_tools_run_live", "oxygen_senders_list"],
@@ -916,6 +1060,17 @@ function recommendationsFor(card, query) {
                 commands: ["tables watcher preview", "tables watcher create", "tables watcher get", "tables watcher update", "tables watcher pause", "tables watcher resume"],
             };
         }
+        if (isRowClassificationIntent(query)) {
+            // The classification list (free) names the template production has and,
+            // where the deployment runs it, the native Classify column; any other
+            // scheme is a prompt column (free to add). The run's dry run prices it,
+            // and the labelled rows are filtered natively with `tables query`.
+            return {
+                tools: ["oxygen_columns_catalog", "oxygen_columns_add", "oxygen_columns_run", "oxygen_tables_query"],
+                commands: ["columns catalog", "columns add", "columns run", "tables query"],
+                exactCommand: ROW_CLASSIFICATION_COMMAND,
+            };
+        }
         if (isCompanyResearchQuestionIntent(query)) {
             // A fact the template catalog already answers by key: list the keys first
             // (free), add the column by key (free), then price and run it. Ahead of
@@ -1069,6 +1224,13 @@ function recommendationsFor(card, query) {
             };
         }
     }
+    if (card.primitive === "signals" && isLinkedInKeywordPostIntent(query)) {
+        return {
+            tools: ["oxygen_signals_search_preview", "oxygen_signals_search_run"],
+            commands: ["signals search preview", "signals search run"],
+            exactCommand: LINKEDIN_KEYWORD_POST_COMMAND,
+        };
+    }
     if (card.primitive === "signals" && /\blinkedin\b.{0,40}\bengagers?\b/.test(query)) {
         return {
             tools: ["oxygen_engagement_list_engagers", "oxygen_signals_list", "oxygen_signals_leads_today"],
@@ -1093,6 +1255,36 @@ function isEmailVerificationIntent(query) {
     const addressThenGrade = /\b(e ?mails?|addresses)\b.{0,40}\b(verif(?:y|ied|ication)|validat(?:e|ed|ion)|valid|invalid|deliverable|(?:will|would|might) bounce|bounce risk|risky|safe to (?:send|email)|catch ?all|accept ?all)\b/;
     return gradeThenAddress.test(query) || addressThenGrade.test(query);
 }
+/**
+ * The free list of classification columns. Production answers it with its one
+ * classification template (B2B or B2C); a deployment that runs the native
+ * Classify column lists that entry here too. Any other scheme is an AI prompt
+ * column through `columns add`, which the route recommends next.
+ */
+export const ROW_CLASSIFICATION_COMMAND = "oxygen columns catalog --family classification";
+/** Nouns another primitive owns: a classify ask that names one keeps that owner. */
+const ROW_CLASSIFICATION_OTHER_OWNER = /\b(inbox|repl(?:y|ies)|conversations?|threads?|messages?|dms?|e-?mails?|bounces?|signals?|visitors?|workflows?|deals?|crm|records?|icp|knowledge|wiki|pages?|ads|dashboards?|metrics?|agents?|runs)\b/;
+/** What one table row is: the noun a per-row classification is about. */
+const ROW_CLASSIFICATION_ROW_NOUN = /\b(rows?|columns?|tables?|compan(?:y|ies)|accounts?|leads?|contacts?|domains?|people|persons?)\b/;
+/**
+ * Put every row of a table into one of a few buckets: classify or categorize
+ * rows, companies, accounts, leads, contacts, domains or people (or anything
+ * "with confidence"), "label every row as …", or a yes/no question asked per
+ * row. The verb alone is not enough: "classify my records", "categorize my
+ * workflows" or "classify leads into ICP tiers" name the primitive that owns
+ * them, and conversation triage ("classify my inbox replies") keeps Messages.
+ * A bare "tag these contacts" stays with Tags.
+ */
+function isRowClassificationIntent(query) {
+    if (ROW_CLASSIFICATION_OTHER_OWNER.test(query))
+        return false;
+    const classifyVerb = /\b(classif(?:y|ies|ied|ying|ication)|categori[sz](?:e|es|ed|ing|ation))\b/.test(query);
+    return (classifyVerb && (ROW_CLASSIFICATION_ROW_NOUN.test(query) || /\bconfidence\b/.test(query)))
+        || /\blabel(?:s|led|ed|ling|ing)?\b.{0,40}\b(?:each|every|all|per)\s+(?:rows?|compan(?:y|ies)|accounts?|leads?|contacts?|domains?)\b/.test(query)
+        || /\blabel(?:s|led|ed|ling|ing)?\b.{0,80}\bconfidence\b/.test(query)
+        || /\byes(?: or |\/)no\b.{0,60}\b(?:each|every|per)\s+(?:rows?|compan(?:y|ies)|accounts?|leads?|contacts?)\b/.test(query)
+        || /\b(?:each|every|per)\s+(?:rows?|compan(?:y|ies)|accounts?|leads?|contacts?)\b.{0,60}\byes(?: or |\/)no\b/.test(query);
+}
 // "get company website URL from company name", "find the websites for this
 // list of company names", "recover domains for company names" — a URL-ish
 // noun, a company noun, a recovery verb, and the hint that the input is NAMES
@@ -1177,6 +1369,24 @@ function isSecondPartyDecisionIntent(query) {
         && !/\b(linkedin|public|published|post|posts|publishing)\b/.test(query);
     return decisionLanguage || clientDecision || internalThread;
 }
+/** An X (Twitter) post format: thread, poll, alt text, who-can-reply, quote, photo tags. */
+function isXPostFormatIntent(query) {
+    return /\b(x|twitter|tweets?)\b/.test(query)
+        && /\b(thread|poll|alt text|image descriptions?|reply settings?|who can reply|quote|photo tags?|tag (?:people|someone|accounts?) in)\b/.test(query);
+}
+/** A post's video cover (thumbnail) or a preview of a post being authored. Competitor ad creative stays with Ads. */
+function isFailedPostIntent(query) {
+    if (/\b(ads?|competitors?|runs?|workflows?|sequences?|tables?|comments?)\b/.test(query))
+        return false;
+    return /\b(posts?|tweets?)\b/.test(query)
+        && /\b(fail(s|ed|ing|ure)?|stuck|locked|uncertain|refused|rejected|retry|reschedul\w*)\b/.test(query);
+}
+function isPostCoverOrPreviewIntent(query) {
+    if (/\b(ads?|competitors?)\b/.test(query))
+        return false;
+    return (/\b(cover|thumbnail)\b/.test(query) && /\b(post|video|draft)\b/.test(query))
+        || /\bpreview\b.{0,40}\b(post|draft)\b/.test(query);
+}
 function isOwnedPostCommentIntent(query) {
     if (!/\bcomments?\b/.test(query) || !/\b(linkedin|posts?|publishing)\b/.test(query))
         return false;
@@ -1204,7 +1414,7 @@ function isPublicLinkedInRead(query) {
         return false;
     const disclaimsConnectedAccount = /\b(without|no|not using|does not require)\b.{0,24}\bconnected(?: linkedin)? account\b/.test(query);
     const connectedOwnership = !disclaimsConnectedAccount
-        && /\b(my|our|own|owned|connected|connections|followers|inbox|messages|recruiter|sales\s*navigator|salesnav|unipile|viewers)\b/.test(query);
+        && /\b(my|our|own|owned|connected|connections|followers|inbox|messages|recruiter|sales\s*navigator|salesnav|unipile|viewers?)\b/.test(query);
     if (connectedOwnership)
         return false;
     return /\b(comments?|companies|company|competitor|cookieless|engagers?|harvest|posts?|profiles?|public|reactions?|reactors?|scrape|scraper|search|third[ -]party)\b/.test(query);

package/node_modules/@oxygen/shared/dist/cli-http-error.d.ts

@@ -0,0 +1,8 @@
+import { OxygenError } from "./cli-result.js";
+export declare class CliHttpError extends OxygenError {
+    readonly status: number;
+    constructor(status: number, code: string, message: string, options?: {
+        details?: unknown;
+        exitCode?: number;
+    });
+}

package/node_modules/@oxygen/shared/dist/cli-http-error.js

@@ -0,0 +1,8 @@
+import { OxygenError } from "./cli-result.js";
+export class CliHttpError extends OxygenError {
+    status;
+    constructor(status, code, message, options = {}) {
+        super(code, message, options);
+        this.status = status;
+    }
+}

package/node_modules/@oxygen/shared/dist/cli-result.js

@@ -51,6 +51,7 @@ export function exitCodeForErrorCode(code) {
         case "max_credits_required":
         case "approval_required":
         case "effect_unknown_approval_required":
+        case "amplification_risk_acknowledgement_required":
         case "spend_cap_required":
         case "spend_cap_too_low":
         case "insufficient_credits":