@oxygen-agent/cli 1.1010.644 → 1.1010.721

package/node_modules/@oxygen/shared/dist/plan-limits.js

@@ -11,10 +11,12 @@ const HOUR = 60 * 60;
 const DAY = 24 * HOUR;
 const MIB = 1024 * 1024;
 /**
- * One platform-wide Table import ceiling. A file can fill an empty physical
- * Table exactly to its retained-row capacity on every plan; imports into a
- * non-empty Table remain subject to that Table's remaining capacity and the
- * workspace-wide capacity envelope.
+ * The per-rung Table import ceiling this matrix reports: today's envelope. The
+ * ceiling ENFORCED on an import is the workspace's plan-band rows-per-Table
+ * limit (`resolveWorkspaceTableCapacity`, PROPOSED P-60: a file can fill an
+ * empty Table exactly), which the web import paths resolve per organization.
+ * Imports into a non-empty Table remain subject to that Table's remaining
+ * capacity and the workspace-wide envelope.
  */
 export const TABLE_IMPORT_ROW_LIMIT = WORKSPACE_TABLE_CAPACITY.tableRowLimit;
 // The platform request-body ceiling belongs to the same question as the import
@@ -33,38 +35,46 @@ export const MAX_CLI_JSON_BODY_BYTES = 2_000_000;
  * The per-rung limit matrix. `ai_live` deliberately equals `tool_live` at every
  * rung — one "live actions" mental model; the per-call cost asymmetry between
  * AI and tool calls is priced in credits, not throttled here.
+ *
+ * API rates follow the 2026-09 repricing (decision L2, ratified 2026-09-26):
+ * `cli.global` is the per-organization and per-key request total per minute,
+ * 1,200 / 3,000 / 6,000 / 12,000 / 30,000 from free to scale. The per-operation
+ * buckets below are PROPOSED (P-52, repricing spec § 4.2): each pre-repricing
+ * bucket multiplied by its rung's organization factor, 2x on free and 5x on
+ * every paid rung, and never above the rung's per-key total. `tenantSchema` and
+ * the flat `tenant_admin` guard in the web rate limiter are DDL abuse guards and
+ * stay unscaled.
  */
 export const PLAN_LIMITS = {
     free: {
         cli: {
-            global: { keyRequestsPerMinute: 120, orgRequestsPerMinute: 600 },
-            tenantRead: { requestsPerMinute: 60, orgUnits: { limit: 500_000, windowSeconds: HOUR } },
-            tenantWrite: { requestsPerMinute: 30, orgUnits: { limit: 100_000, windowSeconds: HOUR } },
-            bulkImport: { requestsPerMinute: 10, orgRequests: { limit: 100, windowSeconds: HOUR } },
-            aiLive: { requestsPerMinute: 20, orgRequests: { limit: 100, windowSeconds: HOUR } },
-            toolLive: { requestsPerMinute: 20, orgRequests: { limit: 100, windowSeconds: HOUR } },
-            toolDryRun: { requestsPerMinute: 60, orgRequests: { limit: 500, windowSeconds: HOUR } },
+            global: { keyRequestsPerMinute: 1_200, orgRequestsPerMinute: 1_200 },
+            tenantRead: { requestsPerMinute: 120, orgUnits: { limit: 1_000_000, windowSeconds: HOUR } },
+            tenantWrite: { requestsPerMinute: 60, orgUnits: { limit: 200_000, windowSeconds: HOUR } },
+            bulkImport: { requestsPerMinute: 20, orgRequests: { limit: 200, windowSeconds: HOUR } },
+            aiLive: { requestsPerMinute: 40, orgRequests: { limit: 200, windowSeconds: HOUR } },
+            toolLive: { requestsPerMinute: 40, orgRequests: { limit: 200, windowSeconds: HOUR } },
+            toolDryRun: { requestsPerMinute: 120, orgRequests: { limit: 1_000, windowSeconds: HOUR } },
             tenantSchema: { requestsPerMinute: 20, orgRequests: { limit: 100, windowSeconds: HOUR } },
             maxWriteRowsPerRequest: 5_000,
         },
         web: {
-            tenantRead: { requestsPerMinute: 120, orgUnits: { limit: 1_000_000, windowSeconds: HOUR } },
-            tenantWrite: { requestsPerMinute: 60, orgUnits: { limit: 500_000, windowSeconds: HOUR } },
-            columnRun: { requestsPerMinute: 30, orgUnits: { limit: 2_000, windowSeconds: HOUR } },
-            import: { requestsPerMinute: 10, orgRequests: { limit: 100, windowSeconds: HOUR } },
+            tenantRead: { requestsPerMinute: 240, orgUnits: { limit: 2_000_000, windowSeconds: HOUR } },
+            tenantWrite: { requestsPerMinute: 120, orgUnits: { limit: 1_000_000, windowSeconds: HOUR } },
+            columnRun: { requestsPerMinute: 60, orgUnits: { limit: 4_000, windowSeconds: HOUR } },
+            import: { requestsPerMinute: 20, orgRequests: { limit: 200, windowSeconds: HOUR } },
         },
         import: {
             maxRowsPerFile: TABLE_IMPORT_ROW_LIMIT,
             maxFileBytes: 100 * MIB,
             maxDirectCsvBodyBytes: 10_000_000,
         },
-        // Sized against the free tier's actual funding (OXP-10.2.4, 2026-08-17):
-        // 5,000 credits at signup plus 5,000 on CLI/MCP activation, one time each,
-        // with no monthly allowance to refill them. The previous ceilings were
-        // written when `free` meant a churned org that could spend nothing, so they
-        // were harmless at any value; now a single Agent run capped at 10,000 could
-        // consume the ENTIRE lifetime grant, and one capped at 5,000 could consume
-        // the whole signup grant before the customer saw anything work.
+        // Sized against the free tier's actual funding (OXP-10.2.4, 2026-08-17): one
+        // signup grant of FREE_SIGNUP_GRANT_CREDITS (1,000) with no monthly allowance
+        // to refill it. The previous ceilings were written when `free` meant a
+        // churned org that could spend nothing, so they were harmless at any value;
+        // an Agent run capped at the old 1,000 (today's unit) could consume the
+        // ENTIRE lifetime grant before the customer saw anything work.
         //
         // These are runaway guards, not the billing meter — a workspace that tops up
         // is bounded by its balance, not by these. The intent is only that no single
@@ -75,32 +85,31 @@ export const PLAN_LIMITS = {
             maxUpstreamCostUsd: 10,
             maxUpstreamCostUsdByok: 10,
         },
-        // Left at 5,000/1,500 deliberately. The signup grant is exactly one default
-        // Copilot session, and that is the point: a founder who picks the in-product
-        // path over the CLI must be able to complete one real session on the base
-        // grant alone. Lowering this would re-create the dead-on-arrival Copilot the
-        // split grant exists to prevent.
+        // Left at 500/150 deliberately (5,000/1,500 before the 2026-09-19 unit
+        // change). A founder who picks the in-product path over the CLI must be able
+        // to complete one real Copilot session on the 1,000-credit signup grant
+        // alone. Lowering this would re-create a dead-on-arrival Copilot.
         copilot: { maxSessionBudgetCredits: 500, defaultPerTurnCreditCeiling: 150 },
         signals: { maxEvents: 100, maxWindowDays: 30 },
         tableActions: { maxActionsPerRun: 10 },
     },
     starter: {
         cli: {
-            global: { keyRequestsPerMinute: 240, orgRequestsPerMinute: 600 },
-            tenantRead: { requestsPerMinute: 120, orgUnits: { limit: 25_000_000, windowSeconds: DAY } },
-            tenantWrite: { requestsPerMinute: 120, orgUnits: { limit: 5_000_000, windowSeconds: DAY } },
-            bulkImport: { requestsPerMinute: 30, orgRequests: { limit: 500, windowSeconds: HOUR } },
-            aiLive: { requestsPerMinute: 60, orgRequests: { limit: 5_000, windowSeconds: HOUR } },
-            toolLive: { requestsPerMinute: 60, orgRequests: { limit: 5_000, windowSeconds: HOUR } },
-            toolDryRun: { requestsPerMinute: 120, orgRequests: { limit: 2_000, windowSeconds: HOUR } },
+            global: { keyRequestsPerMinute: 3_000, orgRequestsPerMinute: 3_000 },
+            tenantRead: { requestsPerMinute: 600, orgUnits: { limit: 125_000_000, windowSeconds: DAY } },
+            tenantWrite: { requestsPerMinute: 600, orgUnits: { limit: 25_000_000, windowSeconds: DAY } },
+            bulkImport: { requestsPerMinute: 150, orgRequests: { limit: 2_500, windowSeconds: HOUR } },
+            aiLive: { requestsPerMinute: 300, orgRequests: { limit: 25_000, windowSeconds: HOUR } },
+            toolLive: { requestsPerMinute: 300, orgRequests: { limit: 25_000, windowSeconds: HOUR } },
+            toolDryRun: { requestsPerMinute: 600, orgRequests: { limit: 10_000, windowSeconds: HOUR } },
             tenantSchema: { requestsPerMinute: 60, orgRequests: { limit: 600, windowSeconds: HOUR } },
             maxWriteRowsPerRequest: 50_000,
         },
         web: {
-            tenantRead: { requestsPerMinute: 300, orgUnits: { limit: 20_000_000, windowSeconds: DAY } },
-            tenantWrite: { requestsPerMinute: 180, orgUnits: { limit: 10_000_000, windowSeconds: DAY } },
-            columnRun: { requestsPerMinute: 120, orgUnits: { limit: 500_000, windowSeconds: DAY } },
-            import: { requestsPerMinute: 30, orgRequests: { limit: 500, windowSeconds: HOUR } },
+            tenantRead: { requestsPerMinute: 1_500, orgUnits: { limit: 100_000_000, windowSeconds: DAY } },
+            tenantWrite: { requestsPerMinute: 900, orgUnits: { limit: 50_000_000, windowSeconds: DAY } },
+            columnRun: { requestsPerMinute: 600, orgUnits: { limit: 2_500_000, windowSeconds: DAY } },
+            import: { requestsPerMinute: 150, orgRequests: { limit: 2_500, windowSeconds: HOUR } },
         },
         import: {
             maxRowsPerFile: TABLE_IMPORT_ROW_LIMIT,
@@ -119,21 +128,21 @@ export const PLAN_LIMITS = {
     },
     pro: {
         cli: {
-            global: { keyRequestsPerMinute: 240, orgRequestsPerMinute: 1_200 },
-            tenantRead: { requestsPerMinute: 240, orgUnits: { limit: 50_000_000, windowSeconds: DAY } },
-            tenantWrite: { requestsPerMinute: 240, orgUnits: { limit: 10_000_000, windowSeconds: DAY } },
-            bulkImport: { requestsPerMinute: 60, orgRequests: { limit: 1_000, windowSeconds: HOUR } },
-            aiLive: { requestsPerMinute: 120, orgRequests: { limit: 12_000, windowSeconds: HOUR } },
-            toolLive: { requestsPerMinute: 120, orgRequests: { limit: 12_000, windowSeconds: HOUR } },
-            toolDryRun: { requestsPerMinute: 120, orgRequests: { limit: 2_000, windowSeconds: HOUR } },
+            global: { keyRequestsPerMinute: 6_000, orgRequestsPerMinute: 6_000 },
+            tenantRead: { requestsPerMinute: 1_200, orgUnits: { limit: 250_000_000, windowSeconds: DAY } },
+            tenantWrite: { requestsPerMinute: 1_200, orgUnits: { limit: 50_000_000, windowSeconds: DAY } },
+            bulkImport: { requestsPerMinute: 300, orgRequests: { limit: 5_000, windowSeconds: HOUR } },
+            aiLive: { requestsPerMinute: 600, orgRequests: { limit: 60_000, windowSeconds: HOUR } },
+            toolLive: { requestsPerMinute: 600, orgRequests: { limit: 60_000, windowSeconds: HOUR } },
+            toolDryRun: { requestsPerMinute: 600, orgRequests: { limit: 10_000, windowSeconds: HOUR } },
             tenantSchema: { requestsPerMinute: 60, orgRequests: { limit: 600, windowSeconds: HOUR } },
             maxWriteRowsPerRequest: 50_000,
         },
         web: {
-            tenantRead: { requestsPerMinute: 600, orgUnits: { limit: 40_000_000, windowSeconds: DAY } },
-            tenantWrite: { requestsPerMinute: 360, orgUnits: { limit: 20_000_000, windowSeconds: DAY } },
-            columnRun: { requestsPerMinute: 240, orgUnits: { limit: 1_000_000, windowSeconds: DAY } },
-            import: { requestsPerMinute: 60, orgRequests: { limit: 1_000, windowSeconds: HOUR } },
+            tenantRead: { requestsPerMinute: 3_000, orgUnits: { limit: 200_000_000, windowSeconds: DAY } },
+            tenantWrite: { requestsPerMinute: 1_800, orgUnits: { limit: 100_000_000, windowSeconds: DAY } },
+            columnRun: { requestsPerMinute: 1_200, orgUnits: { limit: 5_000_000, windowSeconds: DAY } },
+            import: { requestsPerMinute: 300, orgRequests: { limit: 5_000, windowSeconds: HOUR } },
         },
         import: {
             maxRowsPerFile: TABLE_IMPORT_ROW_LIMIT,
@@ -152,21 +161,21 @@ export const PLAN_LIMITS = {
     },
     team: {
         cli: {
-            global: { keyRequestsPerMinute: 240, orgRequestsPerMinute: 2_400 },
-            tenantRead: { requestsPerMinute: 480, orgUnits: { limit: 100_000_000, windowSeconds: DAY } },
-            tenantWrite: { requestsPerMinute: 480, orgUnits: { limit: 25_000_000, windowSeconds: DAY } },
-            bulkImport: { requestsPerMinute: 120, orgRequests: { limit: 2_000, windowSeconds: HOUR } },
-            aiLive: { requestsPerMinute: 240, orgRequests: { limit: 30_000, windowSeconds: HOUR } },
-            toolLive: { requestsPerMinute: 240, orgRequests: { limit: 30_000, windowSeconds: HOUR } },
-            toolDryRun: { requestsPerMinute: 120, orgRequests: { limit: 2_000, windowSeconds: HOUR } },
+            global: { keyRequestsPerMinute: 12_000, orgRequestsPerMinute: 12_000 },
+            tenantRead: { requestsPerMinute: 2_400, orgUnits: { limit: 500_000_000, windowSeconds: DAY } },
+            tenantWrite: { requestsPerMinute: 2_400, orgUnits: { limit: 125_000_000, windowSeconds: DAY } },
+            bulkImport: { requestsPerMinute: 600, orgRequests: { limit: 10_000, windowSeconds: HOUR } },
+            aiLive: { requestsPerMinute: 1_200, orgRequests: { limit: 150_000, windowSeconds: HOUR } },
+            toolLive: { requestsPerMinute: 1_200, orgRequests: { limit: 150_000, windowSeconds: HOUR } },
+            toolDryRun: { requestsPerMinute: 600, orgRequests: { limit: 10_000, windowSeconds: HOUR } },
             tenantSchema: { requestsPerMinute: 60, orgRequests: { limit: 600, windowSeconds: HOUR } },
             maxWriteRowsPerRequest: 50_000,
         },
         web: {
-            tenantRead: { requestsPerMinute: 1_200, orgUnits: { limit: 100_000_000, windowSeconds: DAY } },
-            tenantWrite: { requestsPerMinute: 720, orgUnits: { limit: 50_000_000, windowSeconds: DAY } },
-            columnRun: { requestsPerMinute: 480, orgUnits: { limit: 2_500_000, windowSeconds: DAY } },
-            import: { requestsPerMinute: 120, orgRequests: { limit: 2_000, windowSeconds: HOUR } },
+            tenantRead: { requestsPerMinute: 6_000, orgUnits: { limit: 500_000_000, windowSeconds: DAY } },
+            tenantWrite: { requestsPerMinute: 3_600, orgUnits: { limit: 250_000_000, windowSeconds: DAY } },
+            columnRun: { requestsPerMinute: 2_400, orgUnits: { limit: 12_500_000, windowSeconds: DAY } },
+            import: { requestsPerMinute: 600, orgRequests: { limit: 10_000, windowSeconds: HOUR } },
         },
         import: {
             maxRowsPerFile: TABLE_IMPORT_ROW_LIMIT,
@@ -185,21 +194,21 @@ export const PLAN_LIMITS = {
     },
     scale: {
         cli: {
-            global: { keyRequestsPerMinute: 240, orgRequestsPerMinute: 6_000 },
-            tenantRead: { requestsPerMinute: 1_000, orgUnits: { limit: 500_000_000, windowSeconds: DAY } },
-            tenantWrite: { requestsPerMinute: 1_000, orgUnits: { limit: 100_000_000, windowSeconds: DAY } },
-            bulkImport: { requestsPerMinute: 240, orgRequests: { limit: 5_000, windowSeconds: HOUR } },
-            aiLive: { requestsPerMinute: 600, orgRequests: { limit: 100_000, windowSeconds: HOUR } },
-            toolLive: { requestsPerMinute: 600, orgRequests: { limit: 100_000, windowSeconds: HOUR } },
-            toolDryRun: { requestsPerMinute: 120, orgRequests: { limit: 2_000, windowSeconds: HOUR } },
+            global: { keyRequestsPerMinute: 30_000, orgRequestsPerMinute: 30_000 },
+            tenantRead: { requestsPerMinute: 5_000, orgUnits: { limit: 2_500_000_000, windowSeconds: DAY } },
+            tenantWrite: { requestsPerMinute: 5_000, orgUnits: { limit: 500_000_000, windowSeconds: DAY } },
+            bulkImport: { requestsPerMinute: 1_200, orgRequests: { limit: 25_000, windowSeconds: HOUR } },
+            aiLive: { requestsPerMinute: 3_000, orgRequests: { limit: 500_000, windowSeconds: HOUR } },
+            toolLive: { requestsPerMinute: 3_000, orgRequests: { limit: 500_000, windowSeconds: HOUR } },
+            toolDryRun: { requestsPerMinute: 600, orgRequests: { limit: 10_000, windowSeconds: HOUR } },
             tenantSchema: { requestsPerMinute: 60, orgRequests: { limit: 600, windowSeconds: HOUR } },
             maxWriteRowsPerRequest: 50_000,
         },
         web: {
-            tenantRead: { requestsPerMinute: 2_000, orgUnits: { limit: 400_000_000, windowSeconds: DAY } },
-            tenantWrite: { requestsPerMinute: 1_500, orgUnits: { limit: 200_000_000, windowSeconds: DAY } },
-            columnRun: { requestsPerMinute: 1_000, orgUnits: { limit: 10_000_000, windowSeconds: DAY } },
-            import: { requestsPerMinute: 240, orgRequests: { limit: 5_000, windowSeconds: HOUR } },
+            tenantRead: { requestsPerMinute: 10_000, orgUnits: { limit: 2_000_000_000, windowSeconds: DAY } },
+            tenantWrite: { requestsPerMinute: 7_500, orgUnits: { limit: 1_000_000_000, windowSeconds: DAY } },
+            columnRun: { requestsPerMinute: 5_000, orgUnits: { limit: 50_000_000, windowSeconds: DAY } },
+            import: { requestsPerMinute: 1_200, orgRequests: { limit: 25_000, windowSeconds: HOUR } },
         },
         import: {
             maxRowsPerFile: TABLE_IMPORT_ROW_LIMIT,

package/node_modules/@oxygen/shared/dist/pricing-sheet.d.ts

@@ -72,19 +72,73 @@ export declare const AI_COLUMN_CREDITS: {
  * never read.
  *
  * The figures below describe the DEFAULT research column, which since D53 discovers
- * then reads: `serper.search` (0.5) finds the URLs, then one additive
- * `exa.contents` read (0.5) turns the top result's ~160-char SERP teaser into real
- * page text. So a typical row spends 1 and a preview reserves 4.5, because the
- * ceiling must also cover the `exa.search` fallback (3.5) firing when serper finds
- * nothing. The read carries no fallback of its own — a read miss leaves the row
- * grounded on the snippets it already has.
+ * then reads: `serper.search` (0.5) finds the URLs, then an additive read turns the
+ * top result's ~160-char SERP teaser into real page text. The read tries OXYGEN's
+ * own `web.page_fetch` (0.1) first and `exa.contents` (0.5) only when the native
+ * fetch cannot read the page. So a typical row spends 0.6 and a preview reserves
+ * 4.6: the ceiling covers the `exa.search` fallback (3.5) firing when serper finds
+ * nothing plus both read lanes. A read miss leaves the row grounded on the snippets
+ * it already has.
  *
  * Both numbers are RESOLVER-DERIVED and pinned by pricing-sheet-conformance.test.ts
  * against the shipped default, so a re-price or a lane change fails a test rather
  * than quietly mispricing this page. Do not hand-edit them.
  */
-export declare const AI_COLUMN_WEB_SEARCH_TYPICAL_CREDITS = 1;
-export declare const AI_COLUMN_WEB_SEARCH_RESERVED_CREDITS = 4.5;
+export declare const AI_COLUMN_WEB_SEARCH_TYPICAL_CREDITS = 0.6;
+export declare const AI_COLUMN_WEB_SEARCH_RESERVED_CREDITS = 4.6;
+/**
+ * Research depth (Claygent parity). `quick` is the single grounded pass priced
+ * above (the column's tier price plus AI_COLUMN_WEB_SEARCH_*; 2.1 typical at the
+ * Fast tier). A `standard` or `deep` row runs a bounded agent loop — several model
+ * turns over a growing evidence list — on a model the DEPTH fixes (standard on the
+ * Fast tier, deep on Balanced; the column's own tier applies to quick only), so its
+ * model leg is one flat price per row, reserved once:
+ *
+ *   standard: 4.3 + 1.2 tools = 5.5 typical
+ *   deep:     7.6 + 2.4 tools = 10 typical
+ *
+ * Founder-ratified 2026-09-26: 30-50% under Clay, >=5x markup. The Clay comparison
+ * it was set against: Clay web research bills per row in Data Credits — GPT-5 Nano
+ * 0.5 DC, Mini/Flash 1 DC, Claygent Neon 2 DC, Argon 3 DC — at >= $0.05 per DC plus
+ * ~$0.01 of action per row; OXYGEN credits are $0.01. Every figure must also keep
+ * >= 5x over the loop's modelled COGS. Pinned against the live estimator by
+ * @oxygen/integrations pricing-sheet-conformance.test.ts.
+ */
+export declare const RESEARCH_DEPTH_MODEL_CREDITS: {
+    readonly standard: 4.3;
+    readonly deep: 7.6;
+};
+/** The tier whose model each loop depth runs on, whatever tier the column stores. */
+export declare const RESEARCH_DEPTH_MODEL_TIER: {
+    readonly standard: "low";
+    readonly deep: "medium";
+};
+/**
+ * The tool half of a standard/deep row. `typical` is the ratified planning shape —
+ * standard: 2 serper searches + 2 native page reads; deep: 3 serper searches + 4
+ * native reads + 1 exa.contents fallback read. `reserved` is every budgeted tool
+ * call at its dearest lane — each web_search, the row's shared exa.search pool
+ * (standard 1, deep 2: the zero-result fallback and semantic_search draw on it),
+ * each read's full ladder, deep's one Firecrawl read and site crawls. Deep's
+ * company-news call is opt-in (a news lead-lane column) and adds its own price to
+ * the reserve only there. Resolver-derived, pinned like the above.
+ */
+export declare const RESEARCH_DEPTH_GROUNDING_CREDITS: {
+    readonly standard: {
+        readonly typical: 1.2;
+        readonly reserved: 7.4;
+    };
+    readonly deep: {
+        readonly typical: 2.4;
+        readonly reserved: 19.8;
+    };
+};
+/** Typical per-row totals at each depth's default tier (founder-ratified 2026-09-26). */
+export declare const RESEARCH_DEPTH_TYPICAL_ROW_CREDITS: {
+    readonly quick: 2.1;
+    readonly standard: 5.5;
+    readonly deep: 10;
+};
 /** Workflow/automation actions (steps, tool calls, row writes) — capacity guard. */
 export declare const AUTOMATION_ACTION_CREDITS = 0.001;
 /**
@@ -113,7 +167,7 @@ export declare const MANAGED_INBOX_CREDITS_PER_MONTH: {
  * Costing only the outbound leg undercharges every call by 29%.
  */
 export declare const VOICE_MARKUP = 5;
-export declare const VOICE_NUMBER_CREDITS_PER_MONTH = 500;
+export declare const VOICE_NUMBER_CREDITS_PER_MONTH = 1000;
 export declare const VOICE_CREDITS_PER_MINUTE = 9;
 export declare const VOICE_CREDITS_PER_AMD_CALL = 3.8;
 /** Managed domains: registrar at-cost × 1.25 (≈ a $10.44 .com → ~13,050 credits/yr). */
@@ -142,8 +196,12 @@ export declare const PLACEMENT_TEST_OVERAGE_CREDITS = 16.6;
  * price; every per-action charge is 0. Per-MESSAGE sends on email and WhatsApp
  * stay 0 too — but a connected WhatsApp NUMBER carries its own monthly
  * connection fee, see WHATSAPP_ACCOUNT_CREDITS_PER_MONTH.
+ *
+ * The value is the seeded price after the 2026-09 repricing (3,400, decision
+ * 2.1). The price in force before its effective-date switch is lower: resolve
+ * it with repricedChargeCredits from `@oxygen/shared/repricing` on the server.
  */
-export declare const LINKEDIN_ACCOUNT_CREDITS_PER_MONTH = 1000;
+export declare const LINKEDIN_ACCOUNT_CREDITS_PER_MONTH = 3400;
 export declare const LINKEDIN_ACTION_CREDITS: {
     readonly visit_profile: 0;
     readonly invite: 0;
@@ -156,11 +214,18 @@ export declare const LINKEDIN_ACTION_CREDITS: {
 export declare const LINKEDIN_TYPICAL_ACTIONS_CREDITS_PER_MONTH = 0;
 /**
  * WhatsApp numbers: flat monthly connection fee per connected number, the same
- * seat shape as LinkedIn. Billed off the rolling-30d peak, so a number connected
- * part-way through a month still bills the full cycle. WhatsApp message sends
- * themselves remain 0 credits.
+ * seat shape as LinkedIn. WhatsApp message sends themselves remain 0 credits.
+ * Seeded at the 2026-09 repricing's price (3,000, decision 2.3); resolve the
+ * price in force with repricedChargeCredits.
+ */
+export declare const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 3000;
+/**
+ * X accounts: monthly credit reservation per connected account (2026-09
+ * repricing, decision 2.2). Like the LinkedIn and WhatsApp constants above this
+ * is the seeded, post-repricing price; show the price in force with
+ * repricedChargeCredits from `@oxygen/shared/repricing`.
  */
-export declare const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 1000;
+export declare const X_ACCOUNT_CREDITS_PER_MONTH = 1000;
 /** Dedicated egress IP add-on. */
 export declare const EGRESS_IP_CREDITS_PER_MONTH = 2500;
 /**

package/node_modules/@oxygen/shared/dist/pricing-sheet.js

@@ -34,7 +34,7 @@
  * loadPricingBook() instead of importing this file, so a staff re-price at
  * /admin/costs takes effect without a deploy.
  */
-import { AUTOMATION_ACTION_CREDITS as SNAPSHOT_AUTOMATION_ACTION_CREDITS, CREDITS_PER_USD as SNAPSHOT_CREDITS_PER_USD, DELIVERABILITY_INCLUDED_TESTS_PER_INBOX as SNAPSHOT_DELIVERABILITY_INCLUDED_TESTS_PER_INBOX, DELIVERABILITY_SEAT_CREDITS_PER_MONTH as SNAPSHOT_DELIVERABILITY_SEAT_CREDITS_PER_MONTH, EGRESS_IP_CREDITS_PER_MONTH as SNAPSHOT_EGRESS_IP_CREDITS_PER_MONTH, MANAGED_INBOX_USD_CENTS as SNAPSHOT_MANAGED_INBOX_USD_CENTS, SENDING_DOMAIN_USD_CENTS as SNAPSHOT_SENDING_DOMAIN_USD_CENTS, SENDING_SEAT_USD_CENTS as SNAPSHOT_SENDING_SEAT_USD_CENTS, ENRICHMENT_CREDITS_PER_ROW_TYPICAL as SNAPSHOT_ENRICHMENT_CREDITS_PER_ROW_TYPICAL, LINKEDIN_ACCOUNT_CREDITS_PER_MONTH as SNAPSHOT_LINKEDIN_ACCOUNT_CREDITS_PER_MONTH, LINKEDIN_ACTION_CREDITS as SNAPSHOT_LINKEDIN_ACTION_CREDITS, LINKEDIN_TYPICAL_ACTIONS_CREDITS_PER_MONTH as SNAPSHOT_LINKEDIN_TYPICAL_ACTIONS_CREDITS_PER_MONTH, MANAGED_DOMAIN_CREDITS_PER_YEAR_TYPICAL as SNAPSHOT_MANAGED_DOMAIN_CREDITS_PER_YEAR_TYPICAL, MANAGED_DOMAIN_MARKUP as SNAPSHOT_MANAGED_DOMAIN_MARKUP, MANAGED_INBOX_CREDITS_PER_MONTH as SNAPSHOT_MANAGED_INBOX_CREDITS_PER_MONTH, MANAGED_INBOX_MARKUP as SNAPSHOT_MANAGED_INBOX_MARKUP, PLACEMENT_TEST_OVERAGE_CREDITS as SNAPSHOT_PLACEMENT_TEST_OVERAGE_CREDITS, PRICE_SHEET_VERIFIED as SNAPSHOT_PRICE_SHEET_VERIFIED, SEND_CREDITS as SNAPSHOT_SEND_CREDITS, SUBSCRIPTION_USD_PER_100 as SNAPSHOT_SUBSCRIPTION_USD_PER_100, TOPUP_USD_PER_100 as SNAPSHOT_TOPUP_USD_PER_100, VOICE_CREDITS_PER_AMD_CALL as SNAPSHOT_VOICE_CREDITS_PER_AMD_CALL, VOICE_CREDITS_PER_MINUTE as SNAPSHOT_VOICE_CREDITS_PER_MINUTE, VOICE_MARKUP as SNAPSHOT_VOICE_MARKUP, VOICE_NUMBER_CREDITS_PER_MONTH as SNAPSHOT_VOICE_NUMBER_CREDITS_PER_MONTH, WHATSAPP_ACCOUNT_CREDITS_PER_MONTH as SNAPSHOT_WHATSAPP_ACCOUNT_CREDITS_PER_MONTH, } from "./pricing-snapshot.generated.js";
+import { AUTOMATION_ACTION_CREDITS as SNAPSHOT_AUTOMATION_ACTION_CREDITS, CREDITS_PER_USD as SNAPSHOT_CREDITS_PER_USD, DELIVERABILITY_INCLUDED_TESTS_PER_INBOX as SNAPSHOT_DELIVERABILITY_INCLUDED_TESTS_PER_INBOX, DELIVERABILITY_SEAT_CREDITS_PER_MONTH as SNAPSHOT_DELIVERABILITY_SEAT_CREDITS_PER_MONTH, EGRESS_IP_CREDITS_PER_MONTH as SNAPSHOT_EGRESS_IP_CREDITS_PER_MONTH, MANAGED_INBOX_USD_CENTS as SNAPSHOT_MANAGED_INBOX_USD_CENTS, SENDING_DOMAIN_USD_CENTS as SNAPSHOT_SENDING_DOMAIN_USD_CENTS, SENDING_SEAT_USD_CENTS as SNAPSHOT_SENDING_SEAT_USD_CENTS, ENRICHMENT_CREDITS_PER_ROW_TYPICAL as SNAPSHOT_ENRICHMENT_CREDITS_PER_ROW_TYPICAL, LINKEDIN_ACCOUNT_CREDITS_PER_MONTH as SNAPSHOT_LINKEDIN_ACCOUNT_CREDITS_PER_MONTH, LINKEDIN_ACTION_CREDITS as SNAPSHOT_LINKEDIN_ACTION_CREDITS, LINKEDIN_TYPICAL_ACTIONS_CREDITS_PER_MONTH as SNAPSHOT_LINKEDIN_TYPICAL_ACTIONS_CREDITS_PER_MONTH, MANAGED_DOMAIN_CREDITS_PER_YEAR_TYPICAL as SNAPSHOT_MANAGED_DOMAIN_CREDITS_PER_YEAR_TYPICAL, MANAGED_DOMAIN_MARKUP as SNAPSHOT_MANAGED_DOMAIN_MARKUP, MANAGED_INBOX_CREDITS_PER_MONTH as SNAPSHOT_MANAGED_INBOX_CREDITS_PER_MONTH, MANAGED_INBOX_MARKUP as SNAPSHOT_MANAGED_INBOX_MARKUP, PLACEMENT_TEST_OVERAGE_CREDITS as SNAPSHOT_PLACEMENT_TEST_OVERAGE_CREDITS, PRICE_SHEET_VERIFIED as SNAPSHOT_PRICE_SHEET_VERIFIED, SEND_CREDITS as SNAPSHOT_SEND_CREDITS, SUBSCRIPTION_USD_PER_100 as SNAPSHOT_SUBSCRIPTION_USD_PER_100, TOPUP_USD_PER_100 as SNAPSHOT_TOPUP_USD_PER_100, VOICE_CREDITS_PER_AMD_CALL as SNAPSHOT_VOICE_CREDITS_PER_AMD_CALL, VOICE_CREDITS_PER_MINUTE as SNAPSHOT_VOICE_CREDITS_PER_MINUTE, VOICE_MARKUP as SNAPSHOT_VOICE_MARKUP, VOICE_NUMBER_CREDITS_PER_MONTH as SNAPSHOT_VOICE_NUMBER_CREDITS_PER_MONTH, WHATSAPP_ACCOUNT_CREDITS_PER_MONTH as SNAPSHOT_WHATSAPP_ACCOUNT_CREDITS_PER_MONTH, X_ACCOUNT_CREDITS_PER_MONTH as SNAPSHOT_X_ACCOUNT_CREDITS_PER_MONTH, } from "./pricing-snapshot.generated.js";
 export { creditsToUsd, usdToCredits } from "./pricing-snapshot.generated.js";
 export const PRICING_SHEET_VERIFIED = SNAPSHOT_PRICE_SHEET_VERIFIED;
 export const PRICING_CREDITS_PER_USD = SNAPSHOT_CREDITS_PER_USD;
@@ -67,19 +67,57 @@ export const AI_COLUMN_CREDITS = { low: 1.5, medium: 7.5, high: 25 };
  * never read.
  *
  * The figures below describe the DEFAULT research column, which since D53 discovers
- * then reads: `serper.search` (0.5) finds the URLs, then one additive
- * `exa.contents` read (0.5) turns the top result's ~160-char SERP teaser into real
- * page text. So a typical row spends 1 and a preview reserves 4.5, because the
- * ceiling must also cover the `exa.search` fallback (3.5) firing when serper finds
- * nothing. The read carries no fallback of its own — a read miss leaves the row
- * grounded on the snippets it already has.
+ * then reads: `serper.search` (0.5) finds the URLs, then an additive read turns the
+ * top result's ~160-char SERP teaser into real page text. The read tries OXYGEN's
+ * own `web.page_fetch` (0.1) first and `exa.contents` (0.5) only when the native
+ * fetch cannot read the page. So a typical row spends 0.6 and a preview reserves
+ * 4.6: the ceiling covers the `exa.search` fallback (3.5) firing when serper finds
+ * nothing plus both read lanes. A read miss leaves the row grounded on the snippets
+ * it already has.
  *
  * Both numbers are RESOLVER-DERIVED and pinned by pricing-sheet-conformance.test.ts
  * against the shipped default, so a re-price or a lane change fails a test rather
  * than quietly mispricing this page. Do not hand-edit them.
  */
-export const AI_COLUMN_WEB_SEARCH_TYPICAL_CREDITS = 1;
-export const AI_COLUMN_WEB_SEARCH_RESERVED_CREDITS = 4.5;
+export const AI_COLUMN_WEB_SEARCH_TYPICAL_CREDITS = 0.6;
+export const AI_COLUMN_WEB_SEARCH_RESERVED_CREDITS = 4.6;
+/**
+ * Research depth (Claygent parity). `quick` is the single grounded pass priced
+ * above (the column's tier price plus AI_COLUMN_WEB_SEARCH_*; 2.1 typical at the
+ * Fast tier). A `standard` or `deep` row runs a bounded agent loop — several model
+ * turns over a growing evidence list — on a model the DEPTH fixes (standard on the
+ * Fast tier, deep on Balanced; the column's own tier applies to quick only), so its
+ * model leg is one flat price per row, reserved once:
+ *
+ *   standard: 4.3 + 1.2 tools = 5.5 typical
+ *   deep:     7.6 + 2.4 tools = 10 typical
+ *
+ * Founder-ratified 2026-09-26: 30-50% under Clay, >=5x markup. The Clay comparison
+ * it was set against: Clay web research bills per row in Data Credits — GPT-5 Nano
+ * 0.5 DC, Mini/Flash 1 DC, Claygent Neon 2 DC, Argon 3 DC — at >= $0.05 per DC plus
+ * ~$0.01 of action per row; OXYGEN credits are $0.01. Every figure must also keep
+ * >= 5x over the loop's modelled COGS. Pinned against the live estimator by
+ * @oxygen/integrations pricing-sheet-conformance.test.ts.
+ */
+export const RESEARCH_DEPTH_MODEL_CREDITS = { standard: 4.3, deep: 7.6 };
+/** The tier whose model each loop depth runs on, whatever tier the column stores. */
+export const RESEARCH_DEPTH_MODEL_TIER = { standard: "low", deep: "medium" };
+/**
+ * The tool half of a standard/deep row. `typical` is the ratified planning shape —
+ * standard: 2 serper searches + 2 native page reads; deep: 3 serper searches + 4
+ * native reads + 1 exa.contents fallback read. `reserved` is every budgeted tool
+ * call at its dearest lane — each web_search, the row's shared exa.search pool
+ * (standard 1, deep 2: the zero-result fallback and semantic_search draw on it),
+ * each read's full ladder, deep's one Firecrawl read and site crawls. Deep's
+ * company-news call is opt-in (a news lead-lane column) and adds its own price to
+ * the reserve only there. Resolver-derived, pinned like the above.
+ */
+export const RESEARCH_DEPTH_GROUNDING_CREDITS = {
+    standard: { typical: 1.2, reserved: 7.4 },
+    deep: { typical: 2.4, reserved: 19.8 },
+};
+/** Typical per-row totals at each depth's default tier (founder-ratified 2026-09-26). */
+export const RESEARCH_DEPTH_TYPICAL_ROW_CREDITS = { quick: 2.1, standard: 5.5, deep: 10 };
 /** Workflow/automation actions (steps, tool calls, row writes) — capacity guard. */
 export const AUTOMATION_ACTION_CREDITS = SNAPSHOT_AUTOMATION_ACTION_CREDITS;
 /**
@@ -137,17 +175,28 @@ export const PLACEMENT_TEST_OVERAGE_CREDITS = SNAPSHOT_PLACEMENT_TEST_OVERAGE_CR
  * price; every per-action charge is 0. Per-MESSAGE sends on email and WhatsApp
  * stay 0 too — but a connected WhatsApp NUMBER carries its own monthly
  * connection fee, see WHATSAPP_ACCOUNT_CREDITS_PER_MONTH.
+ *
+ * The value is the seeded price after the 2026-09 repricing (3,400, decision
+ * 2.1). The price in force before its effective-date switch is lower: resolve
+ * it with repricedChargeCredits from `@oxygen/shared/repricing` on the server.
  */
 export const LINKEDIN_ACCOUNT_CREDITS_PER_MONTH = SNAPSHOT_LINKEDIN_ACCOUNT_CREDITS_PER_MONTH;
 export const LINKEDIN_ACTION_CREDITS = SNAPSHOT_LINKEDIN_ACTION_CREDITS;
 export const LINKEDIN_TYPICAL_ACTIONS_CREDITS_PER_MONTH = SNAPSHOT_LINKEDIN_TYPICAL_ACTIONS_CREDITS_PER_MONTH;
 /**
  * WhatsApp numbers: flat monthly connection fee per connected number, the same
- * seat shape as LinkedIn. Billed off the rolling-30d peak, so a number connected
- * part-way through a month still bills the full cycle. WhatsApp message sends
- * themselves remain 0 credits.
+ * seat shape as LinkedIn. WhatsApp message sends themselves remain 0 credits.
+ * Seeded at the 2026-09 repricing's price (3,000, decision 2.3); resolve the
+ * price in force with repricedChargeCredits.
  */
 export const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = SNAPSHOT_WHATSAPP_ACCOUNT_CREDITS_PER_MONTH;
+/**
+ * X accounts: monthly credit reservation per connected account (2026-09
+ * repricing, decision 2.2). Like the LinkedIn and WhatsApp constants above this
+ * is the seeded, post-repricing price; show the price in force with
+ * repricedChargeCredits from `@oxygen/shared/repricing`.
+ */
+export const X_ACCOUNT_CREDITS_PER_MONTH = SNAPSHOT_X_ACCOUNT_CREDITS_PER_MONTH;
 /** Dedicated egress IP add-on. */
 export const EGRESS_IP_CREDITS_PER_MONTH = SNAPSHOT_EGRESS_IP_CREDITS_PER_MONTH;
 /**

package/node_modules/@oxygen/shared/dist/pricing-snapshot.generated.d.ts

@@ -15,8 +15,9 @@ export declare const MANAGED_DOMAIN_MARKUP = 1.25;
 export declare const VOICE_MARKUP = 5;
 /** Applied to actual provider inference cost at settle time. */
 export declare const COPILOT_CREDIT_MARKUP_MULTIPLIER = 5;
-export declare const LINKEDIN_ACCOUNT_CREDITS_PER_MONTH = 1000;
-export declare const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 1000;
+export declare const LINKEDIN_ACCOUNT_CREDITS_PER_MONTH = 3400;
+export declare const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 3000;
+export declare const X_ACCOUNT_CREDITS_PER_MONTH = 1000;
 export declare const EGRESS_IP_CREDITS_PER_MONTH = 2500;
 export declare const SENDING_MAILBOX_CREDITS_PER_MONTH = 100;
 export declare const MANAGED_INBOX_CREDITS_PER_MONTH = 300;
@@ -37,7 +38,7 @@ export declare const SENDING_SEAT_USD_CENTS: {
 export type SendingSeatKey = keyof typeof SENDING_SEAT_USD_CENTS;
 export declare const MANAGED_INBOX_USD_CENTS = 400;
 export declare const SENDING_DOMAIN_USD_CENTS = 1250;
-export declare const VOICE_NUMBER_CREDITS_PER_MONTH = 500;
+export declare const VOICE_NUMBER_CREDITS_PER_MONTH = 1000;
 export declare const VOICE_CREDITS_PER_MINUTE = 9;
 export declare const VOICE_CREDITS_PER_AMD_CALL = 3.8;
 /** Workflow steps, tool calls and row writes — a capacity guard, not a margin line. */

package/node_modules/@oxygen/shared/dist/pricing-snapshot.generated.js

@@ -32,8 +32,14 @@ export const VOICE_MARKUP = 5;
 /** Applied to actual provider inference cost at settle time. */
 export const COPILOT_CREDIT_MARKUP_MULTIPLIER = 5;
 // --- seats and recurring charges --------------------------------------------
-export const LINKEDIN_ACCOUNT_CREDITS_PER_MONTH = 1_000;
-export const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 1_000;
+//
+// The connected-account reservations (LinkedIn, WhatsApp, X, phone number) carry
+// the 2026-09 repricing's NEW price. Until its effective-date switch the price in
+// force is lower; a surface that shows or charges one resolves it with
+// repricedChargeCredits (@oxygen/shared/repricing), never from this literal alone.
+export const LINKEDIN_ACCOUNT_CREDITS_PER_MONTH = 3_400;
+export const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 3_000;
+export const X_ACCOUNT_CREDITS_PER_MONTH = 1_000;
 export const EGRESS_IP_CREDITS_PER_MONTH = 2_500;
 export const SENDING_MAILBOX_CREDITS_PER_MONTH = 100;
 export const MANAGED_INBOX_CREDITS_PER_MONTH = 300;
@@ -74,7 +80,7 @@ export const SENDING_SEAT_USD_CENTS = {
 export const MANAGED_INBOX_USD_CENTS = 400;
 export const SENDING_DOMAIN_USD_CENTS = 1_250;
 // --- voice ------------------------------------------------------------------
-export const VOICE_NUMBER_CREDITS_PER_MONTH = 500;
+export const VOICE_NUMBER_CREDITS_PER_MONTH = 1_000;
 export const VOICE_CREDITS_PER_MINUTE = 9;
 export const VOICE_CREDITS_PER_AMD_CALL = 3.8;
 // --- per-action -------------------------------------------------------------

package/node_modules/@oxygen/shared/dist/process-resource.d.ts

@@ -0,0 +1,4 @@
+export declare function processResourceIdentity(): {
+    "host.name": string;
+    "service.instance.id": string;
+};

package/node_modules/@oxygen/shared/dist/process-resource.js

@@ -0,0 +1,25 @@
+import { randomUUID } from "node:crypto";
+import { hostname } from "node:os";
+/**
+ * The per-process OTel resource identity: which box, which process.
+ *
+ * The OTLP destinations turn resource auto-detection off (`autoDetectResources:
+ * false`) because Node's process detector copies argv verbatim — inline scripts
+ * and credentials included. That also dropped `host.name`, so every replica's
+ * spans, metrics and logs arrived indistinguishable. These two attributes are
+ * the safe part of what detection used to provide, stated explicitly.
+ *
+ * `service.instance.id` is minted once per process: a restart is a new
+ * instance, and two replicas on one host never collide the way a pid can.
+ */
+const SERVICE_INSTANCE_ID = randomUUID();
+export function processResourceIdentity() {
+    let host = "unknown";
+    try {
+        host = hostname() || "unknown";
+    }
+    catch {
+        // A sandbox without os access still gets a stable instance id.
+    }
+    return { "host.name": host, "service.instance.id": SERVICE_INSTANCE_ID };
+}