@oxygen-agent/cli 1.1010.650 → 1.1010.905

package/dist/index.js

@@ -12,14 +12,18 @@ import { registerKnowledgeRepositoryCommands } from "./knowledge-repository-comm
 import { registerVisualCommands } from "./visual-commands.js";
 import { renderPrimaryProviderBoard } from "./admin-primary-providers-render.js";
 import { registerFunctionsCommands } from "./functions-commands.js";
+import { STREAMED_FILE_IMPORT_MIN_BYTES, putImportFileStream, rowsForStreamedImportTarget, scanStreamedImportFile, shouldStreamFileImport, } from "./streamed-file-import.js";
 import { applyOxygenHelp, enableCommandSuggestions, unknownCommandHint, unknownOptionHint } from "./help.js";
 import { buildCommandManifest, getCommandManifestEntry, searchCommandManifest, suggestCommandNames, } from "./command-manifest.js";
-import { AGENCY_DIRECTORY_REGIONS, AGENCY_DIRECTORY_SERVICES, COLLAB_GATE_KINDS, COLLAB_GATE_PROSE, COLLAB_SUBJECT_KINDS, COLLAB_SUBJECT_KINDS_PROSE, COLLAB_SUBJECT_LABELS, COLLAB_SUBJECT_PROSE, GATE_KIND_SUBJECTS, describeWorkflowStatusChange, formatCellForDisplay, formatCopilotPlanDuration, formatCopilotPlanSeconds, formatPublicBudgetScopes, SUBJECT_PATH_FORMS_PROSE, formatSubjectPath, exitCodeForOxygenError, parseSubjectPath, parseSubjectRef, parseWorkflowStatusChange, chunk, isVersionGreater, isVersionLess, KNOWLEDGE_BOOTSTRAP_MAX_CREDITS, MAX_CLI_JSON_BODY_BYTES, MAX_MCP_TOOL_NAME_LENGTH, normalizeCopilotPlanStepStatus, OXYGEN_CAPABILITY_ROUTES, OXYGEN_VERSION, OxygenError, getCapabilityRouteMatch, inferUserCapabilityRoute, parseKnowledgePageMarkdown, PLAN_LIMITS, serializeCapabilityRoute, sleep, success, TABLE_IMPORT_ROW_LIMIT, TAG_KINDS_PROSE, toFailure, workflowMcpToolName, } from "@oxygen/shared";
-import { PURCHASABLE_PLAN_KEYS, resolveBasePricingPlan } from "@oxygen/shared/billing";
+import { AGENCY_DIRECTORY_REGIONS, AGENCY_DIRECTORY_SERVICES, COLLAB_GATE_KINDS, COLLAB_GATE_PROSE, COLLAB_SUBJECT_KINDS, COLLAB_SUBJECT_KINDS_PROSE, COLLAB_SUBJECT_LABELS, COLLAB_SUBJECT_PROSE, GATE_KIND_SUBJECTS, describeWorkflowStatusChange, formatCellForDisplay, formatCopilotPlanDuration, formatCopilotPlanSeconds, formatPublicBudgetScopes, SUBJECT_PATH_FORMS_PROSE, formatSubjectPath, exitCodeForOxygenError, parseSubjectPath, parseSubjectRef, parseWorkflowStatusChange, chunk, isVersionGreater, isVersionLess, KNOWLEDGE_BOOTSTRAP_MAX_CREDITS, MAX_CLI_JSON_BODY_BYTES, MAX_MCP_TOOL_NAME_LENGTH, normalizeCopilotPlanStepStatus, OXYGEN_CAPABILITY_ROUTES, OXYGEN_VERSION, OxygenError, getCapabilityRouteMatch, inferUserCapabilityRoute, parseKnowledgePageMarkdown, PLAN_LIMITS, serializeCapabilityRoute, sleep, success, TAG_KINDS_PROSE, toFailure, workflowMcpToolName, } from "@oxygen/shared";
+import { PURCHASABLE_PLAN_KEYS, planVolumeBonusPercent, resolveBasePricingPlan } from "@oxygen/shared/billing";
 import { TAG_COLORS } from "@oxygen/shared/select-options";
+import { PUBLIC_WEBHOOK_INGRESS_PER_TARGET_PER_MINUTE } from "@oxygen/shared/plan-band";
+import { AI_COLUMN_CREDITS, AI_COLUMN_WEB_SEARCH_TYPICAL_CREDITS } from "@oxygen/shared/pricing-sheet";
+import { LINKEDIN_SENDER_LIMIT_DEFAULTS, LINKEDIN_SENDER_LIMIT_MAXIMUMS, } from "@oxygen/shared/linkedin-sequences";
 import { readColumnDecisionFlags } from "./column-decision-options.js";
 import { MANAGED_DATA_SUPPLIERS } from "@oxygen/shared/data-suppliers";
-import { inferImportColumnLabels, inferRowsFileFormat, normalizeImportColumnKey, normalizeRowsForNewTable, normalizeRowsFormat, parseRowsFileBuffer, parseXlsxWorkbookBuffer, } from "@oxygen/shared/file-import";
+import { MAX_BUFFERED_IMPORT_PARSE_BYTES, assertImportFormatWithinBufferedLimit, inferImportColumnLabels, inferRowsFileFormat, normalizeImportColumnKey, normalizeRowsForNewTable, normalizeRowsFormat, parseRowsFileBuffer, parseXlsxWorkbookBuffer, } from "@oxygen/shared/file-import";
 import { MAILBOX_IMPORT_FILE_MAX_BYTES as SHARED_MAILBOX_IMPORT_FILE_MAX_BYTES, MAILBOX_IMPORT_ROW_LIMIT as SHARED_MAILBOX_IMPORT_ROW_LIMIT, normalizeMailboxImportFile as normalizeSharedMailboxImportFile, normalizeMailboxImportVendor as normalizeSharedMailboxImportVendor, normalizeMailboxWorkbookRows, parseMailboxImportText, summarizeMailboxImportValidation as summarizeSharedMailboxImportValidation, } from "@oxygen/shared/mailbox-import";
 import { assertRecipeBundleSafe, assertPortableWorkflowDefinition, assertWorkflowGraphManifest, assertWorkflowManifest, buildRecipeManifest, compileWorkflowDefinition, isAnyWorkflowManifest, isRecipeManifest, isWorkflowDefinition, isWorkflowGraphManifest, isWorkflowManifest, hashPortableWorkflowGraphManifest, WORKFLOW_GRAPH_COMPILER_VERSION, WORKFLOW_GRAPH_MANIFEST_VERSION, } from "@oxygen/workflows";
 import { isRecipeDefinition } from "@oxygen/recipe-sdk";
@@ -32,11 +36,14 @@ import { assertModeFlagsExclusive, parseKeyValuePairs, parseJsonObject, readJson
 import { formatAiPromptPreviewNotice, formatColumnReferenceNotices, } from "./column-run-notices.js";
 import { runLocalCustomHttpColumn } from "./local-custom-http-column.js";
 import { formatSearchAiFilterTotalsNotice } from "./search-ai-filter-notice.js";
+import { formatInboxNeedsReplyNotice } from "./inbox-needs-reply-notice.js";
+import { formatWorkflowPlanLimitNotices } from "./workflow-plan-limit-notices.js";
 import { captureCurrentTranscript, collectFeedbackEnvironment, TranscriptCaptureError, } from "./transcript.js";
 import { addSessionOutput, addSessionStatus, getSessionUsage, startSession, updateSessionStep, } from "./session.js";
 import { doctorAgentSkills, getAgentSkill, installAgentSkills, listAgentSkills, runAutomaticSkillsInstall, searchAgentSkills, } from "./skills.js";
 import { resolveCliBinaryName } from "./runtime.js";
 import { updateCli } from "./update.js";
+import { markStdinConsumed, maybeScheduleBackgroundUpdate, readAutoUpdateStatus, runBackgroundUpdate, } from "./auto-update.js";
 import { isRecord, readClearableOption, readErrorMessage, readOption } from "./util.js";
 const AGENT_MODEL_POLICY_HELP = "Model policy JSON: level low (Fast), medium (Balanced, default), or high (Max); credential_mode managed or organization_byok.";
 const AGENT_TOOL_POLICY_HELP = "Tool policy JSON. Effects: read, internal_write, paid, external_write. Ask-before-changes preset: {\"mode\":\"scoped\",\"rules\":[{\"decision\":\"allow\",\"effect\":\"read\"},{\"decision\":\"ask\",\"effect\":\"internal_write\"},{\"decision\":\"ask\",\"effect\":\"paid\"},{\"decision\":\"ask\",\"effect\":\"external_write\"}]}. Full mode requires --confirm-full-access.";
@@ -265,6 +272,17 @@ function buildFindBody(capability, options) {
         body.verify = true;
     return body;
 }
+/** The shared search/buy filters, in the snake_case the voice numbers route reads. */
+function voiceNumberFilters(options) {
+    const areaCode = readOption(options.areaCode);
+    const region = readOption(options.region);
+    const country = readOption(options.country);
+    return {
+        ...(areaCode ? { area_code: areaCode } : {}),
+        ...(region ? { in_region: region } : {}),
+        ...(country ? { iso_country: country.toUpperCase() } : {}),
+    };
+}
 function suppressionListParams(options) {
     const params = new URLSearchParams();
     const reason = readOption(options.reason);
@@ -313,7 +331,10 @@ const SAFE_IMPORT_WRITE_BATCH_SIZE = 500;
 // per-request chunk) and the background threshold, so users read 500 as a
 // per-file cap. Echo the shared row ceiling and the tiered byte ceilings instead
 // of restating either as a chunk-size constraint.
-const IMPORT_FILE_LIMIT_HELP = `Per-file row limit: ${TABLE_IMPORT_ROW_LIMIT.toLocaleString("en-US")} rows on every plan. File-size limit: ${formatImportFileSizeLimit("free")} on free, ${formatImportFileSizeLimit("starter")} on paid plans.`;
+// Webhook ingress scales with plan size (repricing 2026-09, decision L4.4).
+const TABLE_WEBHOOK_RATE_HELP = `${PUBLIC_WEBHOOK_INGRESS_PER_TARGET_PER_MINUTE.free.toLocaleString("en-US")}–${PUBLIC_WEBHOOK_INGRESS_PER_TARGET_PER_MINUTE["1999"].toLocaleString("en-US")} requests a minute by plan size, per endpoint and sender IP; 429 returns Retry-After; \`oxygen limits show\` lists yours`;
+const WEBHOOK_TRIGGER_RATE_HELP = `${PUBLIC_WEBHOOK_INGRESS_PER_TARGET_PER_MINUTE.free.toLocaleString("en-US")}–${PUBLIC_WEBHOOK_INGRESS_PER_TARGET_PER_MINUTE["1999"].toLocaleString("en-US")} deliveries a minute by plan size, per trigger and sender IP; 429 returns Retry-After`;
+const IMPORT_FILE_LIMIT_HELP = `Per-file row limit: your plan's rows-per-Table limit, since one file can fill an empty Table (\`oxygen limits show\` lists it for every plan size). File-size limit: ${formatImportFileSizeLimit("free")} on free, ${formatImportFileSizeLimit("starter")} on $49-$99, ${formatImportFileSizeLimit("pro")} on $199-$499, ${formatImportFileSizeLimit("scale")} on $999 and up. JSON and XLSX are read whole, so they stop at ${formatImportByteSize(MAX_BUFFERED_IMPORT_PARSE_BYTES)}; save a larger file as CSV or JSONL. Files over ${formatImportByteSize(STREAMED_FILE_IMPORT_MIN_BYTES)} upload straight from disk and always load in the background.`;
 const TABLE_ACTION_RUN_WAIT_DEFAULT_TIMEOUT_SECONDS = 600;
 const TABLE_ACTION_RUN_WAIT_DEFAULT_INTERVAL_SECONDS = 5;
 // Single-row paid runs are auto-backgrounded server-side; the CLI waits this
@@ -737,6 +758,12 @@ function writeMailboxPoolOverview(data, view) {
     // explains why no stalled clause appeared.
     if (!warmup)
         out("(this server does not report warm-up pool counts)");
+    // Above the rows, like NEEDS ACTION: mailboxes that stopped sending because
+    // their monthly credits were not covered, and the date they disconnect.
+    if (data.reservations_paused?.message) {
+        out();
+        writeWrappedPoolProse(out, "PAUSED  ", data.reservations_paused.message, "        ");
+    }
     out();
     if (rows.length === 0) {
         out(view.filtered ? "No mailbox matches that filter." : "No mailboxes in this workspace yet.");
@@ -817,6 +844,7 @@ async function handleAsyncAction(command, options, action) {
         writeAvatarWarning(data);
         writeCreditsReceipt(data);
         writeSearchAiFilterTotalsNotice(data);
+        writeInboxNeedsReplyNotice(data);
     }
     catch (error) {
         emitCliFailure(command, error);
@@ -990,6 +1018,14 @@ function writeBillingNotices(command, data) {
     const payload = asPayloadRecord(data);
     if (!payload)
         return;
+    // Any list that carries connected accounts (senders, WhatsApp numbers, mailboxes,
+    // billing commitments) says so when some stopped sending because their monthly
+    // credit reservation could not be renewed (decision 2.8). Before the envelope, for
+    // the same reason as the renewal notices below.
+    const paused = asPayloadRecord(payload.reservations_paused);
+    if (paused && typeof paused.message === "string" && paused.message.trim()) {
+        process.stderr.write(`! ${paused.message}\n`);
+    }
     if (command === "billing balance") {
         for (const warning of readWarningMessages(payload))
             process.stderr.write(`! ${warning}\n`);
@@ -1067,6 +1103,11 @@ function writeCreditsReceipt(data) {
         }
     }
 }
+function writeWorkflowPlanLimitNotices(data) {
+    for (const notice of formatWorkflowPlanLimitNotices(data)) {
+        process.stderr.write(`${notice}\n`);
+    }
+}
 // A disabled workflow is a customer's automation at zero, and `status:
 // "disabled"` alone never said who did that or why (OXY-4124). Mirror the
 // recorded transition as one stderr line per disabled workflow, so `workflows
@@ -1102,6 +1143,11 @@ function writeSearchAiFilterTotalsNotice(data) {
     if (notice)
         process.stderr.write(`${notice}\n`);
 }
+function writeInboxNeedsReplyNotice(data) {
+    const notice = formatInboxNeedsReplyNotice(data);
+    if (notice)
+        process.stderr.write(`${notice}\n`);
+}
 function writeAiPromptPreviewNotice(data) {
     const notice = formatAiPromptPreviewNotice(data);
     if (notice)
@@ -1205,11 +1251,11 @@ function writeKnowledgeIndexCapNotice(data) {
     process.stderr.write(`note: listing ${shown}, most recently updated first; counts cover the whole wiki — raise --limit (max 1000) or pass --all.\n`);
 }
 // Arming a cron commits recurring spend, so `workflows enable` mirrors its
-// `automation` block as stderr lines: what the schedule burns per day, what
-// share of the monthly allowance that is, and when it runs out. Observed burn
-// (this workflow's own billed runs) is the honest number and is preferred; the
-// manifest floor is a MINIMUM and is labelled as one, because it excludes the
-// per-row billing that is ~93% of the meter in practice.
+// `automation` block as stderr lines: what the schedule burns per day in steps
+// and credits, what share of the monthly allowance that is, and when it runs
+// out. Observed burn (this workflow's own billed runs) is the honest number and
+// is preferred; the manifest floor is a MINIMUM and is labelled as one, because
+// recipe checkpoints and retries add steps. Writing rows is free.
 function writeAutomationProjection(data) {
     if (!data || typeof data !== "object" || Array.isArray(data))
         return;
@@ -1243,8 +1289,13 @@ function writeAutomationProjection(data) {
         : ` (${sharePct < 1 ? "<1" : Math.round(sharePct)}% of the ${included.toLocaleString("en-US")}/mo allowance)`;
     const basis = fromHistory
         ? `based on ${typeof observed?.runSample === "number" ? observed.runSample : 0} past billed runs`
-        : "MINIMUM — excludes per-row billing, real cost will be higher";
-    process.stderr.write(`schedule: ${runsPer30Days.toLocaleString("en-US")} runs/30d, ~${perDay.toLocaleString("en-US")} automation actions/day${share}\n`);
+        : "MINIMUM — recipe checkpoints and retries can add steps";
+    // Older servers send no creditsPerStep; say nothing about credits rather than guess.
+    const creditsPerStep = typeof block.creditsPerStep === "number" ? block.creditsPerStep : null;
+    const credits = creditsPerStep === null
+        ? ""
+        : ` (~${(Math.round(projected * creditsPerStep * 100) / 3_000).toLocaleString("en-US", { maximumFractionDigits: 2 })} credits/day at ${creditsPerStep} per step; writing rows is free)`;
+    process.stderr.write(`schedule: ${runsPer30Days.toLocaleString("en-US")} runs/30d, ~${perDay.toLocaleString("en-US")} workflow steps/day${credits}${share}\n`);
     process.stderr.write(`  ${basis}\n`);
     const exhaustion = observed?.projectedExhaustionAt;
     if (typeof exhaustion === "string") {
@@ -1478,12 +1529,20 @@ function writeMaxCreditsHint(error) {
         // customer's own words, says what still works without upgrading, and gives
         // the URL. A raw `upgrade_required` code with a JSON blob is the worst
         // possible version of the single most important refusal in the product.
+        // The BYOK run gate keeps its own code but carries the same upgrade fields,
+        // including once a free workspace's seven-day key grace has ended. Without
+        // an upgrade_url (an older server) it has no hint, as before.
+        case "byok_requires_paid_plan":
         case "upgrade_required": {
+            if (error.code === "byok_requires_paid_plan" && !readDetailsString(error.details, "upgrade_url"))
+                return;
             const label = readDetailsString(error.details, "capability_label")
                 ?? "This capability";
             const upgradeUrl = readDetailsString(error.details, "upgrade_url");
             const nextStep = readDetailsString(error.details, "next_step");
-            process.stderr.write(`hint: ${label} needs a paid plan.\n`);
+            // BYOK names the smallest plan that includes it ("the $99 plan or above").
+            const requirement = readDetailsString(error.details, "minimum_plan_label") ?? "a paid plan";
+            process.stderr.write(`hint: ${label} needs ${requirement}.\n`);
             if (nextStep)
                 process.stderr.write(`hint: ${nextStep}\n`);
             if (upgradeUrl)
@@ -1494,6 +1553,27 @@ function writeMaxCreditsHint(error) {
             process.stderr.write("hint: verify every affected external destination in error.details, then re-run with --approved-effect-unknown only if another execution is safe\n");
             return;
         }
+        // A connect refused because the balance cannot carry the account's first
+        // monthly credit reservation. Only that shape carries reservation_credits;
+        // every other insufficient_credits keeps its own message.
+        case "insufficient_credits": {
+            const reservation = readDetailsNumber(error.details, "reservation_credits");
+            if (reservation === null)
+                return;
+            const nextStep = readDetailsString(error.details, "next_step");
+            const topupUrl = readDetailsString(error.details, "topup_url");
+            process.stderr.write(`hint: this connect reserves ${reservation} credits a month; add credits, then connect again\n`);
+            if (nextStep)
+                process.stderr.write(`hint: ${nextStep}\n`);
+            if (topupUrl)
+                process.stderr.write(`hint: top up at ${topupUrl}\n`);
+            return;
+        }
+        case "seats_retired": {
+            const nextStep = readDetailsString(error.details, "next_step");
+            process.stderr.write(`hint: sending seats are retired; connected accounts reserve credits instead${nextStep ? ` — see \`${nextStep}\`` : ""}\n`);
+            return;
+        }
         case "max_credits_required": {
             const recommended = readDetailsNumber(error.details, "recommended_max_credits");
             if (recommended === null)
@@ -1524,6 +1604,14 @@ function writeMaxCreditsHint(error) {
                     process.stderr.write(`hint: ${requestUrl}\n`);
                 return;
             }
+            // An Agent run or trigger asked for more than the default Agent run
+            // ceiling: the one extra flag is the approval, so name it with the numbers.
+            if (readDetailsString(error.details, "approval_kind") === "agent_ceiling_above_default") {
+                const requested = readDetailsNumber(error.details, "requested_max_credits");
+                const defaultMax = readDetailsNumber(error.details, "default_max_credits");
+                process.stderr.write(`hint: ${requested ?? "this"} credits is above your default Agent run ceiling of ${defaultMax ?? "your plan"}; re-run with --approve-above-default to approve it, or lower --max-credits\n`);
+                return;
+            }
             if (error.message.startsWith("Public replies require --approved")) {
                 process.stderr.write("hint: inspect the exact preview, then re-run with its --content-hash <sha256> and --approved\n");
                 return;
@@ -3267,7 +3355,7 @@ function isUuid(value) {
 function requireDomainArg(positional, option) {
     const domain = readOption(positional) ?? readOption(option);
     if (!domain) {
-        throw new Error("A domain is required \u2014 pass it as an argument or with --domain.");
+        throw new OxygenError("invalid_request", "A domain is required \u2014 pass it as an argument or with --domain. `oxygen managed-inboxes list` shows your managed domains.", { exitCode: 2, details: { next_step: "oxygen managed-inboxes list" } });
     }
     return domain;
 }
@@ -3527,10 +3615,21 @@ export function createProgram() {
     });
     program
         .command("update")
-        .description("Update the Oxygen CLI from npm.")
-        .option("--package <npm_spec>", "Override the npm package spec.")
-        .option("--dry-run", "Print the update command without running it.")
-        .option("--json", "Print a JSON envelope.")
+        .description("Update the Oxygen CLI from npm, then refresh the Oxygen agent skills in the global skill folders of "
+        + "Codex, Claude Code and Cursor (OXYGEN_SKIP_SKILLS=1 skips that). The CLI also keeps itself current: "
+        + "once a day it installs a newer release in the background, and when the API says it is too old it "
+        + "updates and re-runs your command. Automatic updates need a global npm install (npm install -g "
+        + "@oxygen-agent/cli); they are off for npx and project-local installs, under CI, for development builds, "
+        + "and after --disable-auto or OXYGEN_NO_AUTO_UPDATE=1.")
+        .option("--status", "Show the installed and newest published version and whether automatic updates are on.")
+        .option("--enable-auto", "Turn automatic updates on for this computer.")
+        .option("--disable-auto", "Turn automatic updates off for this computer, e.g. on a build server that must stay pinned.")
+        .option("--package <npm_spec>", "Install this npm spec instead of the latest, e.g. @oxygen-agent/cli@1.1010.721. To pin a build server, "
+        + "install the version you want and turn automatic updates off.")
+        .option("--dry-run", "Print the update command without running it; with --enable-auto or --disable-auto, show the result without saving it.")
+        .option("--json", "Print a JSON envelope.")
+        .addOption(new Option("--background", "Run the daily automatic update check.").hideHelp())
+        .addOption(new Option("--refresh-skills", "Refresh product skills after an automatic update.").hideHelp())
         .action(async (options) => {
         await handleUpdateAction(options);
     });
@@ -3706,7 +3805,9 @@ export function createProgram() {
     }));
     program
         .command("status")
-        .description("Compare the local Oxygen CLI version against the active profile's deployed Oxygen API.")
+        .description("Compare the local Oxygen CLI version against the active profile's deployed Oxygen API. "
+        + "`compatible` is the field that matters: false means commands are refused until the CLI updates. "
+        + "`in_sync` and `skew` only report version distance; a CLI ahead of the API is normal.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("status", options, async () => {
@@ -3776,7 +3877,7 @@ export function createProgram() {
         await handleAsyncAction("orgs billing-owners", options, () => requestOxygen("/api/cli/orgs/billing-owners"));
     }))
         .addCommand(new Command("billing-link")
-        .description("Cover a workspace with a plan you already pay for in another organization (one plan, many workspaces) instead of buying a second subscription. Omit --owner when exactly one of your organizations can pay and Oxygen will use it; `orgs billing-owners` lists them all. You must be an admin of BOTH organizations, the workspace being linked must not hold a live subscription of its own, and an org-bound key (oxy_live_…) can only link the workspace it is bound to. Credit billing moves, workspace data access does not; plan gates and sending seats then resolve through the owner, so the linked workspace connects senders against the owner's seats and seats are bought there. `plan_tier` in the response is the plan the workspace now runs on; `free` means the owner holds no active paid plan, so connecting senders stays blocked.")
+        .description("Cover a workspace with a plan you already pay for in another organization (one plan, many workspaces) instead of buying a second subscription. Omit --owner when exactly one of your organizations can pay and Oxygen will use it; `orgs billing-owners` lists them all. You must be an admin of BOTH organizations, the workspace being linked must not hold a live subscription of its own, and an org-bound key (oxy_live_…) can only link the workspace it is bound to. Credit billing moves, workspace data access does not; plan gates and sending seats then resolve through the owner, so the linked workspace connects senders against the owner's seats and seats are bought there. `plan_tier` in the response is the plan the workspace now runs on; `free` means the owner holds no active paid plan, so connecting senders stays blocked. From the owner, `billing usage --group-by workspace` reports the credits each linked workspace spent.")
         .option("--owner <organization>", "Billing owner organization id, Clerk org id, or slug. Optional — when omitted, Oxygen uses your one eligible organization, and refuses to pick if there is more than one.")
         .option("--organization <organization>", "Workspace organization to link. Defaults to the active organization.")
         .option("--organization-id <id>", "Alias for --organization.")
@@ -4595,7 +4696,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--sender <sender_account_id>", "LinkedIn sender account id. Required for LinkedIn before the worker can publish.")
         .option("--provider-connection <connection_id>", "Oxygen integration connection id for Composio-backed providers. Find it with `integrations list` (each integration's connection); create one with `integrations connect <provider>` (an OAuth redirect URL, or Settings > Connections on the web).")
         .option("--title <title>", "Internal title for the queue.")
-        .option("--text <text>", "Post text. For LinkedIn mentions, use a person's @<public-identifier> directly; company pages cannot be tagged, so write the company name without the @.")
+        .option("--text <text>", "Post text. On LinkedIn, tag a person with @<public-identifier> and a company page with @<handle> from its linkedin.com/company/<handle> URL.")
         .option("--text-file <path>", "Read post text from a local file.")
         .option("--content-json <json>", "Structured content. Use media_asset_ids for Oxygen uploads. LinkedIn attachments require [{content:<base64>,content_type:<MIME>,filename:<name>}]; content.mentions is rejected, so put verified @<public-identifier> values in --text. X options have their own flags (--thread-post, --poll-option, --reply-settings, --alt-text, --photo-tag); raw X API keys can still ride in composio.arguments.")
         .option("--composio-action <slug>", "Override the Composio action slug for this scheduled post.")
@@ -4621,7 +4722,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     }))
         .addCommand(new Command("get")
-        .description("Get one scheduled post with resolved media previews, its LinkedIn video cover, and attempt history. For an X post, publish_plan lists every post that will be sent, in order, with media, alt text, poll and reply settings (free). Open web_url to preview the post as it will look on LinkedIn or X.")
+        .description("Get one scheduled post with resolved media previews, its LinkedIn video cover, and attempt history. For an X post, publish_plan lists every post that will be sent, in order, with media, alt text, poll and reply settings (free); for a LinkedIn post that tags a company page, it shows the text sent, each company tag as its page id. Open web_url to preview the post as it will look on LinkedIn or X.")
         .argument("<post_id>", "Scheduled post id.")
         .option("--json", "Print a JSON envelope.")
         .action(async (postId, options) => {
@@ -4635,7 +4736,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--sender <sender_account_id>", "LinkedIn sender account id.")
         .option("--provider-connection <connection_id>", "Oxygen integration connection id for Composio-backed providers.")
         .option("--title <title>", "Internal title for the queue.")
-        .option("--text <text>", "Post text. For LinkedIn mentions, use a person's @<public-identifier> directly; company pages cannot be tagged, so write the company name without the @.")
+        .option("--text <text>", "Post text. On LinkedIn, tag a person with @<public-identifier> and a company page with @<handle> from its linkedin.com/company/<handle> URL.")
         .option("--text-file <path>", "Read post text from a local file.")
         .option("--content-json <json>", "Structured content. Use media_asset_ids for Oxygen uploads. LinkedIn attachments require [{content:<base64>,content_type:<MIME>,filename:<name>}]; content.mentions is rejected, so put verified @<public-identifier> values in --text. This replaces the existing content object; use --content-merge-json or the X flags to change single keys.")
         .option("--composio-action <slug>", "Override the Composio action slug for this scheduled post.")
@@ -5452,7 +5553,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("Create or repair standard CRM object-backed tables. Defaults to dry-run.")
         .option("--objects <objects>", "Comma-separated standard CRM objects to set up. Defaults to companies,people,deals.")
         .option("--project <project>", "Project id or slug for created CRM tables.")
-        .option("--with-enrichment", "Also arm the standing cheap-enrichment auto-run on objects that already existed (fresh-created tables arm it by default). New records then auto-enrich within the per-batch credit cap, whether they arrive by import, insert, upsert, or `crm assert`. Pick which enrichments run with `oxygen crm enrichment`.")
+        .option("--with-enrichment", "Also arm the standing cheap-enrichment auto-run on objects that already existed (fresh-created tables arm it by default). New records then auto-enrich within the per-batch credit cap, whether they arrive by import, insert, upsert, or `crm assert`. If your plan runs fewer columns per record than the defaults, the columns left out are listed under autoRunColumnsOverLimit. Pick which enrichments run with `oxygen crm enrichment`.")
         .option("--dry-run", "Preview CRM setup without creating or repairing tables.")
         .option("--live", "Apply CRM setup changes. Default is dry-run.")
         .option("--json", "Print a JSON envelope.")
@@ -6281,8 +6382,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .addCommand(new Command("list")
         .description("List the raw GTM signal-event feed newest-first (website_visit / profile_view / post_reaction / new_follower), each resolved onto the person it attached to. Read-only.")
         .option("--types <types>", "Comma-separated signal types to include. Defaults to all four.")
-        .option("--since <days>", "Look-back window in days. Defaults to 7, max 30.")
-        .option("--limit <limit>", "Maximum events to return. Defaults to 25, max 100.")
+        .option("--since <days>", "Look-back window in days. Defaults to 7; your plan's maximum (30 on free, up to 365) is in `oxygen limits show`.")
+        .option("--limit <limit>", "Maximum events to return. Defaults to 25; your plan's maximum (100 on free, up to 1,000) is in `oxygen limits show`.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("signals list", options, () => requestOxygen(buildSignalsListPath(options)));
@@ -7134,7 +7235,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("Free: read the page's follower count and quote the exact credits an order would reserve. No spend, no table; `orderable: false` means no order can be placed yet.")
         .requiredOption("--company <url>", "LinkedIn company page URL, e.g. https://www.linkedin.com/company/hubspot.")
         .option("--records <n>", "How many followers to price. Minimum 100; defaults to 1000.")
-        .option("--package <package>", "Basic (default) or Advanced.")
+        .option("--package <package>", "Basic (default): profile, job title, location, employer. Advanced (10x the credits): also a verified work email and region.")
         .option("--credential-mode <mode>", "managed (default): Oxygen credits. user_api_key: your own ScrapeLi key saved in Connections, billed by ScrapeLi.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -7150,12 +7251,13 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     });
     followersCommand.command("order")
-        .description("Place the follower order after checking it. With managed credits it requires --max-credits at or above the quoted cost: this buys a real audience and is never approved implicitly. Creates the table now; rows land when ScrapeLi delivers.")
+        .description("Place the follower order after checking it. Requires --approved, and with managed credits --max-credits at or above the quoted cost: this buys a real audience and is never approved implicitly. Creates the table now; rows land when ScrapeLi delivers.")
+        .requiredOption("--approved", "Approve this purchase. Required, as on every command that buys data.")
         .requiredOption("--company <url>", "LinkedIn company page URL whose followers to order.")
         .option("--max-credits <credits>", "Hard credit ceiling for this order. Must be at least the amount `tables followers check` quoted. Not needed with --credential-mode user_api_key.")
         .requiredOption("--request-id <uuid>", "One stable UUID for this order. Reuse it after a timeout; a new key would buy the same audience twice.")
         .option("--records <n>", "How many followers to buy. Minimum 100; defaults to 1000.")
-        .option("--package <package>", "Basic (default) or Advanced.")
+        .option("--package <package>", "Basic (default) or Advanced (10x the credits; adds a verified work email and region).")
         .option("--name <name>", "Table name. Defaults to \"<Company> Followers\".")
         .option("--project <project>", "Project id or slug; defaults to General.")
         .option("--credential-mode <mode>", "managed (default): Oxygen credits. user_api_key: your own ScrapeLi key saved in Connections, billed by ScrapeLi.")
@@ -7165,6 +7267,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             method: "POST",
             body: {
                 action: "create",
+                approved: true,
                 company_url: readOption(options.company),
                 ...(options.records !== undefined ? { records: readPositiveNumber(options.records) } : {}),
                 ...(readOption(options.package) ? { package: readOption(options.package) } : {}),
@@ -7466,7 +7569,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         return requestOxygen(`/api/cli/tables/webhooks?${params.toString()}`);
     })))
         .addCommand(new Command("create")
-        .description("Create a direct webhook endpoint that writes inbound JSON into a table (600 requests/60s per endpoint and sender IP; 429 returns Retry-After).")
+        .description(`Create a direct webhook endpoint that writes inbound JSON into a table (${TABLE_WEBHOOK_RATE_HELP}).`)
         .argument("<table>", "Table id or slug.")
         .option("--name <name>", "Display name for the webhook.")
         .option("--mode <mode>", "insert or upsert. Defaults to upsert when --upsert-key is set, otherwise insert.")
@@ -7551,7 +7654,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("List direct table webhook deliveries and auto-run enqueue status.")
         .argument("[endpoint_id]", "Optional webhook endpoint id, such as tw_...")
         .option("--table <table>", "Filter by table id or slug.")
-        .option("--status <status>", "Filter by received, completed, failed, or rejected (rejected = arrived while the feed was paused and was turned away; no rows written).")
+        .option("--status <status>", "Filter by received, completed, failed, or rejected (rejected = arrived while the feed was paused and was turned away; no rows written). A delivery refused with HTTP 429 for exceeding the plan's rate is not recorded here: the sender redelivers it.")
         .option("--auto-run-status <status>", "Filter by not_configured, queued, skipped, or failed_to_enqueue.")
         .option("--limit <n>", "Maximum deliveries to return. Defaults to 50.")
         .option("--json", "Print a JSON envelope.")
@@ -7894,7 +7997,7 @@ Examples:
         .description("List the shared table delivery ledger: pull-feed sync cycles and inbound webhook deliveries land in the same place. Filter by --table (the identifier `feeds list` gives you) or by a webhook endpoint id. Read-only.")
         .argument("[endpoint_id]", "Optional webhook endpoint id, such as tw_...")
         .option("--table <table>", "Table id or slug whose ledger to read.")
-        .option("--status <status>", "Filter by received, completed, failed, or rejected (rejected = arrived while the feed was paused and was turned away; no rows written).")
+        .option("--status <status>", "Filter by received, completed, failed, or rejected (rejected = arrived while the feed was paused and was turned away; no rows written). A delivery refused with HTTP 429 for exceeding the plan's rate is not recorded here: the sender redelivers it.")
         .option("--limit <n>", "Maximum deliveries to return. Defaults to 50.")
         .option("--json", "Print a JSON envelope.")
         .action((endpointId, options) => handleAsyncAction("feeds deliveries", options, () => requestOxygen(tableWebhookDeliveriesPath({
@@ -9278,21 +9381,24 @@ Examples:
         .option("--label <label>", "Display label for the new column. Required unless --prompt-key or --capability supplies a default title.")
         .option("--key <key>", "Optional stable column key. Defaults to a normalized label.")
         .option("--data-type <type>", "Column data type: text, numeric, boolean, jsonb, or timestamptz.")
-        .option("--kind <kind>", "Column kind: manual, research, ai, formula, enrichment, tool, bind, or lookup. Defaults to manual. Use research for anything you would look up on the web. Enrichment columns always hold a jsonb cell, and --data-type is set for you \u2014 use --capability to seed a ready-to-run one. `lookup` reads a value out of another table; to LINK two tables row-to-row use `oxygen tables relate` instead \u2014 relation columns are two-sided and cannot be added here.")
-        .option("--semantic-type <type>", "Optional semantic type such as company_domain.")
-        .option("--definition-json <json>", "Optional JSON object with column definition metadata. Required for --kind formula as a flat object: {\"expression\":\"trim(company_name)\"}. Check the expression with `formulas validate` first.")
-        .option("--prompt <text-or-file>", "AI or research column prompt, or a path to a prompt file — a value that resolves to a readable file is read as one, matching --prompt everywhere else in this CLI. On its own it sets kind=ai; pair it with --kind research to search the web per row instead. If the prompt names its output sections — a line reading 'Return the following sections:' followed by 'Score: ...', 'Reasoning: ...' — the column answers in exactly that shape and each section becomes a referenceable sub-column; otherwise it answers in plain text. Use --no-structured-output to keep it plain text either way. Reference other columns inline as {{column_key}} — no --input-mapping needed; unknown keys are rejected here instead of failing per row. Merges into --definition-json (the escape hatch for everything else); a `prompt` in both is an error.")
+        .option("--kind <kind>", "Column kind: manual, research (the Web Research Agent), ai, formula, enrichment, tool, bind, or lookup. Defaults to manual. Use research for anything you would look up on the web (an AI column cannot search; `columns convert --to agent` turns one into an agent); one research column answers several fields at once when its prompt names them as sections — one row, one read, one charge — so never add a second column for the same page. Enrichment columns always hold a jsonb cell, and --data-type is set for you \u2014 use --capability to seed a ready-to-run one. `lookup` reads a value out of another table; to LINK two tables row-to-row use `oxygen tables relate` instead \u2014 relation columns are two-sided and cannot be added here.")
+        // Research flags sit directly under --kind: agents read help with head/tail,
+        // and the depth choice (and its price) must land on the first screen.
+        .option("--research-depth <depth>", RESEARCH_DEPTH_OPTION_HELP)
+        .option("--research-url <column_key>", "Research columns: read the ONE page whose URL is in this column for each row instead of searching the web — a pricing page, a job posting, an event page, a 10-K. The page's content is the only evidence, the answer cites it as its source, and the row costs the fetch plus the model (see --dry-run). A URL ending in .pdf is read by the PDF-capable fetch lane first.")
         .option("--research-query <template>", "Research columns: the per-row web search query, templated like the prompt (e.g. \"{{company_name}} pricing page\"). Omit to derive the query from the row's values and the prompt.")
         .option("--research-domains <csv>", "Research columns: comma-separated domains to search within, e.g. techcrunch.com,sec.gov. Omit to search the whole web.")
         .option("--research-exclude-domains <csv>", "Research columns: comma-separated domains to exclude from results.")
         .option("--research-mode <mode>", "Research columns: how tightly the answer is bound to the sources. Default: summarize and combine what they say. strict: answer only from what a source states verbatim (for figures and identifiers). estimate: reason to a figure from the evidence (for revenue or headcount).")
         .option("--research-results <n>", "Research columns: how many search results to ground each row on (1-25, default 5). More evidence costs no extra search, but a larger prompt.")
         .option("--research-engine <engine>", "Research columns: pin the search provider (serper or exa), or with --research-url the page-fetch provider (firecrawl or exa). Defaults to serper for search and firecrawl for fetch, falling back automatically. Most users should not set this.")
-        .option("--research-url <column_key>", "Research columns: read the ONE page whose URL is in this column for each row instead of searching the web — a pricing page, a job posting, an event page, a 10-K. The page's content is the only evidence, the answer cites it as its source, and the row costs the fetch plus the model (see --dry-run). A URL ending in .pdf is read by the PDF-capable fetch lane first.")
+        .option("--semantic-type <type>", "Optional semantic type such as company_domain.")
+        .option("--definition-json <json>", "Optional JSON object with column definition metadata. Required for --kind formula as a flat object: {\"expression\":\"trim(company_name)\"}. Check the expression with `formulas validate` first.")
+        .option("--prompt <text-or-file>", "AI or research column prompt, or a path to a prompt file — a value that resolves to a readable file is read as one, matching --prompt everywhere else in this CLI. On its own it sets kind=ai; pair it with --kind research to make it a Web Research Agent that searches the web per row. If the prompt names its output sections — a line reading 'Return the following sections:' followed by 'Score: ...', 'Reasoning: ...' — the column answers in exactly that shape and each section becomes a referenceable sub-column; otherwise it answers in plain text. Use --no-structured-output to keep it plain text either way. Reference other columns inline as {{column_key}} — no --input-mapping needed; unknown keys are rejected here instead of failing per row. Merges into --definition-json (the escape hatch for everything else); a `prompt` in both is an error.")
         .option("--prompt-key <key>", "Add a column template from `oxygen columns catalog` (e.g. pricing_plan_summary_v1 reads a pricing-page URL column and returns plan count, price range and enterprise plan; company_founders_v1 reads a domain column and returns the founders with sources; person_skill_set_v1 reads the person_enrich payload column with --input profile=person_enrich). Materializes the template's prompt, output schema and grounding and sets its kind (ai, research, formula, or search — a managed web search whose cell is a page URL). Bind each declared input with --input <name>=<column_key>.")
         .option("--input-mapping <json>", "JSON alternative to --input for --prompt-key: an object mapping template input names to columns, e.g. '{\"url\":{\"column\":\"pricing_url\"}}' (a bare column-key string or {\"literal\": ...} also works). Copy templates (email_draft_v1, subject_line_variants_v1, ...) reject mappings built only from manual name/title/company columns — ground them on a research or enrichment column, or write a freeform prompt with --prompt instead.")
-        .option("--model <id>", "AI column model id (e.g. claude-sonnet-4-5). Explicit models require credentialMode byok unless allow-listed managed.")
-        .option("--reasoning-level <level>", "AI column reasoning level: low, medium, or high (shown in the web UI as Oxygen Fast, Oxygen Balanced, and Oxygen Max).")
+        .option("--model <openrouter-model-id>", "BYOK only: the model to run on your own OpenRouter key. Managed columns pick a tier with --reasoning-level.")
+        .option("--reasoning-level <level>", REASONING_LEVEL_OPTION_HELP)
         .option("--run-condition <formula>", "Formula expression gating whether the AI column runs per row. A formula over bare column keys (eu_israel = true), not {{tokens}}.")
         .option("--run-condition-columns <csv>", "Comma-separated column keys referenced by --run-condition.")
         .option("--no-structured-output", "Keep an AI column answering in plain text even when its prompt names output sections. Use this for copy — an email body is one answer, not a set of fields.")
@@ -9532,6 +9638,9 @@ Examples:
             const body = { table, column };
             if (options.promptKey)
                 body.prompt_key = options.promptKey;
+            const researchDepth = readResearchDepthOption(options.researchDepth);
+            if (researchDepth)
+                body.research_depth = researchDepth;
             if (options.inputMapping) {
                 body.input_mapping = parseJsonObject(options.inputMapping);
             }
@@ -9570,7 +9679,7 @@ Examples:
         .option("--max-concurrency <n>", "Maximum concurrent row items for a background run (1-250). Defaults to 250 for AI columns and 50 otherwise (160 for Firecrawl scrape columns).")
         .option("--local", "Run a custom HTTP column in this CLI process, where {env:...} secrets read your own machine's environment. Without it the column runs in the background on Oxygen and the same reference resolves from this workspace's registered custom integration.")
         .option("--local-concurrency <n>", "Maximum concurrent custom HTTP requests for --local. Defaults to 3.")
-        .option("--dry-run", "Preview resolved model, credit estimate, run-condition posture, and — for an AI column — the prompt rendered with one real row's values, without spending any credits.")
+        .option("--dry-run", "Preview the model tier, credit estimate, run-condition posture, and — for an AI column — the prompt rendered with one real row's values, without spending any credits.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, column, options) => {
         const limit = readPositiveInt(options.limit);
@@ -9735,8 +9844,8 @@ Examples:
         .option("--data-type <type>", "New output data type for a lookup column (text, numeric, boolean, jsonb, timestamptz). Discards the cached cells; other column kinds use `oxygen columns retype`.")
         .option("--prompt <text-or-file>", "Replacement AI column prompt, or a path to a prompt file. Reference other columns inline as {{column_key}}; unknown keys are rejected here instead of failing per row. Merges into --definition-json; a `prompt` in both is an error.")
         .option("--input-mapping <json>", "Replace the column's named inputs wholesale. Row columns belong in the prompt as {{column_key}}; use this for the inputs a prompt cannot name on its own — literals and workspace context ({\"icp\":{\"type\":\"context_profile\",\"path\":\"icp\"}}), which the prompt then reads as {{icp}}. Pass {} to clear it; --definition-json can only add mapping keys, never remove one.")
-        .option("--model <id>", "AI column model id (e.g. claude-sonnet-4-5). Explicit models require credentialMode byok unless allow-listed managed.")
-        .option("--reasoning-level <level>", "AI column reasoning level: low, medium, or high (shown in the web UI as Oxygen Fast, Oxygen Balanced, and Oxygen Max).")
+        .option("--model <openrouter-model-id>", "BYOK only: the model to run on your own OpenRouter key. Managed columns pick a tier with --reasoning-level.")
+        .option("--reasoning-level <level>", REASONING_LEVEL_OPTION_HELP)
         .option("--run-condition <formula>", "Formula expression gating whether the AI column runs per row. A formula over bare column keys (eu_israel = true), not {{tokens}}.")
         .option("--run-condition-columns <csv>", "Comma-separated column keys referenced by --run-condition.")
         .option("--no-structured-output", "Keep an AI column answering in plain text even when its prompt names output sections. Use this for copy — an email body is one answer, not a set of fields.")
@@ -9749,6 +9858,7 @@ Examples:
         .option("--research-mode <mode>", "Research columns: strict (answer only from the sources) or estimate (reason to a figure from them).")
         .option("--research-results <n>", "Research columns: how many search results to ground each row on (1-25).")
         .option("--research-engine <engine>", "Research columns: pin the search provider (serper or exa).")
+        .option("--research-depth <depth>", RESEARCH_DEPTH_OPTION_HELP)
         // Declaring BOTH forms leaves the default undefined (Commander only
         // defaults to true when --no- is declared alone), so an update that
         // doesn't mention visibility leaves it untouched.
@@ -9797,11 +9907,16 @@ Examples:
                 definition = { ...(definition ?? {}), inputMapping: parseJsonObject(inputMapping) };
             }
             await assertColumnDefinitionReferences(table, definition);
+            // Sent beside `definition`, never inside it: the server merges the
+            // depth into the column's STORED search block, so it cannot drop a
+            // query template or domains the way a partial webSearch would.
+            const researchDepth = readResearchDepthOption(options.researchDepth);
             const updated = await requestOxygen("/api/cli/tables/columns/update", {
                 method: "POST",
                 body: {
                     table,
                     column,
+                    ...(researchDepth ? { research_depth: researchDepth } : {}),
                     ...(readOption(options.label) ? { label: readOption(options.label) } : {}),
                     ...(readOption(options.semanticType) ? { semantic_type: readOption(options.semanticType) } : {}),
                     ...(definition ? { definition } : {}),
@@ -9818,6 +9933,37 @@ Examples:
                 writeColumnReferenceNotices(updated);
             return updated;
         });
+    }))
+        .addCommand(new Command("convert")
+        .description("Convert a column between an AI column and a Web Research Agent column (--to agent or --to ai), or switch an agent to Keyword search and back. Keeps its key, label, position, prompt, inputs and model tier, and clears its results, so it needs --yes; without it this prints what would change.")
+        .argument("<table>", "Table id or slug.")
+        .argument("<column>", "Column id or key.")
+        .requiredOption("--to <target>", "agent (Web Research Agent), ai (AI column, no web access) or keyword (Keyword search).")
+        .option("--prompt <text>", "Keyword search to agent only: the question the agent answers for each row.")
+        .option("--yes", "Convert, clearing the column's current results.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (table, column, options) => {
+        await handleAsyncAction("columns convert", options, async () => {
+            const to = readOption(options.to)?.toLowerCase() ?? "";
+            if (!["agent", "ai", "keyword"].includes(to)) {
+                throw new OxygenError("invalid_request", `--to must be agent, ai or keyword (got ${to || "nothing"}).`, { exitCode: 1 });
+            }
+            const prompt = readOption(options.prompt);
+            const body = { table, column, to, ...(prompt ? { prompt } : {}) };
+            if (!options.yes) {
+                const plan = await requestOxygen("/api/cli/tables/columns/convert", {
+                    method: "POST",
+                    body: { ...body, dry_run: true },
+                });
+                if (plan.effect_outcome === "no_change" && plan.results_cleared !== true)
+                    return plan;
+                throw new OxygenError("confirmation_required", `Converting ${column} to ${String(plan.to_label ?? to)} clears its current results. Re-run with --yes to convert.`, { details: plan, exitCode: 2 });
+            }
+            return requestOxygen("/api/cli/tables/columns/convert", {
+                method: "POST",
+                body: { ...body, confirm: true },
+            });
+        });
     }))
         .addCommand(new Command("retype")
         .description("Convert a manual text column to a stronger data type, migrating stored values.")
@@ -10275,7 +10421,7 @@ Examples:
         });
     }))
         .addCommand(new Command("wait")
-        .description("Poll a durable table ingestion run until it finishes.")
+        .description("Wait for a table ingestion run (read-only, no credits). Retries transient network failures, including deploy disconnects, at the polling interval within the same timeout.")
         .argument("<run_id>", "Table ingestion run UUID.")
         .option("--timeout-seconds <n>", "Maximum time to wait. Defaults to 600.")
         .option("--interval-seconds <n>", "Polling interval. Defaults to 5.")
@@ -10776,9 +10922,9 @@ Examples:
     }));
     program
         .command("limits")
-        .description("Plan-tier limits, spend-safety defaults, and storage capacity posture.")
+        .description("Plan-tier limits, spend-safety defaults, per-channel sending limits, and storage capacity posture.")
         .addCommand(new Command("show")
-        .description("Show limits and Tables capacity usage: 3M rows/Table, 25M/workspace, and 20/30 GiB PostgreSQL warning/limit; S3 excluded. Recovery: https://oxygen-agent.com/docs/safety/billing.")
+        .description("Compare every plan size: price, monthly credits, volume bonus and price per 100 credits (`plan_bands`). Show your plan band and its limits beside every plan size's (API rate, webhook ingress, storage, import file size, columns per auto-run, signals feed, spend defaults incl. Agent and Copilot caps, fastest workflow schedule), the per-channel sending limits every plan shares (emails per mailbox, WhatsApp, LinkedIn, calls) and its workflow Code-step and run-attempt limits, plus Tables capacity usage naming the largest Table. Each plan size's storage says whether it is in force, scheduled to change on a date, or awaiting its rows-per-Table capacity test, with the values it moves to. `spend_safety_defaults.applies_to` says what each spend default bounds: an unattended trigger delivery, a table auto-run batch, one Agent run, or the attended Copilot. `web_url` opens the same view in the web app (Settings → Plan limits), including any scheduled change. Read-only; spends no credits. Recovery: https://oxygen-agent.com/docs/safety/billing.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("limits show", options, () => requestOxygen("/api/cli/limits"));
@@ -10827,46 +10973,84 @@ Examples:
     })));
     program
         .command("billing")
-        .description("Plan and managed credit commands. Spend splits into FLEXIBLE (ad-hoc: enrichment, AI, automation — drawn from your free-to-spend balance) and FIXED recurring per-resource monthly commitments blocked out of it; see `billing commitments`. THREE CLOCKS, deliberately different: the CREDIT CYCLE that `billing allowance` reports against (your plan's monthly grant window); each resource's own COMMITMENT RENEWAL, anchored to the day you connected it, so `billing commitments --json` next_due_at rarely matches the cycle end; and your SUBSCRIPTION PERIOD in `billing balance` (annual plans span many credit cycles). A number from one clock will not reconcile against another. Failed-payment grace, suspension, and recovery: https://oxygen-agent.com/docs/safety/billing.")
+        .description("Plan and managed credit commands. Spend splits into FLEXIBLE (ad-hoc: enrichment, AI, automation — drawn from your free-to-spend balance) and FIXED recurring per-resource monthly commitments blocked out of it; see `billing commitments`. THREE CLOCKS, deliberately different: the CREDIT CYCLE that `billing allowance` reports against (your plan's monthly grant window); each resource's own COMMITMENT RENEWAL, anchored to the day you connected it, so `billing commitments --json` next_due_at rarely matches the cycle end; and your SUBSCRIPTION PERIOD in `billing balance` (annual plans span many credit cycles). A number from one clock will not reconcile against another. On a plan that pays for several workspaces, `billing usage --group-by workspace` totals what each one spent. To price a month of outreach before building it (leads, enrichment, sequence steps, senders), run `billing estimate`. Failed-payment grace, suspension, and recovery: https://oxygen-agent.com/docs/safety/billing.")
         .addCommand(new Command("change")
-        .description("Preview an upgrade or downgrade and return a Stripe confirmation link. Nothing changes until confirmed in Stripe.")
+        .description("Start a first plan or preview an upgrade, downgrade or billing-interval change, and return the Stripe link to approve it (`approval_url`), with the target plan's monthly credits (`target_plan`). On a workspace with no plan (`mode: first_subscription`) the link is the same Stripe Checkout the web Subscribe button opens, and credits arrive once Stripe confirms the first payment; subscribing needs an organization admin. Nothing is charged or changed until you confirm in Stripe. `interval` is how the plan bills after the change; `recurring_amount` is what each interval bills and `recurring_monthly` its per-month equivalent (a yearly $99 plan: $990, $82.50). Without --interval the plan keeps its current interval. Moving to yearly applies on confirmation with proration; moving to monthly waits for the period end. To compare every plan's credits, volume bonus and price per 100 credits without creating a link, run `limits show`.")
         .requiredOption("--to <plan>", 
     // Derived from the catalog, never retyped: this help text is the only
     // place a customer's agent learns which plans exist, and it named
     // three retired ones for as long as it was a literal. The price sits
     // beside each key because nothing else on the CLI prints a
-    // plan-to-price table (blind baseline, 2026-09-22).
+    // plan-to-price table (blind baseline, 2026-09-22). The credits sit
+    // there too, bonus included, because the $499+ rungs are no longer
+    // price x 100 (repricing 2026-09, decision 1.3).
     `Target plan: ${PURCHASABLE_PLAN_KEYS.map((key) => {
-        const cents = resolveBasePricingPlan(key)?.monthlyPriceCents;
-        return typeof cents === "number" ? `${key} ($${cents / 100}/mo)` : key;
+        const plan = resolveBasePricingPlan(key);
+        const cents = plan?.monthlyPriceCents;
+        if (typeof cents !== "number")
+            return key;
+        const credits = plan?.monthlyCredits;
+        const bonus = planVolumeBonusPercent(key);
+        const creditText = typeof credits === "number"
+            ? `, ${credits.toLocaleString("en-US")} credits${bonus > 0 ? ` incl. a ${bonus}% volume bonus` : ""}`
+            : "";
+        return `${key} ($${cents / 100}/mo${creditText})`;
     }).join(", ")}.`)
+        .option("--interval <interval>", "Bill monthly (`month`) or yearly (`year`: ten months' price for twelve, credits still granted monthly). Omit to keep the current interval (monthly for a first plan). Monthly to yearly adds no extra month: credits already granted for the rest of the month count toward the first yearly month. Yearly is refused with `annual_billing_unavailable` until it is offered.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("billing change", options, () => requestOxygen("/api/cli/billing/change", {
             method: "POST",
-            body: { tier: options.to },
+            // Sent only when asked: the server keeps the subscriber's interval otherwise.
+            body: { tier: options.to, ...(options.interval ? { interval: options.interval } : {}) },
         }));
     }))
         .addCommand(new Command("balance")
-        .description("Show the current plan, subscription entitlement, and managed credit balance: available and reserved credits, FIXED credits committed to recurring per-resource charges, and the FLEXIBLE free-to-spend remainder. `next_renewal` answers \"will I be charged?\": read `will_charge` first — true only when this workspace's own Stripe plan is going to charge its card, in which case `charge_at` and the plan's monthly list price in money say when and roughly how much (the exact amount, with any promotion code or tax, is on the invoice); `period_ends_at` is the trial or period end either way, `cancellation_scheduled` says whether a cancellation is already set, and `stop_command` names the one command that changes it (`billing cancel`, undone by `billing resume`) or is null when nothing here can stop it (staff-invoiced, billed through another workspace, not active). `renewals_past_due` lists infrastructure renewals (managed-inbox domains, warm-ups) OXYGEN could NOT charge this month, what they cost, and the exact top-up that clears them — nothing is cancelled and billing retries automatically after a top-up. `warnings` also flags a recurring_shortfall when your connected infrastructure costs more per month than the plan grants. After failed-payment grace expires, mutations stop while read/export and billing recovery remain available. Recovery: https://oxygen-agent.com/billing. Policy: https://oxygen-agent.com/docs/safety/billing.")
+        .description("Show the current plan, subscription entitlement, and managed credit balance: available and reserved credits, FIXED credits committed to recurring per-resource charges, and the FLEXIBLE free-to-spend remainder. `next_renewal` answers \"will I be charged?\": read `will_charge` first — true only when this workspace's own Stripe plan is going to charge its card, in which case `charge_at` and the plan's monthly list price in money say when and roughly how much (the exact amount, with any promotion code or tax, is on the invoice); `period_ends_at` is the trial or period end either way, `cancellation_scheduled` says whether a cancellation is already set, and `stop_command` names the one command that changes it (`billing cancel`, undone by `billing resume`) or is null when nothing here can stop it (staff-invoiced, billed through another workspace, not active). `billing_interval` says whether the plan bills monthly or yearly; a yearly plan still grants its credits monthly, and `next_credit_grant_at` says when the next monthly grant arrives. `renewals_past_due` lists infrastructure renewals (managed-inbox domains, warm-ups) OXYGEN could NOT charge this month, what they cost, and the exact top-up that clears them — nothing is cancelled and billing retries automatically after a top-up. `warnings` also flags a recurring_shortfall when your connected infrastructure costs more per month than the plan grants. `partner_bonus` says whether this workspace earns the agency partner bonus (+15% credits a month for a published directory partner on $99 or above), how many credits, and why not when it does not; the bonus arrives as its own ledger line (`billing usage --category partner_bonus`), never inside plan.monthly_credits. A workspace linked to another organization (`orgs billing-link`) reads its billing at that owner: the balance is the owner's pool, `shared_billing` is true and `billing_owner_organization_id` names the owner. After failed-payment grace expires, mutations stop while read/export and billing recovery remain available. Recovery: https://oxygen-agent.com/billing. Policy: https://oxygen-agent.com/docs/safety/billing.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("billing balance", options, () => requestOxygen("/api/cli/billing/balance"));
     }))
         .addCommand(new Command("commitments")
-        .description("List the fixed monthly credit commitments blocked at your subscription renewal — per connected sending mailbox, OXYGEN-sold mailbox, warm-up, deliverability, and connected LinkedIn account — with unit price, quantity, and next-due date. This is the FORWARD run-rate: what your currently-connected resources will cost at their next renewal. It is NOT this cycle's charges — compare `billing allowance` fixed_spent_credits for that, and expect the two to differ. Each resource renews on its OWN anchor (the day it was connected), so next_due_at is per-resource and rarely lines up with the credit cycle. Read-only, 0 Oxygen credits.")
+        .description("List the fixed monthly credit commitments blocked at your subscription renewal — per connected sending mailbox, OXYGEN-sold mailbox, warm-up, deliverability, connected LinkedIn, WhatsApp and X account, and rented phone number — with unit price, quantity, and next-due date. When your balance cannot cover an account's renewal, sending from that account pauses at once and it disconnects 7 days later (a phone number is released after 30): paused_quantity, past_due_since, disconnects_at and topup_url say which kind, since when and by when to top up; a top-up resumes it within minutes. This is the FORWARD run-rate: what your currently-connected resources will cost at their next renewal. It is NOT this cycle's charges — compare `billing allowance` fixed_spent_credits for that, and expect the two to differ. Each resource renews on its OWN anchor (the day it was connected), so next_due_at is per-resource and rarely lines up with the credit cycle. Read-only, 0 Oxygen credits.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("billing commitments", options, () => requestOxygen("/api/cli/billing/commitments"));
+    }))
+        .addCommand(new Command("estimate")
+        .description("Estimate what a month of outreach costs before you build it: leads × enrichment × sequence steps × senders. Returns one line per cost (enrichment credits expected and worst case, each mailbox and LinkedIn account at its monthly price, sends at 0 credits), `totals`, `plan_fit` (does your plan cover it, and the top-up if not), `recommended_plan` (the cheapest plan plus top-ups that covers it) and `limits` (emails per mailbox, LinkedIn invites and messages per account; `limits_hit` names each one the scenario exceeds and `senders_needed` how many senders it takes). Steps are counted per channel: a 3-step sequence of two emails and one LinkedIn invite is `--email-steps 2 --linkedin-steps 1`, and `summary` restates what was priced. `monthly_usd` is all in: plan, top-ups and dollar seats. Prices are the ones in force; `sender_billing` says whether senders are paid as dollar seats or monthly credit reservations. Example: `oxygen billing estimate --leads 500 --enrich work_email --email-steps 2 --linkedin-steps 1 --mailboxes 1 --linkedin-accounts 1 --json`. `web_url` opens the same estimate in Settings → Plan limits. Read-only, 0 Oxygen credits.")
+        .option("--leads <n>", "Leads you work through a month.")
+        .option("--enrich <id>", "An enrichment run on every lead, by id from `oxygen enrichment catalog --json` (work_email, mobile_phone, person_enrich, capability:verify_email …). Repeat for several.", collectRepeatable, [])
+        .option("--email-steps <n>", "Email steps per lead (only the email ones; LinkedIn steps go in --linkedin-steps).")
+        .option("--linkedin-steps <n>", "LinkedIn steps per lead; the first is a connection invite, later ones messages.")
+        .option("--mailboxes <n>", "Mailboxes you connect yourself (Google, Microsoft, SMTP).")
+        .option("--managed-mailboxes <n>", "Mailboxes you buy from OXYGEN.")
+        .option("--linkedin-accounts <n>", "LinkedIn accounts you connect.")
+        .option("--plan <plan>", `Check against this plan instead of your own: free, ${PURCHASABLE_PLAN_KEYS.join(", ")}.`)
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("billing estimate", options, () => requestOxygen("/api/cli/billing/estimate", {
+            method: "POST",
+            body: {
+                leads_per_month: readPositiveNumberOrZero(options.leads) ?? 0,
+                enrichments: options.enrich.flatMap((value) => value.split(",")).map((value) => value.trim()).filter(Boolean),
+                email_steps: readPositiveNumberOrZero(options.emailSteps) ?? 0,
+                linkedin_steps: readPositiveNumberOrZero(options.linkedinSteps) ?? 0,
+                mailboxes: readPositiveNumberOrZero(options.mailboxes) ?? 0,
+                managed_mailboxes: readPositiveNumberOrZero(options.managedMailboxes) ?? 0,
+                linkedin_accounts: readPositiveNumberOrZero(options.linkedinAccounts) ?? 0,
+                ...(readOption(options.plan) ? { plan: readOption(options.plan) } : {}),
+            },
+        }));
     }))
         .addCommand(new Command("seats")
-        .description("Show sending capacity per channel: how many seats are purchased, how many are grandfathered, how many senders are connected, and how many are left. Sending seats are what let you CONNECT a sender — a LinkedIn account, WhatsApp number, phone number, or email mailbox — and they are billed in dollars on their own subscription, separate from your plan and separate from credits. You do not need a plan to buy seats. Seats belong to the billing owner: a workspace linked to another organization's plan with `orgs billing-link` connects senders against that organization's seats and buys them there. A grandfathered value of null means unlimited for that channel. Email mailbox allocation is read from this workspace's own database; when it cannot be read, the email seat's allocated/available/can_connect read null and `email_sender_allocation` is `tenant_unavailable`. Read-only, 0 Oxygen credits.")
+        .description("Show sending capacity per channel: how many seats are purchased, how many are grandfathered, how many senders are connected, and how many are left. Sending seats are what let you CONNECT a sender — a LinkedIn account, WhatsApp number, phone number, or email mailbox — and they are billed in dollars on their own subscription, separate from your plan and separate from credits. You do not need a plan to buy seats. Seats belong to the billing owner: a workspace linked to another organization's plan with `orgs billing-link` connects senders against that organization's seats and buys them there. A grandfathered value of null means unlimited for that channel. Email mailbox allocation is read from this workspace's own database; when it cannot be read, the email seat's allocated/available/can_connect read null and `email_sender_allocation` is `tenant_unavailable`. When seats are retired because connected accounts reserve credits instead, the envelope says `status: seats_retired` with a `next_step`; seats already held keep covering their accounts until they end at renewal (`held_seats_end_at`), and from then on each of those accounts reserves credits instead, never both (`after_seats_end` on each channel gives the monthly reservation). Read-only, 0 Oxygen credits.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("billing seats", options, () => requestOxygen("/api/cli/billing/seats"));
     })
         .addCommand(new Command("set")
-        .description("Set how many sending seats of one channel this workspace holds. The quantity is ABSOLUTE, not a delta: `--quantity 3` means you end up with three, so a retried command cannot buy extra. Increasing charges the card pro rata immediately; decreasing credits you pro rata. Reducing below the number of senders you have connected is REFUSED and names how many to disconnect first, because an orphaned sender is one you keep paying a provider for while Oxygen has stopped honouring it. An email_sender reduction is refused with `seat_allocation_unavailable` (503) while the workspace's mailbox count cannot be read; retry it in a moment. Charges real money.")
+        .description("Set how many sending seats of one channel this workspace holds. The quantity is ABSOLUTE, not a delta: `--quantity 3` means you end up with three, so a retried command cannot buy extra. Increasing charges the card pro rata immediately; decreasing credits you pro rata. Reducing below the number of senders you have connected is REFUSED and names how many to disconnect first, because an orphaned sender is one you keep paying a provider for while Oxygen has stopped honouring it. An email_sender reduction is refused with `seat_allocation_unavailable` (503) while the workspace's mailbox count cannot be read; retry it in a moment. Once seats are retired, any increase is refused with `seats_retired` and lowering held seats still works. Charges real money.")
         .requiredOption("--seat-key <kind>", "linkedin, whatsapp, phone_number, or email_sender.")
         .requiredOption("--quantity <n>", "Total seats to hold for this channel, 0 or more.")
         .option("--json", "Print a JSON envelope.")
@@ -10880,7 +11064,7 @@ Examples:
         }));
     })))
         .addCommand(new Command("invoices")
-        .description("List every invoice Stripe has issued for this workspace, newest first, each with a direct PDF link. Covers ALL charges, not just the plan — sending seats, managed inboxes, and credit top-ups appear here too, which is why this works on the free tier: a workspace with no plan can still be a paying customer. A workspace billed through another organization sees an empty list and shared_billing=true; switch to the billing owner to read its invoices. pdf_url and hosted_url are Stripe's own links. Read-only, 0 Oxygen credits.")
+        .description("List every invoice Stripe has issued for this workspace, newest first, each with a direct PDF link. Covers ALL charges, not just the plan — sending seats, managed inboxes, and credit top-ups appear here too, which is why this works on the free tier: a workspace with no plan can still be a paying customer. A workspace linked to another organization (`orgs billing-link`) reads its billing at that owner, so it sees an empty list and shared_billing=true; switch to the billing owner to read its invoices. pdf_url and hosted_url are Stripe's own links. Read-only, 0 Oxygen credits.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("billing invoices", options, () => requestOxygen("/api/cli/billing/invoices"));
@@ -10892,24 +11076,30 @@ Examples:
         await handleAsyncAction("billing allowance", options, () => requestOxygen("/api/cli/billing/allowance"));
     }))
         .addCommand(new Command("usage")
-        .description("Show credit ledger events (each tagged with its FIXED/FLEXIBLE spend_class), automation action usage, or connected-account seat pricing (provider_seats — LinkedIn and WhatsApp).")
-        .option("--meter <meter>", "credits, automation_actions, or provider_seats (rolling-30d peak connected accounts, implied Unipile COGS, and the flat per-account monthly charge). Defaults to credits.")
+        .description("Show credit ledger events (each tagged with its FIXED/FLEXIBLE spend_class), workflow step usage (automation_actions: credits per step, credits billed; writing rows is free), calls with your own API keys (byok_calls: the platform fee per call and the fee credits this month; your provider bills the call itself), or connected LinkedIn and WhatsApp accounts (provider_seats: the rolling-30d peak and its implied Unipile cost; what each account is charged is its credit reservation in `billing commitments`). On a plan that pays for several workspaces (an agency covering client workspaces), `--group-by workspace` totals the credits each workspace spent (`by_workspace`) and `--workspace <id|slug>` narrows the ledger to one of them; a linked client workspace sees only its own spend.")
+        .option("--meter <meter>", "credits, automation_actions, byok_calls, or provider_seats (rolling-30d peak connected accounts and implied Unipile COGS; the per-account charge is listed by `billing commitments`). Defaults to credits.")
         .option("--days <n>", "Lookback window in days. Defaults to 30.")
         .option("--from <iso>", "Only include ledger events at or after this ISO timestamp.")
         .option("--to <iso>", "Only include ledger events at or before this ISO timestamp.")
         .option("--limit <n>", "Maximum events to return. Defaults to 50.")
         .option("--cursor <cursor>", "Opaque cursor from a previous usage response.")
-        .option("--type <type>", "Filter by transaction type, such as reserve, capture, release, grant, or byok_usage.")
-        .option("--category <category>", "Filter by transaction category, such as managed_enrichment, managed_ai, byok, subscription, or admin.")
+        .option("--type <type>", "Filter by transaction type, such as reserve, capture, release, grant, or byok_usage (alias byok).")
+        .option("--category <category>", "Filter by transaction category, such as managed_enrichment, managed_ai, byok, subscription, partner_bonus (the agency partner bonus), or admin.")
         .option("--provider <provider>", "Filter by provider id. With --meter provider_seats, selects the seat provider: linkedin (default) or whatsapp.")
         .option("--source <source_id>", "Filter by source_id/provider operation.")
         .option("--source-id <source_id>", "Alias for --source.")
         .option("--run-id <run_id>", "Filter by run id recorded in ledger metadata. A table run's reserve and release events carry it, but its settled charges may not yet: read what a table run billed from `table-runs get <run>` (creditsUsed), or per row from `table-runs items`.")
         .option("--nonzero", "Only include events that changed available or reserved credits.")
+        .option("--workspace <id|slug>", "Only one workspace's spend on a plan that pays for several (credits meter).")
+        .option("--group-by <key>", "workspace: credits spent per workspace on a pooled plan, in by_workspace, for the same filters (credits meter).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("billing usage", options, () => {
             const params = buildBillingLedgerParams(options);
+            if (readOption(options.workspace))
+                params.set("workspace", readOption(options.workspace));
+            if (readOption(options.groupBy))
+                params.set("group_by", readOption(options.groupBy));
             const suffix = params.toString() ? `?${params.toString()}` : "";
             return requestOxygen(`/api/cli/billing/usage${suffix}`);
         });
@@ -10921,8 +11111,8 @@ Examples:
         .option("--to <iso>", "Only include ledger events at or before this ISO timestamp.")
         .option("--limit <n>", "Maximum grouped rows to return. Defaults to 100.")
         .option("--group-by <keys>", "Comma-separated grouping keys (day, type, category, provider, source, tool, model, run, workspace). Defaults to provider,source.")
-        .option("--type <type>", "Filter by transaction type, such as reserve, capture, release, grant, or byok_usage.")
-        .option("--category <category>", "Filter by transaction category, such as managed_enrichment, managed_ai, byok, subscription, or admin.")
+        .option("--type <type>", "Filter by transaction type, such as reserve, capture, release, grant, or byok_usage (alias byok).")
+        .option("--category <category>", "Filter by transaction category, such as managed_enrichment, managed_ai, byok, subscription, partner_bonus (the agency partner bonus), or admin.")
         .option("--provider <provider>", "Filter by provider id.")
         .option("--source <source_id>", "Filter by source_id/provider operation.")
         .option("--source-id <source_id>", "Alias for --source.")
@@ -10987,6 +11177,7 @@ Examples:
         .option("--rollover <n>", "Max balance credits roll over to. Defaults to the monthly credits.")
         .option("--base-tier <tier>", "Base pricing tier to inherit feature flags from. Defaults to growth_250.")
         .option("--byok", "Enable bring-your-own-key integrations for the plan.")
+        .option("--agent-run-default-credits <n>", "The contract's own default Agent run ceiling in credits (at most 25,000). Omitted keeps the plan's default; re-running set-plan without it clears it.")
         .option("--note <text>", "Internal note stored on the contract.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -11005,6 +11196,9 @@ Examples:
                     : {}),
                 ...(readOption(options.baseTier) ? { base_tier: readOption(options.baseTier) } : {}),
                 ...(options.byok ? { byok: true } : {}),
+                ...(readOption(options.agentRunDefaultCredits)
+                    ? { agent_run_default_credits: readPositiveNumber(options.agentRunDefaultCredits) }
+                    : {}),
                 ...(readOption(options.note) ? { note: readOption(options.note) } : {}),
             },
         }));
@@ -11028,8 +11222,8 @@ Examples:
         }));
     }))
         .addCommand(new Command("topup")
-        .description("Buy a custom amount of on-demand credits at $1.25 per 100. Run without an amount to inspect the allowed range; checkout happens in Stripe and purchased credits never expire.")
-        .argument("[pack]", "Legacy pack alias in USD: 10, 25, 100, or 250.")
+        .description("Buy a custom amount of on-demand credits. Run without an amount to see the current price per 100 credits (`usd_per_100_credits`), the allowed range and the packs; checkout happens in Stripe, the price is shown before you pay, and purchased credits never expire. Plan credits cost less. `usd_per_1k_credits` is a deprecated name for the same per-100 price, not a price per 1,000 credits.")
+        .argument("[pack]", "A pack id from the list shown when you run without an amount.")
         .option("--credits <n>", "Credits to buy (800-100,000 in 100-credit increments).")
         .option("--json", "Print a JSON envelope.")
         .action(async (pack, options) => {
@@ -11048,7 +11242,7 @@ Examples:
         .command("budget")
         .description("Standing credit caps (org/table daily/monthly hard-blocks) beyond per-run max_credits.")
         .addCommand(new Command("list")
-        .description("List the organization's standing budget policies.")
+        .description("List the organization's standing budget policies, plus the plan defaults that apply without one: the daily spend guard (until you set your own org daily budget) and the per-run ceilings of one Agent run, trigger delivery or auto-run batch. Every spend default: `oxygen limits show`.")
         .option("--scope <scope>", `Filter by scope: ${formatPublicBudgetScopes()}.`)
         .option("--status <status>", "Filter by status. Defaults to all.")
         .option("--json", "Print a JSON envelope.")
@@ -11816,6 +12010,7 @@ Examples:
         .option("--file-ids <csv>", "Comma-separated workspace file UUIDs attached to context and eligible for sandbox input.")
         .requiredOption("--max-credits <credits>", "Hard credit ceiling for this run.")
         .requiredOption("--approved", "Explicitly approve managed inference up to --max-credits.")
+        .option("--approve-above-default", "Also approve a --max-credits above your default Agent run ceiling (`oxygen limits show`: spend_safety_defaults.agent_run_max_total_credits), for this run only.")
         .option("--json", "Print a JSON envelope.")
         .action(async (slug, options) => {
         await handleAsyncAction("agent run", options, () => {
@@ -11833,6 +12028,7 @@ Examples:
                     ...(options.fileIds ? { file_ids: options.fileIds.split(",").map((value) => value.trim()).filter(Boolean) } : {}),
                     max_credits: maxCredits,
                     approved: options.approved === true,
+                    ...(options.approveAboveDefault ? { approve_above_default: true } : {}),
                 },
             });
         });
@@ -11871,7 +12067,7 @@ Examples:
         await handleAsyncAction("agent approval decide", options, () => requestOxygen(`/api/cli/agent/${encodeURIComponent(slug)}/runs/${encodeURIComponent(runId)}/approvals/${encodeURIComponent(approvalId)}`, { method: "POST", body: { decision: options.decision } }));
     }))
         .addCommand(new Command("trigger-create")
-        .description("Create a cron, internal event, or signed-webhook trigger for the Workspace Agent.")
+        .description(`Create a cron, internal event, or signed-webhook trigger for the Workspace Agent. A webhook trigger returns its URL, its secret once, and rate_limit: ${WEBHOOK_TRIGGER_RATE_HELP}.`)
         .argument("<slug>", "Currently: workspace.")
         .requiredOption("--type <cron|event|webhook>", "Trigger type.")
         .requiredOption("--instruction <text>", "Goal template run for each delivery.")
@@ -11882,6 +12078,7 @@ Examples:
         .option("--thread-mode <isolated|persistent>", "Reuse a bounded thread across deliveries. Defaults to isolated.")
         .requiredOption("--max-credits <credits>", "Standing per-delivery credit ceiling.")
         .requiredOption("--approved", "Authorize each trigger delivery up to --max-credits.")
+        .option("--approve-above-default", "Also approve a per-delivery --max-credits above your default Agent run ceiling (`oxygen limits show`: spend_safety_defaults.agent_run_max_total_credits), for every delivery of this trigger.")
         .option("--json", "Print a JSON envelope.")
         .action(async (slug, options) => {
         await handleAsyncAction("agent trigger create", options, () => {
@@ -11897,6 +12094,7 @@ Examples:
                     thread_mode: options.threadMode ?? "isolated",
                     max_credits: maxCredits,
                     approved: options.approved === true,
+                    ...(options.approveAboveDefault ? { approve_above_default: true } : {}),
                 } });
         });
     }))
@@ -12383,7 +12581,7 @@ Examples:
         .description("The priced catalog: every provider operation and every OXYGEN column (enrichment bundles, waterfalls, templates, Functions) with its credit cost per row. Start with `tools search --for-table <table>` to see what a table's own columns can be enriched with and what each costs, before adding anything.")
         .addCommand(new Command("search")
         .description("Search the priced catalog (0 credits): provider operations in `tools`, and OXYGEN's own columns in `native_columns` (enrichment bundles, waterfalls, templates, Functions), each with `price_label`, `estimated_credits_per_row`, `pricing_kind` and the exact `cli_add` command. With --for-table <table> it reads that table's columns and returns `suggestions`: the enrichments those columns already support, priced per row. Hydrate one provider operation with tools get. A response listing partial_sources means an optional catalog source timed out and totals may be understated — rerun for the complete catalog.")
-        .argument("[query]", "Search text, e.g. `web` for the Web search column and its modes (each priced in `modes`), or `email`.")
+        .argument("[query]", "Search text, e.g. `web` for the Web Research Agent column and its modes (each priced in `modes`), or `email`.")
         .option("--verbosity <verbosity>", "minimal, summary, or full. Defaults to minimal; hydrate one result with tools get.")
         .option("--terse", "Alias for --verbosity minimal.")
         .option("--all", "Return the complete matching catalog — with no query that is every provider operation (7,000+ rows). Explicit because the default is bounded to 10; with --for-table the table-scoped answer is `suggestions`, which --all does not change.")
@@ -12561,7 +12759,7 @@ Examples:
         .command("enrich-column")
         .description("High-level table enrichment helpers. To see every enrichment a table's columns support, with per-row prices, before choosing one, run `tools search --for-table <table>` (0 credits).")
         .addCommand(new Command("preview")
-        .description("Preflight an enrichment column without provider calls or credit usage.")
+        .description("Preflight an enrichment column without provider calls or credit usage. A lane on your own key (BYOK) is quoted at OXYGEN's platform fee per call, hit or miss (provider_cost_breakdown[].byok_platform_fee_credits_per_call).")
         .argument("<table>", "Table id or slug.")
         .option("--source-column <column>", "Source column key or id. For mobile_phone this is the LinkedIn URL column.")
         .option("--full-name-column <column>", "Column key or id containing the person's full name for work_email. Pair with company-domain/name for Prospeo, RocketReach, LeadMagic, Hunter, Dropleads, ContactOut, BetterContact, or People Data Labs.")
@@ -12580,7 +12778,7 @@ Examples:
         .option("--email-pattern-validation <mode>", "Work-email pattern pre-step: leadmagic_valid_only or disabled.")
         .option("--phone-waterfall-profile <profile>", "Phone waterfall profile: auto (input-aware), linkedin_url, email, or name_domain. Auto picks the cheapest cost-ordered provider set for each row's inputs (mobile match rate ~30-60%).")
         .option("--verify-phone", "Validate found phone numbers with ClearoutPhone (adds phone_line_type + phone_carrier; filter phone_line_type=mobile for mobile-only).")
-        .option("--allow-premium-lanes", "Opt in to managed lanes billing over 500 credits per call. Only linkedin_url has one (LeadMagic email_to_profile, 1225cr); it is off by default so an unattended run can't bill-shock. No effect on mobile_phone, work_email or verify_email.")
+        .option("--allow-premium-lanes", "Opt in to managed lanes billing over 50 credits per call. Only linkedin_url has one (LeadMagic email_to_profile, 122.5cr), until the 2026-09 repricing date, when a LinkedIn URL starts billing only on a hit; it is off by default so an unattended run can't bill-shock. No effect on mobile_phone, work_email or verify_email.")
         .option("--phone-verification-credential-mode <mode>", "ClearoutPhone credential mode for phone verification: managed or user_api_key.")
         .option("--limit <n>", "Rows to estimate. Defaults to 10.")
         .option("--all", "Estimate all rows.")
@@ -12615,7 +12813,7 @@ Examples:
         .option("--email-pattern-validation <mode>", "Work-email pattern pre-step: leadmagic_valid_only or disabled.")
         .option("--phone-waterfall-profile <profile>", "Phone waterfall profile: auto (input-aware), linkedin_url, email, or name_domain. Auto picks the cheapest cost-ordered provider set for each row's inputs (mobile match rate ~30-60%).")
         .option("--verify-phone", "Validate found phone numbers with ClearoutPhone (adds phone_line_type + phone_carrier; filter phone_line_type=mobile for mobile-only).")
-        .option("--allow-premium-lanes", "Opt in to managed lanes billing over 500 credits per call. Only linkedin_url has one (LeadMagic email_to_profile, 1225cr); it is off by default so an unattended run can't bill-shock. No effect on mobile_phone, work_email or verify_email.")
+        .option("--allow-premium-lanes", "Opt in to managed lanes billing over 50 credits per call. Only linkedin_url has one (LeadMagic email_to_profile, 122.5cr), until the 2026-09 repricing date, when a LinkedIn URL starts billing only on a hit; it is off by default so an unattended run can't bill-shock. No effect on mobile_phone, work_email or verify_email.")
         .option("--phone-verification-credential-mode <mode>", "ClearoutPhone credential mode for phone verification: managed or user_api_key.")
         .option("--limit <n>", "Rows to queue.")
         .option("--all", "Queue all rows.")
@@ -12684,7 +12882,7 @@ Examples:
         await handleAsyncAction("find phone", options, () => requestOxygen("/api/cli/find/run", { method: "POST", body: buildFindBody("phone", options) }));
     }))
         .addCommand(new Command("linkedin")
-        .description("Resolve a person's LinkedIn URL from name + company (or email), with identity validation.")
+        .description("Resolve a person's LinkedIn URL from name + company (or email), with identity validation. Each lane tried bills until the 2026-09 repricing date; from it a URL found that matches the person costs a flat 5 credits and a miss costs 0.")
         .option("--full-name <name>", "Person full name.")
         .option("--email <email>", "Known email.")
         .option("--company-domain <domain>", "Company apex domain.")
@@ -12806,6 +13004,7 @@ Examples:
         await handleAsyncAction("supabase connect", options, () => {
             if (options.databaseUrlStdin !== true)
                 throw new Error("--database-url-stdin is required.");
+            markStdinConsumed();
             const databaseUrl = readFileSync(0, "utf8").trim();
             if (!databaseUrl)
                 throw new Error("No Supabase database URL was provided on stdin.");
@@ -13148,7 +13347,7 @@ Examples:
         await handleAsyncAction("senders checkpoints", options, () => requestOxygen("/api/cli/senders/checkpoints"));
     }))
         .addCommand(new Command("connect")
-        .description("Get a Unipile hosted-auth URL to connect a new LinkedIn account (or reconnect with --reconnect). Each connected LinkedIn account occupies one LinkedIn sending seat — $30/month, billed in dollars on the billing owner's seat subscription — unless the billing owner still has grandfathered LinkedIn capacity; check `oxygen billing seats --json` before connecting, and a workspace linked to another organization's plan draws on that organization's seats. New accounts require --country (the owner's normal LinkedIn login country) and default to syncing only conversations OXYGEN starts; use --inbox-scope all to opt into the full LinkedIn inbox. Use --cookie-auth and --custom-proxy to expose those inputs inside Unipile's hosted wizard; their secrets never pass through OXYGEN. Use --count for bulk onboarding. LinkedIn restricts automated activity: every connection needs --acknowledge-risk (only a reconnect that already recorded one is exempt), and --count above 1 also needs --owner-consent (each owner connects their own account). Links are shareable and valid for 10 minutes.")
+        .description("Get a Unipile hosted-auth URL to connect a new LinkedIn account (or reconnect with --reconnect). Each connected LinkedIn account has one monthly price, never two: a LinkedIn sending seat ($30/month, billed in dollars to the billing owner) while seats are sold, or a monthly credit reservation once they are retired, when a connect the balance cannot cover fails with insufficient_credits. Invites, messages and other LinkedIn actions cost 0 credits on top. Check `oxygen billing seats --json` before connecting: it says which applies and the price. A workspace linked to another organization's plan is billed at that organization. New accounts require --country (the owner's normal LinkedIn login country) and default to syncing only conversations OXYGEN starts; use --inbox-scope all to opt into the full LinkedIn inbox. Use --cookie-auth and --custom-proxy to expose those inputs inside Unipile's hosted wizard; their secrets never pass through OXYGEN. Use --count for bulk onboarding. LinkedIn restricts automated activity: every connection needs --acknowledge-risk (only a reconnect that already recorded one is exempt), and --count above 1 also needs --owner-consent (each owner connects their own account). Links are shareable and valid for 10 minutes.")
         .option("--reconnect <connection_id>", "Reconnect an existing connection instead of creating a new one. Accepts a connection id.")
         .option("--country <code>", "Required for new accounts: ISO 3166-1 alpha-2 code for the account owner's normal LinkedIn login country (for example DE or US).")
         .option("--sales-nav", "Request Classic + Sales Navigator access during Unipile hosted authentication.")
@@ -13293,39 +13492,47 @@ Examples:
         }));
     })))
         .addCommand(new Command("limits")
-        .description("View and adjust per-account daily action limits and the daily-reset timezone.")
+        .description("View and adjust per-account daily action limits, working hours (the times LinkedIn actions may run) and the timezone they use.")
         .option("--json", "Print a JSON envelope.")
         .addCommand(new Command("get")
-        .description("Show current limits, overrides, daily-reset timezone, defaults, and safe maximums for an account. <id> accepts a sender account id, connection id, or Unipile account id.")
+        .description("Show current limits, overrides, working hours (timezone, days, start, end), defaults, and safe maximums for an account. <id> accepts a sender account id, connection id, or Unipile account id.")
         .argument("<id>", "Sender account id, connection id, or Unipile account id.")
         .option("--json", "Print a JSON envelope.")
         .action(async (id, options) => {
         await handleAsyncAction("senders limits get", options, () => requestOxygen(`/api/cli/senders/${encodeURIComponent(id)}/limits`));
     }))
         .addCommand(new Command("set")
-        .description("Adjust per-account daily action limits and the daily-reset timezone. Defaults: 20 invites/day, 100 invites/week, 40 messages/day, 5 comments/day. Values are clamped to hard maximums (30 invites/day, 150 invites/week, 40 messages/day, 20 comments/day, 300 human Unibox sends/hour); higher caps raise the risk of a LinkedIn restriction. Daily send caps run at half on Saturday and Sunday in the account's timezone unless --weekend-full-volume is set. Send windows (time of day) are set per sequence in the campaign schedule, not per account. <id> accepts a sender account id, connection id, or Unipile account id.")
+        .description("Adjust per-account action limits and working hours. LinkedIn actions only run inside the account's working hours (default 07:00-22:00 every day, in the account's timezone); work due outside them is deferred to the next window, not failed. Set them with --timezone, --working-days, --working-hours-start and --working-hours-end; flags you omit keep their current value. A sequence's own schedule (sequences update --linkedin-timezone ...) can narrow the window for its LinkedIn steps, never widen it; email steps follow the sequence's email send window instead. Every limit flag shows its default and hard maximum; values above the maximum are clamped, and higher caps raise the risk of a LinkedIn restriction. Each action has its own cap (InMails per day and per rolling 30 days, profile views, profile lookups, endorsements, invitation withdrawals, posts), and every send except posts also counts toward --total-actions-per-day. Daily send caps run at half on Saturday and Sunday in the account's timezone unless --weekend-full-volume is set. A withdrawn invitation cannot be re-sent to the same person for 21 days. Own-feed posts and your own Unibox replies ignore working hours. A refused action names its reason (outside_working_hours defers it; linkedin_rate_limited names the limit and resets_at). Changing limits is free. <id> accepts a sender account id, connection id, or Unipile account id.")
         .argument("<id>", "Sender account id, connection id, or Unipile account id.")
-        .option("--invites-per-day <n>", "Daily LinkedIn connection invites cap.")
-        .option("--invites-per-week <n>", "Weekly LinkedIn connection invites cap.")
-        .option("--messages-per-day <n>", "Daily direct messages cap.")
-        .option("--inmails-per-day <n>", "Daily InMail cap.")
-        .option("--profile-views-per-day <n>", "Daily profile views cap.")
-        .option("--follows-per-day <n>", "Daily follows cap.")
-        .option("--likes-per-day <n>", "Daily likes cap.")
-        .option("--comments-per-day <n>", "Daily comments cap.")
-        .option("--total-actions-per-day <n>", "Daily cap across all send/action types.")
-        .option("--relations-reads-per-day <n>", "Daily cap on relations/connections list reads (scrape protection).")
-        .option("--messages-reads-per-day <n>", "Daily cap on chat and message-history reads.")
-        .option("--searches-per-day <n>", "Daily cap on LinkedIn search executions.")
-        .option("--sales-nav-search-results-per-day <n>", "Daily cap on Sales Navigator search result rows fetched.")
-        .option("--api-reads-per-day <n>", "Daily cap on all other LinkedIn API reads.")
-        .option("--total-reads-per-day <n>", "Daily cap across all read units.")
-        .option("--min-spacing-seconds <n>", "Minimum seconds between actions.")
-        .option("--spacing-jitter-seconds <n>", "Random jitter seconds added to action spacing.")
-        .option("--interactive-min-spacing-seconds <n>", "Minimum seconds between human-sent Unibox actions.")
-        .option("--interactive-spacing-jitter-seconds <n>", "Random jitter seconds added to human-sent Unibox action spacing.")
-        .option("--interactive-sends-per-hour <n>", "Hourly cap on human-sent Unibox actions.")
-        .option("--timezone <tz>", "IANA timezone the daily action counters reset in, e.g. Europe/Berlin. Defaults to the zone of the country chosen at connect.")
+        .option("--invites-per-day <n>", linkedInLimitHelp("invites_per_day", "Daily LinkedIn connection invites cap"))
+        .option("--invites-per-week <n>", linkedInLimitHelp("invites_per_week", "Weekly LinkedIn connection invites cap"))
+        .option("--messages-per-day <n>", linkedInLimitHelp("messages_per_day", "Daily direct messages cap"))
+        .option("--inmails-per-day <n>", linkedInLimitHelp("inmails_per_day", "Daily InMail cap"))
+        .option("--inmails-per-month <n>", linkedInLimitHelp("inmails_per_month", "InMail cap over a rolling 30 days"))
+        .option("--profile-views-per-day <n>", linkedInLimitHelp("profile_views_per_day", "Daily profile views cap; the member is notified"))
+        .option("--profile-lookups-per-day <n>", linkedInLimitHelp("profile_lookups_per_day", "Daily invisible profile and company lookups cap"))
+        .option("--endorsements-per-day <n>", linkedInLimitHelp("endorsements_per_day", "Daily skill endorsements cap"))
+        .option("--withdrawals-per-day <n>", linkedInLimitHelp("withdrawals_per_day", "Daily cap on withdrawing sent invitations; reading the sent list uses the read budgets"))
+        .option("--posts-per-day <n>", linkedInLimitHelp("posts_per_day", "Daily posts to the account's own feed, from every caller; not counted in the total"))
+        .option("--follows-per-day <n>", linkedInLimitHelp("follows_per_day", "Daily follows cap"))
+        .option("--likes-per-day <n>", linkedInLimitHelp("likes_per_day", "Daily likes cap"))
+        .option("--comments-per-day <n>", linkedInLimitHelp("comments_per_day", "Daily comments cap"))
+        .option("--total-actions-per-day <n>", linkedInLimitHelp("total_actions_per_day", "Daily cap across all send/action types except posts"))
+        .option("--relations-reads-per-day <n>", linkedInLimitHelp("relations_reads_per_day", "Daily cap on relations/connections list reads, the scrape ban vector"))
+        .option("--messages-reads-per-day <n>", linkedInLimitHelp("messages_reads_per_day", "Daily cap on chat and message-history reads"))
+        .option("--searches-per-day <n>", linkedInLimitHelp("searches_per_day", "Daily cap on LinkedIn search executions"))
+        .option("--sales-nav-search-results-per-day <n>", linkedInLimitHelp("sales_nav_search_results_per_day", "Daily cap on Sales Navigator search result rows fetched"))
+        .option("--api-reads-per-day <n>", linkedInLimitHelp("api_reads_per_day", "Daily cap on all other LinkedIn API reads"))
+        .option("--total-reads-per-day <n>", linkedInLimitHelp("total_reads_per_day", "Daily cap across all read units"))
+        .option("--min-spacing-seconds <n>", linkedInLimitHelp("min_action_spacing_seconds", "Minimum seconds between actions"))
+        .option("--spacing-jitter-seconds <n>", linkedInLimitHelp("action_spacing_jitter_seconds", "Random jitter seconds added to action spacing"))
+        .option("--interactive-min-spacing-seconds <n>", linkedInLimitHelp("interactive_min_spacing_seconds", "Minimum seconds between human-sent Unibox actions"))
+        .option("--interactive-spacing-jitter-seconds <n>", linkedInLimitHelp("interactive_spacing_jitter_seconds", "Random jitter seconds added to human-sent Unibox action spacing"))
+        .option("--interactive-sends-per-hour <n>", linkedInLimitHelp("interactive_sends_per_hour", "Hourly cap on human-sent Unibox actions"))
+        .option("--timezone <tz>", "IANA timezone for the working hours and the daily counter reset, e.g. Europe/Berlin. Defaults to the zone of the country chosen at connect.")
+        .option("--working-days <days>", "Days LinkedIn actions may run: mon-fri, mon,wed,fri, or ISO numbers 1-7 (1 = Monday). A weekday-only window leaves a visible two-day gap every week.")
+        .option("--working-hours-start <HH:MM>", "Local time working hours start, e.g. 09:00.")
+        .option("--working-hours-end <HH:MM>", "Local time working hours end (exclusive), e.g. 18:00. Must be after the start.")
         .option("--warmup-restart", "Start (or restart) the warm-up ramp now — gradually raises this account's invite + message caps to full over ~2 weeks.")
         .option("--warmup-disable", "Turn off warm-up for this account (treat it as already warm and use its full configured caps).")
         .option("--read-warmup-disable", "Turn off the READ warm-up ramp for this account. Network capture (`oxygen linkedin network setup`) eases a newly armed account in at 5 \u2192 10 \u2192 20 reads a day over two weeks; this runs it at the full read budget immediately. Separate from --warmup-disable, which governs invites and messages.")
@@ -13688,7 +13895,7 @@ Examples:
         await handleAsyncAction("posts reactions", options, () => requestOxygen(`/api/cli/linkedin/posts/reactions?${buildPostEngagementQuery(options)}`));
     }))
         .addCommand(new Command("create")
-        .description("Publish a LinkedIn post from the connected account. A REAL public write, so it prints a preview by default and only publishes with --approved. Counts against the sender account's daily action quota. (Company-page posting is not supported — Unipile exposes it only via the fragile raw route.)")
+        .description(`Publish a LinkedIn post from the connected account. A REAL public write, so it prints a preview by default and only publishes with --approved. Counts against the account's posts_per_day cap (default ${LINKEDIN_SENDER_LIMIT_DEFAULTS.posts_per_day}, max ${LINKEDIN_SENDER_LIMIT_MAXIMUMS.posts_per_day}), not the daily action total, and is exempt from working hours and action spacing. (Company-page posting is not supported — Unipile exposes it only via the fragile raw route.)`)
         .option("--text <text>", "Post body text.")
         .option("--text-file <path>", "Read the post body from a file (alternative to --text).")
         .option("--account <ref>", "Sender account to post from. Omit for the org default.")
@@ -14355,7 +14562,7 @@ Examples:
         // Hidden while the AI inbox triage is dev-only (ADR 0027): production
         // help must not offer a flag its API refuses. Unhide with the flag's
         // production rollout.
-        .addOption(new Option("--needs-reply", "Narrower than --unanswered: unanswered threads minus those AI inbox triage judged bulk (newsletters, notifications, mass pitches) or needing no answer. Threads not yet triaged stay in. Rows then carry `triage` in --json. Ignored while --search is set. Only where AI inbox triage is enabled; elsewhere the API answers needs_reply_unavailable.").hideHelp())
+        .addOption(new Option("--needs-reply", "Narrower than --unanswered: unanswered threads minus those AI inbox triage judged bulk (newsletters, notifications, mass pitches) or needing no answer. Threads not yet analysed stay in: each row carries `triage_status` (analysed, undecided or not_analysed) next to `triage`, and `needs_reply_counts` sizes the whole list. `inbox analyze <id> --force` analyses one now. Ignored while --search is set. Only where AI inbox triage is enabled; elsewhere the API answers needs_reply_unavailable.").hideHelp())
         .option("--responses-only", "Email only: only conversations with an inbound reply (never sent-only threads).")
         .option("--bucket <bucket>", "Email only: primary or others (superseded by --segment).")
         .option("--segment <segment>", "Top tab: primary (everything but the negative status tier), all, or an email-only folder (others, sent, warmup, dmarc).")
@@ -15292,7 +15499,7 @@ Examples:
         }, formatSequenceAnalyticsHealth);
     }))
         .addCommand(new Command("create")
-        .description("Create a draft multichannel sequence from a steps JSON file. Supports LinkedIn, email, WhatsApp, human call_task, and connected-CRM crm_task journeys. Assign LinkedIn senders with --senders (optional at create — a draft can sit senderless, but enroll/start require at least one for LinkedIn journeys); bind an Instantly email track with --email-*. Install/read the oxygen-sequencer skill for complete mapped CRM task examples.")
+        .description("Create a draft multichannel sequence from a steps JSON file. Supports LinkedIn, email, WhatsApp, human call_task, and connected-CRM crm_task journeys. Assign LinkedIn senders with --senders (optional at create — a draft can sit senderless, but enroll/start require at least one for LinkedIn journeys). Native email sends through connected Google/Microsoft mailboxes, including Microsoft SMTP transport; optional --email-* flags bind an Instantly campaign. Install/read the oxygen-sequencer skill for complete mapped CRM task examples.")
         .requiredOption("--name <name>", "Human-readable sequence name.")
         .requiredOption("--slug <slug>", "Unique slug for the sequence.")
         .requiredOption("--steps-file <path>", "Path to a JSON file: { \"steps\": [...] }. LinkedIn steps (visit_profile | invite | wait_for_connection | message | inmail | follow | like_post | comment_post | withdraw_invite), email steps (email_send | email_enroll | email_move | email_stop), WhatsApp (whatsapp_message), human call tasks (call_task), connected-CRM tasks (crm_task; channel crm; exact identity record_mappings + explicit create/update policy + record_links + dynamic task property_mappings/associations), and control steps (wait | wait_for_signal | branch | stop), each with an `id`. Copy templates support {{column}} interpolation from the lead's row, {{column|fallback}} inline fallbacks, deterministic spintax — {{RANDOM|a|b|c}} or industry-standard bare {Hi|Hey|Hello}, nestable like {Would {Tuesday|Thursday} work|next week?} — and {% if column %}…{% endif %} conditionals; a bare {…} region is spintax only when it contains a top-level |, so literal braces (CSS/JSON) pass through. Native email sends (email_send) also expose three reserved sender variables from the sending mailbox: {{sender_name}} (mailbox display name), {{sender_first_name}} (its first word), and {{sender_email}} (the from address); a row column of the same name WINS on collision, and a missing display name renders empty. comment_post takes text_template and/or ai_prompt — a KG-grounded comment generated at send time (a paid AI call) that falls back to text_template if generation fails. A `branch` routes on signals (then/else) or the legacy connection_accepted/already_connected/open_profile sugar (then_id/else_id). A signal condition can also branch on the LEAD'S DATA: a data leaf { has_column: \"email\" } is true when that row_values column has a non-empty value (add present:false for \"missing\") — e.g. route leads that have an email down an email arm and the rest down a LinkedIn arm. MINIMAL EMAIL STEP SHAPE: { \"id\": \"s1\", \"channel\": \"email\", \"kind\": \"email_send\", \"subject_template\": \"...\", \"body_template\": \"...\" } — body_template is REQUIRED on email_send; subject_template is OPTIONAL and is the one control that decides threading: give a step its own subject and it goes out as a NEW email, omit it and the step continues the lead's previous email in the same thread, going out as \"Re: <the previous email's subject>\" (what the retired email_reply kind used to be — still accepted on input, rewritten into this shape, and reported under `warnings` in the response). The FIRST email step of a sequence must carry a subject, since it has no earlier thread to continue. MINIMAL WHATSAPP STEP SHAPE: { \"id\": \"s1\", \"channel\": \"whatsapp\", \"kind\": \"whatsapp_message\", \"template\": \"Hi {{first_name|there}} …\" } — template is REQUIRED, and a live WhatsApp start also needs the sequence's --whatsapp-cold-initiate opt-in. A/B tests use an explicit `variants` array of copy partials on the step (up to 25 alternates, a–z; spintax varies wording INSIDE one variant and is not A/B-tracked). For the complete replay-safe crm_task upsert mapping shape, install/read the oxygen-sequencer skill.")
@@ -15304,20 +15511,24 @@ Examples:
         .option("--from-table <id>", "Alias of --table: the source table id or slug this sequence draws its leads and {{column}} values from.")
         .option("--enroll", "After creating the sequence, immediately enroll every row of the bound table (same as running `sequences enroll --from-table` next). Requires --table/--from-table. Enrolling spends no credits and sends nothing.")
         .option("--url-column <key>", "Column key holding each lead's LinkedIn URL/provider id.")
-        .option("--email-provider <provider>", "Email track provider for this NATIVE Oxygen sequence; only 'instantly' is supported here. To push rows into a campaign you already run in Smartlead, lemlist, HeyReach or Instantly, use `oxygen sequences push-external` instead.")
+        .option("--email-provider <provider>", "Omit for native email through connected Google/Microsoft mailboxes, including Microsoft SMTP transport. Set 'instantly' to bind an Instantly campaign with --email-connection and --email-definition-file. To push rows into a campaign you already run in Smartlead, lemlist, HeyReach or Instantly, use `oxygen sequences push-external`.")
         .option("--email-connection <id>", "Instantly connection id for the email track. Defaults to the org's active Instantly connection.")
         .option("--email-definition-file <path>", "Path to a JSON file with the email content spec (subjects/bodies/delays/subsequences) compiled to an Instantly campaign on start.")
         .option("--max-credits <n>", "Credit cap for the LinkedIn track (also set when starting).")
         .option("--max-live-sends <n>", "External-action ceiling for 0-credit email/WhatsApp/CRM-task tracks (positive integer). Required to start any of them live.")
         .option("--max-emails-per-mailbox-per-day <n>", "Per-mailbox daily email cap (positive integer) applied across the sending pool; also sets each mailbox's send pace (send window ÷ cap, catching up when a slot is missed). Daily capacity = this cap × sendable mailboxes; `sequences stats` reports it under daily_budget.")
-        .option("--send-window-file <path>", "Path to a JSON file with the sequence-level email send window: { timezone, days?, start, end, timezone_mode?, recipient_timezone_column? }.")
-        .option("--max-emails-per-day <n>", "Sequence-wide daily live-send fleet cap (positive integer) across every sender/mailbox.")
-        .option("--max-new-enrollments-per-day <n>", "Daily drip cap on NEW first-touch leads the planner starts (positive integer).")
+        .option("--send-window-file <path>", "Email window JSON: { timezone, days?, start, end, timezone_mode?, recipient_timezone_column? }; days are ISO 1-7. New sequences default to weekdays 09:00-17:00 in the workspace timezone when available, otherwise UTC. Gates email steps only; LinkedIn/WhatsApp steps use --linkedin-timezone/-days/-hours-start/-hours-end.")
+        .option("--linkedin-timezone <tz>", "LinkedIn/WhatsApp sending schedule (the web Sending schedule): IANA zone, e.g. Europe/Zurich. Set with --linkedin-days, --linkedin-hours-start and --linkedin-hours-end; the window narrows each sender's working hours.")
+        .option("--linkedin-days <days>", "LinkedIn sending schedule days: mon-fri, mon,wed,fri, or ISO numbers 1-7 (1 = Monday).")
+        .option("--linkedin-hours-start <HH:MM>", "LinkedIn sending schedule start, local to --linkedin-timezone, e.g. 06:45.")
+        .option("--linkedin-hours-end <HH:MM>", "LinkedIn sending schedule end (exclusive), e.g. 18:30. Must be after the start. The window only narrows each sender's working hours (default 07:00-22:00, see senders limits get), never widens them.")
+        .option("--max-emails-per-day <n>", "Sequence-wide daily live-send cap across all senders/mailboxes. Unset means no additional sequence-wide cap; mailbox caps still apply. Omit on update to keep the current setting.")
+        .option("--max-new-enrollments-per-day <n>", "Daily cap on NEW first-touch leads. Unset means no additional intake cap; sending limits still apply. Omit on update to keep the current setting.")
         .option("--sequence-prioritization <mode>", "Under a tight daily budget, serve 'followups' or 'new_leads' first.")
         .option("--esp-matching <mode>", "Native-email ESP matching: 'prefer' (DEFAULT) biases toward a mailbox on the recipient's own provider, falling back to any; 'off' rotates mailboxes freely; 'strict' requires a same-provider mailbox and defers the send when none exists.")
         .option("--esp-routing-file <path>", "Path to a JSON file holding the WHOLE native-email routing policy: { mode?, routes?, exclude? }. `routes` is keyed by the RECIPIENT's provider and its values are relative send shares per sending provider, so { \"google\": { \"microsoft\": 100 } } sends Google-hosted recipients from Microsoft inboxes. `exclude` bars a sending domain outright: [{ \"domain\": \"burned.example\", \"from_recipients\": [\"google\"] }]. Replaces --esp-matching and the file is the complete policy, not a patch.")
         .option("--sender-failover <mode>", "What happens when an enrollment's LinkedIn/WhatsApp sender goes unavailable: 'wait' (default) resumes when the sender recovers; 'rebind' moves UNTOUCHED enrollments (no thread, no pending invite, no lead binding) to the least-loaded healthy sender in the pool after ~5h of confirmed outage.")
-        .option("--email-min-gap-minutes <n>", "Minimum minutes between two live emails from the SAME mailbox for this sequence (Instantly's 'time gap between emails'; integer 0-720, 0 = none). A humanization FLOOR only: Oxygen already spaces each mailbox's sends evenly across its send window (window length ÷ per-mailbox daily cap, e.g. 9h ÷ 15 = 36 min, tightening through the day to catch up on any lost slot), so it only binds when it exceeds the derived spacing — it also floors the late-day catch-up, so 12 keeps every gap ≥12 min. It never bypasses the daily caps or the send window. To send MORE per day, raise --max-emails-per-mailbox-per-day, add mailboxes, or widen the send window.")
+        .option("--email-min-gap-minutes <n>", "Minimum same-mailbox gap, default 12 minutes (integer 0-720; 0 disables the extra gap). Sends are spread across the window and may be farther apart. Daily caps and windows still apply.")
         .option("--opportunity-value <usd>", "Estimated USD value of one positive-reply opportunity (>= 0). Analytics-only: sequence stats multiply it by the positive-reply count to report pipeline $ (stats.opportunities). Never gates a send or spends a credit.")
         .option("--mailboxes <ids>", "Per-sequence sending-account allowlist for native email (Instantly's 'Accounts to use'): comma-separated mailbox ids. Native email sends rotate ONLY over these mailboxes instead of the whole pool. Omit for the whole pool. Note: a narrow allowlist plus --esp-matching strict can starve sends when no allowed same-provider mailbox exists (surfaced as blocked defer reasons in stats).")
         .option("--sender-profiles <ids>", "Send from these sender profiles (unified LinkedIn/WhatsApp/inbox identities): comma-separated profile ids. The server resolves each into its senders + inboxes. Live start is blocked if a selected profile lacks an account for a channel the journey uses.")
@@ -15325,11 +15536,15 @@ Examples:
         .option("--exclude-contacted", "Default every enroll into this sequence to cross-campaign exclusion — skip leads any OTHER active sequence is already contacting. A per-enroll `sequences enroll --exclude-contacted` / `--no-exclude-contacted` always overrides this default. Off by default.")
         .option("--no-exclude-contacted", "Turn the sequence-level exclude-contacted default back OFF (enrollments then exclude cross-campaign only when a call opts in).")
         .option("--stop-on-reply-scope <scope>", "Native-email reply stop: 'lead' (default) stops the replying enrollment; 'company_domain' also stops active enrollments at the same non-freemail company domain.")
+        .option("--bounce-protection <json>", "Sequence bounce policy JSON (partial updates merge): enabled=true, warning_rate=.02, pause_rate=.03, min_sends=20, window_days=7. Hard bounces / accepted sends in the rolling window; pauses this sequence, not the fleet. Rates are fractions; mailbox protection is separate.")
+        .option("--include-unsubscribe-headers", "Opt in to one-click unsubscribe headers (default off); visible link is separate.")
+        .option("--no-include-unsubscribe-headers", "Omit one-click headers.")
+        .option("--reply-to-stop-text <text>", "Personal opt-out text (default empty); empty clears it.")
         .option("--include-unsubscribe-link", "Append OXYGEN's visible recipient-bound unsubscribe footer to first-touch cold emails. Explicit opt-in; off by default. Plain-text messages show the URL, while HTML messages show a linked Unsubscribe label.")
         .option("--no-include-unsubscribe-link", "Do not append OXYGEN's visible unsubscribe footer (the default). Sends the authored body unchanged and never removes suppression from recipients who already opted out.")
-        .option("--tracking-opens", "Turn open-pixel tracking ON for this sequence's native email sends (the default; injection still needs a verified tracking domain — see `oxygen domains tracking`).")
+        .option("--tracking-opens", "Opt in to open tracking (default off). Requires a verified tracking domain and deployment tracking secret.")
         .option("--no-tracking-opens", "Turn OFF the open pixel for this sequence's native email sends (a deliverability knob — a pixel is spam-filter surface).")
-        .option("--tracking-clicks", "Turn click-link tracking ON for this sequence's native email sends (the default; same verified-tracking-domain gate as opens).")
+        .option("--tracking-clicks", "Opt in to click tracking (default off). Requires a verified tracking domain and deployment tracking secret.")
         .option("--no-tracking-clicks", "Turn OFF click-link rewriting for this sequence's native email sends (links go out untouched).")
         .option("--tags <csv>", "Comma-separated workspace tags linking this sequence to tables, workflows, and knowledge.")
         .option("--json", "Print a JSON envelope.")
@@ -15414,21 +15629,25 @@ Examples:
         .option("--linkedin-url-column-key <key>", "LinkedIn: row_values key holding each lead's profile URL (else falls back to linkedin_url/linkedinUrl/linkedin/profile_url). \"\" clears it back to auto-detect.")
         .option("--senders <ids>", "Comma-separated LinkedIn or WhatsApp sender account ids (or connection / Unipile ids; `linkedin senders` / `whatsapp accounts` list them).")
         .option("--source-table <idOrSlug>", "Bind the table this sequence enrolls leads from (id or slug). Only lands while the sequence has no source table yet (first-writer-wins); its rows become enrollable leads. Draft/paused only.")
-        .option("--email-provider <provider>", "Email provider for the email track. Only 'instantly' is supported.")
+        .option("--email-provider <provider>", "Optional linked-campaign provider: 'instantly'. Omit to preserve the existing binding; --clear-email removes it on a draft. Native email needs no provider binding and sends through connected Google/Microsoft mailboxes, including Microsoft SMTP transport.")
         .option("--email-connection <id>", "Instantly connection id for the email track.")
         .option("--email-definition-file <path>", "Path to a JSON file with the email content spec (subjects/bodies/delays/subsequences).")
         .option("--clear-email", "Remove the email binding from the sequence (draft only).")
         .option("--max-credits <n>", "Credit cap for the LinkedIn track (draft only).")
         .option("--max-live-sends <n>", "Draft-time external-action ceiling for 0-credit email/WhatsApp/CRM-task tracks (positive integer). After first start, change it through `sequences start`.")
         .option("--max-emails-per-mailbox-per-day <n>", "Per-mailbox daily email cap (positive integer) applied across the sending pool; also sets each mailbox's send pace (send window ÷ cap, catching up when a slot is missed). Daily capacity = this cap × sendable mailboxes; `sequences stats` reports it under daily_budget.")
-        .option("--send-window-file <path>", "Path to a JSON file with the sequence-level email send window: { timezone, days?, start, end, timezone_mode?, recipient_timezone_column? }.")
-        .option("--max-emails-per-day <n>", "Sequence-wide daily live-send fleet cap (positive integer) across every sender/mailbox.")
-        .option("--max-new-enrollments-per-day <n>", "Daily drip cap on NEW first-touch leads the planner starts (positive integer).")
+        .option("--send-window-file <path>", "Email window JSON: { timezone, days?, start, end, timezone_mode?, recipient_timezone_column? }; days are ISO 1-7. New sequences default to weekdays 09:00-17:00 in the workspace timezone when available, otherwise UTC. Gates email steps only; LinkedIn/WhatsApp steps use --linkedin-timezone/-days/-hours-start/-hours-end.")
+        .option("--linkedin-timezone <tz>", "LinkedIn/WhatsApp sending schedule (the web Sending schedule): IANA zone, e.g. Europe/Zurich. Set with --linkedin-days, --linkedin-hours-start and --linkedin-hours-end; the window narrows each sender's working hours.")
+        .option("--linkedin-days <days>", "LinkedIn sending schedule days: mon-fri, mon,wed,fri, or ISO numbers 1-7 (1 = Monday).")
+        .option("--linkedin-hours-start <HH:MM>", "LinkedIn sending schedule start, local to --linkedin-timezone, e.g. 06:45.")
+        .option("--linkedin-hours-end <HH:MM>", "LinkedIn sending schedule end (exclusive), e.g. 18:30. Must be after the start. The window only narrows each sender's working hours (default 07:00-22:00, see senders limits get), never widens them.")
+        .option("--max-emails-per-day <n>", "Sequence-wide daily live-send cap across all senders/mailboxes. Unset means no additional sequence-wide cap; mailbox caps still apply. Omit on update to keep the current setting.")
+        .option("--max-new-enrollments-per-day <n>", "Daily cap on NEW first-touch leads. Unset means no additional intake cap; sending limits still apply. Omit on update to keep the current setting.")
         .option("--sequence-prioritization <mode>", "Under a tight daily budget, serve 'followups' or 'new_leads' first.")
         .option("--esp-matching <mode>", "Native-email ESP matching: 'prefer' (DEFAULT) biases toward a mailbox on the recipient's own provider, falling back to any; 'off' rotates mailboxes freely; 'strict' requires a same-provider mailbox and defers the send when none exists.")
         .option("--esp-routing-file <path>", "Path to a JSON file holding the WHOLE native-email routing policy: { mode?, routes?, exclude? }. `routes` is keyed by the RECIPIENT's provider and its values are relative send shares per sending provider, so { \"google\": { \"microsoft\": 100 } } sends Google-hosted recipients from Microsoft inboxes. `exclude` bars a sending domain outright: [{ \"domain\": \"burned.example\", \"from_recipients\": [\"google\"] }]. Replaces --esp-matching and the file is the complete policy, not a patch.")
         .option("--sender-failover <mode>", "What happens when an enrollment's LinkedIn/WhatsApp sender goes unavailable: 'wait' (default) resumes when the sender recovers; 'rebind' moves UNTOUCHED enrollments (no thread, no pending invite, no lead binding) to the least-loaded healthy sender in the pool after ~5h of confirmed outage.")
-        .option("--email-min-gap-minutes <n>", "Minimum minutes between two live emails from the SAME mailbox for this sequence (Instantly's 'time gap between emails'; integer 0-720, 0 = none). A humanization FLOOR only: Oxygen already spaces each mailbox's sends evenly across its send window (window length ÷ per-mailbox daily cap, e.g. 9h ÷ 15 = 36 min, tightening through the day to catch up on any lost slot), so it only binds when it exceeds the derived spacing — it also floors the late-day catch-up, so 12 keeps every gap ≥12 min. It never bypasses the daily caps or the send window. To send MORE per day, raise --max-emails-per-mailbox-per-day, add mailboxes, or widen the send window.")
+        .option("--email-min-gap-minutes <n>", "Minimum same-mailbox gap, default 12 minutes (integer 0-720; 0 disables the extra gap). Sends are spread across the window and may be farther apart. Daily caps and windows still apply.")
         .option("--opportunity-value <usd>", "Estimated USD value of one positive-reply opportunity (>= 0). Analytics-only: sequence stats multiply it by the positive-reply count to report pipeline $ (stats.opportunities). Never gates a send or spends a credit.")
         .option("--mailboxes <ids>", "Per-sequence sending-account allowlist for native email (Instantly's 'Accounts to use'): comma-separated mailbox ids. Native email sends rotate ONLY over these mailboxes instead of the whole pool. Note: a narrow allowlist plus --esp-matching strict can starve sends when no allowed same-provider mailbox exists (surfaced as blocked defer reasons in stats).")
         .option("--sender-profiles <ids>", "Send from these sender profiles (unified LinkedIn/WhatsApp/inbox identities): comma-separated profile ids. The server resolves each into its senders + inboxes. Live start is blocked if a selected profile lacks an account for a channel the journey uses.")
@@ -15436,11 +15655,15 @@ Examples:
         .option("--exclude-contacted", "Default every enroll into this sequence to cross-campaign exclusion — skip leads any OTHER active sequence is already contacting. A per-enroll `sequences enroll --exclude-contacted` / `--no-exclude-contacted` always overrides this default. Off by default.")
         .option("--no-exclude-contacted", "Turn the sequence-level exclude-contacted default back OFF (enrollments then exclude cross-campaign only when a call opts in).")
         .option("--stop-on-reply-scope <scope>", "Native-email reply stop: 'lead' (default) stops the replying enrollment; 'company_domain' also stops active enrollments at the same non-freemail company domain.")
+        .option("--bounce-protection <json>", "Sequence bounce policy JSON (partial updates merge): enabled=true, warning_rate=.02, pause_rate=.03, min_sends=20, window_days=7. Hard bounces / accepted sends in the rolling window; pauses this sequence, not the fleet. Rates are fractions; mailbox protection is separate.")
+        .option("--include-unsubscribe-headers", "Opt in to one-click unsubscribe headers (default off); visible link is separate.")
+        .option("--no-include-unsubscribe-headers", "Omit one-click headers.")
+        .option("--reply-to-stop-text <text>", "Personal opt-out text (default empty); empty clears it.")
         .option("--include-unsubscribe-link", "Append OXYGEN's visible recipient-bound unsubscribe footer to first-touch cold emails. Explicit opt-in; off by default. Plain-text messages show the URL, while HTML messages show a linked Unsubscribe label.")
         .option("--no-include-unsubscribe-link", "Turn the visible unsubscribe footer OFF. Future first-touch emails send the authored body unchanged; existing suppression records remain enforced.")
-        .option("--tracking-opens", "Turn open-pixel tracking ON for this sequence's native email sends (the default; injection still needs a verified tracking domain — see `oxygen domains tracking`).")
+        .option("--tracking-opens", "Opt in to open tracking (default off). Requires a verified tracking domain and deployment tracking secret.")
         .option("--no-tracking-opens", "Turn OFF the open pixel for this sequence's native email sends (a deliverability knob — a pixel is spam-filter surface).")
-        .option("--tracking-clicks", "Turn click-link tracking ON for this sequence's native email sends (the default; same verified-tracking-domain gate as opens).")
+        .option("--tracking-clicks", "Opt in to click tracking (default off). Requires a verified tracking domain and deployment tracking secret.")
         .option("--no-tracking-clicks", "Turn OFF click-link rewriting for this sequence's native email sends (links go out untouched).")
         .option("--tags <csv>", "Replace the sequence's workspace tags (comma-separated; \"\" clears them). The ONE field an ARCHIVED sequence still accepts — tag finished campaigns to link their learnings across the workspace.")
         .option("--json", "Print a JSON envelope.")
@@ -15496,7 +15719,7 @@ Examples:
                     body.email = email;
             }
             if (Object.keys(body).length === 0) {
-                throw new Error("Provide at least one field to update (--name, --steps-file, --source-table, --channels, --senders, --tags, --email-*, --clear-email, --max-credits, --max-live-sends, --max-emails-per-mailbox-per-day, --send-window-file, --stop-on-reply-scope, --[no-]include-unsubscribe-link, --no-stop-on-bounce, --[no-]exclude-contacted, or --[no-]tracking-opens / --[no-]tracking-clicks).");
+                throw new Error("Provide at least one field to update (--name, --steps-file, --source-table, --channels, --senders, --tags, --email-*, --clear-email, --max-credits, --max-live-sends, --max-emails-per-mailbox-per-day, --send-window-file, --linkedin-* schedule, --stop-on-reply-scope, --[no-]include-unsubscribe-link, --no-stop-on-bounce, --[no-]exclude-contacted, or --[no-]tracking-opens / --[no-]tracking-clicks).");
             }
             return requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}`, {
                 method: "PATCH",
@@ -15857,7 +16080,7 @@ Examples:
         await handleSequenceVariantsAction(sequence, options);
     })));
     program.addCommand(new Command("voice")
-        .description("The call channel. `tasks` works the call queue — leads waiting for a HUMAN to dial, queued by sequence call steps, CRM records, table rows, and replies. Claiming takes a lease so two reps never dial the same prospect. Nothing here places a call: dialing is a separate, metered, guardrail-gated action. Consumes 0 credits.")
+        .description("The call channel. `tasks` works the call queue — leads waiting for a HUMAN to dial, queued by sequence call steps, CRM records, table rows, and replies. Claiming takes a lease so two reps never dial the same prospect. `numbers` manages the dialing pool: list, search, buy, tag, cap, release. Nothing here places a call: a call is live audio a rep holds in the web softphone at /sequencer/calls (a beta feature: Settings → Beta features; 5 credits per connected minute), so the terminal works everything around it. Only `numbers buy --approved` starts a charge.")
         .addCommand(new Command("tasks")
         .description("Work the call queue: queue | list | claim | complete | extend | skip | override.\n\nA call that nobody answers is dispositioned for you from the call itself, which\nalso resumes any sequence enrollment parked on it — so `complete` and `skip`\nreport already_recorded:true rather than failing when that has happened. You log\nonly what a person said.\n\nWhat blocks a dial, and what you can do about it:\n  calling_window     lead's local time outside 09:00-20:00      waivable per lead\n  unknown_timezone   no timezone on the lead, so the window\n                     cannot be checked (fails closed)          waivable per lead\n  daily_cap          the chosen number hit today's dial cap     waivable per lead\n  suppressed         on the workspace do-not-call list          NEVER waivable\n  destination_blocked your numbers cannot reach that country    NEVER waivable\n\n`list` reports dialable, block_reason and block_detail per lead, plus\ndialable_count and blocked_by_reason for the page. Waive one with `override`.")
         .addCommand(new Command("queue")
@@ -16059,7 +16282,7 @@ Examples:
         });
     })))
         .addCommand(new Command("numbers")
-        .description("The org's dialing pool: list | tag | release. Buying is done from the web shop, which prices and previews the recurring order before it is placed.")
+        .description("The org's dialing pool: list | search | requirements | buy | tag | cap | release. Searching is free; buying previews the recurring monthly charge until you pass --approved.")
         .addCommand(new Command("list")
         .description("List the org's phone numbers with warm-up state, daily cap, and what each one costs per month. Optional --tag narrows to one campaign's numbers.")
         .option("--tag <tags>", "Comma-separated workspace tags — matches phone numbers carrying ANY of these tags (see `oxygen tags list`).")
@@ -16073,6 +16296,71 @@ Examples:
             const suffix = params.toString();
             return requestOxygen(`/api/cli/voice/numbers${suffix ? `?${suffix}` : ""}`);
         });
+    }))
+        .addCommand(new Command("search")
+        .description("Find numbers you could buy, by area code or region. Free: searching buys nothing and reserves nothing, so a listed number can be gone by the time you buy it.")
+        .option("--area-code <code>", "Area code, e.g. 415 (US/CA).")
+        .option("--region <code>", "State or region, e.g. CA.")
+        .option("--country <iso>", "ISO country code (default US). Run `voice numbers requirements` first for a country outside US/CA.")
+        .option("--limit <n>", "How many to return (1-30; default 10).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("voice numbers search", options, () => {
+            const limit = readOption(options.limit);
+            return requestOxygen("/api/cli/voice/numbers", {
+                method: "POST",
+                body: {
+                    action: "search",
+                    ...voiceNumberFilters(options),
+                    ...(limit ? { limit: Number(limit) } : {}),
+                },
+            });
+        });
+    }))
+        .addCommand(new Command("requirements")
+        .description("What a country demands before it sells a number (business details, documents). Free, and read live from the carrier.")
+        .option("--country <iso>", "ISO country code (default US).")
+        .option("--end-user <type>", "business (default) or individual.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("voice numbers requirements", options, () => {
+            const country = readOption(options.country);
+            const endUser = readOption(options.endUser);
+            return requestOxygen("/api/cli/voice/numbers", {
+                method: "POST",
+                body: {
+                    action: "requirements",
+                    ...(country ? { iso_country: country.toUpperCase() } : {}),
+                    ...(endUser ? { end_user_type: endUser } : {}),
+                },
+            });
+        });
+    }))
+        .addCommand(new Command("buy")
+        .description("Buy phone numbers for the dialer. A number is a RECURRING monthly charge until you release it, and it starts in warm-up on a reduced daily cap. Previews by default: the preview names the numbers and the monthly credits, and nothing is bought until you pass --approved. At most 10 per order.")
+        .option("--count <n>", "How many numbers to buy (1-10). Not needed with --number.")
+        .option("--number <e164s>", "Exact numbers to buy, comma-separated (from `voice numbers search`).")
+        .option("--area-code <code>", "Pick numbers in this area code.")
+        .option("--region <code>", "Pick numbers in this state or region.")
+        .option("--country <iso>", "ISO country code (default US).")
+        .option("--approved", "Actually buy. Without this you get a preview and nothing is bought or charged.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("voice numbers buy", options, () => {
+            const numbers = splitCommaList(options.number);
+            const count = readOption(options.count);
+            if (numbers.length === 0 && !count)
+                throw new Error("Pass --count <n> or --number <e164,...>.");
+            return requestOxygen("/api/cli/voice/numbers", {
+                method: "POST",
+                body: {
+                    action: "buy",
+                    ...voiceNumberFilters(options),
+                    ...(numbers.length > 0 ? { phone_numbers: numbers } : { count: Number(count) }),
+                    ...(options.approved === true ? { approved: true } : {}),
+                },
+            });
+        });
     }))
         .addCommand(new Command("tag")
         .description("Replace a phone number's workspace tags (whole set; `--tags \"\"` clears) — e.g. pool the numbers dialing one campaign behind its tag. See `oxygen tags list` for the vocabulary.")
@@ -16085,6 +16373,24 @@ Examples:
             body: { tags: splitCommaList(options.tags) },
         }));
     }))
+        .addCommand(new Command("cap")
+        .description("Adjust one number's daily dial cap. `voice numbers list` shows every number's cap, today's ceiling and dials left.")
+        .addCommand(new Command("set")
+        .description("Set one phone number's daily dial cap (dials per day, 1-300; new numbers get 100). A warming number still dials at its ramp's ceiling until it has warmed. Consumes no credits. Example: `oxygen voice numbers cap set +14155550142 --daily-cap 150`.")
+        .argument("<number>", "Phone number in E.164 (e.g. +14155550142) or its id.")
+        .requiredOption("--daily-cap <n>", "New daily dial cap, a whole number from 1 to 300.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (number, options) => {
+        await handleAsyncAction("voice numbers cap set", options, () => {
+            const raw = readOption(options.dailyCap);
+            if (!raw)
+                throw new Error("--daily-cap is required.");
+            return requestOxygen(`/api/cli/voice/numbers/${encodeURIComponent(number)}/cap`, {
+                method: "PATCH",
+                body: { daily_cap: Number(raw) },
+            });
+        });
+    })))
         .addCommand(new Command("release")
         .description("Give a number back to the carrier and stop its monthly charge. IRREVERSIBLE — the number returns to the carrier's pool and can be taken by someone else within minutes; you cannot get it back. Previews by default; pass --approved to actually release.")
         .requiredOption("--number <e164>", "The number to release, e.g. +14155550142.")
@@ -16669,7 +16975,7 @@ Examples:
         });
     })));
     program.addCommand(new Command("managed-inboxes")
-        .description("Managed sending inboxes bought through OXYGEN: subscribe a domain + N InboxKit mailboxes (google/microsoft/azure) as a recurring monthly Oxygen-credit purchase, add inboxes to a domain you already own, inspect/verify, and cancel. OXYGEN Warm-up defaults on when available: its quoted recurring credits and exact future addresses are part of the order approval, and the worker activates it after provisioning without a second warmup approval. Warm-up does not prove native-send authorization: verify each exact address with `mailboxes oauth-health --json`. Subscribe/add-inboxes/cancel are approval-gated (preview → re-run with --approved --quote). The inbox vendor is chosen for you; --vendor pins one.")
+        .description("Managed sending inboxes bought through OXYGEN: subscribe a domain + N InboxKit mailboxes (google/microsoft/azure) as a recurring monthly Oxygen-credit purchase, add inboxes to a domain you already own, inspect/verify, and cancel. OXYGEN Warm-up defaults on when available: its quoted recurring credits and exact future addresses are part of the order approval, and the worker activates it after provisioning without a second warmup approval. Warm-up does not prove native-send authorization: verify each exact address with `mailboxes oauth-health --json`. Subscribe/add-inboxes preview first (re-run with --approved --quote); cancel previews first (re-run with --approved --confirm <domain>). To remove several domains with their inboxes, use `domains delete`. The inbox vendor is chosen for you; --vendor pins one.")
         .addCommand(new Command("verify")
         .description("Check that OXYGEN, STRIPE, and the VENDOR agree about what this org is buying. The truth about a managed inbox lives in three systems — what the customer asked for, what they are charged, and what is actually running — and a 200 from any one of them proves nothing. Reports every disagreement with WHO IS LOSING MONEY while it stands (customer_overbilled first, then oxygen_pays). Read-only, no writes, 0 Oxygen credits.")
         .option("--json", "Print a JSON envelope.")
@@ -16683,11 +16989,11 @@ Examples:
         await handleAsyncAction("managed-inboxes registrant", options, () => requestOxygen("/api/cli/managed-inboxes/registrant"));
     }))
         .addCommand(new Command("subscribe")
-        .description("Subscribe a NEW domain + mailboxes as a managed monthly inbox subscription. WITHOUT --approved this prints a priced PREVIEW with a quote_id (nothing ordered, nothing charged); re-run with --approved --quote <id> to place the order. OXYGEN Warm-up defaults on for Google, Microsoft, and Azure when available: preview and approved responses carry `warmup_activation` with the exact `mailboxes` and `scope=warmup_only`; it is null when warmup is disabled or unavailable. For InboxKit, Google carries `transport=inboxkit_managed_google_handoff`; Microsoft/Azure carries `transport=inboxkit_sequencer_export`. Both carry `mailbox_credentials_required=false` and `native_send_oauth_separate=true`, so managed warm-up needs no customer-supplied OAuth or mailbox password. Google retrieves the existing managed credential only during activation and never persists or returns it; Microsoft/Azure uses native export. Native sending authorization is separate and may still be required before OXYGEN can send. Verify each exact address with `mailboxes oauth-health --json`; InboxKit's unattended Google domain approval usually lands within minutes and the worker keeps retrying, so a waiting row is not a reason to ask the customer to sign in. This order authorizes automatic OXYGEN Warm-up activation after provisioning, so no second `mailboxes warmup enable` approval is needed. Prices come from the vendor's LIVE rate card and LIVE domain price, and are refused if they sit below vendor cost. To add mailboxes to a domain you ALREADY own use `managed-inboxes add-inboxes` — this command always registers a new domain and fails on one you own.")
-        .argument("[domain]", "Sending domain to register + host the mailboxes (e.g. send.acme.com). May also be passed as --domain.")
+        .description("Subscribe a NEW domain + mailboxes as a managed monthly inbox subscription. WITHOUT --approved this prints a priced PREVIEW with a quote_id (nothing ordered, nothing charged); re-run with --approved --quote <id> to place the order. OXYGEN Warm-up defaults on for Google, Microsoft, and Azure when available: preview and approved responses carry `warmup_activation` with the exact `mailboxes` and `scope=warmup_only`; it is null when warmup is disabled or unavailable. For InboxKit, Google carries `transport=inboxkit_managed_google_handoff`; Microsoft/Azure carries `transport=inboxkit_sequencer_export`. Both carry `mailbox_credentials_required=false` and `native_send_oauth_separate=true`, so managed warm-up needs no customer-supplied OAuth or mailbox password. Google retrieves the existing managed credential only during activation and never persists or returns it; Microsoft/Azure uses native export. Native sending authorization is separate and may still be required before OXYGEN can send. Verify each exact address with `mailboxes oauth-health --json`; InboxKit's unattended Google domain approval usually lands within minutes and the worker keeps retrying, so a waiting row is not a reason to ask the customer to sign in. This order authorizes automatic OXYGEN Warm-up activation after provisioning, so no second `mailboxes warmup enable` approval is needed. The preview shows the price in force: from the 2026-09 repricing date a Google inbox is 500 credits a month all-in (a flat 400 mailbox line plus the 100-credit mailbox connection, warm-up included, which `connection_monthly_credits` shows and your balance reserves once the inbox connects); Microsoft and Azure mailboxes are priced from the vendor's LIVE rate card. Domains are priced from the vendor's LIVE domain price, and any price below vendor cost is refused. A domain you bought on its own through Oxygen (`domains buy`) takes its first inboxes here too: the preview says `domain_source: owned`, nothing is registered again and `one_off_credits` is 0 (Google or Microsoft; omit --years). To add mailboxes to a domain that already has inboxes use `managed-inboxes add-inboxes`.")
+        .argument("[domain]", "Sending domain to register + host the mailboxes (e.g. send.acme.com), or one you already bought through Oxygen. May also be passed as --domain.")
         .option("--domain <domain>", "Sending domain (alternative to the positional argument).")
         .requiredOption("--provider <provider>", "Mailbox PLATFORM: google, microsoft, or azure. (google/microsoft cap at 5 mailboxes per domain; azure allows 100.)")
-        .option("--vendor <vendor>", "Pin the vendor: inboxkit or cmr. Omit to let OXYGEN choose. A named vendor with no credential FAILS rather than falling back to another.")
+        .option("--vendor <vendor>", "Pin the vendor: inboxkit. Omit to let OXYGEN choose. A named vendor with no credential FAILS rather than falling back to another.")
         .option("--sender <id>", "Sender profile id (from `oxygen senders profiles list`) that OWNS every mailbox in this order: its first name, last name, and profile picture are stamped on each one, so you never retype them. A sender profile is one person's sending identity — their LinkedIn/WhatsApp accounts and email inboxes under one name and photo. One sender can own several addresses on the same domain (see --locals). Any first_name/last_name/profile_picture_url in --mailboxes/--file is dropped for the sender's own values.")
         .option("--locals <list>", "Comma-separated local parts to create for --sender, e.g. `--locals talia,talia.rosen,t.rosen` on send.acme.com orders talia@, talia.rosen@, and t.rosen@ — all owned by that one person. Requires --sender, because a bare local part carries no name and the vendor's stamp is permanent.")
         .option("--mailboxes <json>", "JSON array of mailboxes: [{\"username\",\"first_name\",\"last_name\",\"profile_picture_url\"}], or [{\"username\",\"sender_profile_id\"}] to take the identity from a sender profile per item (mix freely). profile_picture_url is optional and must be a PUBLIC, PERMANENT https URL — the vendor fetches it server-side at provisioning, so an expiring CDN link (e.g. a media.licdn.com URL with e=<epoch>) ships the mailbox faceless. Use `oxygen managed-inboxes upload-avatar <path>` to host one, or --sender / sender_profile_id, whose photo Oxygen already mirrors.")
@@ -16696,7 +17002,7 @@ Examples:
         .option("--redirect-url <url>", "Where the domain's web root redirects. Defaults to your workspace's company website; editable later with `oxygen domains forwarding set`.")
         .option("--billing <path>", "Path to a JSON file with the registrant/WHOIS contact (first_name, last_name, phone, country, city, state, address_line_one, postal_code). Required on your FIRST order; later orders reuse the registrant already on file.")
         .option("--no-warmup", "Order WITHOUT automatic OXYGEN Warm-up. Warm-up is included by default and starts after provisioning under this order approval for the exact quoted Google/Microsoft/Azure addresses; opting out means using BYO warm-up or a later standalone warmup approval.")
-        .option("--no-placement", "Order WITHOUT inbox placement. Placement is included by default and covers inbox-placement (spam) testing, blacklist/reputation monitoring, and authentication checks on every inbox.")
+        .option("--placement", "Add inbox placement to every inbox (optional, billed monthly per inbox from provisioning): inbox-placement (spam) testing, blacklist/reputation monitoring, and authentication checks. Off unless you pass this flag.")
         .option("--approved", "Place the order (requires --quote). Without it, a priced preview is returned.")
         .option("--quote <id>", "The quote_id from a fresh preview. Required with --approved.")
         .option("--json", "Print a JSON envelope.")
@@ -16731,11 +17037,15 @@ Examples:
                     ...(years ? { years: Number(years) } : {}),
                     ...(redirectUrl ? { redirect_url: redirectUrl } : {}),
                     ...(billing ? { billing } : {}),
-                    // commander maps --no-x to `x: false`, so an untouched flag is
-                    // `undefined` and the server applies its recommended default.
-                    // The selection is hashed into quote_id, so --approved must repeat
-                    // whatever the preview was run with.
-                    addons: { warmup: options.warmup !== false, placement: options.placement !== false },
+                    // Warm-up is on unless --no-warmup. Placement is opt-in: it is sent only
+                    // when --placement was passed, so an untouched flag leaves the server's
+                    // default (off) in force. Older CLIs sent `placement: true` on every
+                    // order. The selection is hashed into quote_id, so --approved must
+                    // repeat whatever the preview was run with.
+                    addons: {
+                        warmup: options.warmup !== false,
+                        ...(options.placement === true ? { placement: true } : {}),
+                    },
                     ...(options.approved ? { approved: true } : {}),
                     ...(quote ? { quote_id: quote } : {}),
                 },
@@ -16784,7 +17094,7 @@ Examples:
         });
     }))
         .addCommand(new Command("list")
-        .description("List the org's managed inbox orders: vendor, platform, live inbox count, lifecycle status, internal billing posture, and each order's FULL monthly cost — the inbox line plus the warm-up and inbox-placement add-ons billing per inbox on top of it (`orders[].total_monthly_credits`, `total_monthly_credits` across the workspace). Read-only, 0 Oxygen credits.")
+        .description("List the org's managed inbox orders: vendor, platform, live inbox count, lifecycle status, internal billing posture, and each order's FULL monthly cost — the inbox line, each inbox's mailbox connection once inboxes are sold all-in (`orders[].connection`), and the warm-up and inbox-placement add-ons billing per inbox on top of it (`orders[].total_monthly_credits`, `total_monthly_credits` across the workspace). Read-only, 0 Oxygen credits.")
         .option("--status <status>", "Filter by status: pending, active, renewing, past_due, expired, cancelled, or failed.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -16880,7 +17190,7 @@ Examples:
         });
     })));
     program.addCommand(new Command("mailboxes")
-        .description("Native email sending pool: register/refresh Google/Microsoft mailboxes (including secure local credential-file transfer), pause/disable inboxes, connect EmailGuard monitoring, and inspect/control OXYGEN Warm-up. Fresh managed InboxKit Google/Microsoft/Azure orders activate exact-scope warm-up automatically after provisioning under their approved default-on add-on. Google reuses the managed credential just in time; Microsoft/Azure uses native export. Standalone warm-up plans and credit caps are for BYOK/imported mailboxes, managed opt-outs, or later separate enrollment. OXYGEN Warm-up never owns campaign dispatch. Every inbox here always belongs to a sender profile (the person it sends as) — list, create, and attach those with `oxygen senders profiles`. Safe import preflight: run `oxygen mailboxes compatibility --catalog-only --json`, then `oxygen mailboxes import --file <path> --validate-only --json` (add the credential source flags shown by import help when the file contains credentials).")
+        .description("Native email sending pool: register/refresh Google/Microsoft mailboxes (including Microsoft SMTP transport and secure local credential-file transfer), pause, disable or delete inboxes, connect EmailGuard monitoring, and inspect/control OXYGEN Warm-up. Fresh managed InboxKit Google/Microsoft/Azure orders activate exact-scope warm-up automatically after provisioning under their approved default-on add-on. Google reuses the managed credential just in time; Microsoft/Azure uses native export. Standalone warm-up plans and credit caps are for BYOK/imported mailboxes, managed opt-outs, or later separate enrollment. OXYGEN Warm-up never owns campaign dispatch. Every inbox here always belongs to a sender profile (the person it sends as) — list, create, and attach those with `oxygen senders profiles`. Safe import preflight: run `oxygen mailboxes compatibility --catalog-only --json`, then `oxygen mailboxes import --file <path> --validate-only --json` (add the credential source flags shown by import help when the file contains credentials).")
         .addCommand(new Command("list")
         .description("List the org's sending mailboxes with provider, status, warmup state, source (managed = bought through Oxygen, byok = bring-your-own), worker-owned connectionRepair and warmupRepair state, and a pool overview (including counts by source). Read each mailbox's warmupTruth for warm-up (state, last_send, pause, dispatch, next_action with the exact command); warmupState is only the stored rail token and reads `error` for a provider-paused seat. mode=automatic means OXYGEN owns the next bounded retry — do not ask for browser consent or disable/re-enable an existing warm-up seat. To see only Google/Microsoft mailboxes that still need OAuth connection, including attempt budgets and manual remedies, use `oxygen mailboxes oauth-health --json`. Read the fleet from `summary` — `summary.by_warmup`, `by_status`, `by_provider`, `by_auth_mode`, `by_transport`, and `by_source` already aggregate every mailbox, so you never need to iterate the `mailboxes` array to count them. `summary.warmup` adds the normalized pool counts — by_truth_state, by_next_action, enrolled, stalled (enrolled with a measured zero warm-up sends), and needs_action — and `--warmup <states>`, `--next-action <codes>`, and `--stalled` narrow the list to exactly those mailboxes, so \"which of my inboxes are not sending\" is one command rather than a local transform over every row. Without `--json` this prints a readable pool: the counts, then every mailbox that owes an action with its cause and the exact command to run.")
         .option("--status <status>", "Filter by status: active, paused, disabled, or provisioning (ordered, still being set up).")
@@ -16933,6 +17243,7 @@ Examples:
         if (!result)
             return;
         if (options.json) {
+            writeBillingNotices("mailboxes list", result);
             emitSuccess("mailboxes list", result, options);
             return;
         }
@@ -16946,12 +17257,13 @@ Examples:
         await handleAsyncAction("mailboxes get", options, () => requestOxygen(`/api/cli/mailboxes/${encodeURIComponent(mailbox)}`));
     }))
         .addCommand(new Command("delete")
-        .description("Preview or approve removal of exact mailboxes from Oxygen at 0 credits. Deletion immediately removes them from sending but never deletes the underlying Google Workspace or Microsoft 365 accounts. It preserves conversation/message/delivery history and stops any separately listed 100-credit connected-mailbox commitment for future renewals; that line is currently built but not charged, and it is not the 100-credit OXYGEN Warm-up subscription. The current period is not refunded. Listed active/paused sequences keep their status but lose these senders and are not automatically paused. Without --cascade, a mailbox whose own warm-up or deliverability monitoring is still connected fails closed with its exact teardown steps; with --cascade, those add-ons are disconnected as part of the delete (their recurring credits stop too) and nothing is deleted unless every teardown is confirmed. A live managed DOMAIN subscription always fails closed, because it covers other mailboxes — manage it from its domain row.")
+        .description("Preview or approve removal of exact mailboxes from Oxygen at 0 credits. Deletion immediately removes them from sending but never deletes the underlying Google Workspace or Microsoft 365 accounts. It preserves conversation/message/delivery history and stops any separately listed 100-credit connected-mailbox commitment for future renewals; that line is currently built but not charged, and it is not the 100-credit OXYGEN Warm-up subscription. The current period is not refunded. Listed active/paused sequences keep their status but lose these senders and are not automatically paused. Without --cascade, a mailbox whose own warm-up or deliverability monitoring is still connected fails closed with its exact teardown steps; with --cascade, those add-ons are disconnected as part of the delete (their recurring credits stop too) and nothing is deleted unless every teardown is confirmed. A live managed DOMAIN subscription covers other mailboxes, so it fails closed unless the whole domain goes too: `oxygen domains delete <domain>`, or --include-domains when every inbox on it is selected.")
         .requiredOption("--mailboxes <list>", "Comma-separated mailbox ids or addresses (maximum 500).")
         .option("--approved", "Execute the fresh preview. Requires --plan-hash and --confirmation.")
         .option("--plan-hash <hash>", "Fresh preview plan_hash.")
         .option("--confirmation <phrase>", "Exact confirmation_phrase returned by the fresh preview.")
         .option("--cascade", "Disconnect each mailbox's OWN warm-up and deliverability-monitoring add-ons as part of the delete, instead of failing closed until you tear them down by hand. Stops their recurring credits too. Pass it on the preview as well as the approval: the plan hash is bound to it, so an approval cannot turn it on. A live managed domain subscription still fails closed.")
+        .option("--include-domains", "Also delete each domain whose inboxes are ALL selected: an OXYGEN-bought domain is cancelled, your own is archived (DNS and registrar untouched). Partly selected domains are kept and listed in preview.domains_kept. Pass it on the preview as well as the approval.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("mailboxes delete", options, () => {
@@ -16970,6 +17282,7 @@ Examples:
                     mailboxes,
                     ...(options.approved === true ? { approved: true } : {}),
                     ...(options.cascade === true ? { cascade: true } : {}),
+                    ...(options.includeDomains === true ? { include_domains: true } : {}),
                     ...(planHash ? { plan_hash: planHash } : {}),
                     ...(confirmation ? { confirmation } : {}),
                 },
@@ -16977,7 +17290,7 @@ Examples:
         });
     }))
         .addCommand(new Command("health")
-        .description("Fleet email-health: the sending pool rolled up by external deliverability reputation (healthy/degraded/critical/unknown), per-mailbox scores, connected health providers, and DIRECTIONAL recommendations — plus OXYGEN's OWN evidence for the last 7 days, which needs no provider connected: the bounce notifications each mailbox received classified as provider rejection / dead address / mailbox full / delay (a Gmail reputation block shows up as provider_rejected), distinct recipients that first hard-bounced, sequence sends OXYGEN logged (source=sequence only), warm-up day, health score and stop cause, the advisory daily cap that warm-up age supports, and the same rollup per sending domain ranked worst-first. Notifications whose body was never stored count as signals.dsn7d.unclassified, which means OXYGEN could not look — not that nothing was wrong. Read health_coverage to see how many mailboxes an external provider has actually scored. Start from the two fleet reads instead of scanning the mailbox array: warmup.byCause (why warm-up stopped, counted once for the whole pool) and signals.capOverRecommendedMailboxes (mailboxes whose configured cap is above the one warm-up supports — per mailbox, compare dailyCap with recommendedDailyCap; the gap is flagged as the cap_exceeds_readiness warning). Every count is scoped, and the scope is stamped into the payload as signals.window (7d) and signals.sendSource (sequence sends only), on the fleet object and on every mailbox: a 0 means nothing was recorded in that window for that send source, NOT that the fleet is un-blocklisted everywhere. Pure read — 0 credits; never pauses a mailbox or changes a cap.")
+        .description("Fleet email-health: the sending pool rolled up by external deliverability reputation (healthy/degraded/critical/unknown), per-mailbox scores, connected health providers, and DIRECTIONAL recommendations — plus OXYGEN's OWN evidence for the last 7 days, which needs no provider connected: the bounce notifications each mailbox received classified as provider rejection / dead address / mailbox full / delay (a Gmail reputation block shows up as provider_rejected), distinct recipients with a hard bounce in the window (legacy facts retain their first observation time), sequence sends OXYGEN logged (source=sequence only), warm-up day, health score and stop cause, each mailbox's configured daily cap, and the same rollup per sending domain ranked worst-first. Notifications whose body was never stored count as signals.dsn7d.unclassified, which means OXYGEN could not look — not that nothing was wrong. Read health_coverage to see how many mailboxes an external provider has actually scored. Start from the fleet read instead of scanning the mailbox array: warmup.byCause (why warm-up stopped, counted once for the whole pool). Every count is scoped, and the scope is stamped into the payload as signals.window (7d) and signals.sendSource (sequence sends only), on the fleet object and on every mailbox: a 0 means nothing was recorded in that window for that send source, NOT that the fleet is un-blocklisted everywhere. Pure read — 0 credits; never pauses a mailbox or changes a cap.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("mailboxes health", options, () => requestOxygen("/api/cli/mailboxes/health"));
@@ -17133,7 +17446,7 @@ Examples:
         .addCommand(new Command("cap")
         .description("View and adjust a single mailbox's daily send cap (throttle a problem inbox or ramp a newly warmed one without pausing it).")
         .addCommand(new Command("set")
-        .description("Set one sending mailbox's daily send cap (sends per day). --daily-cap must be a positive whole number. Consumes no Oxygen credits. <mailbox> accepts a mailbox id or email address.")
+        .description("Set one sending mailbox's daily send cap (sends per day; new mailboxes get 25). --daily-cap must be a positive whole number; `oxygen limits show` reports the maximum in force. The separate campaign ramp starts at 5, 10, then 20/day, advancing on completed UTC days with accepted campaign sends. Optional provider warm-up is configured with `mailboxes warmup config`. Consumes no Oxygen credits. <mailbox> accepts a mailbox id or email address.")
         .argument("<mailbox>", "Mailbox id or email address.")
         .requiredOption("--daily-cap <n>", "New daily send cap (a positive whole number of sends per day).")
         .option("--json", "Print a JSON envelope.")
@@ -17149,15 +17462,15 @@ Examples:
         });
     })))
         .addCommand(new Command("ramp")
-        .description("Set or clear a single mailbox's per-mailbox warm-up ramp override (start/step/cap), replacing the default age-ramp tiers on that inbox without touching the rest of the pool.")
+        .description("Set or clear one mailbox's campaign sending-day ramp. Completed UTC days with accepted campaign sends advance it; optional provider warm-up has separate controls under `mailboxes warmup config`.")
         .addCommand(new Command("set")
-        .description("Set one mailbox's warm-up ramp: --start-per-day (day-0 ceiling), --increase-every-days (>=1), --step (added each period), --cap (ceiling). Pass --clear to remove the override and restore the default tiers. Consumes no Oxygen credits. <mailbox> accepts a mailbox id or email address.")
+        .description("Set one mailbox's campaign sending-day ramp: --start-per-day (initial ceiling), --increase-every-days (completed UTC days with accepted campaign sends), --step, --cap. Import age and provider warm-up do not advance it. --clear restores the default 5/10/20 tiers. Free configuration write; provider warm-up uses `mailboxes warmup config`.")
         .argument("<mailbox>", "Mailbox id or email address.")
-        .option("--start-per-day <n>", "Day-0 send ceiling (non-negative whole number).")
-        .option("--increase-every-days <n>", "Days between each step up (whole number >= 1).")
+        .option("--start-per-day <n>", "Initial campaign send ceiling (non-negative whole number).")
+        .option("--increase-every-days <n>", "Completed UTC days with accepted campaign sends between increases (whole number >= 1).")
         .option("--step <n>", "Sends added to the ceiling each period (non-negative whole number).")
         .option("--cap <n>", "The ramp's ceiling; once reached the ramp stops climbing (non-negative whole number).")
-        .option("--clear", "Remove the ramp override and restore the default warm-up tiers.")
+        .option("--clear", "Remove the override and restore the default campaign sending-day tiers.")
         .option("--json", "Print a JSON envelope.")
         .action(async (mailbox, options) => {
         await handleAsyncAction("mailboxes ramp set", options, () => {
@@ -17196,12 +17509,15 @@ Examples:
         .option("--display-name <name>", "From display name (e.g. \"Ada from Acme\"). Pass '' to clear it.")
         .option("--signature-html <html>", "HTML signature appended to every send from this mailbox. Pass '' to clear it.")
         .option("--signature-file <path>", "Read the HTML signature from a file instead of --signature-html.")
+        .option("--bounce-protection <json>", "Mailbox bounce policy (partial updates merge): enabled=true, warning_rate=.02, pause_rate=.03, min_sends=20, window_days=7. Hard bounces / accepted sends in the rolling window; pauses this mailbox. Rates are fractions; sequence protection is separate.")
         .option("--json", "Print a JSON envelope.")
         .action(async (mailbox, options) => {
         await handleAsyncAction("mailboxes update", options, () => {
             // Detect PRESENCE (options.x !== undefined), not truthiness, so passing
             // an empty string clears the field rather than being dropped.
             const patch = {};
+            if (options.bounceProtection !== undefined)
+                patch.bounce_protection = JSON.parse(options.bounceProtection);
             if (options.displayName !== undefined)
                 patch.display_name = options.displayName;
             if (options.signatureHtml !== undefined) {
@@ -17287,7 +17603,7 @@ Examples:
         .addCommand(new Command("emailguard")
         .description("Assess every mailbox origin for EmailGuard and connect credential-capable Google Workspace mailboxes from managed, Zapmail, or compatible encrypted external imports. Manual/native Google rows report credential_required; Microsoft 365/Azure reports vendor_blocked. Preview never materializes a password; approved execution fetches it just in time and never prints it.")
         .addCommand(new Command("connect")
-        .description("Preview or connect selected mailboxes to EmailGuard. Managed mode is 100 credits/inbox-month ($1); BYOK is 0 Oxygen credits. Google Workspace requires a real app password, fetched only after approval. Microsoft 365/Azure is explicitly vendor-blocked because EmailGuard exposes neither Microsoft OAuth nor tenant consent; Oxygen never downgrades it to password auth. Starts with a 0-credit, no-provider-write preview. Account connection sends no placement probe.")
+        .description("Preview or connect selected mailboxes to EmailGuard. Managed mode is 100 credits/inbox-month (135 from the 2026-09 repricing's effective date; the preview shows the price in force); BYOK is 0 Oxygen credits. Google Workspace requires a real app password, fetched only after approval. Microsoft 365/Azure is explicitly vendor-blocked because EmailGuard exposes neither Microsoft OAuth nor tenant consent; Oxygen never downgrades it to password auth. Starts with a 0-credit, no-provider-write preview. Account connection sends no placement probe.")
         .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses. Omit for the whole pool.")
         .option("--approved", "Perform the external EmailGuard account write.")
         .option("--plan <hash>", "Exact hash from the fresh preview (required with --approved).")
@@ -17404,10 +17720,10 @@ Examples:
         });
     }))
         .addCommand(new Command("warmup")
-        .description("OXYGEN Warm-up for the sending pool — the weeks of low-volume conversational mail that make a new inbox look trusted before you cold-send from it. It is managed and credit-billed at 100 credits per warming inbox per month ($1). Fresh managed InboxKit Google/Microsoft/Azure orders with the default-on warm-up add-on activate automatically after provisioning under the approved order quote; do not run a second `warmup enable`. Google reuses the InboxKit-held credential only during activation and never stores or returns it; Microsoft/Azure uses exact native export. Standalone preview → approval is for BYOK/imported mailboxes, a managed opt-out, or later separate enrollment. InboxKit auto-export stays off for Microsoft/Azure because Oxygen submits only the exact authorized UIDs, and any non-cancelled InboxKit warm-up blocks either handoff so one mailbox cannot warm twice. OXYGEN Warm-up never owns campaign dispatch: native OXYGEN Sequences still own campaigns and sends. Eligible non-InboxKit Microsoft mailboxes use the separate `mailboxes warmup microsoft` OAuth fallback. Inboxes already warming on the retired TrulyInbox rail keep reporting and are wound down there with `warmup disable`; they are never silently moved to the current managed rail.")
+        .description("OXYGEN Warm-up for the sending pool — the weeks of low-volume conversational mail that make a new inbox look trusted before you cold-send from it. It costs 100 credits per warming inbox per month ($1), or nothing once it is included in your own mailbox's 100-credit monthly connection (2026-09 repricing); the preview shows which applies. Fresh managed InboxKit Google/Microsoft/Azure orders with the default-on warm-up add-on activate automatically after provisioning under the approved order quote; do not run a second `warmup enable`. Google reuses the InboxKit-held credential only during activation and never stores or returns it; Microsoft/Azure uses exact native export. Standalone preview → approval is for BYOK/imported mailboxes, a managed opt-out, or later separate enrollment. InboxKit auto-export stays off for Microsoft/Azure because Oxygen submits only the exact authorized UIDs, and any non-cancelled InboxKit warm-up blocks either handoff so one mailbox cannot warm twice. OXYGEN Warm-up never owns campaign dispatch: native OXYGEN Sequences still own campaigns and sends. Eligible non-InboxKit Microsoft mailboxes use the separate `mailboxes warmup microsoft` OAuth fallback. Inboxes already warming on the retired TrulyInbox rail keep reporting and are wound down there with `warmup disable`; they are never silently moved to the current managed rail.")
         .addHelpText("after", "\nDocs: https://oxygen-agent.com/docs/providers/mailboxes\n")
         .addCommand(new Command("enable")
-        .description("STANDALONE ENROLLMENT: enroll BYOK/imported mailboxes, a managed order that opted out, or mailboxes being added to warmup later. Fresh managed InboxKit Google/Microsoft/Azure orders whose approved quote included warmup activate automatically after provisioning and do not need this command. Targets the whole pool unless --mailboxes is given; one synchronous preview/approval is capped at 220 mailboxes, so split larger pools into explicit batches. Without --approved this is a 0-credit, no-provider-write priced preview: nothing is handed off, enrolled, or billed. The current public price is 100 credits per warming mailbox-month; the preview returns the exact first-cycle ceiling. Preview one inbox with `oxygen mailboxes warmup enable --mailboxes sender@example.com --json`. Execute by echoing its --plan and --max-credits with --approved. Eligible managed Google targets use the InboxKit-held credential just in time without storing or returning it; Microsoft/Azure targets use native InboxKit Sequencer export with exact UIDs and auto-export off. Any non-cancelled InboxKit warmup must be cancelled before either handoff (pausing is not enough). Only eligible non-InboxKit Microsoft mailboxes need `mailboxes warmup microsoft`. OXYGEN Warm-up retains no campaign authority — OXYGEN Sequences own enrollment and dispatch. New enrollments only ever land on the managed OXYGEN rail; the retired TrulyInbox rail is refused here and only accepts teardown.")
+        .description("Optional provider warm-up defaults to 1/day, +1/day, max 10/day (dedicated-tenant profiles stay stricter); see `mailboxes warmup config` for the effective plan and unsupported OXYGEN Warm-up reply-rate control. This is separate from the 5/10/20 campaign ramp. STANDALONE ENROLLMENT: enroll BYOK/imported mailboxes, a managed order that opted out, or mailboxes being added to warmup later. Fresh managed InboxKit Google/Microsoft/Azure orders whose approved quote included warmup activate automatically after provisioning and do not need this command. Targets the whole pool unless --mailboxes is given; one synchronous preview/approval is capped at 220 mailboxes, so split larger pools into explicit batches. Without --approved this is a 0-credit, no-provider-write priced preview: nothing is handed off, enrolled, or billed. The price is 100 credits per warming mailbox-month, or 0 once warm-up is included in the mailbox's 100-credit monthly connection (2026-09 repricing; the preview's included_in_connection says which, and its max_credits is then 0); the preview returns the exact first-cycle ceiling. Preview one inbox with `oxygen mailboxes warmup enable --mailboxes sender@example.com --json`. Execute by echoing its --plan and --max-credits with --approved. Eligible managed Google targets use the InboxKit-held credential just in time without storing or returning it; Microsoft/Azure targets use native InboxKit Sequencer export with exact UIDs and auto-export off. Any non-cancelled InboxKit warmup must be cancelled before either handoff (pausing is not enough). Only eligible non-InboxKit Microsoft mailboxes need `mailboxes warmup microsoft`. OXYGEN Warm-up retains no campaign authority — OXYGEN Sequences own enrollment and dispatch. New enrollments only ever land on the managed OXYGEN rail; the retired TrulyInbox rail is refused here and only accepts teardown.")
         .addHelpText("after", "\nDocs: https://oxygen-agent.com/docs/providers/mailboxes\n")
         .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses to warm. Omit to warm the whole pool.")
         .option("--approved", "Execute the PRICED enrollment. Without it the response is a priced preview and nothing is enrolled or billed.")
@@ -17494,13 +17810,13 @@ Examples:
         });
     }))
         .addCommand(new Command("config")
-        .description("Show or OVERRIDE one mailbox's warmup ramp. With no flags it prints the ramp Oxygen derived from that inbox's send ceiling and its enrollment's ramp window — the right answer for almost every inbox. Pass all four knobs to override it, or --reset to go back to the derived plan. If the mailbox is already warming, the change is pushed to the provider immediately (free settings write, no re-enroll, no re-billing) and `provider_sync` reports whether it landed. 0 Oxygen credits.")
+        .description("Read or override optional provider warm-up traffic, separate from the campaign ramp. Standard defaults: start 1/day, add 1/day, maximum 10/day; dedicated-tenant profiles stay stricter. No flags reads the effective plan. Override with all four knobs, or --reset for defaults. OXYGEN Warm-up does not support reply-rate control: the value is saved but not applied there. Active warm-up syncs immediately without re-enrollment or rebilling; provider_sync reports the result. 0 Oxygen credits.")
         .argument("<mailbox>", "Mailbox id or email address.")
         .option("--initial-per-day <n>", "Warmup emails sent on day one.")
         .option("--increase-per-day <n>", "Warmup emails added to the daily volume each day.")
         .option("--max-per-day <n>", "The warmup daily ceiling; climbing stops here.")
-        .option("--reply-rate <percent>", "Share of warmup emails that receive a reply (0-100).")
-        .option("--reset", "Drop the override and go back to Oxygen's derived ramp.")
+        .option("--reply-rate <percent>", "Requested warm-up reply rate (0-100); saved but unsupported by OXYGEN Warm-up.")
+        .option("--reset", "Drop the override and restore the default provider warm-up plan.")
         .option("--json", "Print a JSON envelope.")
         .action(async (mailbox, options) => {
         await handleAsyncAction("mailboxes warmup config", options, () => {
@@ -17540,7 +17856,7 @@ Examples:
         });
     }))
         .addCommand(new Command("profile")
-        .description("Pin the SENDING ARCHITECTURE a domain is run as, which every inbox on it inherits: `standard` (a few mailboxes on a real business tenant, each climbing to a real number), `dedicated_tenant` (infrastructure tenant, volume from breadth, per-inbox number stays small), or `entry` (first-touch inboxes that need presence, not volume). What you state is the DOMAIN's daily budget; OXYGEN divides it by how many inboxes share that domain, so adding an inbox lowers the others instead of raising the domain's total — the thing a flat per-mailbox cap cannot do. A profile is a CEILING: it never raises a cap above what you configured, and the strictest of {configured cap, per-sequence override, age ramp, profile share} still wins. 0 credits, no provider call. Without --approved this previews the before/after per domain. Omit every selector and profile to list the available profiles.")
+        .description("Pin the SENDING ARCHITECTURE a domain is run as, which every inbox on it inherits: `standard` (a few mailboxes on a real business tenant, each climbing to a real number), `dedicated_tenant` (infrastructure tenant, volume from breadth, per-inbox number stays small), or `entry` (first-touch inboxes that need presence, not volume). What you state is the DOMAIN's daily budget; OXYGEN divides it by how many inboxes share that domain, so adding an inbox lowers the others instead of raising the domain's total — the thing a flat per-mailbox cap cannot do. A profile is a CEILING: it never raises a cap above what you configured, and the strictest of {configured cap, per-sequence override, sending-day ramp, profile share} still wins. 0 credits, no provider call. Without --approved this previews the before/after per domain. Omit every selector and profile to list the available profiles.")
         .addHelpText("after", "\nDocs: https://oxygen-agent.com/docs/providers/mailboxes\n")
         // NOT --profile: the program declares a GLOBAL --profile (the stored
         // CLI credential profile), and Commander resolves the value to that
@@ -17552,7 +17868,7 @@ Examples:
         .option("--all", "Bind every domain that currently holds a mailbox.")
         .option("--cold-send-per-day <n>", "Override the profile's DOMAIN budget for cold sends per day (not a per-inbox number).")
         .option("--warmup-per-day <n>", "Override the profile's DOMAIN budget for warm-up emails per day (not a per-inbox number).")
-        .option("--clear", "Remove the profile, restoring inference and the age ramp alone.")
+        .option("--clear", "Remove the profile, restoring inference and the sending-day ramp alone.")
         .option("--approved", "Apply the previewed change.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -17764,7 +18080,7 @@ Examples:
         }));
     }))
         .addCommand(new Command("list")
-        .description("Inspect recent directional inbox-placement tests, their status, results, and credits used. The returned web link opens Accounts; use get for an exact result link. Costs 0 credits and never creates or sends a test; active tests may refresh their observations.")
+        .description("Inspect recent directional inbox-placement tests, their status, results, and credits used, plus `pricing`: the EmailGuard monitoring credits per inbox-month and the managed test price in force (0 on your own EmailGuard key). The returned web link opens Accounts; use get for an exact result link. Costs 0 credits and never creates or sends a test; active tests may refresh their observations.")
         .option("--limit <n>", "Max rows (default 50, cap 200).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -17781,7 +18097,7 @@ Examples:
         await handleAsyncAction("deliverability placement-test get", options, () => requestOxygen(`/api/cli/deliverability/placement-tests/${encodeURIComponent(id)}`));
     }))));
     program.addCommand(new Command("domains")
-        .description("Cold-email domain management on the org's own Cloudflare account (BYOK): sync zones, inspect age/warmup/DNS health, check availability and pricing, and buy domains. Purchases bill your Cloudflare payment method, never Oxygen credits.")
+        .description("Cold-email domains: sync zones from your own Cloudflare account (BYOK), inspect age/warmup/DNS health, check availability and pricing, buy domains, and archive or delete domains with their inboxes (OXYGEN-bought domains included). Purchases bill your Cloudflare payment method, never Oxygen credits.")
         .addCommand(new Command("list")
         .description("List the org's cached Cloudflare domains with cold-email metadata (age, mailboxes, warmup, sending volume, DNS health). Each row's `dns` object explains the status (ok, issues, not checked, check failed, partial check, no zone) with a reason and fix path; `managed_domains` lists InboxKit-managed bundle domains (vendor-registered + vendor-DNS'd — manage via `managed-inboxes`), each carrying `internal_billing_status` (ok|past_due) and `last_billed_cycle_key` — a domain the vendor keeps live can still be one OXYGEN could not renew. Reads the cache only — run `domains sync` to refresh.")
         .option("--status <status>", "Filter by zone status: unknown, initializing, pending, active, moved, or deleted.")
@@ -17841,6 +18157,35 @@ Examples:
             method: "POST",
             body: { archived: false },
         }));
+    }))
+        .addCommand(new Command("delete")
+        .description("Delete domains and every inbox on them: cancels OXYGEN inbox orders; a domain bought through Oxygen on its own (`domains buy`) stops renewing and leaves the workspace, staying registered until expiry; archives your own (DNS and registrar untouched). The preview lists every inbox, each domain's action and the recurring credits that stop; 0 credits, and the current period is not refunded.")
+        .argument("<domains...>", "Domain names, space- or comma-separated.")
+        .option("--approved", "Execute the fresh preview. Requires --plan-hash and --confirmation.")
+        .option("--plan-hash <hash>", "Fresh preview plan_hash.")
+        .option("--confirmation <phrase>", "Exact confirmation_phrase returned by the fresh preview.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (domainArgs, options) => {
+        await handleAsyncAction("domains delete", options, () => {
+            const domains = domainArgs.flatMap((value) => splitCommaList(value));
+            if (domains.length === 0) {
+                throw new OxygenError("invalid_request", "Name at least one domain, such as acme.com. `oxygen domains list` shows your domains.", { exitCode: 2 });
+            }
+            const planHash = readOption(options.planHash);
+            const confirmation = readOption(options.confirmation);
+            if (options.approved === true && (!planHash || !confirmation)) {
+                throw new OxygenError("invalid_request", "--approved requires --plan-hash and --confirmation from a fresh deletion preview.", { exitCode: 2 });
+            }
+            return requestOxygen("/api/cli/domains/delete", {
+                method: "POST",
+                body: {
+                    domains,
+                    ...(options.approved === true ? { approved: true } : {}),
+                    ...(planHash ? { plan_hash: planHash } : {}),
+                    ...(confirmation ? { confirmation } : {}),
+                },
+            });
+        });
     }))
         .addCommand(new Command("tag")
         .description("Replace a domain's workspace tags (whole set; `--tags \"\"` clears) — e.g. pool the domains behind one campaign tag. See `oxygen tags list` for the vocabulary. A later `domains sync` never clobbers them.")
@@ -17970,7 +18315,7 @@ Examples:
         await handleAsyncAction("domains add", options, () => requestOxygen("/api/cli/domains/add", { method: "POST", body: { domain } }));
     }))
         .addCommand(new Command("search")
-        .description("BYOK CLOUDFLARE: search Registrar for available domains with registration/renewal pricing. Free — nothing is purchased.")
+        .description("Search available domains with their price. Free; nothing is purchased. With your own Cloudflare account connected it searches your Registrar (USD, your card); otherwise it lists names Oxygen can register, priced in credits at the registrar's cost per year (a .com is 1,250).")
         .argument("<query>", "Search text, such as a brand or keyword.")
         .option("--json", "Print a JSON envelope.")
         .action(async (query, options) => {
@@ -17980,13 +18325,13 @@ Examples:
         });
     }))
         .addCommand(new Command("check")
-        .description("BYOK CLOUDFLARE: check availability and pricing for up to 20 exact domains. Free — nothing is purchased.")
+        .description("Check availability and price for up to 20 exact domains. Free; nothing is purchased. With your own Cloudflare account connected it checks your Registrar (USD, your card); otherwise the names Oxygen can register, in credits at the registrar's cost per year (a .com is 1,250). A domain you already own through Oxygen comes back with reason `owned`.")
         .argument("<domains...>", "Domain names to check (max 20).")
         .option("--json", "Print a JSON envelope.")
         .action(async (domains, options) => {
         await handleAsyncAction("domains check", options, () => {
             if (domains.length > DOMAINS_CHECK_MAX_DOMAINS) {
-                throw new Error(`Cloudflare checks at most ${DOMAINS_CHECK_MAX_DOMAINS} domains per call (got ${domains.length}). Split the list and re-run.`);
+                throw new Error(`domains check takes at most ${DOMAINS_CHECK_MAX_DOMAINS} domains per call (got ${domains.length}). Split the list and re-run.`);
             }
             return requestOxygen("/api/cli/domains/check", {
                 method: "POST",
@@ -17995,17 +18340,37 @@ Examples:
         });
     }))
         .addCommand(new Command("buy")
-        .description("BYOK CLOUDFLARE ONLY. REAL MONEY, NON-REFUNDABLE: approved purchases bill your connected Cloudflare account and use 0 Oxygen credits. Without --approved, returns a priced preview plus quote_id. For a managed domain + inbox bundle use `managed-inboxes subscribe` (InboxKit).")
+        .description("Buy sending domains. NON-REFUNDABLE. Without --approved, returns a free priced preview plus quote_id. Without your own Cloudflare account, Oxygen registers the domain and charges credits at the registrar's cost for one year (a .com is 1,250), then renews it yearly at the renewal cost, charged 30 days before expiry (turn off with `domains renewal <domain> --off`). With your own Cloudflare account connected, it buys through your Registrar on your Cloudflare card for 0 credits. For a domain with inboxes use `managed-inboxes subscribe`.")
         .argument("<domains...>", "Domain names to buy.")
         .option("--approved", "Execute the purchase. Without this flag, returns a preview only.")
         .option("--quote <id>", "Quote id from the preview (required with --approved).")
         .option("--accept-premium", "Acknowledge premium-tier pricing for premium domains.")
-        .option("--auto-renew", "Enable auto-renew on the new registrations.")
+        .option("--auto-renew", "Renew the new registrations yearly (the default).")
+        .option("--no-auto-renew", "Do not renew: the domain lapses when its year ends.")
+        .option("--billing <path>", "JSON file with the registrant (WHOIS) contact: first_name, last_name, phone, country, city, state, address_line_one, postal_code. Needed once, when the workspace has none on file.")
+        .option("--redirect-url <url>", "Where the domain's web root forwards visitors. Defaults to your company website.")
         .option("--no-privacy", "Disable WHOIS privacy/redaction on the new registrations.")
         .option("--wait", "After an approved purchase, poll each pending registration to a terminal state (up to 10 minutes per domain).")
         .option("--json", "Print a JSON envelope.")
         .action(async (domains, options) => {
         await handleAsyncAction("domains buy", options, () => runDomainsBuy(domains, options));
+    }))
+        .addCommand(new Command("renewal")
+        .description("Turn the yearly renewal of a domain bought through Oxygen on or off. No charge. On: the registrar's renewal cost is charged in credits 30 days before expiry. Off: the domain lapses when it expires.")
+        .argument("<domain>", "A domain from `domains list` (registered_domains).")
+        .option("--on", "Renew yearly.")
+        .option("--off", "Stop renewing; the domain lapses at expiry.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (domain, options) => {
+        await handleAsyncAction("domains renewal", options, () => {
+            if (Boolean(options.on) === Boolean(options.off)) {
+                throw new Error("Pass exactly one of --on or --off.");
+            }
+            return requestOxygen(`/api/cli/domains/${encodeURIComponent(domain)}/renewal`, {
+                method: "POST",
+                body: { auto_renew: options.on === true },
+            });
+        });
     }))
         .addCommand(new Command("adopt")
         .description("STAFF LEGACY RECOVERY: attach domains that already exist in the shared Oxygen-managed Cloudflare account to their workspace. FREE; no purchase. New managed domain + inbox bundles use InboxKit. Without --yes, previews only.")
@@ -18318,6 +18683,8 @@ Run completion:
                 },
             }), options);
             writeScheduleWarnings(data);
+            if (!options.json)
+                writeWorkflowPlanLimitNotices(data);
             return data;
         });
     }))
@@ -18416,8 +18783,10 @@ Run completion:
                 method: "POST",
                 body: { workflow },
             });
-            if (!options.json)
+            if (!options.json) {
                 writeDisabledWorkflowNotices(data);
+                writeWorkflowPlanLimitNotices(data);
+            }
             return prepareWorkflowCliOutput(data, options);
         });
     }))
@@ -18502,7 +18871,7 @@ Run completion:
         });
     }))
         .addCommand(new Command("webhooks")
-        .description("Workflow webhook trigger utilities.")
+        .description("Workflow webhook trigger utilities. A trigger's inbound URL and the deliveries a minute it accepts (`rate_limit`) are in `oxygen workflows get <workflow>`.")
         .addCommand(new Command("rotate")
         .description("Replace a workflow webhook's shared secret. Previews by default; the old sender secret stops working immediately after approval.")
         .argument("<workflow>", "Webhook workflow id, slug, or name.")
@@ -20517,6 +20886,26 @@ function applyAiColumnConfig(definition, options) {
 // and let the server reject it. `research-engine-roster.test.ts` now asserts
 // these against the tenant-db unions so the next stale rebase fails the gate
 // instead of reaching a customer.
+const RESEARCH_DEPTHS = new Set(["quick", "standard", "deep"]);
+// A quick research row pays the tier's model price plus the typical grounding
+// read; derived from the pricing sheet so a re-price cannot orphan the help.
+function quickResearchRowCredits(level) {
+    return Math.round((AI_COLUMN_CREDITS[level] + AI_COLUMN_WEB_SEARCH_TYPICAL_CREDITS) * 10) / 10;
+}
+const REASONING_LEVEL_OPTION_HELP = "AI column reasoning level: low, medium, or high (shown in the web UI as Oxygen Fast, Oxygen Balanced, and Oxygen Max). "
+    + `On a research column it applies only at --research-depth quick (typical row: low about ${quickResearchRowCredits("low")}, `
+    + `medium about ${quickResearchRowCredits("medium")}, high about ${quickResearchRowCredits("high")} credits); standard and deep choose their own tier and ignore it.`;
+const RESEARCH_DEPTH_OPTION_HELP = "Research columns: how hard each row searches. quick: one search and one page read (about 2.1 credits/row on the default tier; --reasoning-level applies to quick only). standard: the agent plans a few searches and page reads on Oxygen Fast (about 5.5; the default for new columns). deep: more searches and subpages on Oxygen Balanced (about 10). Standard and deep cost the same whatever --reasoning-level says. Each row reserves a higher maximum; `columns run --dry-run` quotes this column's typical and max.";
+/** `--research-depth`, validated before the round trip; null when not passed. */
+function readResearchDepthOption(value) {
+    const depth = readOption(value)?.toLowerCase();
+    if (!depth)
+        return null;
+    if (!RESEARCH_DEPTHS.has(depth)) {
+        throw new OxygenError("invalid_request", `--research-depth must be quick, standard or deep (got ${depth}).`, { exitCode: 1 });
+    }
+    return depth;
+}
 const RESEARCH_ENGINES = new Set(["serper", "exa"]);
 const RESEARCH_FETCH_ENGINES = new Set(["firecrawl", "exa"]);
 const RESEARCH_MODES = new Set(["strict", "estimate"]);
@@ -22171,6 +22560,13 @@ async function importRows(table, options) {
 }
 async function importRowsFromFile(table, options) {
     const format = normalizeRowsFormat(options.format, inferRowsFileFormat(options.file));
+    // Refuse a JSON or XLSX file too large to hold in memory before reading it,
+    // and send a large CSV or JSONL file down the streamed path, which never does.
+    const fileBytes = statSync(options.file).size;
+    assertImportFormatWithinBufferedLimit(format, fileBytes);
+    if (shouldStreamFileImport(format, fileBytes)) {
+        return withImportWaitNextStep(await importLargeFileStreamed(table, options, format, fileBytes));
+    }
     const parsedRows = await readRowsFile(options.file, format, options.sheet);
     if (parsedRows.length === 0) {
         throw new OxygenError("invalid_rows", "Import file did not contain any rows.", {
@@ -22189,9 +22585,13 @@ async function importRowsFromFile(table, options) {
         // Prefer the object-storage fast path: upload the raw file once via a
         // presigned URL (no request-body limit) so the worker COPY-loads it.
         // Falls back to the inline multipart import when storage is unconfigured.
-        const staged = await tryEnqueueStagedFileImport(table, options, format, parsedRows, {
+        const fileBuffer = readFileSync(options.file);
+        const staged = await tryEnqueueStagedFileImport(table, options, format, {
+            byteLength: fileBuffer.byteLength,
+            read: () => Promise.resolve({ targetRows: parsedRows, rowCount: parsedRows.length, sha256: sourceHash }),
+            put: (uploadUrl, contentType) => putImportFile(uploadUrl, fileBuffer, contentType),
+        }, {
             autoBackground: !options.background,
-            sourceHash,
             batchSize,
         }, preparedBackgroundTarget);
         if (staged)
@@ -22476,7 +22876,7 @@ function isRequestTooLargeError(error) {
     return error instanceof OxygenError && error.code === "request_too_large";
 }
 async function tryEnqueueStagedFileImport(// skipcq: JS-R1005
-table, options, format, parsedRows, context, preparedTarget = null) {
+table, options, format, file, context, preparedTarget = null) {
     if (options.create && table) {
         throw new OxygenError("invalid_import_target", "Pass either a table argument or --create, not both.", {
             exitCode: 1,
@@ -22487,7 +22887,6 @@ table, options, format, parsedRows, context, preparedTarget = null) {
             exitCode: 1,
         });
     }
-    const fileBuffer = readFileSync(options.file);
     const filename = basename(options.file);
     const contentType = importFileContentType(format);
     const traceId = randomUUID();
@@ -22501,7 +22900,8 @@ table, options, format, parsedRows, context, preparedTarget = null) {
                 body: {
                     file_name: filename,
                     content_type: contentType,
-                    byte_length: fileBuffer.byteLength,
+                    byte_length: file.byteLength,
+                    format,
                     trace_id: traceId,
                 },
             });
@@ -22516,10 +22916,15 @@ table, options, format, parsedRows, context, preparedTarget = null) {
     let presigned = await requestPresign();
     if (!presigned)
         return null;
+    const contents = await file.read();
     // Create the table for --create (or resolve the existing ref) before the
     // upload so a presign success always pairs with a real target.
-    const target = preparedTarget ?? await prepareImportTarget(table, options, parsedRows);
-    let putResponse = await putImportFile(presigned, fileBuffer, contentType);
+    const target = preparedTarget ?? await prepareImportTarget(table, options, contents.targetRows);
+    const put = (current) => {
+        const uploadUrl = readRecordString(current, "upload_url");
+        return uploadUrl ? file.put(uploadUrl, contentType) : Promise.resolve(new Response(null, { status: 500 }));
+    };
+    let putResponse = await put(presigned);
     // A direct-upload 403 most commonly means a stale/mismatched signature.
     // Refresh once under the same client trace so a transient presign never
     // strands a durable import, while persistent policy failures stay explicit.
@@ -22527,7 +22932,7 @@ table, options, format, parsedRows, context, preparedTarget = null) {
         const refreshed = await requestPresign();
         if (refreshed) {
             presigned = refreshed;
-            putResponse = await putImportFile(presigned, fileBuffer, contentType);
+            putResponse = await put(presigned);
         }
     }
     if (!putResponse.ok) {
@@ -22548,9 +22953,9 @@ table, options, format, parsedRows, context, preparedTarget = null) {
             storage_key: storageKey,
             format,
             file_name: filename,
-            byte_length: fileBuffer.byteLength,
-            sha256: context.sourceHash,
-            row_count: parsedRows.length,
+            byte_length: file.byteLength,
+            sha256: contents.sha256,
+            row_count: contents.rowCount,
             batch_size: context.batchSize,
             ...(readPositiveInt(options.maxConcurrency)
                 ? { max_concurrency: readPositiveInt(options.maxConcurrency) }
@@ -22570,10 +22975,42 @@ table, options, format, parsedRows, context, preparedTarget = null) {
         storage_provider: storageProvider,
     };
 }
-async function putImportFile(presigned, fileBuffer, contentType) {
-    const uploadUrl = readRecordString(presigned, "upload_url");
-    if (!uploadUrl)
-        return new Response(null, { status: 500 });
+/**
+ * A CSV or JSONL file over STREAMED_FILE_IMPORT_MIN_BYTES: never read whole.
+ * One streaming pass counts, hashes and collects its columns, the upload streams
+ * from disk, and the import always runs in the background. There is no inline
+ * fallback: a file this large cannot travel in one API request.
+ */
+async function importLargeFileStreamed(table, options, format, fileBytes) {
+    if (options.sync) {
+        process.stderr.write(`note: files over ${Math.round(STREAMED_FILE_IMPORT_MIN_BYTES / (1024 * 1024))} MiB always import in the background; --sync is ignored\n`);
+    }
+    const staged = await tryEnqueueStagedFileImport(table, options, format, {
+        byteLength: fileBytes,
+        read: async () => {
+            process.stderr.write(`note: reading ${basename(options.file)} (${formatMebibytes(fileBytes)}) to count its rows before uploading\n`);
+            const scan = await scanStreamedImportFile(options.file, format);
+            if (scan.rowCount === 0) {
+                throw new OxygenError("invalid_rows", "Import file did not contain any rows.", { exitCode: 1 });
+            }
+            return { targetRows: rowsForStreamedImportTarget(scan), rowCount: scan.rowCount, sha256: scan.sha256 };
+        },
+        put: (uploadUrl, contentType) => putImportFileStream({ uploadUrl, path: options.file, byteLength: fileBytes, contentType }),
+    }, {
+        autoBackground: !options.background,
+        batchSize: normalizeImportBatchSize(options.batchSize),
+    });
+    if (staged)
+        return { ...staged, streamed_upload: true };
+    throw new OxygenError("object_storage_not_configured", `Files over ${Math.round(STREAMED_FILE_IMPORT_MIN_BYTES / (1024 * 1024))} MiB upload straight to file storage, which this OXYGEN server has not configured.`, {
+        details: { file_bytes: fileBytes, streamed_import_min_bytes: STREAMED_FILE_IMPORT_MIN_BYTES },
+        exitCode: 1,
+    });
+}
+function formatMebibytes(bytes) {
+    return `${Math.round(bytes / (1024 * 1024)).toLocaleString("en-US")} MiB`;
+}
+async function putImportFile(uploadUrl, fileBuffer, contentType) {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), 300_000);
     try {
@@ -22666,7 +23103,8 @@ function buildGetSurfaceRunWaitConfig(params) {
         requestedIntervalSeconds: params.requestedIntervalSeconds,
         defaultTimeoutSeconds: params.defaultTimeoutSeconds,
         defaultIntervalSeconds: params.defaultIntervalSeconds,
-        fetchRun: () => requestOxygen(`${params.endpoint}/${encodeURIComponent(params.runId)}`),
+        retryTransientNetworkErrors: params.retryTransientNetworkErrors === true,
+        fetchRun: (signal) => requestOxygen(`${params.endpoint}/${encodeURIComponent(params.runId)}`, signal ? { signal } : {}),
         isTerminal: params.isTerminal,
         shapeTerminal: (run, status, polls, elapsedMs) => {
             const webUrl = readRecordString(run, "web_url");
@@ -22689,6 +23127,7 @@ function waitForTableIngestionRun(runId, options) {
     return waitForCliRun(buildGetSurfaceRunWaitConfig({
         runId,
         endpoint: "/api/cli/table-ingestion-runs",
+        retryTransientNetworkErrors: true,
         requestedTimeoutSeconds: options.timeoutSeconds,
         requestedIntervalSeconds: options.intervalSeconds,
         defaultTimeoutSeconds: TABLE_INGESTION_WAIT_DEFAULT_TIMEOUT_SECONDS,
@@ -22697,7 +23136,7 @@ function waitForTableIngestionRun(runId, options) {
         runKey: "ingestionRun",
         runIdKey: "ingestionRunId",
         timeoutCode: "table_ingestion_wait_timeout",
-        timeoutMessage: "Timed out waiting for table ingestion run to finish.",
+        timeoutMessage: "Timed out waiting for table ingestion run to finish. Check its latest status with `oxygen table-ingestions get <run_id>`.",
         timeoutDetailIdKey: "ingestion_run_id",
     }));
 }
@@ -22792,11 +23231,17 @@ async function runDomainsBuy(domains, options) {
     if (options.approved && !quoteId) {
         throw new Error("--quote <id> is required with --approved. Run the same command without --approved first to get the preview and its quote_id.");
     }
+    const billingPath = readOption(options.billing);
+    const billing = billingPath ? readJsonFileValue(resolve(billingPath), "--billing") : undefined;
+    const redirectUrl = readOption(options.redirectUrl);
     const data = await requestOxygen("/api/cli/domains/buy", {
         method: "POST",
         body: {
             domains,
-            ...(options.autoRenew ? { auto_renew: true } : {}),
+            ...(options.autoRenew === true ? { auto_renew: true } : {}),
+            ...(options.autoRenew === false ? { auto_renew: false } : {}),
+            ...(billing ? { billing } : {}),
+            ...(redirectUrl ? { redirect_url: redirectUrl } : {}),
             ...(options.privacy === false ? { privacy: false } : {}),
             ...(options.approved ? { approved: true, quote_id: quoteId } : {}),
             ...(options.acceptPremium ? { accept_premium_pricing: true } : {}),
@@ -22839,7 +23284,9 @@ function domainsBuyRerunCommand(domains, quoteId, options, data) {
         "--approved",
         `--quote ${quoteId}`,
         ...(needsPremiumAck ? ["--accept-premium"] : []),
-        ...(options.autoRenew ? ["--auto-renew"] : []),
+        ...(options.autoRenew === false ? ["--no-auto-renew"] : []),
+        ...(readOption(options.billing) ? [`--billing ${readOption(options.billing)}`] : []),
+        ...(readOption(options.redirectUrl) ? [`--redirect-url ${readOption(options.redirectUrl)}`] : []),
         ...(options.privacy === false ? ["--no-privacy"] : []),
     ];
     return `${resolveCliBinaryName()} domains buy ${domains.join(" ")} ${flags.join(" ")}`;
@@ -23889,9 +24336,11 @@ function tableWebUrl(tableIdOrSlug) {
     return `${defaultApiUrl().replace(/\/+$/, "")}/tables/${encodeURIComponent(tableIdOrSlug)}`;
 }
 function formatImportFileSizeLimit(tier) {
-    const limits = PLAN_LIMITS[tier].import;
-    const megabytes = Math.round(limits.maxFileBytes / (1024 * 1024));
-    return `${megabytes} MB`;
+    return formatImportByteSize(PLAN_LIMITS[tier].import.maxFileBytes);
+}
+function formatImportByteSize(bytes) {
+    const mebibytes = bytes / (1024 * 1024);
+    return mebibytes >= 1024 && mebibytes % 1024 === 0 ? `${mebibytes / 1024} GiB` : `${Math.round(mebibytes)} MiB`;
 }
 // Help copy reads the shared ceiling so the number can never drift from the
 // one the server enforces and the import writer splits against.
@@ -24407,7 +24856,31 @@ async function handleLogoutAction(options) {
     }
 }
 async function handleUpdateAction(options) {
+    // The detached daily worker and the post-update skills refresh print nothing:
+    // their parent is gone, and the next run reports the outcome.
+    if (options.background) {
+        await runBackgroundUpdate().catch(() => undefined);
+        return;
+    }
+    if (options.refreshSkills) {
+        await runAutomaticSkillsInstall().catch(() => undefined);
+        return;
+    }
     try {
+        const modes = [options.status, options.enableAuto, options.disableAuto].filter(Boolean).length;
+        if (modes > 1) {
+            throw new OxygenError("conflicting_flags", "Pass only one of --status, --enable-auto, or --disable-auto.", { exitCode: 2 });
+        }
+        if (modes === 1) {
+            const setting = options.enableAuto ? "on" : options.disableAuto ? "off" : undefined;
+            const status = await readAutoUpdateStatus(setting ? { setting, dryRun: options.dryRun === true } : {});
+            if (options.json) {
+                writeJson(success("update", status));
+                return;
+            }
+            process.stdout.write(formatAutoUpdateStatus(status));
+            return;
+        }
         const result = await updateCli(options);
         if (options.json) {
             writeJson(success("update", result));
@@ -26838,9 +27311,12 @@ function formatWhoami(identity, context) {
     const sourceLabel = describeProfileSource(context.source);
     const profileName = context.resolution.exists ? context.resolution.name : "(no stored profile)";
     const apiUrl = context.resolution.credentials?.apiUrl ?? defaultApiUrl();
+    // Every Oxygen size shares plan_tier "oxygen"; the name says which size.
+    const planName = identity.organization.plan_name ?? null;
     const rows = [
         ["Account", email],
         ["Organization", org],
+        ...(planName ? [["Plan", planName]] : []),
         ["Profile", `${profileName} ${styles.dim(`(${sourceLabel})`)}`],
         ["API", apiUrl],
     ];
@@ -26925,6 +27401,31 @@ function formatUpdateSuccess(result) {
         ...formatAutomaticSkillsInstallStatusLines(result.skills_install),
     ].join("\n");
 } // skipcq: JS-C1002
+function formatAutoUpdateStatus(status) {
+    const styles = ansi(output.isTTY === true && !process.env.NO_COLOR);
+    const auto = status.auto_update;
+    const latest = status.latest_version
+        ? `${status.latest_version}${status.update_available ? " (newer version available)" : " (up to date)"}`
+        : `unknown (${status.latest_error ?? "npm registry unreachable"})`;
+    const last = auto.last_result
+        ? `${auto.last_result.ok ? "updated" : "failed"} ${auto.last_result.from}${auto.last_result.to ? ` -> ${auto.last_result.to}` : ""} `
+            + `at ${auto.last_result.at}${auto.last_result.error ? ` (${auto.last_result.error})` : ""}`
+        : "none yet";
+    return [
+        "",
+        `${styles.bold(status.dry_run ? `Oxygen CLI updates (dry run: automatic updates would be turned ${auto.setting}; nothing saved)` : "Oxygen CLI updates")}`,
+        "",
+        `  ${styles.dim("Installed")}    ${status.current_version}`,
+        `  ${styles.dim("Latest (npm)")} ${latest}`,
+        `  ${styles.dim("Automatic")}    ${auto.active ? "on (checks daily; updates when the API requires it)" : auto.reason_text ?? "off"}`,
+        `  ${styles.dim("Last update")}  ${last}`,
+        "",
+        auto.active
+            ? `  Turn off: ${auto.disable}`
+            : `  Next step: ${auto.next_step ?? "oxygen update"}`,
+        "",
+    ].join("\n");
+}
 function formatAutomaticSkillsInstallStatusLines(result) {
     if (!result)
         return [];
@@ -28191,6 +28692,10 @@ table, options) {
         ...(options.onlyMissing ? { only_missing: true } : {}),
     };
 }
+/** "<text> (default N, max M)." for a LinkedIn sender limit flag, from the enforced constants. */
+function linkedInLimitHelp(key, text) {
+    return `${text} (default ${LINKEDIN_SENDER_LIMIT_DEFAULTS[key]}, max ${LINKEDIN_SENDER_LIMIT_MAXIMUMS[key]}).`;
+}
 function buildLinkedinLimitsBody(// skipcq: JS-R1005 -- CLI body builder maps per-account limit flags + reset timezone.
 options) {
     const limits = {};
@@ -28203,7 +28708,12 @@ options) {
     setLimit("invites_per_week", options.invitesPerWeek);
     setLimit("messages_per_day", options.messagesPerDay);
     setLimit("inmails_per_day", options.inmailsPerDay);
+    setLimit("inmails_per_month", options.inmailsPerMonth);
     setLimit("profile_views_per_day", options.profileViewsPerDay);
+    setLimit("profile_lookups_per_day", options.profileLookupsPerDay);
+    setLimit("endorsements_per_day", options.endorsementsPerDay);
+    setLimit("withdrawals_per_day", options.withdrawalsPerDay);
+    setLimit("posts_per_day", options.postsPerDay);
     setLimit("follows_per_day", options.followsPerDay);
     setLimit("likes_per_day", options.likesPerDay);
     setLimit("comments_per_day", options.commentsPerDay);
@@ -28219,12 +28729,21 @@ options) {
     setLimit("interactive_min_spacing_seconds", options.interactiveMinSpacingSeconds);
     setLimit("interactive_spacing_jitter_seconds", options.interactiveSpacingJitterSeconds);
     setLimit("interactive_sends_per_hour", options.interactiveSendsPerHour);
-    // Send windows are campaign-scoped; the only per-account time setting is the
-    // timezone the daily counters reset in.
+    // Working hours: only the given fields are sent; the server merges them into
+    // the stored window and validates the result (invalid_working_hours).
     const workingHours = {};
     const timezone = readOption(options.timezone);
     if (timezone)
         workingHours.timezone = timezone;
+    const workingDays = readOption(options.workingDays);
+    if (workingDays)
+        workingHours.days = parseWorkingDaysOption(workingDays);
+    const workingHoursStart = readOption(options.workingHoursStart);
+    if (workingHoursStart)
+        workingHours.start = workingHoursStart;
+    const workingHoursEnd = readOption(options.workingHoursEnd);
+    if (workingHoursEnd)
+        workingHours.end = workingHoursEnd;
     // Warm-up override (LinkedIn only). A start-date wins over the booleans; the
     // WhatsApp `set` command doesn't expose these flags, so this stays empty there.
     let warmup;
@@ -28256,7 +28775,7 @@ options) {
     const hasWarmup = warmup !== undefined;
     const hasReadWarmup = readWarmup !== undefined;
     if (!hasLimits && !hasWorkingHours && !hasWarmup && !hasPreset && !hasRandomize && !hasReadWarmup && !hasWeekendFullVolume) {
-        throw new OxygenError("invalid_request", "Pass at least one limit flag (e.g. --invites-per-day), --timezone, a warm-up flag (--warmup-restart / --warmup-disable / --warmup-start-date), --read-warmup-disable / --read-warmup-restart, --warmup-preset, --randomize-caps, or --weekend-full-volume.", { exitCode: 1 });
+        throw new OxygenError("invalid_request", "Pass at least one limit flag (e.g. --invites-per-day), a working-hours flag (--timezone, --working-days, --working-hours-start, --working-hours-end), a warm-up flag (--warmup-restart / --warmup-disable / --warmup-start-date), --read-warmup-disable / --read-warmup-restart, --warmup-preset, --randomize-caps, or --weekend-full-volume.", { exitCode: 1 });
     }
     return {
         ...(hasLimits ? { limits } : {}),
@@ -28268,6 +28787,55 @@ options) {
         ...(hasReadWarmup ? { read_warmup: readWarmup } : {}),
     };
 }
+const WORKING_DAY_NAMES = {
+    mon: 1, monday: 1, tue: 2, tues: 2, tuesday: 2, wed: 3, wednesday: 3, thu: 4, thur: 4, thurs: 4, thursday: 4,
+    fri: 5, friday: 5, sat: 6, saturday: 6, sun: 7, sunday: 7,
+};
+/**
+ * `--working-days` → ISO weekday numbers. Accepts day names or 1-7, comma
+ * separated, and ranges (`mon-fri`, `1-5`). A token it cannot read is sent as
+ * given so the server's invalid_working_hours error names it.
+ */
+// The four --linkedin-* flags write settings.schedule, the per-sequence window
+// the LinkedIn/WhatsApp dispatcher enforces on top of each sender's working
+// hours. The server stores the window whole, so the four flags go together.
+function readLinkedinScheduleOptions(options) {
+    const timezone = readOption(options.linkedinTimezone);
+    const days = readOption(options.linkedinDays);
+    const start = readOption(options.linkedinHoursStart);
+    const end = readOption(options.linkedinHoursEnd);
+    if (!timezone && !days && !start && !end)
+        return undefined;
+    if (!timezone || !days || !start || !end) {
+        throw new OxygenError("invalid_linkedin_schedule", "Set the LinkedIn sending schedule with all four flags: --linkedin-timezone, --linkedin-days, --linkedin-hours-start and --linkedin-hours-end.", { exitCode: 1 });
+    }
+    return { timezone, days: parseWorkingDaysOption(days), start, end };
+}
+function parseWorkingDaysOption(value) {
+    const day = (token) => {
+        const lower = token.trim().toLowerCase();
+        if (/^[1-7]$/.test(lower))
+            return Number(lower);
+        return WORKING_DAY_NAMES[lower] ?? null;
+    };
+    const days = [];
+    for (const token of value.split(",").map((part) => part.trim()).filter(Boolean)) {
+        const [from, to, ...rest] = token.split("-");
+        const start = from !== undefined ? day(from) : null;
+        const end = to !== undefined ? day(to) : null;
+        if (rest.length === 0 && start !== null && end !== null && start <= end) {
+            for (let current = start; current <= end; current += 1)
+                days.push(current);
+        }
+        else if (to === undefined && start !== null) {
+            days.push(start);
+        }
+        else {
+            days.push(token);
+        }
+    }
+    return days;
+}
 /**
  * A whole seat count. Unlike readPositiveNumber, ZERO IS VALID and meaningful:
  * `--quantity 0` is how a customer gives back every seat of a channel, and
@@ -28387,6 +28955,10 @@ function readSequenceSettings(options) {
     if (windowPath) {
         settings.email_send_window = readJsonFileValue(resolve(windowPath), "--send-window-file");
     }
+    const linkedinSchedule = readLinkedinScheduleOptions(options);
+    if (linkedinSchedule) {
+        settings.schedule = linkedinSchedule;
+    }
     if (options.whatsappColdInitiate === true) {
         settings.whatsapp_cold_initiate = true;
     }
@@ -28413,6 +28985,12 @@ function readSequenceSettings(options) {
     // A visible footer mutates outbound copy, so it is opt-in and tri-state:
     // absent leaves the stored value alone; either explicit flag persists the
     // chosen boolean. Missing/false is interpreted as OFF by the dispatcher.
+    if (options.bounceProtection !== undefined)
+        settings.bounce_protection = JSON.parse(options.bounceProtection);
+    if (options.includeUnsubscribeHeaders !== undefined)
+        settings.include_unsubscribe_headers = options.includeUnsubscribeHeaders;
+    if (options.replyToStopText !== undefined)
+        settings.reply_to_stop_text = options.replyToStopText;
     if (options.includeUnsubscribeLink !== undefined) {
         settings.include_unsubscribe_link = options.includeUnsubscribeLink;
     }
@@ -28500,6 +29078,7 @@ process.stdout.on("error", (error) => {
     process.stderr.write(`stdout error: ${error.message}\n`);
     process.exit(1);
 });
+maybeScheduleBackgroundUpdate();
 const program = createProgram();
 installCommanderExitOverride(program);
 try {