@oxygen-agent/cli 1.1011.1091 → 1.1012.2

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.1011.1091
+Version: 1.1012.2

package/dist/command-manifest.d.ts

@@ -17,6 +17,7 @@ export type CommandManifestEntry = {
     flags: CommandManifestFlag[];
     spends_credits: boolean;
     mutates: boolean;
+    destructive: boolean;
     preview_by_default: boolean;
     json_supported: boolean;
     hidden: boolean;
@@ -33,10 +34,11 @@ export type CommandSearchResult = {
     total_matches: number;
     returned: number;
     route: Record<string, unknown> | null;
-    commands: Array<Pick<CommandManifestEntry, "name" | "group" | "description" | "spends_credits" | "mutates" | "json_supported" | "hidden"> & {
+    commands: Array<Pick<CommandManifestEntry, "name" | "group" | "description" | "spends_credits" | "mutates" | "destructive" | "json_supported" | "hidden"> & {
         score: number;
     }>;
     hydrate: string;
+    next_step?: string;
 };
 export declare function buildCommandManifest(program: Command, binaryName: string): CommandManifest;
 /** Bounded natural-language projection over the complete local manifest. */

package/dist/command-manifest.js

@@ -108,6 +108,13 @@ const MUTATING_COMMANDS = new Set([
     // credits. The exact exceptions disclose writes without inventing spend.
     "billing balance",
     "billing seats",
+    // The ledger audit reads that same balance first, with the same conditional writes.
+    "billing audit",
+    // Creates an approval or Checkout link; a first plan's Checkout can start the
+    // first-month offer window. The plan changes only after an admin confirms.
+    "billing change",
+    // --approved records a domain's renewal exit, or with --revoke resumes renewals.
+    "managed-inboxes exit",
     // A default preview is free; approval restores provider seats and billing.
     "managed-inboxes recover",
     "mailboxes warmup status",
@@ -215,6 +222,7 @@ const READ_ONLY_COMMANDS = new Set([
 // invocation still previews, so machine-readable discovery must not imply that
 // calling the command without its confirmation flag writes anything.
 const PREVIEW_BY_DEFAULT_COMMANDS = new Set([
+    "mailboxes warmup enable",
     "mailboxes warmup google",
     "deliverability placement-test run",
     "deliverability placement-test send",
@@ -300,11 +308,13 @@ export function searchCommandManifest(manifest, query, requestedLimit = DEFAULT_
             description: command.description,
             spends_credits: command.spends_credits,
             mutates: command.mutates,
+            destructive: command.destructive,
             json_supported: command.json_supported,
             hidden: command.hidden,
             score,
         })),
         hydrate: `${manifest.binary} commands get <exact-command> --json`,
+        ...(matches.length ? {} : { next_step: `No command matched. Describe the outcome with ${manifest.binary} capabilities search, or inspect ${manifest.binary} commands --json.` }),
     };
 }
 /** Exact second hop after search; avoids serializing the full command grammar. */
@@ -426,6 +436,7 @@ function toManifestEntry(command, path) {
             && (MUTATING_COMMANDS.has(commandName)
                 || MUTATING_VERBS.has(leafVerb)
                 || MUTATING_VERBS.has(verbPrefix))),
+        destructive: operations.some((spec) => spec.mcp.annotations?.destructiveHint === true),
         preview_by_default: flagStrings.some((flags) => flags.includes("--live")) ||
             PREVIEW_BY_DEFAULT_COMMANDS.has(commandName),
         json_supported: flagStrings.some((flags) => flags.includes("--json")),

package/dist/customer-operation-commands.js

@@ -34,7 +34,7 @@ const GROUP_PURPOSES = {
 const OPERATION_FLAGS = {
     "tables rows remove-selection": {
         table: { help: "Table id or slug." },
-        row_ids: { help: "Comma-separated exact row IDs. Choose this or --selection-json." },
+        row_ids: { help: "Comma-separated exact row IDs. Choose this, --filter-tree-json or --selection-json." },
     },
     "tables favorite": { favorite: { negateHelp: "Unstar the selected Table or folder (favorite: false)." } },
     "tables favorites": { details: { negateHelp: "Return stored star keys without names or links (details: false)." } },

package/dist/index.js

@@ -7242,7 +7242,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--filter-json <json>", "Legacy filter object or array, e.g. '{\"column\":\"mobile_phone_e164\",\"op\":\"is_null\"}'. Mutually exclusive with --filter-tree-json/--sort-json.")
         .option("--filter-tree-json <json>", `Airtable-style filter group, e.g. '{\"type\":\"group\",\"conjunction\":\"and\",\"children\":[{\"type\":\"leaf\",\"columnKey\":\"stage\",\"operator\":\"is\",\"value\":\"won\"}]}'. Add \"path\":\"a.b\" to a leaf to match a key inside a JSON cell, e.g. the rows one Function run touched: {\"columnKey\":\"<function_column>\",\"path\":\"action_run_id\",\"operator\":\"is\",\"value\":\"<run_id>\"}. Leaf operators: ${FILTER_TREE_OPERATORS.join(", ")} (is_true/is_false need a checkbox column; --filter-json's is_null/is_not_null are is_empty/is_not_empty here). Mutually exclusive with --filter-json.`)
         .option("--search <text>", "Find rows by one piece of text, matched against every text, number, date and checkbox column at once — the grid's magnifier. Combines with --filter-tree-json (both must hold). Use --filter-tree-json when you know which column to match.")
-        .option("--formula-values <mode>", "Formula filters are refused by default because displayed formulas are evaluated live. Refresh the formula's stored cells with `columns run <table> <column> --force` (0 credits), then pass 'materialized'; filtering uses that stored snapshot and returns a freshness note.")
+        .option("--formula-values <mode>", "Formula filters are refused by default because displayed formulas are evaluated live. Refresh the formula's stored cells with `columns run <table> <column> --force` (0 credits), then pass 'materialized'; filtering uses that stored snapshot and returns a freshness note. A fill-empty field a bundle adds (definition fill: \"empty\", such as Headcount or Job title) is stored, not live: its cell is the value, so 'materialized' filters it exactly.")
         .option("--sort-json <json>", "Ordered sort rules, e.g. '[{\"columnKey\":\"_created_at\",\"direction\":\"desc\"}]'. Earlier rules dominate. Mutually exclusive with --filter-json.")
         .option("--no-system-fields", "Omit _row_id, _created_at, and _updated_at from returned rows (included by default).")
         .option("--json", "Print a JSON envelope.")
@@ -7448,7 +7448,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     }))
         .addCommand(new Command("recover-pending")
-        .description("Re-poll BetterContact async enrichments that timed out mid-poll and write any newly-found phones back to the table.")
+        .description("Recover existing BetterContact email or phone requests and inspect terminal verification blockers; no new orders.")
         .argument("<table>", "Table id or slug.")
         .option("--max-items <n>", "Max pending cache rows to poll in this run. Defaults to 1000.")
         .option("--json", "Print a JSON envelope.")
@@ -9393,13 +9393,14 @@ Examples:
         }));
     }))
         .addCommand(new Command("describe")
-        .description("Describe one blueprint (seed or saved) by slug.")
+        .description("Describe one blueprint (seed or saved) by slug. The workflow's compiled bundle is left out (its size and sha256 are listed) unless --include-bundle is passed.")
         .argument("<slug>", "Blueprint slug.")
+        .option("--include-bundle", "Include each workflow's compiled bundle (often 300k+ characters).")
         .option("--json", "Print a JSON envelope.")
         .action(async (slug, options) => {
         await handleAsyncAction("blueprints describe", options, () => requestOxygen("/api/cli/blueprints/get", {
             method: "POST",
-            body: { slug },
+            body: { slug, ...(options.includeBundle ? { include_bundle: true } : {}) },
         }));
     }))
         .addCommand(new Command("export")
@@ -9800,9 +9801,9 @@ Examples:
         .command("columns")
         .description("Workspace table column commands. Price first: `tools search --for-table <table>` lists every enrichment this table's columns support with its credit cost per row (0 credits). Ready-made templates (pricing pages, job posts, event pages, 10-Ks, website facts, market questions, text extraction, plus free 0-credit cleanups — company names, job titles, email type, text to list; person questions over an enriched LinkedIn profile and person appearances; company research questions — founders, parent company, funding, cloud provider, offers demos, industry, NAICS, HQ and footprint, LinkedIn/Crunchbase/careers page lookups): `columns catalog`, then `columns add <table> --prompt-key <key> --input <name>=<column>`. Column choice guide: the oxygen-tables skill (`oxygen skills get oxygen-tables --json`); enrichment presets and waterfalls: the oxygen-enrichment skill. With --json parse stdout only: the envelope is stdout, and the spend and cost notes (`estimated N credits for a live run`) are stderr, so merging the streams breaks the JSON.")
         .addCommand(new Command("add")
-        .description("Add a nullable column to a workspace table. Writes the definition only — this never runs the column and never spends credits; use `columns run` for that, with --dry-run first to see the cost. For a page, posting or filing the row already links to, or a company fact Oxygen already knows how to research (founders, parent company, funding, cloud provider, offers demos, industry, NAICS, HQ, a LinkedIn or Crunchbase page), pick a template from `columns catalog` (--prompt-key) instead of writing a prompt; or read a URL column with --kind research --research-url. The guide is the oxygen-tables skill (`oxygen skills get oxygen-tables --json`). For ICP fit, use Classify Score: `columns add <table> --label 'ICP fit' --score 'low,medium,high' --prompt 'Assess {{company_name}}: {{description}}, {{employees}} employees' --grounding workspace` (0.075 credits/row). A formula column needs no run at all: it evaluates on read from its current inputs, so `tables query` shows its values immediately.")
+        .description("Add a nullable column, a catalog template (--prompt-key) or a multi-column enrichment bundle (--preset) to a workspace table. Writes the definition only — this never runs the column and never spends credits; use `columns run` for that, with --dry-run first to see the cost. For a page, posting or filing the row already links to, or a company fact Oxygen already knows how to research (founders, parent company, funding, cloud provider, offers demos, industry, NAICS, HQ, a LinkedIn or Crunchbase page), pick a template from `columns catalog` (--prompt-key) instead of writing a prompt; or read a URL column with --kind research --research-url. The guide is the oxygen-tables skill (`oxygen skills get oxygen-tables --json`). For ICP fit, use Classify Score: `columns add <table> --label 'ICP fit' --score 'low,medium,high' --prompt 'Assess {{company_name}}: {{description}}, {{employees}} employees' --grounding workspace` (0.075 credits/row). A formula column needs no run at all: it evaluates on read from its current inputs, so `tables query` shows its values immediately.")
         .argument("<table>", "Table id or slug.")
-        .option("--preset <preset>", "Add a pre-built column bundle instead of one column, which is what --prompt-key adds: a preset writes SEVERAL columns at once and needs no --input on a table whose identity column it can find, while --prompt-key adds one template column and binds each input you name. Presets: `person_enrich` (one LinkedIn profile lookup — Blitz first, the LinkedIn Scraper only when Blitz has no match — then first/last/full name, current company and its LinkedIn URL, job title, start date, education, school, headline, bio, location and followers as free stored fields that fill when the lookup runs; the person templates in `columns catalog --category people` all read its payload column), `company_enrich` (one company lookup from a domain or LinkedIn URL — Blitz first, the LinkedIn Scraper only when Blitz has no match, about 1 credit a company — keeping the whole profile in its JSON column plus name, domain, LinkedIn URL, headcount, industry, description, founded year and HQ country as free stored fields; no field choices; binds to the person preset's current_company_linkedin_url automatically), `company_tech_stack` (the technologies a company runs, from its website and hiring), `company_funding` (total raised, latest round, number of rounds and investors), `company_revenue` (an annual revenue estimate), `company_hiring` (the roles a company is hiring for, with a count) — each of these four is one paid lookup column that fills its own columns, priced per row in `tools search --for-table` — or `domain_check` (1 credit/row for a live/redirect/parked/not_found/dead verdict on every domain, cached 30 days, plus a free label column to filter on). For a single cleaned or classified column, use a template from `columns catalog` instead — that is one column, not a bundle. Name the input column with --input: `url` for person_enrich, `domain` and/or `linkedin_url` for the company presets. Any column works whatever it is called; without --input Oxygen guesses from column names. Creating the columns is free; run them afterwards, --dry-run first.")
+        .option("--preset <preset>", "Add a pre-built column bundle instead of one column, which is what --prompt-key adds: a preset writes SEVERAL columns at once and needs no --input on a table whose identity column it can find, while --prompt-key adds one template column and binds each input you name. Presets: `person_enrich` (one LinkedIn profile lookup — Blitz first, the LinkedIn Scraper only when Blitz has no match — then first/last/full name, current company and its LinkedIn URL, job title, start date, education, school, headline, bio, location and followers as free stored fields that fill when the lookup runs, followers only on rows the LinkedIn Scraper answers because Blitz publishes none; the person templates in `columns catalog --category people` all read its payload column), `company_enrich` (one company lookup from a domain or LinkedIn URL — Blitz first, the LinkedIn Scraper only when Blitz has no match, about 1 credit a company — keeping the whole profile in its JSON column plus name, domain, LinkedIn URL, headcount, industry, description, founded year and HQ country as free stored fields; no field choices; binds to the person preset's current_company_linkedin_url automatically), `company_tech_stack` (the technologies a company runs, from its website and hiring), `company_funding` (total raised, latest round, number of rounds and investors), `company_revenue` (an annual revenue estimate), `company_hiring` (the roles a company is hiring for, with a count) — each of these four is one paid lookup column that fills its own columns, priced per row in `tools search --for-table` — or `domain_check` (1 credit/row for a live/redirect/parked/not_found/dead verdict on every domain, cached 30 days, plus a free label column to filter on). For a single cleaned or classified column, use a template from `columns catalog` instead — that is one column, not a bundle. Name the input column with --input: `url` for person_enrich, `domain` and/or `linkedin_url` for the company presets. Any column works whatever it is called; without --input Oxygen guesses from column names. Creating the columns is free; run them afterwards, --dry-run first.")
         .option("--input <slot=column...>", "Bind a preset or template input to an exact column, e.g. --input url=pricing_url with --prompt-key, or --input domain=website --input linkedin_url=company_li with --preset. Repeatable. For a preset it is only needed when the automatic match is wrong or missing; for a template it names the column each declared input reads.", collectRepeatable, [])
         // No preset takes a field list any more (founder, 2026-09-24). Hidden,
         // not removed: an old script passing them gets the server's refusal,
@@ -10495,10 +10496,10 @@ Examples:
         });
     }))
         .addCommand(new Command("catalog")
-        .description("List column templates and native Classify. For ICP fit, Classify Score (0.075 credits/row) appears in `data.native`, including with `--family classification`; `data.entries` lists separate prompt templates. Templates can be added with `columns add <table> --prompt-key <key>`: the extract templates (pricing-page, job-posting, event, 10-K, website-fact, market and text extractors) and the company research questions (founders, parent company, subsidiaries, funding rounds, market cap, cloud provider, is SaaS, offers demos, industry, NAICS, HQ / states / cities, competitors, LinkedIn / Crunchbase / Glassdoor / careers page lookups) and the person templates (--category people: skill set, grad school, location, job fit and current company read from the person_enrich payload for 15 credits; events, keynotes, podcasts and GitHub profile searched by name), each with the input it reads (bind it with --input <name>=<column_key>), the providers behind it, the answer fields, and the credits per row. Read-only and free. Tool-backed columns that read a page or call a provider — e.g. Website contacts (emails and phones from each row's site) — are found with `oxygen tools search <words>`, not here. Provider waterfalls and enrichment bundles are a different list with their own per-row prices: `oxygen enrichment catalog`.")
+        .description("List column templates and native Classify; multi-column enrichment bundles (presets such as person_enrich and company_enrich) are listed by `oxygen enrichment catalog`. For ICP fit, Classify Score (0.075 credits/row) appears in `data.native`, including with `--family classification`; `data.entries` lists separate prompt templates. Templates can be added with `columns add <table> --prompt-key <key>`: the extract templates (pricing-page, job-posting, event, 10-K, website-fact, market and text extractors) and the company research questions (founders, parent company, subsidiaries, funding rounds, market cap, cloud provider, is SaaS, offers demos, industry, NAICS, HQ / states / cities, competitors, LinkedIn / Crunchbase / Glassdoor / careers page lookups) and the person templates (--category people: skill set, grad school, location, job fit and current company read from the person_enrich payload for 15 credits; events, keynotes, podcasts and GitHub profile searched by name), each with the input it reads (bind it with --input <name>=<column_key>), the providers behind it, the answer fields, and the credits per row. Read-only and free. Website contacts (emails and phones from each row's site) is here as `--kind tool`; other tool-backed columns that read a page or call a provider are found with `oxygen tools search <words>`. Provider waterfalls and enrichment bundles are a different list with their own per-row prices: `oxygen enrichment catalog`.")
         .option("--category <category>", "Only templates in one picker section: extract (page and text extraction), normalize, organize, summarize (free cleanups and classifications), people (person questions and appearances) or company (company research questions); comma-separate to combine (extract,people). The outreach prompts sit under copy, scoring, qa, research.")
         .option("--family <family>", "Only one family. Extract: pricing, job_posting, events, filings, site_facts, market, portfolio, text_extraction. Cleanups: company, person, email, lists, classification. Company: web_presence, corporate_structure, funding, footprint, business_model, tech, market. People: profile, appearances.")
-        .option("--kind <kind>", "Only one column kind: research (reads the web or a page, answer with sources), search (a managed web search whose cell is a page URL or the result list, fixed price), ai (reads row text), or formula (free).")
+        .option("--kind <kind>", "Only one column kind: research (reads the web or a page, answer with sources), search (a managed web search whose cell is a page URL or the result list, fixed price), ai (reads row text), formula (free), or tool (a native fetch over a website, such as website contacts).")
         .option("--search <term>", "Match a word against template keys, titles and descriptions, e.g. pricing or 10-K.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -10771,16 +10772,16 @@ Examples:
         .command("table-ingestions")
         .description("Durable background table ingestion commands. To find a table's ingestion runs: `runs list --table <table>`.")
         .addCommand(new Command("create-tool-page")
-        .description("Create a paged tool-source ingestion run for a workspace table.")
+        .description("Create a bounded paged tool-source ingestion. LinkedIn ads: --tool adyntel.linkedin_ads --rows-path response.ads --cursor-path response.continuation_token --cursor-request-key continuation_token --upsert-key ad_id. Completed means the approved bound finished; use table-ingestions items to check whether more pages remain.")
         .argument("<table>", "Table id or slug.")
         .option("--tool <tool_id>", "Tool id such as blitzapi.people_search or hubspot.contacts_list.")
         .option("--tool-id <tool_id>", "Alias for --tool.")
         .requiredOption("--request-json <json>", "Tool request JSON object for the first page.")
-        .option("--rows-path <path>", "Dotted path to result rows. Defaults to response.results.")
+        .option("--rows-path <path>", "Path from the whole tool result, including response. Defaults to response.results; LinkedIn/Google ads use response.ads.")
         .option("--row-mapping-json <json>", "Object mapping target column keys to dotted source-row paths.")
-        .option("--cursor-path <path>", "Dotted path to the next cursor in the tool result.")
+        .option("--cursor-path <path>", "Path from the whole tool result; Adyntel ads use response.continuation_token.")
         .option("--cursor-request-key <path>", "Dotted request key to receive the next cursor.")
-        .option("--max-pages <n>", "Maximum pages to fetch. Defaults to 1.")
+        .option("--max-pages <n>", "Maximum pages in this item's cursor chain. Defaults to 1; a page limit is not supplier exhaustion.")
         .option("--upsert-key <key>", "Column key used to upsert instead of inserting.")
         .option("--connection-id <connection_id>", "Optional provider integration connection id.")
         .option("--max-concurrency <n>", "Maximum concurrent ingestion items for this run. Defaults to 5.")
@@ -10833,14 +10834,14 @@ Examples:
         });
     }))
         .addCommand(new Command("get")
-        .description("Get one durable table ingestion run.")
+        .description("Get one durable table ingestion run. For provider pages, completed means its bounded work finished; inspect table-ingestions items for the source cursor and exhaustion.")
         .argument("<run_id>", "Table ingestion run UUID.")
         .option("--json", "Print a JSON envelope.")
         .action(async (runId, options) => {
         await handleAsyncAction("table-ingestions get", options, () => requestOxygen(`/api/cli/table-ingestion-runs/${encodeURIComponent(runId)}`));
     }))
         .addCommand(new Command("items")
-        .description("List items for a durable table ingestion run.")
+        .description("List ingestion items, including completed pages. For tool_page, item.output.has_next_cursor=true means more pages remain; item.output.stopped_by=provider_exhausted records cursor exhaustion. item.nextCursor is the saved continuation: start a new approved create-tool-page run in the same Table with that request cursor, the same filters/mapping/upsert key and a new credit cap. Inspect failed or unknown outcomes before retrying.")
         .argument("<run_id>", "Table ingestion run UUID.")
         .option("--status <status>", "Filter by pending, leased, completed, failed, skipped, or canceled.")
         .option("--limit <n>", "Maximum items to return. Defaults to 100.")
@@ -10858,7 +10859,7 @@ Examples:
         });
     }))
         .addCommand(new Command("wait")
-        .description("Wait for a table ingestion run (read-only, no credits). Retries transient network failures, including deploy disconnects, at the polling interval within the same timeout.")
+        .description("Wait for a table ingestion run (read-only, no credits). A completed bounded run may have more provider pages; inspect table-ingestions items for has_next_cursor, stopped_by and nextCursor. Retries transient network failures, including deploy disconnects, within the same timeout.")
         .argument("<run_id>", "Table ingestion run UUID.")
         .option("--timeout-seconds <n>", "Maximum time to wait. Defaults to 600.")
         .option("--interval-seconds <n>", "Polling interval. Defaults to 5.")
@@ -11525,7 +11526,7 @@ Examples:
     }))
         .addCommand(new Command("usage")
         .description("Show credit ledger events (each tagged with its FIXED/FLEXIBLE spend_class), workflow step usage (automation_actions: credits per step, credits billed; writing rows is free), calls with your own API keys (byok_calls: the platform fee per call and the fee credits this month; your provider bills the call itself), or connected LinkedIn and WhatsApp accounts (provider_seats: the rolling-30d peak and its implied connectivity cost; what each account is charged is its credit reservation in `billing commitments`). On a plan that pays for several workspaces (an agency covering client workspaces), `--group-by workspace` totals the credits each workspace spent (`by_workspace`) and `--workspace <id|slug>` narrows the ledger to one of them; a linked client workspace sees only its own spend. managed_credits_used counts captured credits; for where credits went by category, provider or tool, with shares, run `billing audit`.")
-        .option("--meter <meter>", "credits, automation_actions, byok_calls, provider_seats (rolling-30d peak connected accounts and the flat per-account charge; each account's reservation is listed by `billing commitments`), or holds (each held reservation behind reserved_credits in this workspace: credits, run, why it is held (an unmarked LinkedIn lookup hold cannot say whether its result was unknown or delivered), and automatic_return: only a LinkedIn lookup hold from 24 hours to 30 days old is eligible, only while that is switched on, and an hourly release returns it on a later pass with no fixed deadline; read-only, newest first, --days up to 365 and --limit apply). Defaults to credits.")
+        .option("--meter <meter>", "credits, automation_actions, byok_calls, provider_seats (rolling-30d peak connected accounts and the flat per-account charge; each account's reservation is listed by `billing commitments`), or holds (each held reservation behind reserved_credits in this workspace: credits, run, why it is held (an unmarked LinkedIn lookup hold cannot say whether its result was unknown or delivered), and automatic_return: LinkedIn lookup holds from 24 hours to 30 days old and explicitly unknown LeadMagic email-validation holds older than 24 hours are eligible while automatic return is switched on, and an hourly release returns it on a later pass with no fixed deadline; read-only, newest first, --days up to 365 and --limit apply). Defaults to credits.")
         .option("--days <n>", "Lookback window in days. Defaults to 30.")
         .option("--from <iso>", "Only include ledger events at or after this ISO timestamp.")
         .option("--to <iso>", "Only include ledger events at or before this ISO timestamp.")
@@ -15125,10 +15126,12 @@ Examples:
         });
     }))
         .addCommand(new Command("get")
-        .description("Get one conversation with its full message thread. <conversation> accepts a conversation id, Unipile chat id, or (email) Zapbox thread id, and is resolved on any channel by default (email first, then LinkedIn/WhatsApp). Opening a LinkedIn or WhatsApp thread may fetch provider history and update the local mirror. WhatsApp also merges provider-confirmed phone/contact identities. This uses no Oxygen credits and sends no message; old conversation references remain usable. For stored-only inspection, use messages query.")
+        .description("Get one conversation with its full message thread. <conversation> accepts a conversation id, Unipile chat id, or (email) Zapbox thread id, and is resolved on any channel by default (email first, then LinkedIn/WhatsApp). Opening a LinkedIn or WhatsApp thread may fetch provider history and update the local mirror. WhatsApp also merges provider-confirmed phone/contact identities. This uses no Oxygen credits and sends no message; old conversation references remain usable. Use --stored-only to read the mirror without provider refresh. --sender-account-id retains that participant’s DM privacy window.")
         .argument("<conversation>", "Conversation id, Unipile chat id, or Zapbox thread id.")
         .option("--channel <channel>", "Inbox channel: all (default, resolves the id on any channel), email, linkedin, or whatsapp.")
         .option("--message-limit <n>", "Maximum messages to return (1-500). Defaults to 100.")
+        .option("--sender-account-id <ids>", "Scope DM history to participant UUIDs, comma-separated.")
+        .option("--stored-only", "Read mirrored messages without provider refresh.")
         .option("--json", "Print a JSON envelope.")
         .action(async (conversation, options) => {
         await handleAsyncAction("inbox get", options, () => {
@@ -15139,15 +15142,21 @@ Examples:
             const messageLimit = readOption(options.messageLimit);
             if (messageLimit)
                 params.set("message_limit", messageLimit);
+            const senderAccountId = readOption(options.senderAccountId);
+            if (senderAccountId)
+                params.set("sender_account_id", senderAccountId);
+            if (options.storedOnly)
+                params.set("sync", "0");
             const suffix = params.toString();
             return requestOxygen(`/api/cli/inbox/${encodeURIComponent(conversation)}${suffix ? `?${suffix}` : ""}`);
         });
     }))
         .addCommand(new Command("send")
-        .description("Reply into a conversation on its own channel, resolved from the conversation when --channel is omitted: an email thread replies from its own mailbox (Zapbox/native Gmail/Graph, threaded); a WhatsApp thread gets a warm reply; a LinkedIn thread replies via Unipile. Sends a real message — requires --approved. Without it, returns a preview.")
+        .description("Reply into a conversation on its own channel, resolved from the conversation when --channel is omitted: an email thread replies from its own mailbox (Zapbox/native Gmail/Graph, threaded); a WhatsApp thread gets a warm reply; a LinkedIn thread replies via Unipile. Shared LinkedIn threads require --sender-account-id. Sends a real message — requires --approved. Without it, returns a preview.")
         .argument("<conversation>", "Conversation id, Unipile chat id, or (email) Zapbox thread id.")
         .requiredOption("--text <message>", "Reply text to send.")
         .option("--channel <channel>", "Optional: email, linkedin, or whatsapp. Resolved from the conversation when omitted.")
+        .option("--sender-account-id <id>", "LinkedIn participant UUID from the thread’s senderAccountIds. Required for a shared thread.")
         .option("--approved", "Approve and send the message. Without this flag, returns a preview only.")
         .option("--draft-id <id>", "When approving an AI reply-agent draft (email or LinkedIn), its id (marks it sent on success). Use the matching --channel.")
         .option("--attach <path-or-url>", "Email: local PDF, DOCX, XLSX, PPTX, TXT, or CSV path; preview uploads it for 24 hours without sending. LinkedIn: public URL. Repeatable, up to 5 files and 10 MiB total for email.", collectRepeatable, [])
@@ -15209,6 +15218,7 @@ Examples:
                     ...(channel ? { channel } : {}),
                     ...(options.approved ? { approved: true } : {}),
                     ...(draftId ? { draft_id: draftId } : {}),
+                    ...(readOption(options.senderAccountId) ? { sender_account_id: readOption(options.senderAccountId) } : {}),
                     ...(attachments.length > 0 ? { attachments } : {}),
                     ...(attachmentIds.length > 0 ? { attachment_ids: attachmentIds } : {}),
                 },
@@ -15259,14 +15269,23 @@ Examples:
         }));
     }))
         .addCommand(new Command("mark-read")
-        .description("Mark a conversation and all its messages as read (LinkedIn by default; use --channel email or whatsapp for those channels).")
+        .description("Mark visible messages in a conversation as read (LinkedIn by default; use --channel email or whatsapp for those channels). Sender filters retain the selected DM history window.")
         .argument("<conversation>", "Conversation id, Unipile chat id, or (email) Zapbox thread id.")
         .option("--channel <channel>", "Inbox channel: linkedin (default), whatsapp, or email.")
+        .option("--sender-account-id <ids>", "Scope DM read state to participant UUIDs, comma-separated.")
+        .option("--sender-profile-id <ids>", "Scope DM read state to sender profile UUIDs, comma-separated.")
         .option("--json", "Print a JSON envelope.")
         .action(async (conversation, options) => {
         await handleAsyncAction("inbox mark-read", options, () => {
             const channel = readOption(options.channel);
-            return requestOxygen(`/api/cli/inbox/${encodeURIComponent(conversation)}/read`, {
+            const params = new URLSearchParams();
+            const senderAccountId = readOption(options.senderAccountId), senderProfileId = readOption(options.senderProfileId);
+            if (senderAccountId)
+                params.set("sender_account_id", senderAccountId);
+            if (senderProfileId)
+                params.set("sender_profile_id", senderProfileId);
+            const suffix = params.toString();
+            return requestOxygen(`/api/cli/inbox/${encodeURIComponent(conversation)}/read${suffix ? `?${suffix}` : ""}`, {
                 method: "POST",
                 body: channel ? { channel } : {},
             });
@@ -17830,7 +17849,7 @@ Examples:
         await handleAsyncAction("managed-inboxes registrant", options, () => requestOxygen("/api/cli/managed-inboxes/registrant"));
     }))
         .addCommand(new Command("subscribe")
-        .description("Buy managed monthly inboxes on a new domain or your existing Cloudflare domain. Use --existing-domain for Cloudflare: the read-only preview shows ownership, occupancy, DNS scope and blockers, with zero registration charge. --max-per-domain saves a stricter limit with the approved order, including existing addresses; later additions honor it. Preview does not save the limit or change workspace data. WITHOUT --approved this prints a priced PREVIEW with a quote_id (nothing ordered, nothing charged); re-run with --approved --quote <id> to place the order. OXYGEN Warm-up defaults on for Google, Microsoft, and Azure when available: preview and approved responses carry `warmup_activation` with the exact `mailboxes` and `scope=warmup_only`; it is null when warmup is disabled or unavailable. For InboxKit, Google carries `transport=inboxkit_managed_google_handoff`; Microsoft/Azure carries `transport=inboxkit_sequencer_export`. Both carry `mailbox_credentials_required=false` and `native_send_oauth_separate=true`, so managed warm-up needs no customer-supplied OAuth or mailbox password. Google retrieves the existing managed credential only during activation and never persists or returns it; Microsoft/Azure uses native export. Native sending authorization is separate and may still be required before OXYGEN can send. Verify each exact address with `mailboxes oauth-health --json`; InboxKit's unattended Google domain approval usually lands within minutes and the worker keeps retrying, so a waiting row is not a reason to ask the customer to sign in. This order authorizes automatic OXYGEN Warm-up activation after provisioning, so no second `mailboxes warmup enable` approval is needed. The preview shows the price in force: from the 2026-09 repricing date a Google inbox is 500 credits a month all-in (a flat 400 mailbox line plus the 100-credit mailbox connection, warm-up included, which `connection_monthly_credits` shows and your balance reserves once the inbox connects); Microsoft and Azure mailboxes are priced from the vendor's LIVE rate card. Domains are priced from the vendor's LIVE domain price, and any price below vendor cost is refused. A domain you bought on its own through Oxygen (`domains buy`) takes its first inboxes here too: the preview says `domain_source: owned`, nothing is registered again and `one_off_credits` is 0 (Google or Microsoft; omit --years). To add mailboxes to a domain that already has inboxes use `managed-inboxes add-inboxes`.")
+        .description("Buy managed monthly inboxes on a new domain or your existing Cloudflare domain. Use --existing-domain for Cloudflare: the read-only preview shows ownership, occupancy, DNS scope and blockers, with zero registration charge. --max-per-domain saves a stricter limit with the approved order, including existing addresses; later additions honor it. Preview does not save the limit or change workspace data. WITHOUT --approved this prints a priced PREVIEW with a quote_id (nothing ordered, nothing charged); re-run with --approved --quote <id> to place the order. OXYGEN Warm-up defaults on for Google, Microsoft, and Azure when available: preview and approved responses carry `warmup_activation` with the exact `mailboxes` and `scope=warmup_only`; it is null when warmup is disabled or unavailable. For InboxKit, Google carries `transport=inboxkit_managed_google_handoff`; Microsoft/Azure carries `transport=inboxkit_sequencer_export`. Both carry `mailbox_credentials_required=false` and `native_send_oauth_separate=true`, so managed warm-up needs no customer-supplied OAuth or mailbox password. Google retrieves the existing managed credential only during activation and never persists or returns it; Microsoft/Azure uses native export. Native sending authorization is separate and may still be required before OXYGEN can send. Verify each exact address with `mailboxes oauth-health --json`; InboxKit's unattended Google domain approval usually lands within minutes and the worker keeps retrying, so a waiting row is not a reason to ask the customer to sign in. This order authorizes automatic OXYGEN Warm-up activation after provisioning, so no second `mailboxes warmup enable` approval is needed. The preview shows the price in force: from the 2026-09 repricing date a Google Workspace or Microsoft 365 inbox is one flat mailbox line plus the 100-credit mailbox connection, warm-up included, which `connection_monthly_credits` shows and your balance reserves once the inbox connects (400 credits a month all-in at the committed price), and an Azure tenant is one flat charge for its domain (4,000 a month) plus each inbox's connection; `managed-inboxes list --json` reports the prices in force under `prices`. Domains are priced from the vendor's LIVE domain price, and any price below vendor cost is refused. A domain you bought on its own through Oxygen (`domains buy`) takes its first inboxes here too: the preview says `domain_source: owned`, nothing is registered again and `one_off_credits` is 0 (Google or Microsoft; omit --years). To add mailboxes to a domain that already has inboxes use `managed-inboxes add-inboxes`.")
         .argument("[domain]", "Sending domain to register + host the mailboxes (e.g. send.acme.com), or one you already bought through Oxygen. May also be passed as --domain.")
         .option("--domain <domain>", "Sending domain (alternative to the positional argument).")
         .requiredOption("--provider <provider>", "Mailbox PLATFORM: google, microsoft, or azure. (google/microsoft cap at 5 mailboxes per domain; azure allows 100.)")
@@ -18492,7 +18511,7 @@ Examples:
         .addCommand(new Command("emailguard")
         .description("Assess every mailbox origin for EmailGuard and connect credential-capable Google Workspace mailboxes from managed, Zapmail, or compatible encrypted external imports. Manual/native Google rows report credential_required; Microsoft 365/Azure reports vendor_blocked. Preview never materializes a password; approved execution fetches it just in time and never prints it.")
         .addCommand(new Command("connect")
-        .description("Preview or connect selected mailboxes to EmailGuard. On a repriced workspace managed mode is 135 credits/inbox-month, with two placement tests per inbox per cycle included; an extra managed test costs 66 credits. The preview shows the price in force; BYOK is 0 Oxygen credits. Google Workspace requires a real app password, fetched only after approval. Microsoft 365/Azure is explicitly vendor-blocked because EmailGuard exposes neither Microsoft OAuth nor tenant consent; Oxygen never downgrades it to password auth. Starts with a 0-credit, no-provider-write preview. Account connection sends no placement probe.")
+        .description("Preview or connect selected mailboxes to EmailGuard. Managed mode is 100 credits/inbox-month, with two placement tests per inbox per cycle included; an extra managed test costs 66 credits. The preview shows the price in force; BYOK is 0 Oxygen credits. Google Workspace requires a real app password, fetched only after approval. Microsoft 365/Azure is explicitly vendor-blocked because EmailGuard exposes neither Microsoft OAuth nor tenant consent; Oxygen never downgrades it to password auth. Starts with a 0-credit, no-provider-write preview. Account connection sends no placement probe.")
         .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses. Omit for the whole pool.")
         .option("--approved", "Perform the external EmailGuard account write.")
         .option("--plan <hash>", "Exact hash from the fresh preview (required with --approved).")
@@ -18612,7 +18631,7 @@ Examples:
         .description("OXYGEN Warm-up for the sending pool — the weeks of low-volume conversational mail that make a new inbox look trusted before you cold-send from it. It costs 100 credits per warming inbox per month ($1), or nothing once it is included in your own mailbox's 100-credit monthly connection (2026-09 repricing); the preview shows which applies. Fresh managed InboxKit Google/Microsoft/Azure orders with the default-on warm-up add-on activate automatically after provisioning under the approved order quote; do not run a second `warmup enable`. Google reuses the InboxKit-held credential only during activation and never stores or returns it; Microsoft/Azure uses exact native export. Standalone preview → approval is for BYOK/imported mailboxes, a managed opt-out, or later separate enrollment. InboxKit auto-export stays off for Microsoft/Azure because Oxygen submits only the exact authorized UIDs, and any non-cancelled InboxKit warm-up blocks either handoff so one mailbox cannot warm twice. OXYGEN Warm-up never owns campaign dispatch: native OXYGEN Sequences still own campaigns and sends. Eligible non-InboxKit Microsoft mailboxes use the separate `mailboxes warmup microsoft` OAuth fallback. Inboxes already warming on the retired TrulyInbox rail keep reporting and are wound down there with `warmup disable`; they are never silently moved to the current managed rail. On existing active paid seats, Google credential repair uses its own enabled-by-default switch. When the separate worker recovery mode is enforce (the unset default), Microsoft OAuth or tenant-consent seats get a credential-free vendor reactivation, and stalled dispatch or DNS readiness is rechecked. Shadow reports candidates in those enabled lanes without their vendor writes; off skips those lanes. Google credential repair can still run in shadow/off. Correct bad DNS records yourself; an active unpaused paid seat in enforce mode needs no manual resume after that correction. OXYGEN never invents consent, resumes a human or safety pause, starts a new paid enrollment, or blindly repeats an ambiguous provider write. Check `warmup status` and `mailboxes list` for the exact next action.")
         .addHelpText("after", "\nDocs: https://oxygen-agent.com/docs/providers/mailboxes\n")
         .addCommand(new Command("enable")
-        .description("Optional provider warm-up defaults to 1/day, +1/day, max 10/day (dedicated-tenant profiles stay stricter); see `mailboxes warmup config` for the effective plan and unsupported OXYGEN Warm-up reply-rate control. This is separate from the 5/10/20 campaign ramp. STANDALONE ENROLLMENT: enroll BYOK/imported mailboxes, a managed order that opted out, or mailboxes being added to warmup later. Fresh managed InboxKit Google/Microsoft/Azure orders whose approved quote included warmup activate automatically after provisioning and do not need this command. Targets the whole pool unless --mailboxes is given; one synchronous preview/approval is capped at 220 mailboxes, so split larger pools into explicit batches. Without --approved this is a 0-credit, no-provider-write priced preview: nothing is handed off, enrolled, or billed. The price is 100 credits per warming mailbox-month, or 0 once warm-up is included in the mailbox's 100-credit monthly connection (2026-09 repricing; the preview's included_in_connection says which, and its max_credits is then 0); the preview returns the exact first-cycle ceiling. Preview one inbox with `oxygen mailboxes warmup enable --mailboxes sender@example.com --json`. Execute by echoing its --plan and --max-credits with --approved. Eligible managed Google targets use the InboxKit-held credential just in time without storing or returning it; Microsoft/Azure targets use native InboxKit Sequencer export with exact UIDs and auto-export off. Any non-cancelled InboxKit warmup must be cancelled before either handoff (pausing is not enough). Only eligible non-InboxKit Microsoft mailboxes need `mailboxes warmup microsoft`. OXYGEN Warm-up retains no campaign authority — OXYGEN Sequences own enrollment and dispatch. New enrollments only ever land on the managed OXYGEN rail; the retired TrulyInbox rail is refused here and only accepts teardown.")
+        .description("Optional provider warm-up defaults to 1/day, +1/day, max 10/day (dedicated-tenant profiles stay stricter); see `mailboxes warmup config` for the effective plan and unsupported OXYGEN Warm-up reply-rate control. This is separate from the 5/10/20 campaign ramp. STANDALONE ENROLLMENT: enroll BYOK/imported mailboxes, a managed order that opted out, or mailboxes being added to warmup later. Fresh managed InboxKit Google/Microsoft/Azure orders whose approved quote included warmup activate automatically after provisioning and do not need this command. Targets the whole pool unless --mailboxes is given; one synchronous preview/approval is capped at 220 mailboxes, so split larger pools into explicit batches. Without --approved this is a 0-credit, no-provider-write priced preview: nothing is handed off, enrolled, or billed. The price is 100 credits per warming mailbox-month, or 0 once warm-up is included in the mailbox's 100-credit monthly connection (2026-09 repricing; the preview's included_in_connection says which, and its max_credits is then 0); the preview returns the exact first-cycle ceiling. Preview one inbox with `oxygen mailboxes warmup enable --mailboxes sender@example.com --json`. Execute by echoing its --plan and --max-credits with --approved. Gmail connected through Composio uses that connection after approval of standard mailbox access (send, read and organize), without a second Google consent. The preview names this access and disabling warm-up revokes it. Existing vendor-consent seats are preserved. Eligible InboxKit-managed Google targets use the InboxKit-held credential just in time without storing or returning it; Microsoft/Azure targets use native InboxKit Sequencer export with exact UIDs and auto-export off. Any non-cancelled InboxKit warmup must be cancelled before either handoff (pausing is not enough). Only eligible non-InboxKit Microsoft mailboxes need `mailboxes warmup microsoft`. OXYGEN Warm-up retains no campaign authority — OXYGEN Sequences own enrollment and dispatch. New enrollments only ever land on the managed OXYGEN rail; the retired TrulyInbox rail is refused here and only accepts teardown.")
         .addHelpText("after", "\nDocs: https://oxygen-agent.com/docs/providers/mailboxes\n")
         .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses to warm. Omit to warm the whole pool.")
         .option("--approved", "Execute the PRICED enrollment. Without it the response is a priced preview and nothing is enrolled or billed.")
@@ -18657,7 +18676,7 @@ Examples:
         });
     }))
         .addCommand(new Command("google")
-        .description("Authorize one to ten connected Google inboxes for OXYGEN Warm-up. Separate from native sending: no passwords or OXYGEN tokens transfer. Preview costs 0 credits and creates no link. Approve its hash with --max-credits 0, open each consent_url as that exact inbox, then poll --status. Google shows the warm-up provider's consent application. Warmup stays off until a separately approved warmup enable; its fresh preview shows the price, including 0 extra credits when included in the mailbox connection.")
+        .description("Legacy Google owner consent for one to ten connected inboxes. Gmail connected through Composio uses warmup enable to review standard mailbox access without a second Google consent. This legacy flow is separate from native sending: no passwords or OXYGEN tokens transfer. Preview costs 0 credits and creates no link. Approve its hash with --max-credits 0, open each consent_url as that exact inbox, then poll --status. Google shows the warm-up provider's consent application. Warmup stays off until a separately approved warmup enable; its fresh preview shows the price, including 0 extra credits when included in the mailbox connection.")
         .requiredOption("--mailboxes <list>", "Exact Google inbox ids or addresses, comma-separated; maximum ten.")
         .option("--approved", "Create the previewed authorization links.")
         .option("--plan <hash>", "Fresh preview hash; required with approval.")
@@ -18935,15 +18954,22 @@ Examples:
         }));
     })));
     program.addCommand(new Command("deliverability")
-        .description("External email deliverability: fleet reputation health and DIRECTIONAL inbox-placement (spam) tests via EmailGuard, Zapmail, or an explicitly configured SendKit dev canary. Start with `placement-test list` and `placement-test get` to inspect existing results for 0 credits without creating or sending a test. For continuous EmailGuard account monitoring use `oxygen mailboxes emailguard connect`. Placement tests are approval-gated paid runs (managed bills Oxygen credits; BYOK = 0 Oxygen credits — Zapmail BYOK bills your Zapmail wallet ~$2/test). SendKit is never auto-selected or generally available: it is a 0-credit, one-test canary for the configured eligible connected sender only.")
+        .description("External email deliverability: fleet reputation health and DIRECTIONAL inbox-placement (spam) tests via EmailGuard, Zapmail, or an explicitly configured OXYGEN placement evaluation pilot. Start with `placement-test list` and `placement-test get` to inspect existing results for 0 credits without creating or sending a test. For continuous EmailGuard account monitoring use `oxygen mailboxes emailguard connect`. Placement tests are approval-gated paid runs (managed bills Oxygen credits; BYOK = 0 Oxygen credits — Zapmail BYOK bills your Zapmail wallet ~$2/test). OXYGEN placement evaluation is never auto-selected or generally available: it is a limited pilot with one 0-credit test for its configured eligible connected sender.")
         .addCommand(new Command("placement-test")
         .description("Inspect saved directional inbox-placement results with list/get (0 credits; no test email is sent). New tests use preview and approval through run/send.")
         .addCommand(new Command("run")
-        .description("Create a placement test for one sending mailbox. Without --approved this returns a cost PREVIEW. EmailGuard creation returns exact seeds + phrase but sends nothing; next run `placement-test send <id>` to preview and approve that external email. Zapmail owns its probe delivery and completes async (2-24h). SendKit requires explicit --provider sendkit plus --subject and --body, and is available only for the configured dev canary with an eligible connected sender. Its approval creates AND sends one probe with no separate send step: preview first, then re-run the same mailbox, provider, subject, and body with --approved --max-credits 0 --plan <plan_hash>.")
+        .description("Create a placement test for one sending mailbox. Without --approved this returns a cost PREVIEW. EmailGuard creation returns exact seeds + phrase but sends nothing; next run `placement-test send <id>` to preview and approve that external email. Zapmail owns its probe delivery and completes async (2-24h). OXYGEN placement evaluation requires explicit --provider oxygen_placement plus --subject and --body, and is available only for the eligible connected sender enabled for the limited pilot. Its approval creates AND sends one probe with no separate send step: preview first, then re-run the same mailbox, provider, subject, and body with --approved --max-credits 0 --plan <plan_hash>.")
         .argument("<mailbox>", "Sending mailbox address to test (e.g. ada@send.acme.com).")
-        .addOption(new Option("--provider <provider>", "Health provider: emailguard, zapmail, or sendkit. Omit to auto-resolve EmailGuard/Zapmail. SendKit is never auto-selected and requires the configured dev canary sender.").choices(["emailguard", "zapmail", "sendkit"]))
-        .option("--subject <subject>", "Seed-message subject. Required with --provider sendkit; Zapmail ignores it beyond labeling the test.")
-        .option("--body <text>", "Plain-text seed-message body. Required with --provider sendkit; ignored by Zapmail.")
+        .addOption(new Option("--provider <provider>", "Health provider: emailguard, zapmail, or oxygen_placement. Omit to auto-resolve EmailGuard/Zapmail. OXYGEN placement evaluation is never auto-selected and requires the sender enabled for the limited pilot.").choices(["emailguard", "zapmail", "oxygen_placement"])
+        .argParser((value) => {
+        const provider = value === "sendkit" ? "oxygen_placement" : value;
+        if (!["emailguard", "zapmail", "oxygen_placement"].includes(provider)) {
+            throw new CommanderError(2, "commander.invalidArgument", "Choose emailguard, zapmail, or oxygen_placement.");
+        }
+        return provider;
+    }))
+        .option("--subject <subject>", "Seed-message subject. Required with --provider oxygen_placement; Zapmail ignores it beyond labeling the test.")
+        .option("--body <text>", "Plain-text seed-message body. Required with --provider oxygen_placement; ignored by Zapmail.")
         .option("--allow-paused-probe", "Opt in to one diagnostic probe while preserving campaign pause; repeat at both create and send approvals. Never permits disabled senders.")
         .option("--approved", "Actually run the test (otherwise a preview is returned).")
         .option("--max-credits <n>", "Credit cap the caller accepts (must be >= credits_required for managed runs).")
@@ -23229,7 +23255,7 @@ function readPeopleSearchRunBody(options) {
         if (!options.sourceFiltersJson) {
             throw new OxygenError("invalid_request", "--source people_search needs --source-filters-json (the same filters as people search preview).", { exitCode: 1 });
         }
-        const maxCreditsNative = readPositiveNumber(options.maxCredits);
+        const maxCreditsNative = readCreditCeilingOrZero(options.maxCredits);
         const nativeTarget = readPositiveInt(options.targetCount);
         // Forwarded so the server refuses them by name; the native lane reads only
         // --source-filters-json (OXP-1.39.2 S6).
@@ -23256,7 +23282,7 @@ function readPeopleSearchRunBody(options) {
         throw new OxygenError("invalid_request", "Pass --prompt, --plan-json, --from-table with --linkedin-url-column, or --source people_search with --source-filters-json.", { exitCode: 1 });
     }
     const maxPages = readPeopleSearchMaxPages(options);
-    const maxCredits = readPositiveNumber(options.maxCredits);
+    const maxCredits = readCreditCeilingOrZero(options.maxCredits);
     const targetCount = readPositiveInt(options.targetCount);
     const filters = prompt ? readPeopleSearchFilters(options) : null;
     const sourceOverrides = source ? {} : readPeopleSearchCompanyWindow(options);

package/dist/transcript.js

@@ -129,7 +129,7 @@ const SECRET_PATTERNS = [
     [/\bgh[pousr]_[A-Za-z0-9]{20,}/g, "ghx_[REDACTED]"],
     [/\bxox[baprs]-[A-Za-z0-9-]{10,}/g, "xox-[REDACTED]"],
     [/\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{6,}/g, "[REDACTED_JWT]"],
-    [/\/skills-access\/v1\.[A-Za-z0-9_-]+\.\d+\.[A-Za-z0-9_-]+/g, "/skills-access/[REDACTED_GRANT]"],
+    [/\/skills-access\/v[12]\.[A-Za-z0-9_-]+\.\d+\.(?:[A-Za-z0-9_-]+\.)?[A-Za-z0-9_-]+/g, "/skills-access/[REDACTED_GRANT]"],
     [/\b(Bearer|Basic)\s+[A-Za-z0-9._~+/=-]{16,}/gi, "$1 [REDACTED]"],
     // "secret-ish key": "value"  /  secret_ish_key=value  (JSON + env shapes)
     [/("?(?:api[_-]?key|apikey|secret|password|passwd|token|access[_-]?token|refresh[_-]?token|client[_-]?secret|authorization|auth[_-]?token|private[_-]?key)"?\s*[:=]\s*"?)([^"\s,}]{6,})/gi, "$1[REDACTED]"],

package/node_modules/@oxygen/formula/dist/expression.js

@@ -403,6 +403,22 @@ function tokenize(expression, options = {}) {
             index += 1;
             continue;
         }
+        // A `{{column}}` template token is the most common paste from another tool
+        // (and from an AI or tool column's prompt here). It stays the same typed
+        // syntax error at the same position; the hint names the bare-identifier form
+        // and the expression with every token unwrapped. Nothing is accepted:
+        // `{{` is still not formula syntax (OXP-1.27.6 AC4).
+        if (char === "{" && expression[index + 1] === "{") {
+            const suggested = expression.replace(/\{\{\s*([A-Za-z_][A-Za-z0-9_]*)\s*\}\}/g, "$1");
+            const example = suggested !== expression ? suggested : "upper(company_name)";
+            throw formulaExpressionError(`Unexpected character in formula expression. Formulas name columns as bare identifiers, not {{templates}}: write ${example}.`, {
+                position: index,
+                character: char,
+                expression,
+                hint: "Formulas read columns by bare key (company_name), not {{company_name}}; {{ }} is template syntax for AI and tool column prompts.",
+                ...(suggested !== expression ? { suggested_expression: suggested } : {}),
+            });
+        }
         throw formulaExpressionError("Unexpected character in formula expression.", {
             position: index,
             character: char,

package/node_modules/@oxygen/shared/dist/attempt-provenance.d.ts

@@ -20,3 +20,11 @@ export declare function describeRejectedAnswer(reason: string | null | undefined
  * show and an empty tooltip is worse than none.
  */
 export declare function describeIdentityMatch(identityMatch: AttemptIdentityMatch | null | undefined): string | null;
+/**
+ * One provider attempt with its lane named the same way for every waterfall.
+ * Person waterfalls name a lane by `operation`; the company waterfall names it
+ * by `toolId`. Readers that key on `operation` dropped every company attempt,
+ * and with it the identity evidence the attempt carried (OXP-7.3.40), so each
+ * cell renderer normalizes through here before validating an attempt.
+ */
+export declare function normalizeAttemptLane(value: unknown): unknown;

package/node_modules/@oxygen/shared/dist/attempt-provenance.js

@@ -81,3 +81,18 @@ export function describeIdentityMatch(identityMatch) {
     const got = returned ? `provider returned ${returned}` : "provider returned no identity";
     return `${asked}; ${got}`;
 }
+/**
+ * One provider attempt with its lane named the same way for every waterfall.
+ * Person waterfalls name a lane by `operation`; the company waterfall names it
+ * by `toolId`. Readers that key on `operation` dropped every company attempt,
+ * and with it the identity evidence the attempt carried (OXP-7.3.40), so each
+ * cell renderer normalizes through here before validating an attempt.
+ */
+export function normalizeAttemptLane(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return value;
+    const record = value;
+    if (typeof record.operation === "string" || typeof record.toolId !== "string")
+        return value;
+    return { ...record, operation: record.toolId };
+}

package/node_modules/@oxygen/shared/dist/byok-connect.js

@@ -91,6 +91,8 @@ export const NATIVE_API_KEY_CONNECT_INTEGRATION_IDS = new Set([
     "serper",
     "signalbase",
     "up2data",
+    // whitewhale: BYOK-only; its connect form takes the API key and a user email.
+    "whitewhale",
     "zapmail",
     "zerobounce",
 ]);

package/node_modules/@oxygen/shared/dist/capability-discovery.d.ts

@@ -90,10 +90,11 @@ export declare function inferPrimitiveRoute(query: string): PrimitiveRouteMatch
  */
 export declare const RETIRED_PRODUCT_SKILLS: readonly string[];
 /** Current hosted instruction audiences, shared by discovery and Agent snapshots. */
-export declare const OXYGEN_PRODUCT_SKILL_AUDIENCES: Readonly<Record<string, "workspace" | "agency_partner">>;
+export declare const OXYGEN_PRODUCT_SKILL_AUDIENCES: Readonly<Record<string, "workspace" | "agency_partner" | "internal_dev">>;
 export declare function canReadProductSkillInstructions(name: string, entitlements: {
     authenticated?: boolean;
     agencyPartner: boolean;
+    internalDev?: boolean;
 }): boolean;
 /** Identify hosted instruction bodies by native tool lineage, never by user prose. */
 export declare function readProductSkillInstructionResult(capabilityName: string, result: unknown): {